last executing test programs: 15.942716256s ago: executing program 0 (id=223): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8b93, 0x7, 0x5}, 'syz0\x00', 0x53}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="400000000214010028bd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB="0800010002080070db9b160000000000080001000000000005f619a48959b9d4e600000000000000010000000800010000000000135e0c8a01c2c32c1d20f09bda155c090f7a4b787b51885f24d47cd63e93eef2a15c798e09a8375cf7f13de7e8aa79da8c20082cd907e056f52788d067c8c791c64f4e40c79f9e9bf0148cc38ec6"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 14.851133425s ago: executing program 0 (id=224): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14.60990876s ago: executing program 2 (id=225): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 13.144971611s ago: executing program 0 (id=226): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc", 0xa3}, {&(0x7f0000000100)="2ed16bcb5f550dd798641dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c944762dfa163589f08fc8a8e", 0x34}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}, {&(0x7f0000000740)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104", 0x43}, {&(0x7f0000000480)}], 0x6) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 12.54083707s ago: executing program 3 (id=227): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) memfd_create(0x0, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 12.16164601s ago: executing program 2 (id=229): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) read$FUSE(0xffffffffffffffff, &(0x7f00000008c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getsig(0x4202, r1, 0x0, &(0x7f0000000400)) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r2, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 10.987173264s ago: executing program 3 (id=230): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xd9}) 9.844880973s ago: executing program 3 (id=231): r0 = socket$nl_rdma(0x10, 0x3, 0x14) dup(r0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) preadv2(r2, &(0x7f00000015c0)=[{&(0x7f0000001640)=""/35, 0x23}], 0x1, 0x10000, 0x0, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@local, 0x200000, 0x2, 0x0, 0x1, 0x3, 0xfd6}, 0xfe5a) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000200)={0xf030000, 0x280, 0xa, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x80000003, '\x00', @ptr=0xc621}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffffff, 0x0, 0x40, 0x19) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000000094060000000000000004000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0xc0, 0xf1) 9.375139667s ago: executing program 2 (id=233): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8b93, 0x7, 0x5}, 'syz0\x00', 0x53}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="400000000214010028bd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB="0800010002080070db9b160000000000080001000000000005f619a48959b9d4e600000000000000010000000800010000000000135e0c8a01c2c32c1d20f09bda155c090f7a4b787b51885f24d47cd63e93eef2a15c798e09a8375cf7f13de7e8aa79da8c20082cd907e056f52788d067c8c791c64f4e40c79f9e9bf0148cc38ec6"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 8.41407287s ago: executing program 1 (id=234): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 7.399275313s ago: executing program 0 (id=235): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4c21, @empty}, 0x10) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x200, 0x9, 0x8602, 0x7, 0x0, 0x5, 0x2}, &(0x7f0000000280)=0x20) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) r6 = socket(0x1a, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000100)) syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16=r5, @ANYRES8=r6, @ANYBLOB="05000000010000000300"/25, @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESDEC], 0x50) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="05"], 0x10) 6.794705362s ago: executing program 1 (id=236): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x8, 0x6, 0x80, 0x2, 0x1, {0x1}}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xf, 0x6, 0x4, 0x0, @mcast1, @private1, 0x7, 0x7800, 0x9, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380), 0x0, 0xed, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xa6, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000600)={0x3, 0x4efb, 0x10, 0xfffc}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={0x0}}, 0x8000) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000840), 0x143082, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000008c0)={'nicvf0\x00'}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000900)=0x1, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000bc0)={{r0}, 0x0, 0x10, @unused=[0x1, 0x8, 0x4, 0x1], @name="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"}) 6.62555576s ago: executing program 2 (id=237): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 5.171215913s ago: executing program 2 (id=238): socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) memfd_create(0x0, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 4.936147669s ago: executing program 3 (id=239): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xd9}) 3.895759778s ago: executing program 3 (id=240): socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e21, 0x0, @mcast1, 0xa}, {0xa, 0x4e21, 0xdfde, @dev={0xfe, 0x80, '\x00', 0x37}}, 0xffffffffffffffff, {[0x5, 0x26171dcb, 0x6, 0xb, 0xdc0d, 0x94f5, 0x8, 0x5]}}, 0x5c) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) 3.653006883s ago: executing program 2 (id=241): r0 = socket(0x10, 0x803, 0x2) ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x20202, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[], 0x2c) mlockall(0x2) io_setup(0x3ff, 0x0) openat$dsp1(0xffffff9c, &(0x7f0000000200), 0x400000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c00001300034700bb5be1c3e4feff06000000010000004500e03fd8d207a5000025000000190004000400ad000200000000000006040000", 0x39}], 0x1) 2.994207771s ago: executing program 1 (id=242): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r5}) 2.757768598s ago: executing program 1 (id=243): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc", 0xa3}, {&(0x7f0000000100)="2ed16bcb5f550dd798641dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c944762dfa163589f08fc8a8e", 0x34}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}, {&(0x7f0000000740)="2d80c5edeb1fe3595e249e145cfccf4b926a380258201de40be61ede57f76bf59ba1759c85f0c8841e93849133261fe1b89e1c051f4748b982f2c892df7bdb273f8104", 0x43}, {&(0x7f0000000480)}], 0x6) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 2.594488798s ago: executing program 1 (id=244): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r5 = socket$kcm(0x10, 0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff000000", @ANYBLOB="0000000000000000b702000014000000b7030000000000218500000083000000bf0900000000000055090100000000009500000000000000bf91000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.560239642s ago: executing program 0 (id=245): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8b93, 0x7, 0x5}, 'syz0\x00', 0x53}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="400000000214010028bd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB="0800010002080070db9b160000000000080001000000000005f619a48959b9d4e600000000000000010000000800010000000000135e0c8a01c2c32c1d20f09bda155c090f7a4b787b51885f24d47cd63e93eef2a15c798e09a8375cf7f13de7e8aa79da8c20082cd907e056f52788d067c8c791c64f4e40c79f9e9bf0148cc38ec6"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.642052582s ago: executing program 1 (id=246): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) 18.418033ms ago: executing program 3 (id=247): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 0s ago: executing program 0 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, 0x0, 0x240048c0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) syz_emit_ethernet(0x5e, &(0x7f0000005280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000500", 0x28, 0x3a, 0xff, @private2, @remote, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000140)=""/260, 0x104}], 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x7, 0x9, 0xfffffff9, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x880, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x5, 0x8, 0x25, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x0, 0xfffffff9, 0x4, 0x3, 0x408e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x5, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xae2, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x3, 0x0, 0x400, 0x1000, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x2, 0xcc, 0x6, 0x2, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x7, 0x7, 0x8ac1, 0x3, 0x4, 0x401, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0x2, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r6 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000002940), 0x0, 0x4054) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.64' (ED25519) to the list of known hosts. [ 71.162290][ T5757] cgroup: Unknown subsys name 'net' [ 71.294999][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.724613][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.731538][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.023481][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.019966][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.047391][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.053359][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.062597][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.063132][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.079955][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.080606][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.087732][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.095850][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.109366][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.110944][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.124702][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.129108][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.132928][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.139755][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.146050][ T5775] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.153808][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.162113][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.167915][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.175837][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.192722][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.204287][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.211576][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.219948][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.652641][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 75.784567][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 75.817025][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 75.834857][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.842992][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.850979][ T5770] bridge_slave_0: entered allmulticast mode [ 75.858600][ T5770] bridge_slave_0: entered promiscuous mode [ 75.866637][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 75.900861][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.908327][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.915664][ T5770] bridge_slave_1: entered allmulticast mode [ 75.922776][ T5770] bridge_slave_1: entered promiscuous mode [ 76.022617][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.051288][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.118910][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.126188][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.133625][ T5768] bridge_slave_0: entered allmulticast mode [ 76.141012][ T5768] bridge_slave_0: entered promiscuous mode [ 76.166894][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.174178][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.181615][ T5771] bridge_slave_0: entered allmulticast mode [ 76.189356][ T5771] bridge_slave_0: entered promiscuous mode [ 76.207676][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.214934][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.222875][ T5768] bridge_slave_1: entered allmulticast mode [ 76.230086][ T5768] bridge_slave_1: entered promiscuous mode [ 76.242026][ T5770] team0: Port device team_slave_0 added [ 76.248194][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.255331][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.263506][ T5771] bridge_slave_1: entered allmulticast mode [ 76.270465][ T5771] bridge_slave_1: entered promiscuous mode [ 76.276958][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.284463][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.291924][ T5769] bridge_slave_0: entered allmulticast mode [ 76.298922][ T5769] bridge_slave_0: entered promiscuous mode [ 76.321873][ T5770] team0: Port device team_slave_1 added [ 76.338240][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.345428][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.353306][ T5769] bridge_slave_1: entered allmulticast mode [ 76.362620][ T5769] bridge_slave_1: entered promiscuous mode [ 76.404386][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.426215][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.447956][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.470345][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.500555][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.510194][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.536690][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.562890][ T5771] team0: Port device team_slave_0 added [ 76.580784][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.599253][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.606581][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.633144][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.646127][ T5771] team0: Port device team_slave_1 added [ 76.664225][ T5768] team0: Port device team_slave_0 added [ 76.673612][ T5768] team0: Port device team_slave_1 added [ 76.681788][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.740345][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.747470][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.774407][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.795215][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.802438][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.828617][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.851217][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.858424][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.884847][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.897460][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.904449][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.930608][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.952462][ T5769] team0: Port device team_slave_0 added [ 76.992800][ T5770] hsr_slave_0: entered promiscuous mode [ 76.999870][ T5770] hsr_slave_1: entered promiscuous mode [ 77.021290][ T5769] team0: Port device team_slave_1 added [ 77.092919][ T5768] hsr_slave_0: entered promiscuous mode [ 77.100007][ T5768] hsr_slave_1: entered promiscuous mode [ 77.106463][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.114803][ T5768] Cannot create hsr debugfs directory [ 77.132805][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.139892][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.166633][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.180466][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.187716][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.213859][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.240797][ T5786] Bluetooth: hci1: command tx timeout [ 77.241193][ T51] Bluetooth: hci3: command tx timeout [ 77.246806][ T5777] Bluetooth: hci2: command tx timeout [ 77.252560][ T5084] Bluetooth: hci0: command tx timeout [ 77.279974][ T5771] hsr_slave_0: entered promiscuous mode [ 77.286590][ T5771] hsr_slave_1: entered promiscuous mode [ 77.293491][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.301290][ T5771] Cannot create hsr debugfs directory [ 77.446194][ T5769] hsr_slave_0: entered promiscuous mode [ 77.452732][ T5769] hsr_slave_1: entered promiscuous mode [ 77.459939][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.467898][ T5769] Cannot create hsr debugfs directory [ 77.761188][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.775672][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.786052][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.813596][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.873387][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.891386][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.910940][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.922583][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.993157][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.030740][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.042894][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.054223][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.116462][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.145346][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.156348][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.167456][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.179543][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.200657][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.224579][ T3634] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.231973][ T3634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.272788][ T3634] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.280166][ T3634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.469740][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.486648][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.565364][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.583594][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.592736][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.624104][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.631325][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.645259][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.652604][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.690357][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.697602][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.711727][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.719065][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.742147][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.773123][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.780491][ T4457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.818848][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.826081][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.855881][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.915336][ T5768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.927482][ T5768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.959737][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.073440][ T5770] veth0_vlan: entered promiscuous mode [ 79.129977][ T5770] veth1_vlan: entered promiscuous mode [ 79.265262][ T5770] veth0_macvtap: entered promiscuous mode [ 79.292397][ T5770] veth1_macvtap: entered promiscuous mode [ 79.318972][ T5084] Bluetooth: hci0: command tx timeout [ 79.324453][ T5084] Bluetooth: hci3: command tx timeout [ 79.327594][ T5777] Bluetooth: hci2: command tx timeout [ 79.330499][ T5084] Bluetooth: hci1: command tx timeout [ 79.382310][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.411316][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.437026][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.454065][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.468147][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.477010][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.541765][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.635126][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.650181][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.682710][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.696220][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.755641][ T4457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.766318][ T4457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.782749][ T5768] veth0_vlan: entered promiscuous mode [ 79.816231][ T5769] veth0_vlan: entered promiscuous mode [ 79.846839][ T5768] veth1_vlan: entered promiscuous mode [ 79.872249][ T5769] veth1_vlan: entered promiscuous mode [ 79.912091][ T5771] veth0_vlan: entered promiscuous mode [ 79.942661][ T5771] veth1_vlan: entered promiscuous mode [ 79.996092][ T5769] veth0_macvtap: entered promiscuous mode [ 80.032980][ T5769] veth1_macvtap: entered promiscuous mode [ 80.082222][ T5768] veth0_macvtap: entered promiscuous mode [ 80.102173][ T5768] veth1_macvtap: entered promiscuous mode [ 80.127462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.212816][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.224572][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.286676][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.537487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.629261][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.705435][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.763923][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.783752][ T5771] veth0_macvtap: entered promiscuous mode [ 80.814750][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.829323][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.847290][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.862776][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.880321][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.905516][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.941306][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.950669][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.959574][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.986730][ T5771] veth1_macvtap: entered promiscuous mode [ 81.001041][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.015220][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.029924][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.040583][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.067244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 81.090100][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.145881][ T5840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5'. [ 81.190582][ T5840] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.199687][ T5840] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.208712][ T5840] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.217806][ T5840] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.271689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.280628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.302957][ T5840] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.312236][ T5840] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.321524][ T5840] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.330726][ T5840] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.374385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.398303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.491975][ T5084] Bluetooth: hci2: command tx timeout [ 81.491982][ T5786] Bluetooth: hci3: command tx timeout [ 81.492024][ T5786] Bluetooth: hci0: command tx timeout [ 81.497943][ T5084] Bluetooth: hci1: command tx timeout [ 81.657553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.666895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.675719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.840517][ T5841] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.849561][ T5841] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.858423][ T5841] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.867260][ T5841] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 81.899424][ T5841] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.908703][ T5841] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.917962][ T5841] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.927169][ T5841] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.155304][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.171738][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.184868][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.202306][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.236546][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.312359][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.347178][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.367184][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.380633][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.392025][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.405597][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.434943][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.455207][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.465894][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.476777][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.487345][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.498141][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.512262][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.631740][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.659936][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.687983][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.706172][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.740736][ T4457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.818956][ T4457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.827712][ T5855] kernel profiling enabled (shift: 9) [ 82.920846][ T4457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.937460][ T4457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.102748][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.119870][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.236585][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.306062][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.311557][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.333877][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.737542][ T51] Bluetooth: hci1: command tx timeout [ 83.747451][ T5084] Bluetooth: hci0: command tx timeout [ 83.747537][ T51] Bluetooth: hci2: command tx timeout [ 83.752970][ T5084] Bluetooth: hci3: command tx timeout [ 84.013313][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.039650][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.677479][ T788] cfg80211: failed to load regulatory.db [ 87.873156][ T5883] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 95.547690][ T5897] syz.0.13[5897]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 100.941979][ T5929] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.658636][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.096241][ T5981] input: syz0 as /devices/virtual/input/input5 [ 117.363892][ T6028] netlink: 32 bytes leftover after parsing attributes in process `syz.2.45'. [ 117.440183][ T6029] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.449194][ T6029] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.458113][ T6029] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.467020][ T6029] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.298666][ T6029] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.307915][ T6029] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.316888][ T6029] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.325814][ T6029] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.115590][ T6071] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.129327][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.146133][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.222167][ T6129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.198063][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.204618][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.018283][ T6160] input: syz0 as /devices/virtual/input/input7 [ 141.465023][ T6190] netlink: 32 bytes leftover after parsing attributes in process `syz.3.101'. [ 141.519492][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 141.531684][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.101'. [ 145.738652][ T6207] input: syz0 as /devices/virtual/input/input8 [ 146.552556][ T6207] netlink: 32 bytes leftover after parsing attributes in process `syz.3.106'. [ 146.694707][ T6209] orangefs_mount: mount request failed with -4 [ 152.436223][ T6242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.116'. [ 154.055087][ T6246] orangefs_mount: mount request failed with -4 [ 158.602157][ T6283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.128'. [ 159.486087][ T6287] orangefs_mount: mount request failed with -4 [ 161.343167][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.131'. [ 161.588007][ T6290] orangefs_mount: mount request failed with -4 [ 167.616101][ T6321] orangefs_mount: mount request failed with -4 [ 168.679326][ T6340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.143'. [ 170.027116][ T6335] orangefs_mount: mount request failed with -4 [ 174.192597][ T6366] orangefs_mount: mount request failed with -4 [ 174.780058][ T6374] input: syz0 as /devices/virtual/input/input10 [ 175.053933][ T6378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.155'. [ 175.092255][ T6377] input: syz0 as /devices/virtual/input/input11 [ 176.863521][ T6383] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 178.127709][ T6395] Zero length message leads to an empty skb [ 180.552596][ T6410] orangefs_mount: mount request failed with -4 [ 190.201354][ T6456] orangefs_mount: mount request failed with -4 [ 190.503135][ T6467] input: syz0 as /devices/virtual/input/input15 [ 190.699496][ T6470] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 190.720453][ T6469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.178'. [ 192.231224][ T6468] orangefs_mount: mount request failed with -4 [ 194.602572][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.609374][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.255189][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 203.014384][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 203.020687][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 203.027761][ T5775] Bluetooth: hci1: command 0x0406 tx timeout [ 203.030919][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 203.192553][ T6525] orangefs_mount: mount request failed with -4 [ 206.676485][ T6551] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 207.065419][ T6557] netlink: 32 bytes leftover after parsing attributes in process `syz.0.196'. [ 207.152060][ T6558] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.160923][ T6558] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.169723][ T6558] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 207.178619][ T6558] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.122034][ T6558] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.131444][ T6558] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.140798][ T6558] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.150355][ T6558] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.229532][ T6559] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.238704][ T6559] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.248832][ T6559] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.257846][ T6559] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.593076][ T6559] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.602102][ T6559] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.611256][ T6559] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.620294][ T6559] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.045228][ T6588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'. [ 211.966936][ T6584] orangefs_mount: mount request failed with -4 [ 212.197810][ T6594] input: syz0 as /devices/virtual/input/input18 [ 212.372204][ T6595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.206'. [ 213.400970][ T6603] netlink: 32 bytes leftover after parsing attributes in process `syz.0.214'. [ 213.476173][ T6604] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.484998][ T6604] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.493879][ T6604] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 213.502618][ T6604] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.213323][ T6604] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.222578][ T6604] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.231686][ T6604] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.240726][ T6604] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.537922][ T6605] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.546778][ T6605] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.555712][ T6605] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.564596][ T6605] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.660063][ T6605] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.669378][ T6605] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.678602][ T6605] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.687520][ T6605] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.968989][ T6623] input: syz0 as /devices/virtual/input/input19 [ 218.280342][ T6624] netlink: 32 bytes leftover after parsing attributes in process `syz.0.223'. [ 221.715571][ T6648] netlink: 32 bytes leftover after parsing attributes in process `syz.2.229'. [ 221.754849][ T6648] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.763755][ T6648] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.773080][ T6648] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.782108][ T6648] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.659084][ T6648] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.668232][ T6648] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.677288][ T6648] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.687075][ T6648] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.862656][ T6649] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.871524][ T6649] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.880862][ T6649] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.889721][ T6649] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.977475][ T6649] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.987317][ T6649] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.996225][ T6649] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.005298][ T6649] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.614273][ T6658] loop7: detected capacity change from 0 to 1 [ 225.290156][ T6658] loop7: detected capacity change from 1 to 0 [ 225.297926][ T6662] input: syz0 as /devices/virtual/input/input21 [ 226.386188][ T6668] netlink: 32 bytes leftover after parsing attributes in process `syz.2.233'. [ 231.281243][ T6703] input: syz0 as /devices/virtual/input/input22 [ 231.587589][ T6708] netlink: 32 bytes leftover after parsing attributes in process `syz.0.245'. [ 234.274766][ T6718] ================================================================== [ 234.282867][ T6718] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 234.290506][ T6718] Read of size 8 at addr ffff888026ca3418 by task syz.3.247/6718 [ 234.298233][ T6718] [ 234.300554][ T6718] CPU: 0 PID: 6718 Comm: syz.3.247 Not tainted syzkaller #0 [ 234.307980][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 234.318427][ T6718] Call Trace: [ 234.321732][ T6718] [ 234.324678][ T6718] dump_stack_lvl+0x18c/0x250 [ 234.329554][ T6718] ? __lock_acquire+0x7d40/0x7d40 [ 234.334585][ T6718] ? show_regs_print_info+0x20/0x20 [ 234.339784][ T6718] ? load_image+0x400/0x400 [ 234.344286][ T6718] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 234.349743][ T6718] ? __virt_addr_valid+0x18c/0x540 [ 234.354852][ T6718] ? __virt_addr_valid+0x469/0x540 [ 234.359963][ T6718] print_report+0xa8/0x210 [ 234.364408][ T6718] ? dvb_device_open+0xca/0x370 [ 234.369266][ T6718] kasan_report+0x117/0x150 [ 234.373902][ T6718] ? chrdev_open+0x3e3/0x6a0 [ 234.378594][ T6718] ? dvb_device_open+0xca/0x370 [ 234.383541][ T6718] dvb_device_open+0xca/0x370 [ 234.388224][ T6718] ? do_raw_spin_unlock+0x121/0x230 [ 234.393483][ T6718] chrdev_open+0x5cc/0x6a0 [ 234.397930][ T6718] ? cd_forget+0x160/0x160 [ 234.402476][ T6718] ? fsnotify_perm+0x3ed/0x5e0 [ 234.407288][ T6718] ? cd_forget+0x160/0x160 [ 234.411735][ T6718] do_dentry_open+0x8c6/0x1500 [ 234.416544][ T6718] path_openat+0x27f1/0x3230 [ 234.421171][ T6718] ? do_sys_openat2+0xda/0x1d0 [ 234.425969][ T6718] ? verify_lock_unused+0x140/0x140 [ 234.431197][ T6718] ? do_filp_open+0x430/0x430 [ 234.435921][ T6718] ? __virt_addr_valid+0x18c/0x540 [ 234.441156][ T6718] do_filp_open+0x1f5/0x430 [ 234.445695][ T6718] ? vfs_tmpfile+0x490/0x490 [ 234.450407][ T6718] ? _raw_spin_unlock+0x28/0x40 [ 234.455291][ T6718] ? alloc_fd+0x58f/0x630 [ 234.459658][ T6718] do_sys_openat2+0x134/0x1d0 [ 234.464504][ T6718] ? do_sys_open+0xe0/0xe0 [ 234.469136][ T6718] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 234.475332][ T6718] ? lock_chain_count+0x20/0x20 [ 234.480396][ T6718] __x64_sys_openat+0x139/0x160 [ 234.485281][ T6718] do_syscall_64+0x55/0xa0 [ 234.489734][ T6718] ? clear_bhb_loop+0x40/0x90 [ 234.494459][ T6718] ? clear_bhb_loop+0x40/0x90 [ 234.499191][ T6718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.505274][ T6718] RIP: 0033:0x7f9f5015cfce [ 234.509734][ T6718] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 234.529554][ T6718] RSP: 002b:00007f9f4e3f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.538012][ T6718] RAX: ffffffffffffffda RBX: 00007f9f4e3f66c0 RCX: 00007f9f5015cfce [ 234.546011][ T6718] RDX: 0000000000000e82 RSI: 00007f9f4e3f5c00 RDI: ffffffffffffff9c [ 234.554016][ T6718] RBP: 00007f9f4e3f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 234.562113][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 234.570213][ T6718] R13: 00007f9f50416128 R14: 00007f9f50416090 R15: 00007ffd38328248 [ 234.578306][ T6718] [ 234.581437][ T6718] [ 234.583952][ T6718] Allocated by task 1: [ 234.588040][ T6718] kasan_set_track+0x4e/0x70 [ 234.592665][ T6718] __kasan_kmalloc+0x8f/0xa0 [ 234.597381][ T6718] dvb_register_device+0x2fd/0x2210 [ 234.602621][ T6718] dvb_register_frontend+0x649/0x930 [ 234.607938][ T6718] vidtv_bridge_probe+0x9ab/0xf80 [ 234.613197][ T6718] platform_probe+0x13b/0x1c0 [ 234.617914][ T6718] really_probe+0x25b/0xb20 [ 234.622636][ T6718] __driver_probe_device+0x18c/0x330 [ 234.627985][ T6718] driver_probe_device+0x4f/0x420 [ 234.633044][ T6718] __driver_attach+0x44e/0x6e0 [ 234.637842][ T6718] bus_for_each_dev+0x235/0x2b0 [ 234.642725][ T6718] bus_add_driver+0x340/0x630 [ 234.647523][ T6718] driver_register+0x23a/0x310 [ 234.652662][ T6718] vidtv_bridge_init+0x3d/0x70 [ 234.657548][ T6718] do_one_initcall+0x242/0x790 [ 234.662771][ T6718] do_initcall_level+0x137/0x1f0 [ 234.668259][ T6718] do_initcalls+0x69/0xd0 [ 234.672603][ T6718] kernel_init_freeable+0x3ed/0x580 [ 234.677859][ T6718] kernel_init+0x1d/0x1c0 [ 234.682377][ T6718] ret_from_fork+0x48/0x80 [ 234.686946][ T6718] ret_from_fork_asm+0x11/0x20 [ 234.691803][ T6718] [ 234.694219][ T6718] Freed by task 6551: [ 234.698287][ T6718] kasan_set_track+0x4e/0x70 [ 234.702880][ T6718] kasan_save_free_info+0x2e/0x50 [ 234.708449][ T6718] ____kasan_slab_free+0x126/0x1e0 [ 234.713666][ T6718] slab_free_freelist_hook+0x130/0x1a0 [ 234.719262][ T6718] __kmem_cache_free+0xba/0x1e0 [ 234.724297][ T6718] dvb_device_open+0x2ee/0x370 [ 234.729150][ T6718] chrdev_open+0x5cc/0x6a0 [ 234.733652][ T6718] do_dentry_open+0x8c6/0x1500 [ 234.738422][ T6718] path_openat+0x27f1/0x3230 [ 234.743056][ T6718] do_filp_open+0x1f5/0x430 [ 234.747686][ T6718] do_sys_openat2+0x134/0x1d0 [ 234.752380][ T6718] __x64_sys_openat+0x139/0x160 [ 234.757229][ T6718] do_syscall_64+0x55/0xa0 [ 234.761732][ T6718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 234.767708][ T6718] [ 234.770040][ T6718] The buggy address belongs to the object at ffff888026ca3400 [ 234.770040][ T6718] which belongs to the cache kmalloc-256 of size 256 [ 234.784114][ T6718] The buggy address is located 24 bytes inside of [ 234.784114][ T6718] freed 256-byte region [ffff888026ca3400, ffff888026ca3500) [ 234.798143][ T6718] [ 234.800579][ T6718] The buggy address belongs to the physical page: [ 234.807076][ T6718] page:ffffea00009b2880 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x26ca2 [ 234.817403][ T6718] head:ffffea00009b2880 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 234.826427][ T6718] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 234.834400][ T6718] page_type: 0xffffffff() [ 234.838722][ T6718] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 234.847354][ T6718] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 234.856138][ T6718] page dumped because: kasan: bad access detected [ 234.862555][ T6718] page_owner tracks the page as allocated [ 234.868282][ T6718] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14719981778, free_ts 0 [ 234.888435][ T6718] post_alloc_hook+0x1c1/0x200 [ 234.893207][ T6718] get_page_from_freelist+0x1951/0x19e0 [ 234.898851][ T6718] __alloc_pages+0x1f0/0x460 [ 234.903521][ T6718] alloc_page_interleave+0x24/0x1e0 [ 234.908711][ T6718] alloc_slab_page+0x5d/0x160 [ 234.913382][ T6718] new_slab+0x87/0x2d0 [ 234.917452][ T6718] ___slab_alloc+0xc5d/0x12f0 [ 234.922216][ T6718] __kmem_cache_alloc_node+0x19e/0x250 [ 234.927781][ T6718] kmalloc_trace+0x2a/0xe0 [ 234.932222][ T6718] bus_add_driver+0x162/0x630 [ 234.936926][ T6718] driver_register+0x23a/0x310 [ 234.941779][ T6718] usb_register_driver+0x206/0x3d0 [ 234.946993][ T6718] do_one_initcall+0x242/0x790 [ 234.951857][ T6718] do_initcall_level+0x137/0x1f0 [ 234.956922][ T6718] do_initcalls+0x69/0xd0 [ 234.961354][ T6718] kernel_init_freeable+0x3ed/0x580 [ 234.966645][ T6718] page_owner free stack trace missing [ 234.972214][ T6718] [ 234.974657][ T6718] Memory state around the buggy address: [ 234.980365][ T6718] ffff888026ca3300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.988598][ T6718] ffff888026ca3380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.997118][ T6718] >ffff888026ca3400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.005536][ T6718] ^ [ 235.010403][ T6718] ffff888026ca3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 235.018639][ T6718] ffff888026ca3500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 235.026712][ T6718] ================================================================== [ 235.104492][ T6718] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 235.111816][ T6718] CPU: 0 PID: 6718 Comm: syz.3.247 Not tainted syzkaller #0 [ 235.119271][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.129339][ T6718] Call Trace: [ 235.132703][ T6718] [ 235.135629][ T6718] dump_stack_lvl+0x18c/0x250 [ 235.140355][ T6718] ? show_regs_print_info+0x20/0x20 [ 235.145621][ T6718] ? load_image+0x400/0x400 [ 235.150424][ T6718] panic+0x2dc/0x730 [ 235.154422][ T6718] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.160608][ T6718] ? bpf_jit_dump+0xd0/0xd0 [ 235.165369][ T6718] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 235.171438][ T6718] ? _raw_spin_unlock+0x40/0x40 [ 235.176472][ T6718] ? dvb_device_open+0xca/0x370 [ 235.181338][ T6718] check_panic_on_warn+0x84/0xa0 [ 235.186290][ T6718] ? dvb_device_open+0xca/0x370 [ 235.191276][ T6718] end_report+0x6f/0x130 [ 235.195646][ T6718] kasan_report+0x128/0x150 [ 235.200284][ T6718] ? chrdev_open+0x3e3/0x6a0 [ 235.204979][ T6718] ? dvb_device_open+0xca/0x370 [ 235.209940][ T6718] dvb_device_open+0xca/0x370 [ 235.214719][ T6718] ? do_raw_spin_unlock+0x121/0x230 [ 235.220058][ T6718] chrdev_open+0x5cc/0x6a0 [ 235.224502][ T6718] ? cd_forget+0x160/0x160 [ 235.228937][ T6718] ? fsnotify_perm+0x3ed/0x5e0 [ 235.233698][ T6718] ? cd_forget+0x160/0x160 [ 235.238203][ T6718] do_dentry_open+0x8c6/0x1500 [ 235.243409][ T6718] path_openat+0x27f1/0x3230 [ 235.248016][ T6718] ? do_sys_openat2+0xda/0x1d0 [ 235.252905][ T6718] ? verify_lock_unused+0x140/0x140 [ 235.258191][ T6718] ? do_filp_open+0x430/0x430 [ 235.262887][ T6718] ? __virt_addr_valid+0x18c/0x540 [ 235.268107][ T6718] do_filp_open+0x1f5/0x430 [ 235.272644][ T6718] ? vfs_tmpfile+0x490/0x490 [ 235.277381][ T6718] ? _raw_spin_unlock+0x28/0x40 [ 235.282267][ T6718] ? alloc_fd+0x58f/0x630 [ 235.286615][ T6718] do_sys_openat2+0x134/0x1d0 [ 235.291500][ T6718] ? do_sys_open+0xe0/0xe0 [ 235.296230][ T6718] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 235.302358][ T6718] ? lock_chain_count+0x20/0x20 [ 235.307231][ T6718] __x64_sys_openat+0x139/0x160 [ 235.312203][ T6718] do_syscall_64+0x55/0xa0 [ 235.316637][ T6718] ? clear_bhb_loop+0x40/0x90 [ 235.321616][ T6718] ? clear_bhb_loop+0x40/0x90 [ 235.326313][ T6718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.332258][ T6718] RIP: 0033:0x7f9f5015cfce [ 235.336909][ T6718] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.357237][ T6718] RSP: 002b:00007f9f4e3f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.366017][ T6718] RAX: ffffffffffffffda RBX: 00007f9f4e3f66c0 RCX: 00007f9f5015cfce [ 235.374472][ T6718] RDX: 0000000000000e82 RSI: 00007f9f4e3f5c00 RDI: ffffffffffffff9c [ 235.382545][ T6718] RBP: 00007f9f4e3f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 235.390528][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 235.398671][ T6718] R13: 00007f9f50416128 R14: 00007f9f50416090 R15: 00007ffd38328248 [ 235.406658][ T6718] [ 235.409815][ T6718] Kernel Offset: disabled [ 235.414141][ T6718] Rebooting in 86400 seconds..