last executing test programs: 24.312438288s ago: executing program 1 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) mmap(&(0x7f000075c000/0x1000)=nil, 0x1000, 0x2, 0x13, r1, 0x0) r2 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40180, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r2, 0xc040583c, &(0x7f0000000180)={0x23, 0xb9, 0x100000000, 0x2, 0xa60b}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x880) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x100003) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x1d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 16.694724249s ago: executing program 0 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) 15.849518796s ago: executing program 0 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) 12.971263048s ago: executing program 4 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = socket(0x2, 0x80805, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) io_submit(r4, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x8080) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x2, 0x400, 'syz1\x00', &(0x7f0000000700)=[':#,\x00', '\\\x00'], 0x6}) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000240)=0x10) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, 0x0) 11.271241716s ago: executing program 4 (id=51): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r1}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) 11.183566489s ago: executing program 3 (id=53): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1400208bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) close(r2) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 10.53773368s ago: executing program 4 (id=54): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) open$dir(0x0, 0xa001, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2eae0342ca72d7e8}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000001c0)={0x980900, 0xfffffff2, @value=0x9}) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003a00010326bd7000fcfeffff060000001338231bb1046b299a23cb3b5fb75f23285a944c3fb5b8ebd66bb959b8d99e45"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) syz_clone(0x840980, &(0x7f00000002c0)="e482173e05231ecb8fbd1c381aea92dc191c3904a0d2941b33b88368b300b38a931c0c5a30c45804e2be2171d5445952f1de15db4ec7ed3a26a451c50d39c02ba635b382bc596533d5e5b6dbc351629c6f8d2400b867335a42d9d39ee297d55561b84d12f8e61a8ea9dd9a26fd60376cab8af4caca5181b4403076460219cf46f18505cdcef6eeb5b7c3268d7224748f0228b49db87cf87c1ea328fb829785b7fc", 0xa1, &(0x7f0000000100), &(0x7f0000000380), &(0x7f00000005c0)="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") syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r2) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000400)={0x0, 0x0, 0x80000000, 0x0, 0x11}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 10.489606799s ago: executing program 1 (id=55): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000180)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r5, &(0x7f000000b200)=[{{&(0x7f0000000040)={0xa, 0xfa04, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000001880)="96", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)='8', 0x1}], 0x1}}], 0x2, 0x20004051) 10.47560721s ago: executing program 3 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x9e, &(0x7f0000000180)}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 10.441719384s ago: executing program 0 (id=57): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000008a14754b0000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000070000e6ffffff000080000085000000750900009500000006000000dfb6bcf77baf21e93841ac7945a0dc131372df7c682db2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f660900000000000007000000000000000100"], 0x188}}], 0x1, 0x810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.925486101s ago: executing program 3 (id=59): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x38130d1, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaefbbbbbbbbbb810074857b9e65ac4a001f0c0000e4ceb56c"], 0x0) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000280)) 9.207989812s ago: executing program 0 (id=60): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x40}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x9, 0xfc}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000000000e60741000000140018"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 8.998076572s ago: executing program 2 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400"], 0x50) unshare(0x22020600) r0 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r0, 0x0, 0x18000) sendmsg$DEVLINK_CMD_RATE_NEW(r0, 0x0, 0x80) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 8.292362424s ago: executing program 3 (id=62): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x1, r1, 0x1, {0x8000, 0x3a52c1e8}, 0x5}, 0x1) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 7.407985388s ago: executing program 1 (id=63): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) 7.352999004s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() shutdown(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) eventfd2(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 7.265860521s ago: executing program 2 (id=65): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r1}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) 5.34813593s ago: executing program 3 (id=66): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1400208bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) close(r2) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 5.220267644s ago: executing program 0 (id=67): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) fcntl$addseals(r3, 0x409, 0x7) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x1000000}) 5.10092702s ago: executing program 1 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000001a00)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r2, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r5}) 5.064880792s ago: executing program 2 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)={[{@subsystem='cpu'}, {@xattr}]}) mkdirat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup\x00', 0x108) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1, 0x0, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x9e, &(0x7f0000000180)}, 0x18) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)={0x0, 0x40000000}) 4.691928515s ago: executing program 2 (id=70): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x109400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000010c0)={0xfffffffe, 0x2, 'client1\x00', 0x6, "422e9d6523856127", "07c9e8028cd1f0394efed50c2c8fd304183134b004670d4b3355b33600bfb6c0", 0x4, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x1c0, 0x100, 0x1c0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {}, 0x11, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {0x100000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x6}, {0x1}], 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0xfff8}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e24], [0x4e20, 0x4e20], [0x0, 0x65, 0x3, 0xffff, 0x9, 0x8000, 0x800, 0x0, 0xfffffc00, 0x1a, 0x8, 0x2, 0x6, 0x8, 0x1, 0x4, 0x895, 0x1, 0x7, 0x8001, 0x4, 0x3, 0x7, 0x23b, 0x7fff, 0x2400, 0x10, 0x5, 0x7ff, 0xee, 0x7, 0x4, 0x6, 0x7, 0x1087, 0x3, 0x39d, 0xffffffff, 0x4, 0x5, 0x1, 0x0, 0x4, 0x200, 0x0, 0x5, 0xe6, 0x1, 0xffff, 0x1, 0x401, 0x7, 0x4, 0x1, 0x1, 0x76b, 0x8, 0x401, 0xa71c, 0x4000000, 0x8, 0x0, 0x1ff, 0x9], 0x1, [{0xfc, 0x1}, {0x8, 0x9, 0x29}, {0x2, 0x81, 0x7}, {0x8, 0x7}], 0x0, 0x1, 0x7}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x18b) open(&(0x7f00000000c0)='./file0\x00', 0x9c41, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 4.151806537s ago: executing program 1 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c00008006000100020000000800d016a886869e0200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x2c}}, 0xea5bc50b6199d77e) 4.078441459s ago: executing program 3 (id=72): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9805837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r5, &(0x7f0000004540)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x81, @local, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1400000000000000290b00000b00000000000009000000ec130000000000000029000000"], 0x30}}], 0x1, 0x4040011) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) getsockname$packet(r9, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x55) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x40, 0x2c, 0xf31, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_MASK={0x8, 0x5, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 3.09863289s ago: executing program 2 (id=73): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, 0x0, 0x0) 3.090981334s ago: executing program 1 (id=74): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) lstat(0x0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0x0, r0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$invalidate(0x15, r6) r7 = timerfd_create(0x1, 0x80800) timerfd_settime(r7, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 1.68640375s ago: executing program 2 (id=75): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x42082) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = socket(0x2, 0x80805, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r4, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r7 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x8080) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x2, 0x400, 'syz1\x00', &(0x7f0000000700)=[':#,\x00', '\\\x00'], 0x6}) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000240)=0x10) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000280)={0x3, 0x0, [{0x40000000, 0x6, 0x4, 0x5, 0xffffffff, 0xfffff5f7, 0x7}, {0x80000019, 0x403, 0x2, 0x1, 0x10002, 0x0, 0x7}, {0x40000000, 0x170f, 0x0, 0x4, 0xfffffff1, 0xfc, 0x4}]}) 1.552686707s ago: executing program 4 (id=76): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in6=@local}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x1, r1, 0x1, {0x8000, 0x3a52c1e8}, 0x5}, 0x1) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 1.359936288s ago: executing program 4 (id=77): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() shutdown(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) eventfd2(0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 0s ago: executing program 4 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 66.521068][ T5825] cgroup: Unknown subsys name 'net' [ 66.633962][ T5825] cgroup: Unknown subsys name 'cpuset' [ 66.642368][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.994632][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.207323][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.217769][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.227711][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.239017][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.246704][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.255651][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.255706][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.263246][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.273535][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.280081][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.285730][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.291818][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.302785][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.316136][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.317816][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.363973][ T5163] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.373964][ T5163] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.386534][ T5163] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.395800][ T5163] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.404250][ T5163] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.455629][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.465851][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.474126][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.483137][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.493751][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.939330][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.957780][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.141991][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 71.203709][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.211207][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.218565][ T5837] bridge_slave_0: entered allmulticast mode [ 71.226269][ T5837] bridge_slave_0: entered promiscuous mode [ 71.268464][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.275895][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.283169][ T5837] bridge_slave_1: entered allmulticast mode [ 71.290569][ T5837] bridge_slave_1: entered promiscuous mode [ 71.348623][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.355529][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.373028][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.380793][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.387983][ T5838] bridge_slave_0: entered allmulticast mode [ 71.395911][ T5838] bridge_slave_0: entered promiscuous mode [ 71.436904][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.444700][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.452296][ T5838] bridge_slave_1: entered allmulticast mode [ 71.459711][ T5838] bridge_slave_1: entered promiscuous mode [ 71.475133][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.509106][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 71.523066][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.544132][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 71.604420][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.635777][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.643221][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.650548][ T5841] bridge_slave_0: entered allmulticast mode [ 71.657823][ T5841] bridge_slave_0: entered promiscuous mode [ 71.677721][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.700028][ T5837] team0: Port device team_slave_0 added [ 71.706034][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.713496][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.720815][ T5841] bridge_slave_1: entered allmulticast mode [ 71.728146][ T5841] bridge_slave_1: entered promiscuous mode [ 71.766170][ T5837] team0: Port device team_slave_1 added [ 71.833497][ T5838] team0: Port device team_slave_0 added [ 71.861032][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.878059][ T5838] team0: Port device team_slave_1 added [ 71.897346][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.904550][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.931236][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.946418][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.995422][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.002443][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.028715][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.075209][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.082708][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.089887][ T5851] bridge_slave_0: entered allmulticast mode [ 72.097439][ T5851] bridge_slave_0: entered promiscuous mode [ 72.123449][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.130754][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.137940][ T5856] bridge_slave_0: entered allmulticast mode [ 72.145630][ T5856] bridge_slave_0: entered promiscuous mode [ 72.155588][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.162927][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.189072][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.201529][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.208806][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.216302][ T5851] bridge_slave_1: entered allmulticast mode [ 72.223708][ T5851] bridge_slave_1: entered promiscuous mode [ 72.233952][ T5841] team0: Port device team_slave_0 added [ 72.239834][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.247205][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.254462][ T5856] bridge_slave_1: entered allmulticast mode [ 72.261832][ T5856] bridge_slave_1: entered promiscuous mode [ 72.270150][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.277154][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.303218][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.341981][ T5841] team0: Port device team_slave_1 added [ 72.379115][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.390803][ T5839] Bluetooth: hci1: command tx timeout [ 72.397208][ T51] Bluetooth: hci2: command tx timeout [ 72.403210][ T5163] Bluetooth: hci0: command tx timeout [ 72.422886][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.446934][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.460828][ T5163] Bluetooth: hci3: command tx timeout [ 72.475203][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.491146][ T5837] hsr_slave_0: entered promiscuous mode [ 72.497953][ T5837] hsr_slave_1: entered promiscuous mode [ 72.517402][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.524637][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.550712][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.561440][ T5163] Bluetooth: hci4: command tx timeout [ 72.616043][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.623461][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.649747][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.674768][ T5856] team0: Port device team_slave_0 added [ 72.683269][ T5851] team0: Port device team_slave_0 added [ 72.702233][ T5838] hsr_slave_0: entered promiscuous mode [ 72.709315][ T5838] hsr_slave_1: entered promiscuous mode [ 72.716157][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 72.721989][ T5838] Cannot create hsr debugfs directory [ 72.740468][ T5856] team0: Port device team_slave_1 added [ 72.748615][ T5851] team0: Port device team_slave_1 added [ 72.817089][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.824130][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.850319][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.881862][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.888892][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.915401][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.937696][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.944729][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.970727][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.000584][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.007690][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.034103][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.078811][ T5841] hsr_slave_0: entered promiscuous mode [ 73.085567][ T5841] hsr_slave_1: entered promiscuous mode [ 73.092229][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 73.097966][ T5841] Cannot create hsr debugfs directory [ 73.272286][ T5856] hsr_slave_0: entered promiscuous mode [ 73.279452][ T5856] hsr_slave_1: entered promiscuous mode [ 73.286217][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 73.293459][ T5856] Cannot create hsr debugfs directory [ 73.312551][ T5851] hsr_slave_0: entered promiscuous mode [ 73.319298][ T5851] hsr_slave_1: entered promiscuous mode [ 73.326097][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 73.331883][ T5851] Cannot create hsr debugfs directory [ 73.744567][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.778966][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.791165][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.825625][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.890715][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.908812][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.919734][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.936854][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.042651][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.067883][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.085936][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.096911][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.214480][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.237701][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.250007][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.263912][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.323685][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.415226][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.428592][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.460334][ T5839] Bluetooth: hci1: command tx timeout [ 74.465788][ T51] Bluetooth: hci2: command tx timeout [ 74.471579][ T5163] Bluetooth: hci0: command tx timeout [ 74.481137][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.488648][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.499719][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.506960][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.521642][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.540262][ T5163] Bluetooth: hci3: command tx timeout [ 74.547719][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.561494][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.573763][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.607791][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.620397][ T5163] Bluetooth: hci4: command tx timeout [ 74.646007][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.653140][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.685854][ T676] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.693051][ T676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.772617][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.879850][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.930105][ T676] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.937424][ T676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.983408][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.990644][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.076309][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.157980][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.199219][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.206413][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.229106][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.266547][ T676] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.274362][ T676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.305954][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.398907][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.413780][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.470942][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.478132][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.502870][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.510081][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.749103][ T5838] veth0_vlan: entered promiscuous mode [ 75.797298][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.846825][ T5838] veth1_vlan: entered promiscuous mode [ 75.892130][ T5837] veth0_vlan: entered promiscuous mode [ 75.954036][ T5837] veth1_vlan: entered promiscuous mode [ 75.989730][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.072564][ T5841] veth0_vlan: entered promiscuous mode [ 76.096956][ T5838] veth0_macvtap: entered promiscuous mode [ 76.118157][ T5838] veth1_macvtap: entered promiscuous mode [ 76.132283][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.152618][ T5841] veth1_vlan: entered promiscuous mode [ 76.173081][ T5837] veth0_macvtap: entered promiscuous mode [ 76.205581][ T5837] veth1_macvtap: entered promiscuous mode [ 76.254330][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.263668][ T5856] veth0_vlan: entered promiscuous mode [ 76.292842][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.307240][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.336696][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.348388][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.358593][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.369326][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.391391][ T5856] veth1_vlan: entered promiscuous mode [ 76.403450][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.445953][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.455166][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.469426][ T5851] veth0_vlan: entered promiscuous mode [ 76.476761][ T5841] veth0_macvtap: entered promiscuous mode [ 76.493442][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.503907][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.531218][ T5841] veth1_macvtap: entered promiscuous mode [ 76.540958][ T5163] Bluetooth: hci1: command tx timeout [ 76.540983][ T5839] Bluetooth: hci2: command tx timeout [ 76.551438][ T5163] Bluetooth: hci0: command tx timeout [ 76.584310][ T5851] veth1_vlan: entered promiscuous mode [ 76.620640][ T5163] Bluetooth: hci3: command tx timeout [ 76.679006][ T5856] veth0_macvtap: entered promiscuous mode [ 76.700644][ T5163] Bluetooth: hci4: command tx timeout [ 76.705405][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.715074][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.741892][ T5856] veth1_macvtap: entered promiscuous mode [ 76.753870][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.795512][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.824077][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.837851][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.846561][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.871046][ T676] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.881437][ T676] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.892015][ T676] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.910129][ T5851] veth0_macvtap: entered promiscuous mode [ 76.929737][ T676] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.943991][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.949133][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.956598][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.984965][ T5851] veth1_macvtap: entered promiscuous mode [ 76.995952][ T140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.005004][ T140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.018994][ T140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.039983][ T140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.049091][ T676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.058702][ T676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.093062][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.163218][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.206849][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.297759][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.298474][ T140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.318434][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.356049][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.387416][ T140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.407242][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.459625][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.471480][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.549837][ T676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.586435][ T676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.671873][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.788915][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.843515][ T5965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.466544][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.582333][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.623423][ T5163] Bluetooth: hci0: command tx timeout [ 78.624886][ T5839] Bluetooth: hci1: command tx timeout [ 78.629301][ T5163] Bluetooth: hci2: command tx timeout [ 79.590618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 80.111005][ T5163] Bluetooth: hci3: command tx timeout [ 80.116508][ T5163] Bluetooth: hci4: command tx timeout [ 80.411983][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.456364][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.150402][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.009703][ T5990] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.128637][ T5993] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 83.185458][ T5993] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10'. [ 83.906116][ T5997] ref_ctr_offset mismatch. inode: 0x1d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xe8 [ 86.665611][ T30] audit: type=1800 audit(1773981765.649:2): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8" name="file1" dev="overlay" ino=41 res=0 errno=0 [ 86.717519][ T10] cfg80211: failed to load regulatory.db [ 86.899533][ T6013] mmap: syz.2.16 (6013) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.986552][ T6014] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 89.010545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 89.270315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 89.481855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 90.168660][ T6040] netlink: 'syz.2.21': attribute type 1 has an invalid length. [ 91.325253][ T6045] netlink: 56 bytes leftover after parsing attributes in process `syz.2.23'. [ 91.516999][ T6049] ref_ctr_offset mismatch. inode: 0x33 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xe8 [ 91.756704][ T6052] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 94.095991][ T6071] warning: `syz.3.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.690935][ T6076] ======================================================= [ 94.690935][ T6076] WARNING: The mand mount option has been deprecated and [ 94.690935][ T6076] and is ignored by this kernel. Remove the mand [ 94.690935][ T6076] option from the mount to silence this warning. [ 94.690935][ T6076] ======================================================= [ 96.951717][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.35'. [ 97.576033][ T6102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.854294][ T6107] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 98.321229][ T6113] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 98.368016][ T6113] netlink: 48 bytes leftover after parsing attributes in process `syz.4.41'. [ 101.931407][ T6137] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 102.793163][ T6142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.237928][ T6147] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 103.812039][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 103.982621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 104.654812][ T6165] netlink: 56 bytes leftover after parsing attributes in process `syz.4.54'. [ 107.782850][ T6191] Cannot find add_set index 65532 as target [ 108.639931][ T6196] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.272856][ T6205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 109.751798][ T6208] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 109.808684][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.818480][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.640685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.050223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 112.950502][ T6227] Cannot find add_set index 65532 as target [ 113.853530][ T6218] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 113.865452][ T6218] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 113.873860][ T6218] CPU: 0 UID: 0 PID: 6218 Comm: syz.1.74 Not tainted syzkaller #0 PREEMPT(full) [ 113.882945][ T6218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 113.892981][ T6218] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 113.898436][ T6218] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 113.918021][ T6218] RSP: 0018:ffffc9000525f9a0 EFLAGS: 00010006 [ 113.924085][ T6218] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 113.932045][ T6218] RDX: 1ffff92000a4bf40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 113.940006][ T6218] RBP: ffffc9000525faa0 R08: 0000000000000003 R09: 0000000000000004 [ 113.947956][ T6218] R10: dffffc0000000000 R11: fffff52000a4bf50 R12: 0000000000000000 [ 113.955912][ T6218] R13: ffff88807ce08f50 R14: 0000000000000018 R15: ffffc9000525fc20 [ 113.963861][ T6218] FS: 000055556a826500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 113.972779][ T6218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.979356][ T6218] CR2: 00007ffcc984cd30 CR3: 000000007ee92000 CR4: 00000000003526f0 [ 113.987408][ T6218] Call Trace: [ 113.991274][ T6218] [ 113.994672][ T6218] ? __lock_acquire+0x6b5/0x2cf0 [ 113.999618][ T6218] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 114.005004][ T6218] ? do_raw_spin_lock+0x12b/0x2f0 [ 114.010392][ T6218] rwsem_del_wake_waiter+0x25d/0x2e0 [ 114.015677][ T6218] rwsem_down_write_slowpath+0xa6f/0x1080 [ 114.021533][ T6218] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 114.027498][ T6218] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 114.033671][ T6218] ? futex_wake+0x4ac/0x580 [ 114.038171][ T6218] ? __pfx_futex_wait+0x10/0x10 [ 114.043009][ T6218] ? vm_mmap_pgoff+0x234/0x4f0 [ 114.047773][ T6218] down_write_killable+0x1eb/0x240 [ 114.052885][ T6218] ? __pfx_down_write_killable+0x10/0x10 [ 114.058503][ T6218] ? apparmor_mmap_file+0x197/0x3e0 [ 114.063687][ T6218] ? security_mmap_file+0x4df/0xa20 [ 114.068869][ T6218] vm_mmap_pgoff+0x234/0x4f0 [ 114.073443][ T6218] ? __se_sys_futex+0x3a8/0x450 [ 114.078270][ T6218] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 114.083364][ T6218] ? __pfx___se_sys_futex+0x10/0x10 [ 114.088555][ T6218] ? rcu_is_watching+0x15/0xb0 [ 114.093318][ T6218] ? ksys_mmap_pgoff+0xf3/0x760 [ 114.098159][ T6218] ? __x64_sys_mmap+0x7f/0x140 [ 114.102906][ T6218] do_syscall_64+0x14d/0xf80 [ 114.107758][ T6218] ? trace_irq_disable+0x3b/0x150 [ 114.112763][ T6218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.118984][ T6218] ? clear_bhb_loop+0x40/0x90 [ 114.123734][ T6218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.129618][ T6218] RIP: 0033:0x7f204579c502 [ 114.134041][ T6218] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 114.153634][ T6218] RSP: 002b:00007ffc6933e928 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.162044][ T6218] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f204579c502 [ 114.170002][ T6218] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 114.177994][ T6218] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 114.186131][ T6218] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc6933ea90 [ 114.194100][ T6218] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 114.202067][ T6218] [ 114.205086][ T6218] Modules linked in: [ 114.208976][ T6218] ---[ end trace 0000000000000000 ]--- [ 114.214542][ T6218] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 114.220019][ T6218] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 114.239629][ T6218] RSP: 0018:ffffc9000525f9a0 EFLAGS: 00010006 [ 114.245705][ T6218] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 114.253654][ T6218] RDX: 1ffff92000a4bf40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 114.261609][ T6218] RBP: ffffc9000525faa0 R08: 0000000000000003 R09: 0000000000000004 [ 114.269556][ T6218] R10: dffffc0000000000 R11: fffff52000a4bf50 R12: 0000000000000000 [ 114.277504][ T6218] R13: ffff88807ce08f50 R14: 0000000000000018 R15: ffffc9000525fc20 [ 114.285458][ T6218] FS: 000055556a826500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 114.294450][ T6218] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.301008][ T6218] CR2: 00007ffcc984cd30 CR3: 000000007ee92000 CR4: 00000000003526f0 [ 114.308961][ T6218] Kernel panic - not syncing: Fatal exception [ 115.398501][ T6218] Shutting down cpus with NMI [ 115.403480][ T6218] Kernel Offset: disabled [ 115.407787][ T6218] Rebooting in 86400 seconds..