last executing test programs: 11.56084108s ago: executing program 0 (id=52): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) modify_ldt$write(0x1, 0x0, 0x0) 11.269995555s ago: executing program 0 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x3c, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x3c}}, 0x20000014) 11.160085876s ago: executing program 0 (id=58): syz_open_dev$vim2m(0x0, 0x4, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$vim2m(&(0x7f0000000300), 0x6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0xa0000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000240)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0xffb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) 11.159047126s ago: executing program 2 (id=59): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6", 0x3) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 9.276642495s ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x44003) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0x0, 0x0, 0x2000}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) 7.335336774s ago: executing program 3 (id=67): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, 0x0) fchown(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x800) request_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.478013623s ago: executing program 4 (id=69): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000840)=[{{&(0x7f0000000300)={0xa, 0x4e25, 0x40000, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)='P', 0x1}], 0x1}}], 0x1, 0x24004001) shutdown(r0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580), &(0x7f00000005c0)=0x8) 6.383703337s ago: executing program 0 (id=70): r0 = socket(0x10, 0x2, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1104, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x7, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', r6, 0x4, 0x2, 0x83, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x1fc}, 0x8000, 0x0, 0x0, 0x300}}) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) 6.356604531s ago: executing program 2 (id=71): readahead(0xffffffffffffffff, 0x7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f00000000c0)=0x10000) capset(0x0, 0x0) write$binfmt_elf32(r3, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000100)=0x1) write$dsp(r3, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000000)="ef7791000dc7777cb951", 0xa}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) 6.213615769s ago: executing program 3 (id=72): r0 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r0, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000140)=0xfff) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) 6.166162131s ago: executing program 4 (id=73): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 6.005985918s ago: executing program 3 (id=74): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.556425349s ago: executing program 4 (id=75): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.157282843s ago: executing program 3 (id=76): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) 5.094295217s ago: executing program 4 (id=77): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x10000, 0x0, 0x4, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x101480, 0x0, 0x1, 0x0, 0x0) pipe2(0x0, 0x0) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)) 4.820780722s ago: executing program 3 (id=79): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x309}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000057c000/0x2000)=nil, 0x2000}, 0x1}) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/224, 0x20}], 0x1000000000000108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4.754063969s ago: executing program 4 (id=80): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @void}, 0x40) 4.398072636s ago: executing program 4 (id=81): r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4.26577135s ago: executing program 1 (id=82): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) write$P9_RLINK(r0, &(0x7f0000000180)={0x7, 0x47, 0x1}, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r0, 0x4068aea3, 0x0) fchown(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x800) request_key(&(0x7f00000002c0)='asymmetric\x00', 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200000000000500c2"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.029070175s ago: executing program 1 (id=83): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ppoll(&(0x7f0000000140)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(r0) 3.46599453s ago: executing program 1 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}}, 0x64000) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000200)='m', 0x1) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100)) r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r7, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) 3.365064628s ago: executing program 3 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000000)="b9800000c00f3235000800000f3066baf80cb8b58eb48aef66bafc0cec0fe72d16da0000c4c37d054e0000b93c090000b80000c0feba000000000f30df180f20583e650f01c9660fdcd42e0f78dc", 0x4e}], 0x1, 0x90, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x44, 0x1, 0x9, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x77}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x44}}, 0x400d0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x6, 0x1, 0x5, 0x0, 0x0, {0xe, 0x0, 0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000800) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 3.316513476s ago: executing program 0 (id=86): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x74, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000340)=0xffffffffffff0001, 0xd, 0x2) sendmsg$nl_route_sched(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, r7, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_clone3(&(0x7f0000002340)={0x828080, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.31576495s ago: executing program 1 (id=87): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.239347276s ago: executing program 2 (id=88): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.938259183s ago: executing program 2 (id=89): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 1.468867104s ago: executing program 1 (id=90): ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100"]) r0 = open(0x0, 0x200, 0x718bb647156ec33d) linkat(r0, 0x0, r0, 0x0, 0x0) 1.302586436s ago: executing program 2 (id=91): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 1.153767914s ago: executing program 1 (id=92): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x1, "3a8e07000034b52ba75088c27891ca55e21f0000000000b2b679d200", 0x41414770}) 0s ago: executing program 2 (id=93): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040241, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x1) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x1a2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.245' (ED25519) to the list of known hosts. [ 78.523795][ T5852] cgroup: Unknown subsys name 'net' [ 78.654694][ T5852] cgroup: Unknown subsys name 'cpuset' [ 78.663812][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.341739][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.148040][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.156483][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.164699][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.168864][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.172890][ T5873] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.186631][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.194389][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.203036][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.210802][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.219113][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.229893][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.233758][ T5880] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.237338][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.252532][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.252775][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.259840][ T5876] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.267702][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.275315][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.291408][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.303598][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.351413][ T5872] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.371079][ T5872] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.394631][ T5872] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.405233][ T5872] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.414091][ T5872] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.903082][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 84.177483][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 84.289131][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 84.313689][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 84.392070][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 84.404331][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.411621][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.419251][ T5864] bridge_slave_0: entered allmulticast mode [ 84.428540][ T5864] bridge_slave_0: entered promiscuous mode [ 84.510190][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.517883][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.525475][ T5864] bridge_slave_1: entered allmulticast mode [ 84.534223][ T5864] bridge_slave_1: entered promiscuous mode [ 84.725793][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.750000][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.757642][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.765474][ T5862] bridge_slave_0: entered allmulticast mode [ 84.774227][ T5862] bridge_slave_0: entered promiscuous mode [ 84.814996][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.841678][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.848835][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.856675][ T5878] bridge_slave_0: entered allmulticast mode [ 84.864521][ T5878] bridge_slave_0: entered promiscuous mode [ 84.873406][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.881149][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.888492][ T5862] bridge_slave_1: entered allmulticast mode [ 84.897377][ T5862] bridge_slave_1: entered promiscuous mode [ 84.905416][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.912930][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.920363][ T5863] bridge_slave_0: entered allmulticast mode [ 84.927547][ T5863] bridge_slave_0: entered promiscuous mode [ 84.935858][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.943129][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.950690][ T5865] bridge_slave_0: entered allmulticast mode [ 84.957910][ T5865] bridge_slave_0: entered promiscuous mode [ 84.981834][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.988990][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.996722][ T5878] bridge_slave_1: entered allmulticast mode [ 85.004229][ T5878] bridge_slave_1: entered promiscuous mode [ 85.037485][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.044882][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.052480][ T5863] bridge_slave_1: entered allmulticast mode [ 85.059664][ T5863] bridge_slave_1: entered promiscuous mode [ 85.066622][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.074148][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.082359][ T5865] bridge_slave_1: entered allmulticast mode [ 85.089468][ T5865] bridge_slave_1: entered promiscuous mode [ 85.118673][ T5864] team0: Port device team_slave_0 added [ 85.128062][ T5864] team0: Port device team_slave_1 added [ 85.208710][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.225039][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.252526][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.278094][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.289877][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.315489][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.328634][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.338095][ T5873] Bluetooth: hci1: command tx timeout [ 85.341619][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.344545][ T5872] Bluetooth: hci2: command tx timeout [ 85.369744][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.376829][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.402794][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.420954][ T5872] Bluetooth: hci0: command tx timeout [ 85.421133][ T5873] Bluetooth: hci3: command tx timeout [ 85.478176][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.485562][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.511878][ T5873] Bluetooth: hci4: command tx timeout [ 85.514273][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.543685][ T5862] team0: Port device team_slave_0 added [ 85.551631][ T5878] team0: Port device team_slave_0 added [ 85.574158][ T5865] team0: Port device team_slave_0 added [ 85.582079][ T5863] team0: Port device team_slave_0 added [ 85.599790][ T5878] team0: Port device team_slave_1 added [ 85.607419][ T5862] team0: Port device team_slave_1 added [ 85.615252][ T5863] team0: Port device team_slave_1 added [ 85.637062][ T5865] team0: Port device team_slave_1 added [ 85.760520][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.767518][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.794144][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.806266][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.813444][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.839758][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.864533][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.871754][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.897918][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.911632][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.918805][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.945540][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.957431][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.964976][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.991783][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.003689][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.011147][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.037366][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.049164][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.056592][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.082684][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.107634][ T5864] hsr_slave_0: entered promiscuous mode [ 86.114043][ T5864] hsr_slave_1: entered promiscuous mode [ 86.147765][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.155127][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.181273][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.308151][ T5865] hsr_slave_0: entered promiscuous mode [ 86.315592][ T5865] hsr_slave_1: entered promiscuous mode [ 86.322875][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 86.328746][ T5865] Cannot create hsr debugfs directory [ 86.401546][ T5862] hsr_slave_0: entered promiscuous mode [ 86.407862][ T5862] hsr_slave_1: entered promiscuous mode [ 86.414961][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 86.420725][ T5862] Cannot create hsr debugfs directory [ 86.463557][ T5863] hsr_slave_0: entered promiscuous mode [ 86.470928][ T5863] hsr_slave_1: entered promiscuous mode [ 86.477169][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 86.483391][ T5863] Cannot create hsr debugfs directory [ 86.526374][ T5878] hsr_slave_0: entered promiscuous mode [ 86.535366][ T5878] hsr_slave_1: entered promiscuous mode [ 86.561914][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 86.567704][ T5878] Cannot create hsr debugfs directory [ 87.158260][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.189529][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.219743][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.258229][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.370481][ T5878] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.394706][ T5878] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.410752][ T5873] Bluetooth: hci2: command tx timeout [ 87.410972][ T5872] Bluetooth: hci1: command tx timeout [ 87.451429][ T5878] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.485072][ T5878] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.492364][ T5872] Bluetooth: hci3: command tx timeout [ 87.492675][ T5873] Bluetooth: hci0: command tx timeout [ 87.570686][ T5873] Bluetooth: hci4: command tx timeout [ 87.597460][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.608957][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.643549][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.655428][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.759605][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.771716][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.786853][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.812064][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.818913][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.952915][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.966731][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.993325][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.006215][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.020060][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.049096][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.056614][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.100189][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.107405][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.205814][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.217780][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.306633][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.327808][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.362835][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.370036][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.394821][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.402089][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.446064][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.453315][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.464600][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.471983][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.537208][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.680026][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.727149][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.759661][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.766903][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.780299][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.787664][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.865925][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.944211][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.986514][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.993725][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.058553][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.065732][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.143280][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.327634][ T5864] veth0_vlan: entered promiscuous mode [ 89.390064][ T5864] veth1_vlan: entered promiscuous mode [ 89.423607][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.503622][ T5873] Bluetooth: hci1: command tx timeout [ 89.503663][ T5872] Bluetooth: hci2: command tx timeout [ 89.571664][ T5872] Bluetooth: hci0: command tx timeout [ 89.572878][ T5873] Bluetooth: hci3: command tx timeout [ 89.651025][ T5873] Bluetooth: hci4: command tx timeout [ 89.686702][ T5864] veth0_macvtap: entered promiscuous mode [ 89.732089][ T5864] veth1_macvtap: entered promiscuous mode [ 89.793643][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.846367][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.901004][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.921778][ T5865] veth0_vlan: entered promiscuous mode [ 89.928299][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.940006][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.956575][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.975839][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.008527][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.062617][ T5865] veth1_vlan: entered promiscuous mode [ 90.229730][ T5865] veth0_macvtap: entered promiscuous mode [ 90.236751][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.256323][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.263374][ T5878] veth0_vlan: entered promiscuous mode [ 90.294057][ T5863] veth0_vlan: entered promiscuous mode [ 90.306786][ T5862] veth0_vlan: entered promiscuous mode [ 90.326768][ T5865] veth1_macvtap: entered promiscuous mode [ 90.354631][ T5878] veth1_vlan: entered promiscuous mode [ 90.370000][ T5863] veth1_vlan: entered promiscuous mode [ 90.387404][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.392439][ T5862] veth1_vlan: entered promiscuous mode [ 90.396004][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.437548][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.479449][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.522596][ T804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.545752][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.575485][ T804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.584980][ T804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.607036][ T5863] veth0_macvtap: entered promiscuous mode [ 90.620498][ T5878] veth0_macvtap: entered promiscuous mode [ 90.636195][ T804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.683035][ T5863] veth1_macvtap: entered promiscuous mode [ 90.694722][ T5878] veth1_macvtap: entered promiscuous mode [ 90.730994][ T5862] veth0_macvtap: entered promiscuous mode [ 90.913620][ T5862] veth1_macvtap: entered promiscuous mode [ 90.972331][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.008015][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.019926][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.054977][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.142528][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.150538][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.165254][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.180820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.189168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.198328][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.213610][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.232008][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.295590][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.304512][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.445951][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.456936][ T1109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489284][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.499861][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.522646][ T1109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.536516][ T1109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.570514][ T5873] Bluetooth: hci2: command tx timeout [ 91.570823][ T5872] Bluetooth: hci1: command tx timeout [ 91.604876][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.657763][ T5872] Bluetooth: hci3: command tx timeout [ 91.657773][ T5873] Bluetooth: hci0: command tx timeout [ 91.730852][ T5872] Bluetooth: hci4: command tx timeout [ 91.828460][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.868074][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.879562][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.922701][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.964911][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.157810][ T981] cfg80211: failed to load regulatory.db [ 92.186258][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.206022][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.292914][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.336017][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.439961][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.615172][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.737792][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.840269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 93.848623][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 93.857335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.870981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.879363][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.888436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.897887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 94.199798][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.220908][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.340803][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.420566][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.991558][ T6010] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 96.784991][ T6017] binder: 6014:6017 unknown command 0 [ 96.842460][ T6017] binder: 6014:6017 ioctl c0306201 200000000080 returned -22 [ 97.022728][ T5958] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.041232][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11'. [ 97.162968][ T6024] Zero length message leads to an empty skb [ 97.207320][ T6027] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.252680][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 97.273769][ T5958] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.287424][ T5958] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 97.301752][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.310007][ T5958] usb 2-1: Product: syz [ 97.319033][ T5958] usb 2-1: Manufacturer: syz [ 97.329739][ T5958] usb 2-1: SerialNumber: syz [ 97.410695][ T5958] usb 2-1: config 0 descriptor?? [ 97.563753][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 98.212527][ T5958] gs_usb 2-1:0.0: Configuring for 2 interfaces [ 98.729240][ T6043] netlink: 'syz.2.17': attribute type 4 has an invalid length. [ 98.989974][ T6043] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17'. [ 99.019506][ T5958] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 99.250661][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 100.454260][ T5958] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 100.478235][ T5958] usb 2-1: USB disconnect, device number 2 [ 100.490965][ T6043] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 100.559405][ T30] audit: type=1326 audit(1757288953.683:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3578ebe9 code=0x7ffc0000 [ 100.581510][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.659806][ T30] audit: type=1326 audit(1757288953.683:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3578ebe9 code=0x7ffc0000 [ 100.681964][ C0] vkms_vblank_simulate: vblank timer overrun [ 100.723683][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.869490][ T30] audit: type=1326 audit(1757288953.683:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f0d3578ebe9 code=0x7ffc0000 [ 100.960863][ T30] audit: type=1326 audit(1757288953.683:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3578ebe9 code=0x7ffc0000 [ 100.982820][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.173108][ T30] audit: type=1326 audit(1757288953.683:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3578ebe9 code=0x7ffc0000 [ 101.252062][ T30] audit: type=1326 audit(1757288953.683:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0d3578d550 code=0x7ffc0000 [ 101.318621][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.24'. [ 101.410602][ T30] audit: type=1326 audit(1757288953.683:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3578ebe9 code=0x7ffc0000 [ 101.432725][ C0] vkms_vblank_simulate: vblank timer overrun [ 101.483636][ T30] audit: type=1326 audit(1757288953.683:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d3578ebe9 code=0x7ffc0000 [ 101.573798][ T30] audit: type=1326 audit(1757288953.683:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6048 comm="syz.4.20" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0d3578ebe9 code=0x7ffc0000 [ 104.420378][ T5981] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.396865][ T5981] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.600835][ T5981] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.612502][ T5981] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.623268][ T5981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.651677][ T6076] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 106.432097][ T5981] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 106.482716][ T5981] usb 5-1: USB disconnect, device number 2 [ 107.471925][ T6022] udevd[6022]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.761454][ T6105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.36'. [ 107.776603][ T6105] unsupported nlmsg_type 40 [ 108.437007][ T6115] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 108.443841][ T6115] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 108.459064][ T6115] vhci_hcd vhci_hcd.0: Device attached [ 108.543439][ T6117] vhci_hcd: connection closed [ 108.669299][ T1109] vhci_hcd: stop threads [ 108.875138][ T1109] vhci_hcd: release socket [ 108.973904][ T1109] vhci_hcd: disconnect device [ 110.883962][ T5872] Bluetooth: Frame is too long (len 10, expected len 9) [ 112.046301][ T6145] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.840815][ T6146] vlan2: entered promiscuous mode [ 112.846018][ T6146] macvtap0: entered promiscuous mode [ 112.856261][ T6149] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 112.862834][ T6149] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.000071][ T6149] vhci_hcd vhci_hcd.0: Device attached [ 113.170908][ T6150] vhci_hcd: connection closed [ 113.181612][ T1109] vhci_hcd: stop threads [ 113.215112][ T6161] overlayfs: failed to resolve './file1/file0': -2 [ 113.222710][ T1109] vhci_hcd: release socket [ 113.230002][ T1109] vhci_hcd: disconnect device [ 113.260507][ T5981] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 113.268036][ T5981] usb 35-1: enqueue for inactive port 0 [ 113.400901][ T5981] vhci_hcd: vhci_device speed not set [ 115.005322][ T6185] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.020722][ T6188] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 117.174257][ T6209] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 117.449664][ T6211] netlink: 'syz.1.65': attribute type 5 has an invalid length. [ 119.736996][ T6237] overlayfs: missing 'lowerdir' [ 120.138240][ T6246] capability: warning: `syz.0.70' uses deprecated v2 capabilities in a way that may be insecure [ 120.218568][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 123.876241][ T6296] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 123.876241][ T6296] program syz.2.91 not setting count and/or reply_len properly [ 124.841871][ T6285] ================================================================== [ 124.850008][ T6285] BUG: KASAN: slab-out-of-bounds in change_page_attr_set_clr+0x625/0xfc0 [ 124.858486][ T6285] Read of size 8 at addr ffff8881443e5120 by task syz.0.86/6285 [ 124.866145][ T6285] [ 124.868497][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 124.868522][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.868535][ T6285] Call Trace: [ 124.868544][ T6285] [ 124.868552][ T6285] dump_stack_lvl+0x189/0x250 [ 124.868581][ T6285] ? __kasan_check_byte+0x12/0x40 [ 124.868614][ T6285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.868639][ T6285] ? lock_release+0x4b/0x3e0 [ 124.868668][ T6285] ? __virt_addr_valid+0x4a5/0x5c0 [ 124.868693][ T6285] print_report+0xca/0x240 [ 124.868713][ T6285] ? change_page_attr_set_clr+0x625/0xfc0 [ 124.868741][ T6285] kasan_report+0x118/0x150 [ 124.868771][ T6285] ? change_page_attr_set_clr+0x625/0xfc0 [ 124.868801][ T6285] change_page_attr_set_clr+0x625/0xfc0 [ 124.868833][ T6285] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 124.868861][ T6285] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 124.868886][ T6285] ? memtype_reserve+0x874/0xb30 [ 124.868915][ T6285] ? __pfx___ww_mutex_lock+0x10/0x10 [ 124.868941][ T6285] _set_pages_array+0x145/0x270 [ 124.868973][ T6285] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 124.869002][ T6285] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 124.869038][ T6285] ? ww_mutex_lock+0x3f/0x1c0 [ 124.869061][ T6285] drm_gem_shmem_mmap+0x193/0x460 [ 124.869089][ T6285] drm_gem_mmap_obj+0x187/0x4e0 [ 124.869121][ T6285] drm_gem_mmap+0x384/0x640 [ 124.869152][ T6285] ? __pfx_drm_gem_mmap+0x10/0x10 [ 124.869183][ T6285] ? __mas_set_range+0x12f/0x3c0 [ 124.869210][ T6285] mmap_region+0x18a8/0x2100 [ 124.869232][ T6285] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.869259][ T6285] ? __pfx_mmap_region+0x10/0x10 [ 124.869289][ T6285] ? __pfx___schedule+0x10/0x10 [ 124.869346][ T6285] ? bpf_lsm_mmap_addr+0x9/0x20 [ 124.869370][ T6285] ? security_mmap_addr+0x71/0x270 [ 124.869397][ T6285] ? shmem_mapping+0xd/0x50 [ 124.869417][ T6285] ? memfd_check_seals_mmap+0xc5/0x200 [ 124.869440][ T6285] do_mmap+0xc45/0x10d0 [ 124.869470][ T6285] ? __pfx_do_mmap+0x10/0x10 [ 124.869492][ T6285] ? down_write_killable+0x178/0x230 [ 124.869519][ T6285] ? __pfx_down_write_killable+0x10/0x10 [ 124.869542][ T6285] ? common_file_perm+0x1b5/0x230 [ 124.869565][ T6285] vm_mmap_pgoff+0x2a6/0x4d0 [ 124.869591][ T6285] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 124.869615][ T6285] ? __rcu_read_unlock+0x84/0xe0 [ 124.869640][ T6285] ? __fget_files+0x2a/0x420 [ 124.869668][ T6285] ? __fget_files+0x2a/0x420 [ 124.869697][ T6285] ksys_mmap_pgoff+0x51f/0x760 [ 124.869725][ T6285] do_syscall_64+0xfa/0xfa0 [ 124.869746][ T6285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.869766][ T6285] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 124.869785][ T6285] ? clear_bhb_loop+0x60/0xb0 [ 124.869807][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.869828][ T6285] RIP: 0033:0x7f913e78ebe9 [ 124.869846][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.869864][ T6285] RSP: 002b:00007f913c9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 124.869888][ T6285] RAX: ffffffffffffffda RBX: 00007f913e9c6180 RCX: 00007f913e78ebe9 [ 124.869903][ T6285] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 124.869916][ T6285] RBP: 00007f913e811e19 R08: 0000000000000003 R09: 0000000100000000 [ 124.869930][ T6285] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 124.869943][ T6285] R13: 00007f913e9c6218 R14: 00007f913e9c6180 R15: 00007ffe42e5e1c8 [ 124.869965][ T6285] [ 124.869973][ T6285] [ 125.211979][ T6285] Allocated by task 6285: [ 125.216296][ T6285] kasan_save_track+0x3e/0x80 [ 125.220976][ T6285] __kasan_kmalloc+0x93/0xb0 [ 125.225570][ T6285] __kvmalloc_node_noprof+0x5cd/0x910 [ 125.230962][ T6285] drm_gem_get_pages+0x166/0xa20 [ 125.236004][ T6285] drm_gem_shmem_get_pages_locked+0x201/0x440 [ 125.242192][ T6285] drm_gem_shmem_mmap+0x193/0x460 [ 125.247227][ T6285] drm_gem_mmap_obj+0x187/0x4e0 [ 125.252083][ T6285] drm_gem_mmap+0x384/0x640 [ 125.256685][ T6285] mmap_region+0x18a8/0x2100 [ 125.261309][ T6285] do_mmap+0xc45/0x10d0 [ 125.265479][ T6285] vm_mmap_pgoff+0x2a6/0x4d0 [ 125.270072][ T6285] ksys_mmap_pgoff+0x51f/0x760 [ 125.274927][ T6285] do_syscall_64+0xfa/0xfa0 [ 125.279429][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.285499][ T6285] [ 125.287851][ T6285] The buggy address belongs to the object at ffff8881443e5000 [ 125.287851][ T6285] which belongs to the cache kmalloc-512 of size 512 [ 125.301899][ T6285] The buggy address is located 0 bytes to the right of [ 125.301899][ T6285] allocated 288-byte region [ffff8881443e5000, ffff8881443e5120) [ 125.316377][ T6285] [ 125.318693][ T6285] The buggy address belongs to the physical page: [ 125.325090][ T6285] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1443e4 [ 125.333919][ T6285] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 125.342419][ T6285] anon flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff) [ 125.350471][ T6285] page_type: f5(slab) [ 125.354444][ T6285] raw: 057ff00000000040 ffff88801a841c80 0000000000000000 dead000000000001 [ 125.363031][ T6285] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 125.371602][ T6285] head: 057ff00000000040 ffff88801a841c80 0000000000000000 dead000000000001 [ 125.380273][ T6285] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 125.388935][ T6285] head: 057ff00000000002 ffffea000510f901 00000000ffffffff 00000000ffffffff [ 125.397613][ T6285] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 125.406275][ T6285] page dumped because: kasan: bad access detected [ 125.412699][ T6285] page_owner tracks the page as allocated [ 125.418413][ T6285] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15139239218, free_ts 0 [ 125.438132][ T6285] post_alloc_hook+0x240/0x2a0 [ 125.442896][ T6285] get_page_from_freelist+0x21e4/0x22c0 [ 125.448438][ T6285] __alloc_frozen_pages_noprof+0x181/0x370 [ 125.454249][ T6285] alloc_pages_mpol+0x232/0x4a0 [ 125.459095][ T6285] allocate_slab+0x8a/0x330 [ 125.463589][ T6285] ___slab_alloc+0xbd1/0x13f0 [ 125.468268][ T6285] __slab_alloc+0x55/0xa0 [ 125.472671][ T6285] __kmalloc_cache_noprof+0x411/0x6f0 [ 125.478036][ T6285] dev_pm_qos_constraints_allocate+0x8f/0x3f0 [ 125.484114][ T6285] __dev_pm_qos_add_request+0x123/0x4c0 [ 125.489648][ T6285] dev_pm_qos_add_request+0x36/0x60 [ 125.494839][ T6285] usb_hub_create_port_device+0x48f/0xb90 [ 125.500669][ T6285] hub_probe+0x26bf/0x37f0 [ 125.505089][ T6285] usb_probe_interface+0x665/0xc30 [ 125.510203][ T6285] really_probe+0x26d/0x9e0 [ 125.514714][ T6285] __driver_probe_device+0x18c/0x2f0 [ 125.520005][ T6285] page_owner free stack trace missing [ 125.525503][ T6285] [ 125.527831][ T6285] Memory state around the buggy address: [ 125.533445][ T6285] ffff8881443e5000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.541497][ T6285] ffff8881443e5080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.549544][ T6285] >ffff8881443e5100: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 125.557607][ T6285] ^ [ 125.562721][ T6285] ffff8881443e5180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.570859][ T6285] ffff8881443e5200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.578911][ T6285] ================================================================== [ 125.671730][ T6285] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.678975][ T6285] CPU: 1 UID: 0 PID: 6285 Comm: syz.0.86 Not tainted syzkaller #0 PREEMPT(full) [ 125.688118][ T6285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.698202][ T6285] Call Trace: [ 125.701511][ T6285] [ 125.704461][ T6285] dump_stack_lvl+0x99/0x250 [ 125.709087][ T6285] ? __asan_memcpy+0x40/0x70 [ 125.713713][ T6285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.718940][ T6285] ? __pfx__printk+0x10/0x10 [ 125.723568][ T6285] vpanic+0x237/0x6d0 [ 125.727763][ T6285] ? __pfx_vpanic+0x10/0x10 [ 125.732277][ T6285] ? preempt_schedule+0xae/0xc0 [ 125.737138][ T6285] ? __pfx_preempt_schedule+0x10/0x10 [ 125.742522][ T6285] panic+0xb9/0xc0 [ 125.746261][ T6285] ? __pfx_panic+0x10/0x10 [ 125.750684][ T6285] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 125.756588][ T6285] ? change_page_attr_set_clr+0x625/0xfc0 [ 125.762318][ T6285] check_panic_on_warn+0x89/0xb0 [ 125.767265][ T6285] ? change_page_attr_set_clr+0x625/0xfc0 [ 125.773176][ T6285] end_report+0x78/0x160 [ 125.777862][ T6285] kasan_report+0x129/0x150 [ 125.782374][ T6285] ? change_page_attr_set_clr+0x625/0xfc0 [ 125.788102][ T6285] change_page_attr_set_clr+0x625/0xfc0 [ 125.793749][ T6285] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 125.799822][ T6285] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 125.806002][ T6285] ? memtype_reserve+0x874/0xb30 [ 125.811224][ T6285] ? __pfx___ww_mutex_lock+0x10/0x10 [ 125.816516][ T6285] _set_pages_array+0x145/0x270 [ 125.821388][ T6285] drm_gem_shmem_get_pages_locked+0x2d0/0x440 [ 125.827460][ T6285] ? __pfx_drm_gem_shmem_get_pages_locked+0x10/0x10 [ 125.834143][ T6285] ? ww_mutex_lock+0x3f/0x1c0 [ 125.838828][ T6285] drm_gem_shmem_mmap+0x193/0x460 [ 125.843874][ T6285] drm_gem_mmap_obj+0x187/0x4e0 [ 125.848735][ T6285] drm_gem_mmap+0x384/0x640 [ 125.853248][ T6285] ? __pfx_drm_gem_mmap+0x10/0x10 [ 125.858280][ T6285] ? __mas_set_range+0x12f/0x3c0 [ 125.863232][ T6285] mmap_region+0x18a8/0x2100 [ 125.867826][ T6285] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.873206][ T6285] ? __pfx_mmap_region+0x10/0x10 [ 125.878323][ T6285] ? __pfx___schedule+0x10/0x10 [ 125.883214][ T6285] ? bpf_lsm_mmap_addr+0x9/0x20 [ 125.888097][ T6285] ? security_mmap_addr+0x71/0x270 [ 125.893239][ T6285] ? shmem_mapping+0xd/0x50 [ 125.897751][ T6285] ? memfd_check_seals_mmap+0xc5/0x200 [ 125.903258][ T6285] do_mmap+0xc45/0x10d0 [ 125.907442][ T6285] ? __pfx_do_mmap+0x10/0x10 [ 125.912036][ T6285] ? down_write_killable+0x178/0x230 [ 125.917336][ T6285] ? __pfx_down_write_killable+0x10/0x10 [ 125.922974][ T6285] ? common_file_perm+0x1b5/0x230 [ 125.928009][ T6285] vm_mmap_pgoff+0x2a6/0x4d0 [ 125.932609][ T6285] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 125.937725][ T6285] ? __rcu_read_unlock+0x84/0xe0 [ 125.942676][ T6285] ? __fget_files+0x2a/0x420 [ 125.947279][ T6285] ? __fget_files+0x2a/0x420 [ 125.951884][ T6285] ksys_mmap_pgoff+0x51f/0x760 [ 125.956660][ T6285] do_syscall_64+0xfa/0xfa0 [ 125.961176][ T6285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.967264][ T6285] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 125.972900][ T6285] ? clear_bhb_loop+0x60/0xb0 [ 125.977618][ T6285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.983514][ T6285] RIP: 0033:0x7f913e78ebe9 [ 125.987987][ T6285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.007618][ T6285] RSP: 002b:00007f913c9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 126.016043][ T6285] RAX: ffffffffffffffda RBX: 00007f913e9c6180 RCX: 00007f913e78ebe9 [ 126.024277][ T6285] RDX: 0000000000000004 RSI: 0000000000004000 RDI: 0000200000001000 [ 126.032336][ T6285] RBP: 00007f913e811e19 R08: 0000000000000003 R09: 0000000100000000 [ 126.040396][ T6285] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 126.048366][ T6285] R13: 00007f913e9c6218 R14: 00007f913e9c6180 R15: 00007ffe42e5e1c8 [ 126.056437][ T6285] [ 126.059760][ T6285] Kernel Offset: disabled [ 126.064090][ T6285] Rebooting in 86400 seconds..