last executing test programs: 6.732088875s ago: executing program 0 (id=223): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 6.686432779s ago: executing program 2 (id=225): r0 = open(0x0, 0x0, 0x109) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x40021, 0x1}, &(0x7f0000000080)=0x0) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x9f20c000) setpriority(0x0, 0x1, 0xa7a8) futex(0x0, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) fremovexattr(r0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x40002100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) utimes(&(0x7f00000053c0)='./file0\x00', &(0x7f0000005440)) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@local, 0x3, 0x1, 0x1, 0x1, 0x8}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x19) read(r5, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000300)=0xa, 0x4) r7 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r7, 0x0, 0x6020) 6.427888993s ago: executing program 0 (id=229): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfa85, 0x80000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000280)='net/ip_vs_stats\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000001840)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5.290327795s ago: executing program 0 (id=232): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="4db20200201a01001400030076657468315f746f5f6873720000000005001100"], 0x3c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0x80}) socket$nl_generic(0x10, 0x3, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r5 = msgget$private(0x0, 0x4a0) msgsnd(r5, 0x0, 0xe3, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0xffffffffffffffff, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0xffffffffffff0000, 0x10003, 0x7fffffffffffffff, 0xd0b, 0xfffffffffffffff9, 0x2000000000000002, 0x5], 0x80a0000, 0x80284}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.160825554s ago: executing program 2 (id=233): mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 4.97387349s ago: executing program 4 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}]}, 0x38}}, 0x0) 4.848623493s ago: executing program 1 (id=236): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x88}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r4 = socket(0x2a, 0x803, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x3a, 0x1, 0x0, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0}) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r8, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="01980400419a04002800128008000100736974001c0002"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="0d000000010001", 0x7) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) r10 = accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) pwrite64(r10, &(0x7f0000000200)="ad063c3fb584acc8acb9ade0f441bf546b71c62bb73913949f3e39e0f0043b73e1f74ce0c97b5099628f74b99f862387368e28e9d934c59f133680c00be5228ddca0804a1f880402fb4ac1362232e7a9099f434a73e342e6bb489e8be7556e9298f9f4660ebb6173c50a436b5cbfa4bfccdc7248af908600a44d8f269fef67e95051e4ad8a9c7f7f9172cbe7b1309223bbaaa10fd605e0176cba5db819", 0x9d, 0x5) 4.829486834s ago: executing program 2 (id=237): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffab, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 4.818584503s ago: executing program 4 (id=238): mkdir(&(0x7f0000000400)='./file0\x00', 0x58) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) mount(&(0x7f0000000400)=@sr0, 0x0, 0x0, 0x2a18005, 0x0) 4.636292474s ago: executing program 1 (id=239): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x400c4152, 0x0) 4.569730584s ago: executing program 4 (id=240): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 4.356064973s ago: executing program 1 (id=241): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) 4.236738698s ago: executing program 3 (id=242): socket$inet(0x2, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xcf0b, 0x0, 0x3, 0x11}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0x8, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)="ee", 0x1}], 0x1, 0xffff, 0x3) syz_io_uring_submit(0x0, 0x0, r3, &(0x7f00000005c0)=@IORING_OP_OPENAT2={0x1c, 0x20, 0x0, r4, &(0x7f0000000540)={0x200, 0x0, 0x25}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x23456}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) ioctl$DVB_DEMUX_DMX_SET_FILTER(r5, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7df6165dc7f832e06000000ff4a70f3"}, 0x4000c, 0x5}) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r6, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r7, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) preadv(r5, &(0x7f0000003000)=[{&(0x7f00000014c0)=""/31, 0x1f}, {&(0x7f0000001500)=""/52, 0x34}, {0x0}], 0x3, 0x4, 0x8001) eventfd(0xfffffff9) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) r8 = shmget$private(0x0, 0x800000, 0x800, &(0x7f0000173000/0x800000)=nil) shmat(r8, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) 4.236040391s ago: executing program 4 (id=243): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, 0x0, 0x4008000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) close(0x3) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) accept4(r0, 0x0, &(0x7f0000000280), 0x80800) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff6}, 0x1c) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x58}, [@ldst={0x6, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, 0x0, 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 4.152567539s ago: executing program 1 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006c00000095", @ANYBLOB="273c01210889dc6801b463db8b820566469a1a26f057e57dd3d7f45c7b7ff4e7cfc768ad91b2a4f0a707166f7462103cd9113988db3c8a8c02613ce3817a102a3457f2f4c44c10e231e28b75b7a0ddc6f6710a7d83458980aae278c23c160f1a320a9393f9d4b8b922a048615bbc29291d3ca488d664dd7eb0b621eccedce308dec70d816b9c3adf1f36786d1d6efc031409"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000080)=0xffffffffffff6df7, &(0x7f0000000240)=0x1) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$key(0xf, 0x3, 0x2) write$binfmt_script(r1, 0x0, 0x6f4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r2, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x14a}}, './file0\x00'}) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '+#(]&(\\)\''}, {0x20, 'syzkaller\x00'}, {0x20, 'syzkaller\x00'}], 0xa, "243f2cbfd1b3700dffada1133af5ef209ef4ba5c787326efc9eb6980fec1c3eca35af6353b7ebb55ce549b786e3a6097e0c9dc406eb8e0f2344cc019b92f02d2a1705f43dafd25d55e526239000c4895286c6b77ae8836525a80f1d0441ef571f51cc52cb66763b5c51335bd10d335d5e913c2466f5e7a0185c09d735560d6846924206385531d464445d2f682dda1b8b38ff45b4efc7b3573fbff29a33f34b3cab6294a51c9dfbd95a7c494e479"}, 0xdb) 4.011076775s ago: executing program 0 (id=245): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') fchdir(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfa85, 0x80000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000280)='net/ip_vs_stats\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@redirect_dir_off, 0x3a}], [], 0x2f}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3.187616219s ago: executing program 1 (id=246): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) chmod(&(0x7f0000000000)='./file0\x00', 0x12) 3.153275734s ago: executing program 3 (id=247): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3.03062495s ago: executing program 0 (id=248): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}]}, 0x38}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 2.033876813s ago: executing program 3 (id=249): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002b40), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002bc0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x88}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7) r4 = socket(0x2a, 0x803, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x3a, 0x1, 0x0, 0x30) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfe}}, {0x2, 0x4e24, @empty}, 0x2a0}) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r8, &(0x7f00000000c0), 0x0}, 0x20) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="01980400419a04002800128008000100736974001c0002"], 0x48}}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="0d000000010001", 0x7) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000001000), &(0x7f0000001040)=0x4) sendto$packet(r0, 0x0, 0x0, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r7, 0x1, 0x4, 0x6, @local}, 0x14) r10 = accept$inet(r4, &(0x7f0000000000)={0x2, 0x0, @empty}, &(0x7f0000000040)=0x10) pwrite64(r10, &(0x7f0000000200)="ad063c3fb584acc8acb9ade0f441bf546b71c62bb73913949f3e39e0f0043b73e1f74ce0c97b5099628f74b99f862387368e28e9d934c59f133680c00be5228ddca0804a1f880402fb4ac1362232e7a9099f434a73e342e6bb489e8be7556e9298f9f4660ebb6173c50a436b5cbfa4bfccdc7248af908600a44d8f269fef67e95051e4ad8a9c7f7f9172cbe7b1309223bbaaa10fd605e0176cba5db819", 0x9d, 0x5) 1.999357335s ago: executing program 1 (id=250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f", @ANYRES64=r3], 0x38}}, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.996599057s ago: executing program 4 (id=251): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000440)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff802, 0x3, 0xa, 0x5, 0xb20, 0x520, 0xe, 0x9, 0x3c, 0xffffffff, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000300)) 1.776738493s ago: executing program 0 (id=252): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x1c, r5, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 1.48315309s ago: executing program 3 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x145}]]}, 0x30}}, 0x0) 1.32093877s ago: executing program 2 (id=254): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x3, &(0x7f0000000200)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x6a, &(0x7f0000000380)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x10, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x24, 0x2, 0x3, 0x0, [{@private=0xa010132}, {@local, 0x4000}, {@empty}, {@private}]}]}}}}}}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES64=r4], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) 1.148529119s ago: executing program 3 (id=255): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r4}) socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) close(0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) 1.115494672s ago: executing program 2 (id=256): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000006c00000095", @ANYBLOB="273c01210889dc6801b463db8b820566469a1a26f057e57dd3d7f45c7b7ff4e7cfc768ad91b2a4f0a707166f7462103cd9113988db3c8a8c02613ce3817a102a3457f2f4c44c10e231e28b75b7a0ddc6f6710a7d83458980aae278c23c160f1a320a9393f9d4b8b922a048615bbc29291d3ca488d664dd7eb0b621eccedce308dec70d816b9c3adf1f36786d1d6efc031409"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "d482449a"}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000700)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000340)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) migrate_pages(0x0, 0xfc, &(0x7f0000000080)=0xffffffffffff6df7, &(0x7f0000000240)=0x1) sendmmsg(0xffffffffffffffff, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) close(0x3) socket$key(0xf, 0x3, 0x2) write$binfmt_script(r1, 0x0, 0x6f4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r2, &(0x7f00000004c0)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5, 0x14a}}, './file0\x00'}) write$binfmt_script(r3, &(0x7f0000000140)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '+#(]&(\\)\''}, {0x20, 'syzkaller\x00'}, {0x20, 'syzkaller\x00'}], 0xa, "243f2cbfd1b3700dffada1133af5ef209ef4ba5c787326efc9eb6980fec1c3eca35af6353b7ebb55ce549b786e3a6097e0c9dc406eb8e0f2344cc019b92f02d2a1705f43dafd25d55e526239000c4895286c6b77ae8836525a80f1d0441ef571f51cc52cb66763b5c51335bd10d335d5e913c2466f5e7a0185c09d735560d6846924206385531d464445d2f682dda1b8b38ff45b4efc7b3573fbff29a33f34b3cab6294a51c9dfbd95a7c494e479"}, 0xdb) 896.453604ms ago: executing program 4 (id=257): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}, r3}}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 196.025012ms ago: executing program 3 (id=258): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) 0s ago: executing program 2 (id=259): syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfa85, 0x80000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000280)='net/ip_vs_stats\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000001840)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. [ 67.079999][ T5599] cgroup: Unknown subsys name 'net' [ 67.191147][ T5599] cgroup: Unknown subsys name 'cpuset' [ 67.198881][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.524187][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.661822][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.662562][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.665265][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.671949][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.672250][ T5618] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.679852][ T5618] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.696229][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.696983][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.702164][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.718148][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.754570][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.758455][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.758947][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.759971][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.760516][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.779453][ T4932] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.785347][ T4932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.789137][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.789620][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.792419][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.794267][ T4932] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.795117][ T4932] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.795986][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.796884][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.804577][ T4932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.400837][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.401265][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.505239][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.506017][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.506155][ T5614] bridge_slave_0: entered allmulticast mode [ 72.508679][ T5614] bridge_slave_0: entered promiscuous mode [ 72.553629][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.553792][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.554245][ T5614] bridge_slave_1: entered allmulticast mode [ 72.555854][ T5614] bridge_slave_1: entered promiscuous mode [ 72.643761][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.643873][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.643995][ T5612] bridge_slave_0: entered allmulticast mode [ 72.645676][ T5612] bridge_slave_0: entered promiscuous mode [ 72.650052][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.650146][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.650903][ T5612] bridge_slave_1: entered allmulticast mode [ 72.652454][ T5612] bridge_slave_1: entered promiscuous mode [ 72.687192][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.691057][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.731301][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.731908][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.731999][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.732109][ T5610] bridge_slave_0: entered allmulticast mode [ 72.734241][ T5610] bridge_slave_0: entered promiscuous mode [ 72.737483][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.737575][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.738438][ T5609] bridge_slave_0: entered allmulticast mode [ 72.740961][ T5609] bridge_slave_0: entered promiscuous mode [ 72.746210][ T5612] team0: Port device team_slave_0 added [ 72.749648][ T5612] team0: Port device team_slave_1 added [ 72.749825][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.749921][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.750273][ T5613] bridge_slave_0: entered allmulticast mode [ 72.752663][ T5613] bridge_slave_0: entered promiscuous mode [ 72.758784][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.759030][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.759121][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.759228][ T5610] bridge_slave_1: entered allmulticast mode [ 72.761328][ T5610] bridge_slave_1: entered promiscuous mode [ 72.761989][ T4932] Bluetooth: hci1: command tx timeout [ 72.764124][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.764216][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.764323][ T5609] bridge_slave_1: entered allmulticast mode [ 72.766630][ T5609] bridge_slave_1: entered promiscuous mode [ 72.767381][ T4932] Bluetooth: hci0: command tx timeout [ 72.783590][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.783686][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.783795][ T5613] bridge_slave_1: entered allmulticast mode [ 72.785687][ T5613] bridge_slave_1: entered promiscuous mode [ 72.840407][ T4932] Bluetooth: hci3: command tx timeout [ 72.840580][ T5620] Bluetooth: hci2: command tx timeout [ 72.840587][ T4932] Bluetooth: hci4: command tx timeout [ 72.924891][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.924907][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.924934][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.945378][ T5614] team0: Port device team_slave_0 added [ 72.950341][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.954848][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.956242][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.956255][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.956276][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.970576][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.973696][ T5614] team0: Port device team_slave_1 added [ 72.991392][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.994251][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.014250][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.122596][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.127354][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.127382][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.171398][ T5609] team0: Port device team_slave_0 added [ 73.174298][ T5609] team0: Port device team_slave_1 added [ 73.195432][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.195507][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.195530][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.198759][ T5610] team0: Port device team_slave_0 added [ 73.208295][ T5612] hsr_slave_0: entered promiscuous mode [ 73.209460][ T5612] hsr_slave_1: entered promiscuous mode [ 73.225521][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.225536][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.225557][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.230370][ T5613] team0: Port device team_slave_0 added [ 73.243411][ T5610] team0: Port device team_slave_1 added [ 73.246322][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.246335][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.246357][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.259261][ T5613] team0: Port device team_slave_1 added [ 73.418924][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.419002][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.419022][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.434623][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.434640][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.434661][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.444098][ T5614] hsr_slave_0: entered promiscuous mode [ 73.445155][ T5614] hsr_slave_1: entered promiscuous mode [ 73.445855][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 73.445960][ T5614] Cannot create hsr debugfs directory [ 73.485227][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.485244][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.485267][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.504304][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.504321][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.504344][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.529384][ T5609] hsr_slave_0: entered promiscuous mode [ 73.530614][ T5609] hsr_slave_1: entered promiscuous mode [ 73.531354][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 73.531372][ T5609] Cannot create hsr debugfs directory [ 73.719448][ T5610] hsr_slave_0: entered promiscuous mode [ 73.720434][ T5610] hsr_slave_1: entered promiscuous mode [ 73.721337][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 73.721354][ T5610] Cannot create hsr debugfs directory [ 73.728472][ T5613] hsr_slave_0: entered promiscuous mode [ 73.729458][ T5613] hsr_slave_1: entered promiscuous mode [ 73.730070][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 73.730088][ T5613] Cannot create hsr debugfs directory [ 74.085076][ T5612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.098236][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.099345][ T5612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.111529][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.131394][ T5612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.140356][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.141207][ T5612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.152043][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.244327][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.254975][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.256134][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.266378][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.274331][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.283319][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.293077][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.302155][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.380882][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.393752][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.395041][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.405389][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.410256][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.423273][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.436789][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.446517][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.525950][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.538435][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.552826][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.562179][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.562953][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.574386][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.576645][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.590666][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.608319][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.689242][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.701920][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.709616][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.720199][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.732896][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.734870][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.744299][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.746835][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.759767][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.795073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.795521][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.838864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.839201][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.847939][ T4932] Bluetooth: hci0: command tx timeout [ 74.847960][ T52] Bluetooth: hci1: command tx timeout [ 74.885756][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.918679][ T52] Bluetooth: hci4: command tx timeout [ 74.919457][ T52] Bluetooth: hci2: command tx timeout [ 74.919480][ T52] Bluetooth: hci3: command tx timeout [ 74.960283][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.975044][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.989436][ T5612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.003895][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.003962][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.034088][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.034228][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.076116][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.101493][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.120632][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.120766][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.164019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.164146][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.207742][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.251351][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.251451][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.277668][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.285678][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.285801][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.301483][ T5609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.301507][ T5609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.455414][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.502566][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.502762][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.601722][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.601864][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.067820][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.156112][ T5612] veth0_vlan: entered promiscuous mode [ 76.172699][ T5612] veth1_vlan: entered promiscuous mode [ 76.248735][ T5612] veth0_macvtap: entered promiscuous mode [ 76.273891][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.285319][ T5612] veth1_macvtap: entered promiscuous mode [ 76.382883][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.414803][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.498080][ T1448] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.499916][ T1448] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.499954][ T1448] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.499985][ T1448] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.662417][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.845811][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.845853][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.917892][ T4932] Bluetooth: hci1: command tx timeout [ 76.917939][ T4932] Bluetooth: hci0: command tx timeout [ 76.959013][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.959062][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.985830][ T5614] veth0_vlan: entered promiscuous mode [ 76.997610][ T52] Bluetooth: hci3: command tx timeout [ 76.997658][ T52] Bluetooth: hci2: command tx timeout [ 76.997696][ T52] Bluetooth: hci4: command tx timeout [ 77.033325][ T5614] veth1_vlan: entered promiscuous mode [ 77.111794][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.114885][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.139170][ T5612] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.162363][ T5609] veth0_vlan: entered promiscuous mode [ 77.195904][ T5614] veth0_macvtap: entered promiscuous mode [ 77.229955][ T5609] veth1_vlan: entered promiscuous mode [ 77.245804][ T5614] veth1_macvtap: entered promiscuous mode [ 77.283552][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.293456][ T5804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.336994][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.347618][ T5610] veth0_vlan: entered promiscuous mode [ 77.394555][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.410827][ T5610] veth1_vlan: entered promiscuous mode [ 77.421006][ T5613] veth0_vlan: entered promiscuous mode [ 77.434701][ T5613] veth1_vlan: entered promiscuous mode [ 77.454842][ T5609] veth0_macvtap: entered promiscuous mode [ 77.478857][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.490703][ T5609] veth1_macvtap: entered promiscuous mode [ 77.508856][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.509225][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.509478][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.566810][ T5610] veth0_macvtap: entered promiscuous mode [ 78.034535][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.042333][ T5613] veth0_macvtap: entered promiscuous mode [ 78.057461][ T5613] veth1_macvtap: entered promiscuous mode [ 78.070750][ T5610] veth1_macvtap: entered promiscuous mode [ 78.082853][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.144802][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.144838][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.150249][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.189294][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.189354][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.189400][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.189437][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.236599][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.263668][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.313180][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.321579][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.321618][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.713902][ T4932] Bluetooth: hci0: command tx timeout [ 79.713952][ T4932] Bluetooth: hci1: command tx timeout [ 79.714006][ T4932] Bluetooth: hci4: command tx timeout [ 79.714030][ T4932] Bluetooth: hci2: command tx timeout [ 79.714053][ T4932] Bluetooth: hci3: command tx timeout [ 79.821171][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.821209][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.898122][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.898705][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.982494][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.050572][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.077923][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.095251][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.110555][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.138185][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.158520][ T1448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.158697][ T1448] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.241585][ T5818] Invalid ELF header magic: != ELF [ 80.443414][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.453412][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.695694][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.695723][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.755041][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.755081][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.862590][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.871640][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.191037][ T5823] Zero length message leads to an empty skb [ 81.214166][ T5823] Bluetooth: MGMT ver 1.23 [ 81.340671][ T5832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 81.389935][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 81.401852][ T5834] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12'. [ 81.406803][ T5830] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 82.777400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.416236][ T5860] Invalid ELF header magic: != ELF [ 85.776882][ T5875] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 86.231035][ T5890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.335718][ T5892] Invalid ELF header magic: != ELF [ 86.814869][ T10] cfg80211: failed to load regulatory.db [ 87.424023][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.37'. [ 87.480451][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 87.491602][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 89.149260][ T5976] Invalid ELF header magic: != ELF [ 89.970758][ T5982] syzkaller0: entered promiscuous mode [ 89.979122][ T5982] syzkaller0: entered allmulticast mode [ 90.687716][ T6004] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 90.842432][ T6004] kvm: pic: level sensitive irq not supported [ 90.846962][ T6004] kvm: pic: non byte read [ 90.871720][ T6004] kvm: pic: level sensitive irq not supported [ 90.871837][ T6004] kvm: pic: non byte read [ 90.872034][ T6004] kvm: pic: level sensitive irq not supported [ 90.872087][ T6004] kvm: pic: non byte read [ 90.872241][ T6004] kvm: pic: level sensitive irq not supported [ 90.872289][ T6004] kvm: pic: non byte read [ 91.165779][ T6013] Invalid ELF header magic: != ELF [ 91.174963][ T6013] ======================================================= [ 91.174963][ T6013] WARNING: The mand mount option has been deprecated and [ 91.174963][ T6013] and is ignored by this kernel. Remove the mand [ 91.174963][ T6013] option from the mount to silence this warning. [ 91.174963][ T6013] ======================================================= [ 91.177962][ T6013] overlay: Bad value for 'redirect_dir' [ 91.928227][ T6020] Invalid ELF header magic: != ELF [ 92.682624][ T31] audit: type=1800 audit(1786401669.375:2): pid=6028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.60" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 95.167535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.624854][ T6083] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 95.665312][ T6083] kvm: pic: level sensitive irq not supported [ 95.665710][ T6083] kvm: pic: non byte read [ 95.684122][ T6083] kvm: pic: level sensitive irq not supported [ 95.684706][ T6083] kvm: pic: non byte read [ 95.696607][ T6083] kvm: pic: level sensitive irq not supported [ 95.696698][ T6083] kvm: pic: non byte read [ 95.708353][ T6083] kvm: pic: level sensitive irq not supported [ 95.708454][ T6083] kvm: pic: non byte read [ 96.283521][ T6103] Invalid ELF header magic: != ELF [ 96.953470][ T6109] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0 [ 96.961351][ T6109] ucsi-stm32g0-i2c 0-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 97.164681][ T6109] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03 [ 98.424196][ T6153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.79'. [ 98.441946][ T6153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.79'. [ 100.000578][ T6163] syzkaller0: entered promiscuous mode [ 100.000623][ T6163] syzkaller0: entered allmulticast mode [ 100.290822][ T6169] Invalid ELF header magic: != ELF [ 103.064573][ T6219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.95'. [ 103.084177][ T6219] netlink: 60 bytes leftover after parsing attributes in process `syz.1.95'. [ 104.170646][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.101'. [ 104.180731][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 104.375952][ T6245] syzkaller0: entered promiscuous mode [ 104.375992][ T6245] syzkaller0: entered allmulticast mode [ 104.616842][ T6251] Invalid ELF header magic: != ELF [ 105.248259][ T6255] veth0: entered promiscuous mode [ 105.290255][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 105.414204][ T6258] Invalid ELF header magic: != ELF [ 107.394610][ T6299] i2c i2c-0: Failed to register i2c client stm32g0-typec at 0x03 (-16) [ 107.940522][ T6310] veth0: left promiscuous mode [ 109.116085][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.116'. [ 109.448575][ T6347] syzkaller0: entered promiscuous mode [ 109.456881][ T6347] syzkaller0: entered allmulticast mode [ 109.542085][ T6351] LUN: removable file: (no medium) [ 109.737311][ T6358] Invalid ELF header magic: != ELF [ 110.500625][ T5819] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 111.296543][ T5819] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.392945][ T5819] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 111.404528][ T5819] usb 2-1: config 0 interface 0 has no altsetting 0 [ 111.420236][ T5819] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.431143][ T5819] usb 2-1: Product: syz [ 111.435736][ T5819] usb 2-1: Manufacturer: syz [ 111.441965][ T5819] usb 2-1: SerialNumber: syz [ 111.455155][ T5819] usb 2-1: config 0 descriptor?? [ 111.478616][ T5819] usb 2-1: selecting invalid altsetting 0 [ 111.534029][ T6374] veth0: entered promiscuous mode [ 111.606267][ T6376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'. [ 113.085188][ T5819] usb 2-1: USB disconnect, device number 2 [ 113.270309][ T6396] syzkaller0: entered promiscuous mode [ 113.276216][ T6396] syzkaller0: entered allmulticast mode [ 114.818116][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.140'. [ 114.840407][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 114.870357][ T6372] veth0: left promiscuous mode [ 115.125277][ T6439] netlink: 28 bytes leftover after parsing attributes in process `syz.1.142'. [ 115.509984][ T6451] syzkaller0: entered promiscuous mode [ 115.510014][ T6451] syzkaller0: entered allmulticast mode [ 115.926829][ T6462] veth0: entered promiscuous mode [ 117.063394][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.154'. [ 117.558017][ T4932] Bluetooth: hci2: command 0x0405 tx timeout [ 117.788884][ T6501] syzkaller0: entered promiscuous mode [ 117.794532][ T6501] syzkaller0: entered allmulticast mode [ 117.812060][ T6462] veth0: left promiscuous mode [ 118.037519][ T6519] i2c i2c-0: Failed to register i2c client stm32g0-typec at 0x03 (-16) [ 118.163080][ T6523] syzkaller0: entered promiscuous mode [ 118.163116][ T6523] syzkaller0: entered allmulticast mode [ 118.223051][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 118.282003][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 118.571866][ T6544] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 120.279211][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 120.525985][ T6578] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 121.125219][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 121.135604][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 121.246042][ T6603] syzkaller0: entered promiscuous mode [ 121.246091][ T6603] syzkaller0: entered allmulticast mode [ 121.374816][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 121.966202][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 123.035367][ T6614] netlink: 136 bytes leftover after parsing attributes in process `syz.4.197'. [ 123.656688][ T6640] syzkaller0: entered promiscuous mode [ 123.656733][ T6640] syzkaller0: entered allmulticast mode [ 123.757407][ T6644] netlink: 36 bytes leftover after parsing attributes in process `syz.1.210'. [ 123.960050][ T6650] overlayfs: failed to resolve './file2': -2 [ 124.295566][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 124.304715][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 124.601945][ T6659] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 124.719193][ T6662] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 124.990492][ T6669] Invalid ELF header magic: != ELF [ 125.811963][ T6677] i2c i2c-0: new_device: Missing parameters [ 125.850305][ T6679] overlayfs: failed to resolve './file2': -2 [ 126.029949][ T6691] 9pnet_virtio: no channels available for device syz [ 126.132056][ T6696] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.227382][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 126.388892][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 126.483898][ T6702] Invalid ELF header magic: != ELF [ 127.027439][ T6703] Invalid ELF header magic: != ELF [ 127.524697][ T6708] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 127.587051][ T6708] cramfs: wrong magic [ 127.599794][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 127.599839][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.622480][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 127.622534][ T10] usb 4-1: can't read configurations, error -71 [ 127.696555][ T6706] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 127.793575][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.237'. [ 127.823849][ T6720] overlayfs: failed to resolve './file2': -2 [ 128.837503][ T6744] Invalid ELF header magic: != ELF [ 129.585134][ T6750] overlayfs: failed to resolve './file1': -2 [ 129.689657][ T6753] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 129.713658][ T6753] cramfs: wrong magic [ 130.807146][ T6762] warning: `syz.0.252' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.323692][ T6770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.254'. [ 132.409694][ T6764] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 132.409725][ T6764] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 132.428036][ T6764] vhci_hcd vhci_hcd.0: Device attached [ 132.580276][ T5964] ------------[ cut here ]------------ [ 132.580308][ T5964] !dev [ 132.580340][ T5964] WARNING: drivers/infiniband/core/restrack.c:138 at res_to_rt+0x1c4/0x230, CPU#0: kworker/u8:17/5964 [ 132.601356][ T5964] Modules linked in: [ 132.605660][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 132.615321][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.625527][ T5964] Workqueue: ib_addr process_one_req [ 132.631648][ T5964] RIP: 0010:res_to_rt+0x1c4/0x230 [ 132.636801][ T5964] Code: 41 5d 41 5e 41 5f c3 cc cc cc cc cc e8 35 fc f7 f8 48 8d 3d 8e e5 97 07 43 0f b6 44 25 00 84 c0 75 48 8b 33 67 48 0f b9 3a 90 <0f> 0b 90 31 c0 eb cc 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fe ff [ 132.657261][ T5964] RSP: 0018:ffffc900053a7850 EFLAGS: 00010293 [ 132.663363][ T5964] RAX: ffffffff88cf9a35 RBX: ffff88807d02e4f8 RCX: ffff88807fa1ddc0 [ 132.671860][ T5964] RDX: 0000000000000000 RSI: ffffffff8fd99bd0 RDI: 0000000000000003 [ 132.680010][ T5964] RBP: 0000000000000000 R08: ffff88807fa1ddc0 R09: 000000000000000a [ 132.688027][ T5964] R10: 0000000000000009 R11: 0000000000000000 R12: dffffc0000000000 [ 132.695986][ T5964] R13: 1ffff1100fa05c9f R14: 0000000000000000 R15: 0000000000000003 [ 132.704087][ T5964] FS: 0000000000000000(0000) GS:ffff888124f0d000(0000) knlGS:0000000000000000 [ 132.713108][ T5964] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 132.719748][ T5964] CR2: 000000110c3abe4a CR3: 0000000056d7e000 CR4: 00000000003526f0 [ 132.727777][ T5964] Call Trace: [ 132.731070][ T5964] [ 132.734021][ T5964] rdma_restrack_add+0x5a/0x8a0 [ 132.738971][ T5964] ? addr_handler+0x406/0x5a0 [ 132.743672][ T5964] addr_handler+0x41a/0x5a0 [ 132.749201][ T5964] ? __pfx_addr_handler+0x10/0x10 [ 132.754285][ T5964] ? __pfx_addr_handler+0x10/0x10 [ 132.759768][ T5964] process_one_req+0x2eb/0x540 [ 132.764527][ T5964] ? process_scheduled_works+0x97e/0x1630 [ 132.770266][ T5964] process_scheduled_works+0xc4e/0x1630 [ 132.775822][ T5964] ? __pfx_process_scheduled_works+0x10/0x10 [ 132.781828][ T5964] ? assign_work+0x3cf/0x5d0 [ 132.786417][ T5964] worker_thread+0xa47/0xfb0 [ 132.791145][ T5964] kthread+0x388/0x470 [ 132.795203][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 132.800378][ T5964] ? __pfx_kthread+0x10/0x10 [ 132.804968][ T5964] ret_from_fork+0x514/0xb70 [ 132.809587][ T5964] ? __pfx_ret_from_fork+0x10/0x10 [ 132.814702][ T5964] ? __switch_to+0xc89/0x1420 [ 132.819767][ T5964] ? __pfx_kthread+0x10/0x10 [ 132.824377][ T5964] ret_from_fork_asm+0x1a/0x30 [ 132.829443][ T5964] [ 132.832469][ T5964] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 132.839747][ T5964] CPU: 0 UID: 0 PID: 5964 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 132.849533][ T5964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.859589][ T5964] Workqueue: ib_addr process_one_req [ 132.864885][ T5964] Call Trace: [ 132.868159][ T5964] [ 132.871089][ T5964] vpanic+0x56c/0xa60 [ 132.875097][ T5964] ? __pfx__printk+0x10/0x10 [ 132.879705][ T5964] ? __pfx_vpanic+0x10/0x10 [ 132.884198][ T5964] ? is_bpf_text_address+0x292/0x2b0 [ 132.889480][ T5964] ? is_bpf_text_address+0x26/0x2b0 [ 132.894691][ T5964] panic+0xc5/0xd0 [ 132.898501][ T5964] ? __pfx_panic+0x10/0x10 [ 132.902926][ T5964] ? ret_from_fork_asm+0x1a/0x30 [ 132.907884][ T5964] __warn+0x315/0x4c0 [ 132.911859][ T5964] ? res_to_rt+0x1c4/0x230 [ 132.916263][ T5964] ? res_to_rt+0x1c4/0x230 [ 132.920659][ T5964] __report_bug+0x276/0x570 [ 132.925151][ T5964] ? trace_contention_end+0x3d/0x140 [ 132.930449][ T5964] ? res_to_rt+0x1c4/0x230 [ 132.934872][ T5964] ? __pfx___report_bug+0x10/0x10 [ 132.939902][ T5964] ? cma_acquire_dev_by_src_ip+0x733/0x8f0 [ 132.945724][ T5964] ? __mutex_unlock_slowpath+0x731/0x900 [ 132.951357][ T5964] ? res_to_rt+0x1c4/0x230 [ 132.955797][ T5964] report_bug+0x16a/0x220 [ 132.960137][ T5964] ? res_to_rt+0x1c4/0x230 [ 132.964537][ T5964] ? res_to_rt+0x1c6/0x230 [ 132.968954][ T5964] handle_bug+0x9c/0x200 [ 132.973181][ T5964] exc_invalid_op+0x1a/0x50 [ 132.977676][ T5964] asm_exc_invalid_op+0x1a/0x20 [ 132.982521][ T5964] RIP: 0010:res_to_rt+0x1c4/0x230 [ 132.987567][ T5964] Code: 41 5d 41 5e 41 5f c3 cc cc cc cc cc e8 35 fc f7 f8 48 8d 3d 8e e5 97 07 43 0f b6 44 25 00 84 c0 75 48 8b 33 67 48 0f b9 3a 90 <0f> 0b 90 31 c0 eb cc 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fe ff [ 133.007254][ T5964] RSP: 0018:ffffc900053a7850 EFLAGS: 00010293 [ 133.013313][ T5964] RAX: ffffffff88cf9a35 RBX: ffff88807d02e4f8 RCX: ffff88807fa1ddc0 [ 133.021283][ T5964] RDX: 0000000000000000 RSI: ffffffff8fd99bd0 RDI: 0000000000000003 [ 133.029243][ T5964] RBP: 0000000000000000 R08: ffff88807fa1ddc0 R09: 000000000000000a [ 133.037295][ T5964] R10: 0000000000000009 R11: 0000000000000000 R12: dffffc0000000000 [ 133.045288][ T5964] R13: 1ffff1100fa05c9f R14: 0000000000000000 R15: 0000000000000003 [ 133.053275][ T5964] ? res_to_rt+0x225/0x230 [ 133.057691][ T5964] rdma_restrack_add+0x5a/0x8a0 [ 133.062535][ T5964] ? addr_handler+0x406/0x5a0 [ 133.067212][ T5964] addr_handler+0x41a/0x5a0 [ 133.071718][ T5964] ? __pfx_addr_handler+0x10/0x10 [ 133.076747][ T5964] ? __pfx_addr_handler+0x10/0x10 [ 133.081762][ T5964] process_one_req+0x2eb/0x540 [ 133.086525][ T5964] ? process_scheduled_works+0x97e/0x1630 [ 133.092323][ T5964] process_scheduled_works+0xc4e/0x1630 [ 133.097875][ T5964] ? __pfx_process_scheduled_works+0x10/0x10 [ 133.103860][ T5964] ? assign_work+0x3cf/0x5d0 [ 133.108438][ T5964] worker_thread+0xa47/0xfb0 [ 133.113050][ T5964] kthread+0x388/0x470 [ 133.117130][ T5964] ? __pfx_worker_thread+0x10/0x10 [ 133.122223][ T5964] ? __pfx_kthread+0x10/0x10 [ 133.126796][ T5964] ret_from_fork+0x514/0xb70 [ 133.131376][ T5964] ? __pfx_ret_from_fork+0x10/0x10 [ 133.136473][ T5964] ? __switch_to+0xc89/0x1420 [ 133.141137][ T5964] ? __pfx_kthread+0x10/0x10 [ 133.145738][ T5964] ret_from_fork_asm+0x1a/0x30 [ 133.150546][ T5964] [ 133.153811][ T5964] Kernel Offset: disabled [ 133.158131][ T5964] Rebooting in 86400 seconds..