last executing test programs: 11.569154795s ago: executing program 1 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x4, 0x3, 0x4, 0x0, 0x5, 0x8, 0x5, 0x802}}}}]}, 0x58}}, 0x4008000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8922, 0x0) 9.755742048s ago: executing program 1 (id=95): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept$unix(r2, &(0x7f0000000000)=@abs, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) userfaultfd(0x80801) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000280)) 8.179316801s ago: executing program 1 (id=101): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40043, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) getpid() ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffe, 0x16ef03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x0, [{@rand_addr=0x64010101, 0x4}, {@local, 0x8}, {@private=0xa010102, 0x8}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 6.672133562s ago: executing program 1 (id=104): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x6, 0x7ff}, &(0x7f0000000380)=0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.411548322s ago: executing program 2 (id=108): syz_mount_image$exfat(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x1528, &(0x7f0000000340)="$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") openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001880), 0x400201, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f000001ad80)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.251591069s ago: executing program 1 (id=109): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept$unix(r2, &(0x7f0000000000)=@abs, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) userfaultfd(0x80801) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000000280)) 5.079658786s ago: executing program 0 (id=110): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5.039591277s ago: executing program 3 (id=111): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x10000024, 0x80, 0xa, 0x2, 0x8, 0x51, 0x4, 0x8001}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0a0018000300000d845d1fe622df0447d4b472e200e9b0a388846dadc21364498fa7cf54c0a4846f9c5450e1cec8a7ba110432b3ac6f0008e85a4410c5521c86d44aa1d7517fe998863a29fe29446c4916b007f6dbfd3ffd85217a52305c2f0a8696288fb6e321fbd7df6677245a5ecec1ed7c20430479f6ae8e3948d0b20254e07dd9967c7fdfd29044c956e44d438e799c5ac4a85656418aea895fe8b8db0d893f6dcab70faf0092575119ace48fe4b4e3205f1b532181c2aac0f4c87133667d3bf3d0420f8738108e6024f95fdb38165a1662147441cddb6ad3d97ed400e4b900"], 0x28}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 4.843528915s ago: executing program 2 (id=112): socket(0x2a, 0x2, 0x3) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r7, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.761742099s ago: executing program 0 (id=113): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40043, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) getpid() ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffe, 0x16ef03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x0, [{@rand_addr=0x64010101, 0x4}, {@local, 0x8}, {@private=0xa010102, 0x8}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 3.411309383s ago: executing program 1 (id=114): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r0, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='name', &(0x7f0000000000)='c!\xf1\xa7\x9d', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000003c0)='name', &(0x7f0000000400)='})\x00', 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) waitid(0x0, r4, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r4, 0x0, 0x4, 0x0) 3.410434843s ago: executing program 2 (id=115): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x7fd, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x6, 0x7ff}, &(0x7f0000000380)=0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.199380872s ago: executing program 3 (id=116): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1b, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108010027875397bab22d0000b420a9c81f40f05f819201177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r5, &(0x7f00000002c0), 0x0, 0x6, 0x9) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) 3.145795854s ago: executing program 0 (id=117): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'multiq3\x00', [0x9df, 0x2566, 0xfffffffe, 0x100000, 0x15d, 0x0, 0x5, 0x10, 0x1002, 0xffffffff, 0x101, 0x20005, 0x344, 0x1ff, 0x4, 0x0, 0x4, 0x4, 0x9, 0xa, 0x100, 0x1005, 0x7, 0xa, 0x2, 0xffffffff, 0xb0c4, 0x7df, 0x8, 0x400007, 0xffffffff]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xf0b, 0xffffffffffffffff, 'id0\x00'}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) 2.053416008s ago: executing program 3 (id=118): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x6, 0x7ff}, &(0x7f0000000380)=0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.838102756s ago: executing program 0 (id=119): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0xff0f) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x6, 0x7ff}, &(0x7f0000000380)=0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.795157938s ago: executing program 2 (id=120): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x7fd, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x10, 0x6, 0x7ff}, &(0x7f0000000380)=0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.490215411s ago: executing program 3 (id=121): syz_mount_image$exfat(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x1528, &(0x7f0000000340)="$eJzs3AucTlXbMPDrWmvtMSTuJIdhX+va3GmwSJIcEnJIkiRJckpIkiQJySmnJCQh55DDEJJTTBrn8/mYNHkkSRISkqzvp3pez/P1Pl+93/O8r95nrv/vt2fWNfu+1n3t+5q5997rNzNfdxparUH1yvWYGf4p+MunngCQCAADACA7AAQAUCpHqRyX92fWquc/9yTiX+uhlKtdgbiapP8Zm/Q/Y5P+Z2zS/4xN+p+xSf8zNul/xib9FyIj2zYz73WyZdztj6//2//37j+0/o+y/v+nIuf/f1t/6CdN+p+xSf//faRk/6/nSP8zNul/xib9z9ik/xmb9D9jk/4LkZH9Zk04Ea76mvSfbPvrS3W16/idLfj/yru6331CCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIITKK8/4KAwB/HV/tuoQQQgghhBBCCPGv4zNd7QqEEEIIIYQQQgjx3w8BjAYDASRAJkiEzJAFroGscC1kg+wQg+sgB1wPOeEGyAW5IQ/khSTIB/khBAILDBEUgIIQhxuhENwEyVAYikBRcFAMisPNUAJugZJwK5SCeUsAbocyUBbKQXm4AyrAnVARKkFluAuqQFWoBtXhbqgB90BNuBdqwX1QG+6HOvAA1IUHoR48BPXhYWgAj0BDeBQaQWNoAk2h2R/JT7h8nH+b/yJ0g5egO/SAntALesPL0Af6Qj/oDwPgFRgIr8IgeA0GwxAYCq/DMHgDhsObMAJGwih4C0bDGBgL42A8TICJ8DZMgskwBd6BqTANpsMMSIGZMAvehdkwB+bCezAP3of5sAAWwiJYDB/AElgKqfAhLIOPIA2WwwpYCatgNayBtbAO1sMG2AibYDNsga2wDbbDDtgJu2A37IG9lfbBx7AfPoED8Cmkw2f/xfxz8Pf5nREQUKFCgwYTMAETMRGzYBbMilkxG2bDGMYwB+bAnJgTc2EuzIN5MAmTMD/mR0JCRsYCWADjGMdCWAiTMRmLYBF06LA4FscSeAuWxJJYCkthaSyNZbAslsXyWB4rYAWsiBWx8u0LALAKVsNqeDfejfdgTayJtbAW1sbaWAfrYF2si/WwHtbH+tgAG2BDbIiNsBE2wSbYDJthc2yOLbAFtsJW2BpbYxtsg22xLbbDdtge22MH7IAdsSN2wk7YGbtgF3wRX8SX8CXsgVVUL+yNvbEP9sF+2B/74ys4EF/FV/E1HIxDcCi+jq/jGzgcz+IIHImjcBRWUGNwLI5DVhNwIk7ESTgJp+AUnIrTcBrOwBScibNwFs7GOTgH38N5+D6+jwtwAS7CxbgYl+BSTMVUXIbnMA2X4wpciatwNa7CtbgO1+IG3IgbcDNuxq24FbfjdtyJO3E37sa9uBc/xo/xE/wEB2M6puNBPIiH8BAexsN4BI/gUTy6/RoAPI7H8QSewJN4Ck/jKTyDZ/AsnsPzeB4v4AW8iM8nfVl/b+H1g0FdZpRRCSpBJapElUVlUVlVVpVNZVMxFVM5VA6VU+VUuVQulUflUUkqSeVX+RUpUqwiVUAVUHEVV4VUIZWsklURVUQ55VRxVVyVUCVUSVVSlVK3qdLqdlVGlVUtXXlVXlVQrVxFVUlVVpVVFVVVVVPVVXVVQ9VQNVVNVUvVUrVVbVVHPaDqql7YDx9SlzvTQA3BhmooNlKNVRPVVL2Bj6nmaji2UC1VK/WEGokjsI1q7tqqp1U7NRbbq2fVOHxOdVQTsJN6QXVWXVRX9aLqplq47qqHmoq9VG81A/uovqqf6q9mY1V1uWPV1GtqsBqihqrX1SJ8Qw1Xb6oRaqQapd5So9UYNVaNU+PVBDVRva0mqclqinpHTVXT1HQ1Q6WomWqWelfNVnPUXPWemqfeV/PVArVQLVKL1QdqiVqqUtWHapn6SKWp5WqFWqlWqdVqjVqr1qn1aoPaqDapzWqL2qq2qe1qh9qpdqndao/aq/apj9V+9Yk6oD5V6eozdVD9RR1Sn6vD6gt1RH2pjqqv1DH1tTquvlEnVA91Up1Sp9V36oz6Xp1V59R59YO6oH5UF9VP6pLyCjRqpbU2OtAJOpNO1Jl1Fn2Nzqqv1dl0dh3T1+kc+nqdU9+gc+ncOo/Oq5N0Pp1fh5q01awjXUAX1HF9oy6kb9LJurAuootqp4vp4vpmXULfokvqW3UpfZsurW/XZXRZXU6X13foCvpOXVFX0pX1XbqKrqqr6er6bl1D36Nr6nt1LX2frq3v13X0A7quflDX0w/p+vph3UA/ohvqR3Uj3Vg30U11M/2Ybq4f1y10S91KP6Fb6yd1G/2Ubquf1u30M7q9flZ30M/pjvp53Um/oDvrLrqr/klf0l531z10T91L99Yv6z66r+6n++sB+hU9UL+qB+nX9GA9RA/Vr+th+g09XL+pR+iRepR+S4/WY/RYPU6P1xP0RP22nqQn6yn6HT1VT9PT9Qydomfqfr/ONPcP5E/+T/IH/fzsW/U2vV3v0Dv1Lr1b79F79T69T+/X+/UBfUCn63R9UB/Uh/QhfVgf1kf0EX1UH9XH9DF9XB/XJ/QJfVKf0j/o7/QZ/b0+q8/pc/oHfUFf0Bd/fQ3AoFFGG2MCk2AymUST2WQx15is5lqTzWQ3MXOdyWGuNznNDSaXyW3ymLwmyeQz+U1oyFjDJjIFTEETNzeaQuYmk2wKmyKmqHGmmClubv6n8/9BfSun/3LxYpqZZqa5aW5amBamlWllWpvWpo1pY9qatqadaWfam/amg+lgOpqOppPpZDqbzqar6Wq6mW6mO4LpaXqa3uZl08f0Nf1MfzPAvGIGmoFmkBlkBpvBZqgZaoaZYWa4GW5GmBHGAMBoM9qMNWPNeDPeTDQTzSQzyUwxU8xUM9VMN9NNikkxs8wsM9vMNnPNXDPPzDPzzXyz0Cw0i81is8QsMakm1Swzy0yaWW6Wm5VmpVltVpu1Zq1Zb9abjWaj2Ww2mzSzzWwzO8wOs8vsMnvMHrPP7DP7zX5zwBww6SbdHDQHzSFzyBw2h80Rc8QcNUfNMXPMHDfHzQlzwpw0J81pc9qcMWfMWXPWnDfnzQVzwVw0F80lc+nyZV+gAhWYwAQJQUKQGCQGWYIsQdYga5AtyBbEgliQI8gR5AxuCHIFuYM8Qd4gKcgX5A/CgAIbcBAFBYKCQTy4MSgU3BQkB4WDIkHRwAXFguLBzUGJ4JagZHBrUCq4LSgd3B6UCcoG5YLywR1BheDOoGJQKagc3BVUCaoG1YLqwd1BjeCeoGZwb1AruC+oHdwf1AkeCOoGDwb1goeC+sHDQYPgkaBh8GjQKGgcNAmaBs3+pfN7fzb346572CPMBL3C3uHLYZ+wb9gv7B8OCF8JB4avhoPC18LB4ZBwaPh6OCx8IxwevhmOCEeGo8K3wtHhmHBsOC4cH04IJ4Zvh5PCyeGU8J1wajgtnB7OCFPCmeGs8N1wdjgnnBu+F84L3w/nhwvCheGicHH4QbgkXBqmhh+Gy8KPwrRwebgiXBmuCleHa8K14bpwfbgh3BhuCjeHW8Kt4bZwe7gj3BnuCneHe8K94b7w43B/+El4IPw0TA8/Cw+Gib9e338RHgm/DI+GX4XHwq/D4+E34Ynw2/BkeCo8HX4Xngm/D8+G58Lz4Q/hhfDH8GL4U3gp9Jcv7i+f3smQoQRKoERKpCyUhbJSVspG2ShGMcpBOSgn5aRclIvyUB5KoiTKT/npMiamAlSA4hSnQlSIkimZilARcuSoOBWnElSCSlJJKkWlqDSVpjJUhspRObqD7qA76U6qRJXoLrqLqlJVqk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlEjakJNqBk1o+bUnFpQC2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqDN1pq7UlbpRN+pO3akn9aTe1Jv6UB/qR/1oAA2ggTSQBtEgGkyDaSgNpWE0jIbTcBpBI2kUvUWjaQyNpXE0nibQRJpIk2gSTaEpNJWm0nSaTimUQrNoFs2m2TSX5tI8mkfzaT4tpIW0mBbTElpCqZRKy2gZpVEaraAVtIpW0RpaQ+toHW2gDbSJNtEW2kLbaBvtoB20i3bRHtpD+2gf7af9dIAOUDql00E6SIfoEB2mw3SEjtBROkrH6Bgdp+N0gk7QSTpJp+k0naEzdJbO0nk6TxfoR7pIP9El8pRoM9ss9hqb1V5rs9ns9v+O89i8Nsnms/ltaHPZ3H8Xk7U22Ra2RWxR62wxW9ze/Ju4jC1ry9ny9g5bwd5pK/4mrrFu1y+/iG7vs9Xt3baGvcfWtPfaWvY+W9veb+vYR2xd+6itZxvb+rapbWAfsQ3to7aRbWyb2Ka2tX3StrFP2bb2advOPvObeIldatfZ9XaD3Wj320/sefuDPWa/thfsj7a77WEH2FfsQPuqHWRfs4PtkN/Eo+xbdrQdY8facXa8nfCbeLqdYVPsTDvLvmtn2zm/iRfbD+w8m2rn2wV2oV30c3y5plT7oV1mP7JpdrldYVfaVXa1XWPX/ketK+1mu8Vutfvsx5dPRXaX3W332L2X45+P44D91Kbbz+xR+5U9ZD+3h+1xe8R++XN8+fiO22/sCfutPWlPZQL7nT1jv7dn7bmfj//ysX9nf7KXrLfAyIo1Gw44gTNxImfmLHwNZ+VrORtn5xhfxzn4es7JN3Auzs15OC8ncT7OzyETW2aOuAAX5DjfyIX4Jk7mwlyEi7LjYlycb+YSfAuX5Fu5FN/Gpfl2LsNluRyX5zu4At/JFbkSV+a7uApX5Wpcne/mGnwP1+R7uRbfx7X5fq7DD3BdfpDr8UNcnx/mBvwIN+RHuRE35ibclJvxY9ycH+cW3JJb8RPcmp/kNvwUt+WnuR0/w+35We7Az3FHfp478QvcmbtwV36Ru/FL3J17cE/uxb35Ze7Dfbkf9+cB/AoPTPj1LZWH8FB+nYfxGzyc3+QRPJJH8Vs8msfwWB7H43kCT+S3eRJP5in8Dk/laTydZ3AKz+RZ/C7P5jk8l9/jefw+z+cFvJAX8WL+gJfwUk7lD3kZf8RpvJxX8Epexat5Da/ldbyeN/BG3sSbeQtv5W28nXfwTkbezXt4L+/jj3k/f8IH+FNO58/4IP+FD/HnfJi/4CP8JR/lr/gYf83H+Rs+wd/yST7Fp/k7PsPf81k+x+f5B77AP/JF/okvsWeIMFKRjkwURAlRpigxyhxlia6JskbXRtmi7FEsui7KEV0f5YxuiHJFuaM8Ud4oKcoX5Y/CiCIbcRRFBaKCUTy6MSoU3RQlR4WjIlHRyEXFouLRzVGJ6JaoZHRrVCq6LSod3R6VicpGj9xXProjqhDdGVWMKkWVo7uiKlHVqFpUPbo7qhHdE9WM7o1qRfdFJaP7ozrRA1Hd6MGoXvRQVD96OGoQPRI1jB6NGkWNoyZR06hZ9FjUPHo8ahG1jFpFT0StoyejNtFTUdvo6ahd9Mzv7u8Z9Yp6Ry9HL0fe36sXxhfFF8c/iC+JL42nxj+ML4t/FE+LL4+viK+Mr4qvjq+Jr42vi6+Pb4hvjG+Kb45viW+Ne189Ezh0ymlnXOASXCaX6DK7LO4al9Vd67K57C7mrnM53PUup7vB5XK5XR6X1yW5fC6/Cx0569hFroAr6OLuRlfI3eSSXWFXxBV1zhVzxV1T18w1c83d466Fa+lauSfcE+5J96R7yj3lnnbt3DOuvXvWdXDPuY7uefe8e8F1dl1cV/ei6+Zect1dD9fT9XS9XW/Xx/Vx/Vw/N8ANcAPdQDfIDXKD3WA31A11w9wwN9wNdyPcCDfKjXKj3Wg31o114914N9FNdJPcJDfFTXFT3VQ33U13KS7FzXKz3Gw32811c9285HluvpvvFrqFbrFb7Ja4JS7VpbplbplLc2luhVvhVrlVbo1b49a5dW6D2+A2uU1ui9vitrltbofb4Xa5XW6P2+P2uX1uv9vvDrgDLt2lu4Pu4HnvDrnD7gt3xH3pjrqv3DH3tTvuvnEn3LfupDvlTrvv3Bn3vTvrzrnz7gd3wf3oLrqf3CXn3cTY27FJscmxKbF3YlNj02LTYzNiKbGZsVmxd2OzY3Nic2PvxebF3o/Njy2ILYwtii2OfRBbElsaS419GFsW+yiWFlseWxFbGVsVWx3zPt+OyBfwBX3c3+gL+Zt8si/si/ii3vlivri/2Zfwt/iS/lZfyt/mS/vbfRlf1pfzj/pGvrFv4pv6Zv4x39w/7lv4lr6Vf8K39k/6Nv4p39Y/7dv5Z3x7/6zv4J/zHf3zvpN/wXf2XXxX/6Lv5l/y3b32PX0v39u/7Pv4vr6f7+8H+Ff8QP+qH+Rf84P9ED/Uv+6H+Tf8cP+mH+FH+lH+LT/aj/Fj/Tg/3k/wE/3bfpKf7Kf4d/xUP81P9zN8ip/pZ/l3/Ww/x8/17/l5/n0/3y/wC/0iv9h/4Jf4pT7Vf+iX+Y98ml/uV/iVHhJX+zV+rV/n1/sNfqPf5Df7LX6r3+a3+x1+p9/ld/s9fq/f5z/2+/0n/oD/1Kf7z/xB/xd/yH/uD/sv/BH/pT/qv/LH/Nf+uP/Gn/Df+pP+lD/tv/Nn/Pf+rD/nz/sf/AX/o7/of/KX/sjfrAX/bYvoQgghhBD/a0z+nf29/i5S//FR/fqV3gBw7c68R/72URoANuX6ZdxXJbWOAcDTPTo99NetSpWePXv++tg0DUHBBQAQu5L/8232r/FyaAVPQltoCSX+0/r6qi4X+Hfmj98GkOVvchLhSnxl/lv+wfxj5v3u/AsAkgteyckMV+Ir85f8zdzBz/Pnbv4782f+fCJAi7/JywpX4ivzF4fH4Rlo+3ePFEIIIYQQQgghftFXlevwe/e3l+/Pk8yVnExwJf69+3MhhBBCCCGEEEJcfc916frUY23btuzwDwaV/vEuGWSUQcKfo4z/9QOAP0UZf2xwtd+ZhBBCCCGEEP9qVy76r3YlQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFExvU/8e/ErvYxCiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEFfb/wkAAP//d8EsIQ==") openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001880), 0x400201, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f000001ad80)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.356662106s ago: executing program 0 (id=122): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept$unix(r2, &(0x7f0000000000)=@abs, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) userfaultfd(0x80801) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0x80044dfe, &(0x7f0000000280)) 1.336898777s ago: executing program 2 (id=123): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r1, 0xae9a) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.045493709s ago: executing program 2 (id=124): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x10000024, 0x80, 0xa, 0x2, 0x8, 0x51, 0x4, 0x8001}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050003000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="0a0018000300000d845d1fe622df0447d4b472e200e9b0a388846dadc21364498fa7cf54c0a4846f9c5450e1cec8a7ba110432b3ac6f0008e85a4410c5521c86d44aa1d7517fe998863a29fe29446c4916b007f6dbfd3ffd85217a52305c2f0a8696288fb6e321fbd7df6677245a5ecec1ed7c20430479f6ae8e3948d0b20254e07dd9967c7fdfd29044c956e44d438e799c5ac4a85656418aea895fe8b8db0d893f6dcab70faf0092575119ace48fe4b4e3205f1b532181c2aac0f4c87133667d3bf3d0420f8738108e6024f95fdb38165a1662147441cddb6ad3d97ed400e4b900"], 0x28}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 918.697354ms ago: executing program 3 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40043, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) read$msr(r1, &(0x7f0000004340)=""/102376, 0x18fe8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) getpid() ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34524742, 0x0, 0x7, [{}, {0xfffffff7}, {}, {}, {}, {0x0, 0x4}, {0x2000000}, {0xc28f}], 0x2}}) syz_open_dev$sndctrl(&(0x7f0000000040), 0xfffffffffffffffe, 0x16ef03) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000200)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, @loopback, @local, {[@timestamp_prespec={0x44, 0x1c, 0xd9, 0x3, 0x0, [{@rand_addr=0x64010101, 0x4}, {@local, 0x8}, {@private=0xa010102, 0x8}]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 310.191458ms ago: executing program 0 (id=126): socket(0x2a, 0x2, 0x3) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r7, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x80, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 0s ago: executing program 3 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1b, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108010027875397bab22d0000b420a9c81f40f05f819201177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r5, &(0x7f00000002c0), 0x0, 0x6, 0x9) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 72.446746][ T5774] cgroup: Unknown subsys name 'net' [ 72.637309][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.285612][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.928735][ T5787] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.940346][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.949009][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.957101][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.979460][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.008919][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.010919][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.017629][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.040633][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.041521][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.055917][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.060301][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.063307][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.073373][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.078339][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.085231][ T5800] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.094694][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.099774][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.106166][ T5798] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.112595][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.120007][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.139762][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.155934][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.163589][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.636154][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 76.657546][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 76.766148][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 76.883967][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.891666][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.899729][ T5783] bridge_slave_0: entered allmulticast mode [ 76.906599][ T5783] bridge_slave_0: entered promiscuous mode [ 76.914506][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 76.936064][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.944102][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.951419][ T5786] bridge_slave_0: entered allmulticast mode [ 76.958204][ T5786] bridge_slave_0: entered promiscuous mode [ 76.966057][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.973309][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.980632][ T5786] bridge_slave_1: entered allmulticast mode [ 76.987677][ T5786] bridge_slave_1: entered promiscuous mode [ 76.995789][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.003578][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.011211][ T5783] bridge_slave_1: entered allmulticast mode [ 77.018030][ T5783] bridge_slave_1: entered promiscuous mode [ 77.074960][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.118634][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.135631][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.148225][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.226258][ T5783] team0: Port device team_slave_0 added [ 77.268499][ T5783] team0: Port device team_slave_1 added [ 77.275663][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.283314][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.291395][ T5784] bridge_slave_0: entered allmulticast mode [ 77.298190][ T5784] bridge_slave_0: entered promiscuous mode [ 77.308299][ T5786] team0: Port device team_slave_0 added [ 77.317503][ T5786] team0: Port device team_slave_1 added [ 77.324942][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.332497][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.339909][ T5789] bridge_slave_0: entered allmulticast mode [ 77.346782][ T5789] bridge_slave_0: entered promiscuous mode [ 77.377716][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.385345][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.393091][ T5784] bridge_slave_1: entered allmulticast mode [ 77.400070][ T5784] bridge_slave_1: entered promiscuous mode [ 77.418211][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.425443][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.432816][ T5789] bridge_slave_1: entered allmulticast mode [ 77.440406][ T5789] bridge_slave_1: entered promiscuous mode [ 77.459616][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.466601][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.492677][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.506504][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.513716][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.540211][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.606893][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.614073][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.640613][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.654281][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.666829][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.694176][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.704201][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.711553][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.741322][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.785342][ T5783] hsr_slave_0: entered promiscuous mode [ 77.792025][ T5783] hsr_slave_1: entered promiscuous mode [ 77.803006][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.839475][ T5789] team0: Port device team_slave_0 added [ 77.882475][ T5789] team0: Port device team_slave_1 added [ 77.892059][ T5784] team0: Port device team_slave_0 added [ 77.927876][ T5786] hsr_slave_0: entered promiscuous mode [ 77.935579][ T5786] hsr_slave_1: entered promiscuous mode [ 77.941933][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.950845][ T5786] Cannot create hsr debugfs directory [ 77.957923][ T5784] team0: Port device team_slave_1 added [ 78.005733][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.013187][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.039300][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.052922][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.060672][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.087590][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.137587][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.144698][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.171260][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.187947][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.195421][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.222240][ T5798] Bluetooth: hci3: command tx timeout [ 78.222559][ T5102] Bluetooth: hci0: command tx timeout [ 78.228191][ T5798] Bluetooth: hci2: command tx timeout [ 78.233975][ T5102] Bluetooth: hci1: command tx timeout [ 78.239631][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.353015][ T5789] hsr_slave_0: entered promiscuous mode [ 78.359799][ T5789] hsr_slave_1: entered promiscuous mode [ 78.366057][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.373827][ T5789] Cannot create hsr debugfs directory [ 78.426917][ T5784] hsr_slave_0: entered promiscuous mode [ 78.433442][ T5784] hsr_slave_1: entered promiscuous mode [ 78.440335][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.447991][ T5784] Cannot create hsr debugfs directory [ 78.743314][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.757768][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.784730][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.796199][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.861247][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.880831][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.900673][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.912264][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.002450][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.013919][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.032035][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.043979][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.136715][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.161780][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.179878][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.204058][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.227337][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.275097][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.331319][ T1071] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.338700][ T1071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.352616][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.418056][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.425226][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.442573][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.457307][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.464516][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.501806][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.534048][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.541334][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.562935][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.634389][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.641673][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.661039][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.668234][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.705665][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.815471][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.853932][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.878228][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.885433][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.955200][ T1071] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.962416][ T1071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.027297][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.225281][ T5783] veth0_vlan: entered promiscuous mode [ 80.271966][ T5783] veth1_vlan: entered promiscuous mode [ 80.282824][ T5102] Bluetooth: hci1: command tx timeout [ 80.286855][ T5787] Bluetooth: hci3: command tx timeout [ 80.288318][ T5102] Bluetooth: hci0: command tx timeout [ 80.294949][ T5798] Bluetooth: hci2: command tx timeout [ 80.353874][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.383444][ T5783] veth0_macvtap: entered promiscuous mode [ 80.398395][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.415651][ T5783] veth1_macvtap: entered promiscuous mode [ 80.511215][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.563632][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.578220][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.591253][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.603111][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.612260][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.631453][ T5789] veth0_vlan: entered promiscuous mode [ 80.664850][ T5786] veth0_vlan: entered promiscuous mode [ 80.677985][ T5789] veth1_vlan: entered promiscuous mode [ 80.702866][ T5786] veth1_vlan: entered promiscuous mode [ 80.726227][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.851839][ T5789] veth0_macvtap: entered promiscuous mode [ 80.864605][ T5786] veth0_macvtap: entered promiscuous mode [ 80.877635][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.886993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.914093][ T5786] veth1_macvtap: entered promiscuous mode [ 80.927848][ T5789] veth1_macvtap: entered promiscuous mode [ 80.965606][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.978455][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.992226][ T5784] veth0_vlan: entered promiscuous mode [ 81.003288][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.015565][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.034506][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.054234][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.074204][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.086088][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.098343][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.111106][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.125901][ T5784] veth1_vlan: entered promiscuous mode [ 81.146988][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.168999][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.180963][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.232787][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.257348][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.267282][ T5877] syz.1.2[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 81.277650][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.287629][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.300602][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.315478][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.328082][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.339726][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.352664][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.383648][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.395006][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.405543][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.414553][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.537827][ T5784] veth0_macvtap: entered promiscuous mode [ 81.571584][ T5784] veth1_macvtap: entered promiscuous mode [ 81.651898][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.675627][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.686817][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.700820][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.715307][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.728157][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.738528][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.749312][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.761245][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.809996][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.828969][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.844405][ T5877] loop1: detected capacity change from 0 to 32768 [ 81.848815][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.877091][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.900124][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.928840][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.933448][ T5877] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 81.950707][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.975452][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.021266][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.060018][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.114753][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.139041][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.148074][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.189775][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.197695][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.227058][ T5877] XFS (loop1): Ending clean mount [ 82.316807][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.358993][ T5798] Bluetooth: hci0: command tx timeout [ 82.364483][ T5798] Bluetooth: hci2: command tx timeout [ 82.370078][ T5102] Bluetooth: hci3: command tx timeout [ 82.375523][ T5102] Bluetooth: hci1: command tx timeout [ 82.390732][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.715773][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.884474][ T5892] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 83.104999][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.542578][ T5901] loop0: detected capacity change from 0 to 2048 [ 83.594041][ T5901] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.462203][ T5102] Bluetooth: hci1: command tx timeout [ 84.468030][ T5787] Bluetooth: hci2: command tx timeout [ 84.473706][ T5787] Bluetooth: hci3: command tx timeout [ 84.475325][ T5798] Bluetooth: hci0: command tx timeout [ 84.488155][ T5893] syz.1.2 (5893) used greatest stack depth: 20712 bytes left [ 84.758916][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.767730][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.782388][ T5903] loop2: detected capacity change from 0 to 256 [ 84.825629][ T5783] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 84.833343][ T5903] exFAT-fs (loop2): bogus data start sector [ 84.878957][ T5903] exFAT-fs (loop2): failed to read boot sector [ 84.885192][ T5903] exFAT-fs (loop2): failed to recognize exfat type [ 84.969644][ T5905] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.917792][ T5921] Zero length message leads to an empty skb [ 86.125980][ T5910] loop3: detected capacity change from 0 to 32768 [ 86.256046][ T5910] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.308286][ T5912] loop2: detected capacity change from 0 to 32768 [ 86.327392][ T5919] capability: warning: `syz.0.9' uses deprecated v2 capabilities in a way that may be insecure [ 86.378732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 86.396842][ T5912] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 86.439211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.519971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.566378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 86.609455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.866936][ T5910] XFS (loop3): Ending clean mount [ 86.882496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 86.892497][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 86.901148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 86.909881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 86.923257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 86.954668][ T1190] cfg80211: failed to load regulatory.db [ 87.168918][ T5912] XFS (loop2): Ending clean mount [ 88.670295][ T5784] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 89.718005][ T5959] syz.2.7 (5959) used greatest stack depth: 20200 bytes left [ 89.942448][ T5789] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.249581][ T5969] loop1: detected capacity change from 0 to 256 [ 90.336431][ T5969] exFAT-fs (loop1): bogus data start sector [ 90.356670][ T5969] exFAT-fs (loop1): failed to read boot sector [ 90.366808][ T5969] exFAT-fs (loop1): failed to recognize exfat type [ 90.736392][ T5966] loop0: detected capacity change from 0 to 32768 [ 90.791835][ T5966] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 90.979875][ T5966] XFS (loop0): Ending clean mount [ 91.139014][ T5992] loop2: detected capacity change from 0 to 2048 [ 91.207914][ T5992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.248739][ T5971] loop3: detected capacity change from 0 to 32768 [ 92.718270][ T5971] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.279837][ T6001] syz.0.14 (6001) used greatest stack depth: 19912 bytes left [ 93.483678][ T5786] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.497260][ T5971] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop3": -EINTR [ 93.498016][ T5971] XFS (loop3): log mount failed [ 95.135206][ T6023] tipc: Started in network mode [ 95.140777][ T6023] tipc: Node identity 9a0f39c701, cluster identity 4711 [ 95.152849][ T6023] tipc: Enabled bearer , priority 0 [ 95.186307][ T6023] syzkaller0: entered promiscuous mode [ 95.214026][ T6023] syzkaller0: entered allmulticast mode [ 95.307394][ T6025] loop1: detected capacity change from 0 to 256 [ 95.342398][ T6025] exFAT-fs (loop1): bogus data start sector [ 95.348379][ T6025] exFAT-fs (loop1): failed to read boot sector [ 95.395791][ T6025] exFAT-fs (loop1): failed to recognize exfat type [ 95.462182][ T5796] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.560823][ T6034] loop3: detected capacity change from 0 to 2048 [ 95.588674][ T6034] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.160711][ T8] tipc: Node number set to 2601466311 [ 97.575469][ T6045] loop0: detected capacity change from 0 to 2048 [ 97.581238][ T6044] loop1: detected capacity change from 0 to 2048 [ 99.909388][ T6045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.934076][ T6044] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.985138][ T6023] tipc: Resetting bearer [ 100.448392][ T6054] loop3: detected capacity change from 0 to 2048 [ 100.492261][ T6023] tipc: Disabling bearer [ 100.524671][ T6054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.916233][ T6057] loop0: detected capacity change from 0 to 2048 [ 101.046400][ T6057] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.166774][ T6059] tipc: Started in network mode [ 101.179047][ T6059] tipc: Node identity aab42addf161, cluster identity 4711 [ 101.186410][ T6059] tipc: Enabled bearer , priority 0 [ 101.265731][ T6059] tipc: Resetting bearer [ 101.433766][ T6064] loop2: detected capacity change from 0 to 2048 [ 101.501523][ T6064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.310591][ T23] tipc: Node number set to 1540696797 [ 103.560617][ T6082] loop2: detected capacity change from 0 to 256 [ 103.629110][ T6082] exFAT-fs (loop2): bogus data start sector [ 103.659029][ T6082] exFAT-fs (loop2): failed to read boot sector [ 103.704165][ T6082] exFAT-fs (loop2): failed to recognize exfat type [ 103.980148][ T6059] tipc: Disabling bearer [ 104.604410][ T6107] loop2: detected capacity change from 0 to 512 [ 104.731501][ T6107] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.826160][ T6107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.815851][ T6107] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 105.863543][ T6107] EXT4-fs (loop2): 1 truncate cleaned up [ 105.877955][ T6107] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.031666][ T6150] loop0: detected capacity change from 0 to 64 [ 109.385963][ T6146] sched: RT throttling activated [ 110.037039][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.242027][ T6159] tipc: Enabled bearer , priority 0 [ 110.281606][ T6159] syzkaller0: entered promiscuous mode [ 110.289829][ T6159] syzkaller0: entered allmulticast mode [ 110.341076][ T6159] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 111.018596][ T6158] tipc: Resetting bearer [ 111.106106][ T6158] tipc: Disabling bearer [ 115.813854][ T6211] tipc: Enabled bearer , priority 0 [ 115.859086][ T6211] syzkaller0: entered promiscuous mode [ 115.876670][ T6211] syzkaller0: entered allmulticast mode [ 115.928949][ T6211] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.128284][ T6210] tipc: Resetting bearer [ 117.395367][ T6210] tipc: Disabling bearer [ 123.494952][ T6288] loop0: detected capacity change from 0 to 256 [ 123.543238][ T6288] exFAT-fs (loop0): bogus data start sector [ 123.568916][ T6288] exFAT-fs (loop0): failed to read boot sector [ 123.579151][ T6288] exFAT-fs (loop0): failed to recognize exfat type [ 125.483454][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 125.799936][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 125.816384][ T23] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 125.848955][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.900542][ T23] usb 1-1: config 0 has no interface number 0 [ 125.917711][ T23] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 125.956964][ T23] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 125.988935][ T23] usb 1-1: config 0 interface 8 has no altsetting 0 [ 126.001417][ T23] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 126.010799][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.011426][ T6318] tipc: Enabled bearer , priority 0 [ 126.029800][ T23] usb 1-1: Product: syz [ 126.035102][ T6318] syzkaller0: entered promiscuous mode [ 126.044773][ T23] usb 1-1: Manufacturer: syz [ 126.051079][ T6318] syzkaller0: entered allmulticast mode [ 126.056941][ T23] usb 1-1: SerialNumber: syz [ 126.075727][ T23] usb 1-1: config 0 descriptor?? [ 126.089531][ T6318] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 126.318629][ T6305] loop0: detected capacity change from 0 to 256 [ 126.382400][ T6305] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 127.080602][ T6317] tipc: Resetting bearer [ 127.104989][ T23] ath6kl: Failed to submit usb control message: -71 [ 127.122787][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 127.130213][ T23] ath6kl: Unable to send get target info: -71 [ 127.145936][ T23] ath6kl: Failed to init ath6kl core: -71 [ 127.162023][ T23] ath6kl_usb: probe of 1-1:0.8 failed with error -71 [ 127.184508][ T23] usb 1-1: USB disconnect, device number 2 [ 127.195888][ T6317] tipc: Disabling bearer [ 128.369326][ T6335] loop3: detected capacity change from 0 to 256 [ 128.509016][ T6335] exFAT-fs (loop3): bogus data start sector [ 128.549169][ T6335] exFAT-fs (loop3): failed to read boot sector [ 128.555538][ T6335] exFAT-fs (loop3): failed to recognize exfat type [ 132.185752][ T6404] loop2: detected capacity change from 0 to 256 [ 132.232830][ T6404] exFAT-fs (loop2): bogus data start sector [ 132.263889][ T6404] exFAT-fs (loop2): failed to read boot sector [ 132.284042][ T6404] exFAT-fs (loop2): failed to recognize exfat type [ 133.009630][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.016547][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.144968][ T6468] loop3: detected capacity change from 0 to 256 [ 136.223293][ T6468] exFAT-fs (loop3): bogus data start sector [ 136.251518][ T6468] exFAT-fs (loop3): failed to read boot sector [ 136.282270][ T6468] exFAT-fs (loop3): failed to recognize exfat type [ 138.116695][ C0] ------------[ cut here ]------------ [ 138.122738][ C0] WARNING: CPU: 0 PID: 6495 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 138.132845][ C0] Modules linked in: [ 138.136823][ C0] CPU: 0 PID: 6495 Comm: syz.0.126 Not tainted syzkaller #0 [ 138.144154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.154224][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 138.160588][ C0] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 138.180326][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 138.186415][ C0] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88802343bc00 [ 138.194411][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.202417][ C0] RBP: 0000000000000000 R08: ffff88802343bc00 R09: 0000000000000003 [ 138.210496][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c4423c0 [ 138.218478][ C0] R13: dffffc0000000000 R14: ffff88805c4428b0 R15: ffff88802fe90824 [ 138.226488][ C0] FS: 00007fa6bc5c06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 138.235537][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 138.242143][ C0] CR2: 0000001b2e322ff8 CR3: 000000007b1d5000 CR4: 00000000003506f0 [ 138.250134][ C0] Call Trace: [ 138.253429][ C0] [ 138.256272][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 138.261942][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 138.267409][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 138.274637][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 138.280243][ C0] __iterate_interfaces+0x243/0x500 [ 138.285597][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 138.291898][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 138.299129][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 138.305380][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 138.312461][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 138.317677][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 138.322926][ C0] ? hw_scan_work+0xf40/0xf40 [ 138.327727][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 138.332873][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 138.338972][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 138.344090][ C0] handle_softirqs+0x280/0x820 [ 138.348874][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 138.353824][ C0] ? do_softirq+0x180/0x180 [ 138.358322][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 138.363639][ C0] __irq_exit_rcu+0xc7/0x190 [ 138.368227][ C0] ? irq_exit_rcu+0x20/0x20 [ 138.372746][ C0] irq_exit_rcu+0x9/0x20 [ 138.377039][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 138.382703][ C0] [ 138.385721][ C0] [ 138.388648][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.394645][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 138.401281][ C0] Code: 74 05 e8 ca 51 14 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 42 ca e3 f6 65 8b 05 b3 18 8c 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 138.420948][ C0] RSP: 0018:ffffc9000fd8f560 EFLAGS: 00000206 [ 138.427023][ C0] RAX: 6629c4fdef30b200 RBX: 0000000000000a06 RCX: 6629c4fdef30b200 [ 138.435227][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba20 RDI: 0000000000000001 [ 138.443395][ C0] RBP: ffffc9000fd8f5f0 R08: ffffffff90da55af R09: 1ffffffff21b4ab5 [ 138.451560][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ab6 R12: dffffc0000000000 [ 138.459580][ C0] R13: 0000000000000000 R14: ffff8880762856c0 R15: 1ffff92001fb1eac [ 138.467566][ C0] ? _raw_spin_unlock+0x40/0x40 [ 138.472539][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 138.477597][ C0] __wake_up_sync_key+0x11f/0x190 [ 138.482667][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 138.488656][ C0] ? sock_load_diag_module+0x140/0x140 [ 138.494166][ C0] __unix_dgram_recvmsg+0x49c/0xd60 [ 138.499572][ C0] ? unix_unhash+0x10/0x10 [ 138.503997][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.510173][ C0] ? mark_lock+0x94/0x320 [ 138.514500][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 138.519635][ C0] ? unix_dgram_sendmsg+0x1720/0x1720 [ 138.525021][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 138.529983][ C0] ____sys_recvmsg+0x49b/0x5b0 [ 138.534780][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 138.539858][ C0] ? import_iovec+0x73/0xa0 [ 138.544376][ C0] ___sys_recvmsg+0x1b6/0x510 [ 138.549105][ C0] ? __sys_recvmsg+0x270/0x270 [ 138.553884][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 138.558943][ C0] ? __might_fault+0xc6/0x120 [ 138.563790][ C0] ? __might_fault+0xaa/0x120 [ 138.568462][ C0] do_recvmmsg+0x360/0x7d0 [ 138.572914][ C0] ? __sys_recvmmsg+0x280/0x280 [ 138.577770][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 138.583500][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 138.589253][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 138.594297][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 138.598994][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 138.604195][ C0] do_syscall_64+0x55/0xb0 [ 138.608603][ C0] ? clear_bhb_loop+0x40/0x90 [ 138.613292][ C0] ? clear_bhb_loop+0x40/0x90 [ 138.617961][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.623872][ C0] RIP: 0033:0x7fa6bb78ebe9 [ 138.628296][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.647942][ C0] RSP: 002b:00007fa6bc5c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 138.656462][ C0] RAX: ffffffffffffffda RBX: 00007fa6bb9c6090 RCX: 00007fa6bb78ebe9 [ 138.664813][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 138.672801][ C0] RBP: 00007fa6bb811e19 R08: 0000000000000000 R09: 0000000000000000 [ 138.680789][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 138.688795][ C0] R13: 00007fa6bb9c6128 R14: 00007fa6bb9c6090 R15: 00007ffe674a82a8 [ 138.696886][ C0] [ 138.699921][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.707296][ C0] CPU: 0 PID: 6495 Comm: syz.0.126 Not tainted syzkaller #0 [ 138.714590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.724640][ C0] Call Trace: [ 138.727916][ C0] [ 138.730755][ C0] dump_stack_lvl+0x16c/0x230 [ 138.735434][ C0] ? show_regs_print_info+0x20/0x20 [ 138.740645][ C0] ? load_image+0x3b0/0x3b0 [ 138.745146][ C0] panic+0x2c0/0x710 [ 138.749124][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 138.753659][ C0] __warn+0x2e0/0x470 [ 138.757650][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 138.763512][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 138.769302][ C0] report_bug+0x2be/0x4f0 [ 138.773873][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 138.779597][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 138.785427][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 138.791165][ C0] handle_bug+0xcf/0x120 [ 138.795440][ C0] exc_invalid_op+0x1a/0x50 [ 138.800164][ C0] asm_exc_invalid_op+0x1a/0x20 [ 138.805062][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 138.811924][ C0] Code: 24 4c 89 e7 e8 0e 88 d4 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 19 65 97 f7 0f 0b e9 f6 f7 ff ff e8 0d 65 97 f7 <0f> 0b e9 48 fb ff ff e8 01 65 97 f7 48 c7 c7 a0 09 24 8e 4c 89 e6 [ 138.831633][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 138.837714][ C0] RAX: ffffffff89ee2a93 RBX: ffffffff89ee1896 RCX: ffff88802343bc00 [ 138.845688][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 138.853743][ C0] RBP: 0000000000000000 R08: ffff88802343bc00 R09: 0000000000000003 [ 138.861729][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c4423c0 [ 138.869797][ C0] R13: dffffc0000000000 R14: ffff88805c4428b0 R15: ffff88802fe90824 [ 138.877795][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 138.883483][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 138.889217][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 138.894937][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 138.900489][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 138.906125][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 138.912894][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 138.918459][ C0] __iterate_interfaces+0x243/0x500 [ 138.923854][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 138.930100][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 138.937312][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 138.943738][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 138.951025][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 138.956220][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 138.961851][ C0] ? hw_scan_work+0xf40/0xf40 [ 138.966800][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 138.972080][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 138.978147][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 138.983445][ C0] handle_softirqs+0x280/0x820 [ 138.988206][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 138.993144][ C0] ? do_softirq+0x180/0x180 [ 138.997652][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 139.002852][ C0] __irq_exit_rcu+0xc7/0x190 [ 139.007438][ C0] ? irq_exit_rcu+0x20/0x20 [ 139.011964][ C0] irq_exit_rcu+0x9/0x20 [ 139.016198][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 139.021849][ C0] [ 139.024794][ C0] [ 139.027835][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.033824][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 139.040345][ C0] Code: 74 05 e8 ca 51 14 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 42 ca e3 f6 65 8b 05 b3 18 8c 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 139.060242][ C0] RSP: 0018:ffffc9000fd8f560 EFLAGS: 00000206 [ 139.066414][ C0] RAX: 6629c4fdef30b200 RBX: 0000000000000a06 RCX: 6629c4fdef30b200 [ 139.074388][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba20 RDI: 0000000000000001 [ 139.082472][ C0] RBP: ffffc9000fd8f5f0 R08: ffffffff90da55af R09: 1ffffffff21b4ab5 [ 139.090467][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ab6 R12: dffffc0000000000 [ 139.098539][ C0] R13: 0000000000000000 R14: ffff8880762856c0 R15: 1ffff92001fb1eac [ 139.106622][ C0] ? _raw_spin_unlock+0x40/0x40 [ 139.111483][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 139.116597][ C0] __wake_up_sync_key+0x11f/0x190 [ 139.121642][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 139.127812][ C0] ? sock_load_diag_module+0x140/0x140 [ 139.133278][ C0] __unix_dgram_recvmsg+0x49c/0xd60 [ 139.138519][ C0] ? unix_unhash+0x10/0x10 [ 139.142962][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.149143][ C0] ? mark_lock+0x94/0x320 [ 139.153674][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 139.158711][ C0] ? unix_dgram_sendmsg+0x1720/0x1720 [ 139.164123][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 139.169177][ C0] ____sys_recvmsg+0x49b/0x5b0 [ 139.173950][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 139.178984][ C0] ? import_iovec+0x73/0xa0 [ 139.183538][ C0] ___sys_recvmsg+0x1b6/0x510 [ 139.188229][ C0] ? __sys_recvmsg+0x270/0x270 [ 139.193151][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 139.198359][ C0] ? __might_fault+0xc6/0x120 [ 139.203052][ C0] ? __might_fault+0xaa/0x120 [ 139.207834][ C0] do_recvmmsg+0x360/0x7d0 [ 139.212455][ C0] ? __sys_recvmmsg+0x280/0x280 [ 139.217418][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 139.223254][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 139.228949][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 139.234006][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 139.238793][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 139.244042][ C0] do_syscall_64+0x55/0xb0 [ 139.248503][ C0] ? clear_bhb_loop+0x40/0x90 [ 139.253176][ C0] ? clear_bhb_loop+0x40/0x90 [ 139.257867][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.263763][ C0] RIP: 0033:0x7fa6bb78ebe9 [ 139.268178][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.287782][ C0] RSP: 002b:00007fa6bc5c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 139.296193][ C0] RAX: ffffffffffffffda RBX: 00007fa6bb9c6090 RCX: 00007fa6bb78ebe9 [ 139.304164][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000007 [ 139.312161][ C0] RBP: 00007fa6bb811e19 R08: 0000000000000000 R09: 0000000000000000 [ 139.320143][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 139.328131][ C0] R13: 00007fa6bb9c6128 R14: 00007fa6bb9c6090 R15: 00007ffe674a82a8 [ 139.336317][ C0] [ 139.339501][ C0] Kernel Offset: disabled [ 139.343862][ C0] Rebooting in 86400 seconds..