last executing test programs: 9.827757019s ago: executing program 4 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc00000000000000"], 0x64}}, 0x4841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) 9.488038611s ago: executing program 4 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) 9.286038475s ago: executing program 2 (id=216): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, &(0x7f0000000580)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x9e, &(0x7f0000000140)}, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="43f1", 0x2) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, &(0x7f0000000040), &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xfffff, [{0xd, 0x1}, {0x8, 0x2}, {0xfffffffd, 0x1}]}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000001f00)=""/4096, 0x45, 0x1000, 0x1}, 0x28) 8.478564851s ago: executing program 4 (id=219): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0x0, 0x0, 0x2, 0x0, 0x2}) 7.856012202s ago: executing program 4 (id=224): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f00000003c0)={r3, &(0x7f0000000280)='\x00', 0x100, &(0x7f00000002c0)={@_ha_fsid={[0x5]}, {0x6, 0x0, 0x8, 0x10000}}, 0x2, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x9}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x0, 0xffff, 0x8}}, 0x26) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) timerfd_create(0x0, 0x180000) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_DISCONNECT(r4, 0xab08) 7.091940037s ago: executing program 3 (id=226): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 7.015438135s ago: executing program 2 (id=227): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000002d40)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2, 0x0, 0x4}, 0x2, 0xb1f1, &(0x7f0000000040)={{0x0, 0x5, 0x402}}, 0x0, 0x0}}) r2 = syz_io_uring_setup(0x7a3f, &(0x7f0000000880)={0x0, 0x2730, 0x800, 0x2, 0x15e}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000240)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r2}) io_uring_enter(r2, 0x1, 0x2, 0x1, 0x0, 0x0) 6.875887736s ago: executing program 1 (id=228): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f00000001c0)=0x4, 0x4) 6.210921092s ago: executing program 4 (id=229): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800004}, 0x94) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0x53, 0x8, 0x0, 0x0}}, 0x10) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 6.048667966s ago: executing program 3 (id=232): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c00", @ANYRES32, @ANYBLOB], 0x50) add_key(&(0x7f0000000000)='ceph\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f00000005c0)="1c00"/13, 0xd, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x1, &(0x7f0000001080)=[0xee01]) keyctl$chown(0x4, r4, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) 5.956810466s ago: executing program 1 (id=233): ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)=@fd={0x0, 0x3, 0x4, 0x8, 0xfffffffa, {0x77359400}, {0x2, 0x1, 0x2, 0x3, 0x7, 0x8, "935d8439"}, 0x1, 0x4, {}, 0x5}) 5.855997343s ago: executing program 0 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@empty, @remote, @val={@val, {0x6558, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c3, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e) 5.712597096s ago: executing program 1 (id=235): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) fchdir(0xffffffffffffffff) r3 = fsopen(&(0x7f0000002200)='ubifs\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 4.980494304s ago: executing program 3 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000080), 0x8) ioctl$sock_ifreq(r1, 0x8990, 0x0) write(r0, &(0x7f0000000340)='1t', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='0', 0x1) 4.918024128s ago: executing program 2 (id=237): munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x3b, 0x0, &(0x7f0000000580)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000040000000a"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x9e, &(0x7f0000000140)}, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001480)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) write$ppp(0xffffffffffffffff, &(0x7f00000000c0)="43f1", 0x2) ioctl$PPPIOCGUNIT(0xffffffffffffffff, 0x80047456, &(0x7f0000000080)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, &(0x7f0000000040), &(0x7f0000000140)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000000c0), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@func_proto={0x0, 0x3, 0x0, 0xd, 0xfffff, [{0xd, 0x1}, {0x8, 0x2}, {0xfffffffd, 0x1}]}]}, {0x0, [0x61, 0x5f, 0x2e, 0x30, 0x61, 0x0, 0x0]}}, &(0x7f0000001f00)=""/4096, 0x45, 0x1000, 0x1}, 0x28) 4.232090147s ago: executing program 0 (id=238): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) userfaultfd(0x80001) r4 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r4, 0x7c65, 0xa334, 0x1, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000100)=0x80) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 4.188268129s ago: executing program 1 (id=239): setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_OPEN_BY_HANDLE(r3, 0xc038586b, &(0x7f00000003c0)={r3, &(0x7f0000000280)='\x00', 0x100, &(0x7f00000002c0)={@_ha_fsid={[0x5]}, {0x6, 0x0, 0x8, 0x10000}}, 0x2, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x9}) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @remote}, 0x0, 0xffff, 0x8}}, 0x26) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) timerfd_create(0x0, 0x180000) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20600) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, 0xffffffffffffffff) ioctl$NBD_DISCONNECT(r4, 0xab08) 4.162415405s ago: executing program 3 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x20, r3, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}}, 0x2000c094) 3.870017284s ago: executing program 3 (id=241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711812000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x4) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r3, 0x1e, 0x0, @void}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r5 = getpid() ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xf}}, './file0\x00'}) ioctl$BINDER_GET_FROZEN_INFO(r6, 0xc00c620f, &(0x7f0000000100)={r5}) sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x1) bpf$LINK_DETACH(0x22, &(0x7f00000001c0)=r4, 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 3.155521166s ago: executing program 0 (id=242): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) 3.147329858s ago: executing program 4 (id=243): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x69}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000bc0)={r0, 0xffff0000, 0x8, 0x0, &(0x7f00000002c0)="aa42b0aa6c8d1e83", 0x0, 0x1, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.06514899s ago: executing program 0 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f00000004c0)="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", 0x131) 2.972773085s ago: executing program 1 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000"], 0x64}}, 0x4841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4800) 2.85487848s ago: executing program 0 (id=246): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000140)={[{@uni_xlate}, {@shortname_win95}, {@rodir}, {}, {@utf8}, {@rodir}, {@numtail}, {@fat=@nfs_stale_rw}, {@fat=@showexec}, {@shortname_mixed}, {@fat=@check_strict}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@fat=@gid}, {@utf8}, {@shortname_mixed}]}, 0x7, 0x2a6, &(0x7f0000000240)="$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") socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x90, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x4000840) 2.853308352s ago: executing program 3 (id=247): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x48) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) stat(&(0x7f0000000500)='./file0/file1\x00', 0x0) openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000140)={0x14b5c3, 0x131, 0x2}, 0x18) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1) read(r0, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=':', 0x1}], 0x1}}], 0x1, 0x11) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0x44, 0x9fbb, 0x8}, 0x20) r3 = fcntl$dupfd(r0, 0x0, r0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000200)=ANY=[], 0x2f) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x2}, @increfs_done={0x40106308, 0x3}, @register_looper], 0x77, 0x0, &(0x7f00000002c0)="c0cef243063080e748561227661168c79d266d99e94b7e7181f24e30b18bcc4f856dba258359af5828e733c370ae041adb866d2d4671afd3ea76e27b1bfaa670e1bd43ad4d6550021a3fba565c24d408e0ff18b27aea312b61d6a8bd8902a99ea3542086d2229cde853cdaf94cb7432d427e910f2bed38"}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0xfffffffc, 0xfffffffc, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdc, 0x0, 0x5, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c804}, 0x10008010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4000010) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0x2}, 0xf) openat$tun(0xffffffffffffff9c, 0x0, 0x26001, 0x0) 2.774086795s ago: executing program 1 (id=248): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$pptp(0x18, 0x1, 0x2) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r7 = getpid() rt_tgsigqueueinfo(r7, 0x0, 0x1b, &(0x7f0000000280)={0xc, 0x0, 0x4}) 2.407606488s ago: executing program 2 (id=249): prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000080), 0x0) fchdir(0xffffffffffffffff) r3 = fsopen(&(0x7f0000002200)='ubifs\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 268.717364ms ago: executing program 0 (id=250): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) r6 = dup(r4) inotify_rm_watch(r6, r5) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(r6, 0x0, 0x20, &(0x7f0000000240)={@loopback, @multicast2}, 0x50) syz_emit_ethernet(0xd6, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffff0180c20000030800422100c8006500000811907864010100ac1414bb831f0664010100000000006401010100000000640101017f0000010a0101014441e2ac35d31644009733640101007fffffff440cbe00000000070000009e00004e244e21008090786200000100000000d8d1af53af925fe03adbce03e43e9ad1bf008d58e7fb0b37801b54d222bb019b78508923cb93f2ff7969b8141642a9f8d0d62e48efdad99017e341ead5030ff7fa999ef46bcd19a08fc1b8a7e84b94da381741d2e1fe785e728a5ce49b5751cb875c1bb68c878ffefe47"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r9 = socket(0x10, 0x2, 0x0) write(r9, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYRES8], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 262.481693ms ago: executing program 2 (id=251): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) 0s ago: executing program 2 (id=252): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) dup(0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) userfaultfd(0x80001) r4 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x55}, &(0x7f0000000100), &(0x7f0000000000), 0x0) io_uring_enter(r4, 0x7c65, 0xa334, 0x1, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000100)=0x80) shutdown(r3, 0x1) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 77.412124][ T5607] cgroup: Unknown subsys name 'net' [ 77.528239][ T5607] cgroup: Unknown subsys name 'cpuset' [ 77.536561][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.060436][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.963811][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.964433][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.983870][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.991368][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.000557][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.015246][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.017719][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.019249][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.021390][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.023112][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.027119][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.032049][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.039628][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.052064][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.078859][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.097162][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.104415][ T4936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.111900][ T4936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.120573][ T4936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.128486][ T4936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.148346][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.157442][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.158771][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.160967][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.163012][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.952629][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.952796][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.958496][ T5618] bridge_slave_0: entered allmulticast mode [ 84.963055][ T5618] bridge_slave_0: entered promiscuous mode [ 85.010318][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.010718][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.011186][ T5618] bridge_slave_1: entered allmulticast mode [ 85.017447][ T5618] bridge_slave_1: entered promiscuous mode [ 85.063149][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.063410][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.063778][ T5623] bridge_slave_0: entered allmulticast mode [ 85.069441][ T5623] bridge_slave_0: entered promiscuous mode [ 85.096003][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.096556][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.097431][ T5632] bridge_slave_0: entered allmulticast mode [ 85.101689][ T5632] bridge_slave_0: entered promiscuous mode [ 85.125349][ T5626] Bluetooth: hci1: command tx timeout [ 85.125697][ T4936] Bluetooth: hci2: command tx timeout [ 85.137282][ T52] Bluetooth: hci0: command tx timeout [ 85.158370][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.168542][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.168638][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.169041][ T5623] bridge_slave_1: entered allmulticast mode [ 85.178790][ T5623] bridge_slave_1: entered promiscuous mode [ 85.205833][ T4936] Bluetooth: hci4: command tx timeout [ 85.206324][ T52] Bluetooth: hci3: command tx timeout [ 85.228167][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.228260][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.231138][ T5632] bridge_slave_1: entered allmulticast mode [ 85.239158][ T5632] bridge_slave_1: entered promiscuous mode [ 85.273133][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.273280][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.273437][ T5627] bridge_slave_0: entered allmulticast mode [ 85.277662][ T5627] bridge_slave_0: entered promiscuous mode [ 85.296236][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.324385][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.325599][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.327519][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.327795][ T5627] bridge_slave_1: entered allmulticast mode [ 85.333507][ T5627] bridge_slave_1: entered promiscuous mode [ 85.382571][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.398772][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.418382][ T5618] team0: Port device team_slave_0 added [ 85.427323][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.471003][ T5618] team0: Port device team_slave_1 added [ 85.519517][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.538062][ T5623] team0: Port device team_slave_0 added [ 85.553994][ T5632] team0: Port device team_slave_0 added [ 85.560739][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.578445][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.578568][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.578640][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.589770][ T5623] team0: Port device team_slave_1 added [ 85.590306][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.590584][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.593163][ T5619] bridge_slave_0: entered allmulticast mode [ 85.598634][ T5619] bridge_slave_0: entered promiscuous mode [ 85.611804][ T5632] team0: Port device team_slave_1 added [ 85.668279][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.668445][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.668532][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.707773][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.708176][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.708490][ T5619] bridge_slave_1: entered allmulticast mode [ 85.716617][ T5619] bridge_slave_1: entered promiscuous mode [ 85.755272][ T5627] team0: Port device team_slave_0 added [ 85.789006][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.789947][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.790021][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.798959][ T5627] team0: Port device team_slave_1 added [ 85.807359][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.807399][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.807463][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.864181][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.870384][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.870426][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.870510][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.923416][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.923463][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.923539][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.984491][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.009100][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.009146][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.009170][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.040836][ T5618] hsr_slave_0: entered promiscuous mode [ 86.043029][ T5618] hsr_slave_1: entered promiscuous mode [ 86.089790][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.089837][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.089866][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.158182][ T5619] team0: Port device team_slave_0 added [ 86.178554][ T5623] hsr_slave_0: entered promiscuous mode [ 86.181309][ T5623] hsr_slave_1: entered promiscuous mode [ 86.183025][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 86.183231][ T5623] Cannot create hsr debugfs directory [ 86.210688][ T5619] team0: Port device team_slave_1 added [ 86.241651][ T5632] hsr_slave_0: entered promiscuous mode [ 86.245825][ T5632] hsr_slave_1: entered promiscuous mode [ 86.250515][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 86.250570][ T5632] Cannot create hsr debugfs directory [ 86.326458][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.326498][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.326540][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.378539][ T5627] hsr_slave_0: entered promiscuous mode [ 86.382089][ T5627] hsr_slave_1: entered promiscuous mode [ 86.383782][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 86.383828][ T5627] Cannot create hsr debugfs directory [ 86.407952][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.408069][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.408151][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.651833][ T5619] hsr_slave_0: entered promiscuous mode [ 86.654457][ T5619] hsr_slave_1: entered promiscuous mode [ 86.663147][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 86.663202][ T5619] Cannot create hsr debugfs directory [ 87.083343][ T5623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.095111][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.100600][ T5623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.113196][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.126706][ T5623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.136500][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.138861][ T5623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.152671][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.205075][ T4936] Bluetooth: hci0: command tx timeout [ 87.205125][ T4936] Bluetooth: hci2: command tx timeout [ 87.205480][ T52] Bluetooth: hci1: command tx timeout [ 87.240175][ T5632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.251954][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.259414][ T5632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.269222][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.277879][ T5632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.284909][ T52] Bluetooth: hci3: command tx timeout [ 87.284919][ T5626] Bluetooth: hci4: command tx timeout [ 87.298558][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.300481][ T5632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.314288][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.410113][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.420223][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.433586][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.446517][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.461080][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.471134][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.476214][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.488372][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.574162][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.598655][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.609083][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.623503][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.633378][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.656091][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.665792][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.677868][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.686329][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.696745][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.728199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.728475][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.761056][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.761281][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.829648][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.833404][ T5619] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.845618][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.864531][ T5619] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.874066][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.887343][ T5619] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.897485][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.902753][ T5619] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.915937][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.954466][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.977432][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.977811][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.030659][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.030777][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.110668][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.213773][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.225869][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.267467][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.267704][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.308312][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.320383][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.321625][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.389613][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.400212][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.400446][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.444682][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.444859][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.538096][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.573303][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.573426][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.624793][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.624914][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.897751][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.285162][ T5626] Bluetooth: hci1: command tx timeout [ 89.285214][ T5626] Bluetooth: hci2: command tx timeout [ 89.285250][ T5626] Bluetooth: hci0: command tx timeout [ 89.365416][ T52] Bluetooth: hci3: command tx timeout [ 89.365473][ T52] Bluetooth: hci4: command tx timeout [ 89.418630][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.610009][ T5632] veth0_vlan: entered promiscuous mode [ 89.652865][ T5632] veth1_vlan: entered promiscuous mode [ 89.772656][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.799166][ T5623] veth0_vlan: entered promiscuous mode [ 89.829599][ T5632] veth0_macvtap: entered promiscuous mode [ 89.838013][ T5623] veth1_vlan: entered promiscuous mode [ 89.864392][ T5632] veth1_macvtap: entered promiscuous mode [ 89.892954][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.951570][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.987811][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.009520][ T5627] veth0_vlan: entered promiscuous mode [ 90.030576][ T5623] veth0_macvtap: entered promiscuous mode [ 90.046360][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.057479][ T5623] veth1_macvtap: entered promiscuous mode [ 90.071585][ T5627] veth1_vlan: entered promiscuous mode [ 90.134548][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.146232][ T5618] veth0_vlan: entered promiscuous mode [ 90.155075][ T1369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.195027][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.213604][ T5618] veth1_vlan: entered promiscuous mode [ 90.246679][ T5619] veth0_vlan: entered promiscuous mode [ 90.275668][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.282862][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.282906][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.326611][ T5619] veth1_vlan: entered promiscuous mode [ 90.344493][ T5627] veth0_macvtap: entered promiscuous mode [ 90.374982][ T1369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.393602][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.393636][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.422636][ T5627] veth1_macvtap: entered promiscuous mode [ 90.474210][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.474261][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.488543][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.525900][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.557733][ T5618] veth0_macvtap: entered promiscuous mode [ 90.575918][ T5632] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.591831][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.591868][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.607857][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.630204][ T5619] veth0_macvtap: entered promiscuous mode [ 90.639416][ T5618] veth1_macvtap: entered promiscuous mode [ 90.656893][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.656964][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.657051][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.657159][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.712572][ T5619] veth1_macvtap: entered promiscuous mode [ 90.827693][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.861211][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.877012][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.920268][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.936041][ T5815] loop2: detected capacity change from 0 to 2048 [ 90.956408][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.961219][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.961256][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.961737][ T1001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997321][ T1024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.076787][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077620][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077687][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077725][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077762][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077800][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077837][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077873][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.077910][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.365086][ T5626] Bluetooth: hci0: command tx timeout [ 91.365138][ T5626] Bluetooth: hci2: command tx timeout [ 91.365187][ T5626] Bluetooth: hci1: command tx timeout [ 91.475252][ T52] Bluetooth: hci4: command tx timeout [ 91.476047][ T52] Bluetooth: hci3: command tx timeout [ 91.669220][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.681313][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.914478][ T25] cfg80211: failed to load regulatory.db [ 91.945761][ T5825] loop4: detected capacity change from 0 to 512 [ 92.145150][ T5825] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.145262][ T5825] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.148871][ T5830] loop2: detected capacity change from 0 to 256 [ 92.187318][ T5830] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 92.288194][ T1024] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 92.330237][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.362590][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.362637][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.563919][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.564251][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.701482][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.701519][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.864082][ T1024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.864121][ T1024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.890488][ T5841] loop1: detected capacity change from 0 to 2048 [ 93.104844][ T5626] Bluetooth: hci4: Malformed LE Event: 0x0b [ 93.838558][ T5861] syz.1.18 uses obsolete (PF_INET,SOCK_PACKET) [ 94.303002][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 95.318938][ T52] Bluetooth: hci2: Malformed LE Event: 0x0b [ 95.423520][ T5895] loop3: detected capacity change from 0 to 2048 [ 96.876433][ T5919] Bluetooth: MGMT ver 1.23 [ 98.061030][ T5945] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.920880][ T5626] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 98.921877][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 100.224369][ T5973] loop1: detected capacity change from 0 to 512 [ 100.337429][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.337622][ T5973] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.782818][ T5627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.023145][ T5999] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.59' sets config #0 [ 101.305835][ T6004] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0021 with DS=0x7 [ 101.358771][ T6005] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.59' sets config #1 [ 101.384100][ T5626] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 101.390681][ T5626] Bluetooth: hci2: command 0x0401 tx timeout [ 102.270618][ T6011] UBIFS error (pid: 6011): cannot open "c:::", error -22 [ 102.283860][ T6015] gadgetfs: bound to dummy_udc driver [ 102.791630][ T6024] syz_tun: entered allmulticast mode [ 103.344245][ T6017] syz_tun: left allmulticast mode [ 105.349067][ T6043] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.74' sets config #0 [ 105.685473][ T6048] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.74' sets config #1 [ 109.235436][ T5726] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.242003][ T6071] syz_tun: entered allmulticast mode [ 109.242728][ T6071] syz_tun: left allmulticast mode [ 109.600294][ T6096] syz_tun: entered allmulticast mode [ 109.669640][ T6099] netlink: 'syz.1.92': attribute type 39 has an invalid length. [ 109.692141][ T5726] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 109.715758][ T5726] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.742780][ T5726] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 109.773975][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.782293][ T5726] usb 3-1: Product: syz [ 109.787175][ T5726] usb 3-1: Manufacturer: syz [ 110.045568][ T5726] usb 3-1: SerialNumber: syz [ 110.413768][ T6088] syz_tun: left allmulticast mode [ 110.735328][ T5726] usb 3-1: can't set config #1, error -71 [ 110.738504][ T5726] usb 3-1: USB disconnect, device number 2 [ 110.865935][ T6110] 9p: Bad value for 'rfdno' [ 111.368498][ T6121] loop3: detected capacity change from 0 to 256 [ 111.391623][ T6121] vfat: Deprecated parameter 'posix' [ 111.402141][ T6121] FAT-fs: "posix" option is obsolete, not supported now [ 111.897265][ T6129] process 'syz.3.97' launched './file2' with NULL argv: empty string added [ 113.095559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.505236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.914879][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 115.630163][ T6165] binder: BINDER_SET_CONTEXT_MGR already set [ 115.630197][ T6165] binder: 6164:6165 ioctl 4018620d 200000004a80 returned -16 [ 115.654895][ T6165] binder: 6164:6165 ioctl c0306201 200000000900 returned -22 [ 116.038064][ T5626] Bluetooth: hci2: command 0x0401 tx timeout [ 116.038234][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 116.938636][ T6181] loop4: detected capacity change from 0 to 512 [ 117.026806][ T6181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.046608][ T6181] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.767001][ T5623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.048239][ T6218] binder: BINDER_SET_CONTEXT_MGR already set [ 119.048274][ T6218] binder: 6216:6218 ioctl 4018620d 200000004a80 returned -16 [ 119.214298][ T6223] netlink: 20 bytes leftover after parsing attributes in process `syz.1.125'. [ 119.261150][ T6218] binder: 6216:6218 ioctl c0306201 200000000900 returned -22 [ 120.908835][ T6231] file system registered [ 123.807902][ T6261] syz_tun: entered allmulticast mode [ 123.963023][ T6235] syz_tun: left allmulticast mode [ 124.500188][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.139'. [ 124.500229][ T6267] netlink: 101 bytes leftover after parsing attributes in process `syz.3.139'. [ 126.434322][ T6302] netlink: 108 bytes leftover after parsing attributes in process `syz.1.149'. [ 128.922141][ T6335] netlink: 108 bytes leftover after parsing attributes in process `syz.3.163'. [ 131.532238][ T6376] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5632] was attempted by "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[6376] [ 132.405064][ T5626] Bluetooth: hci2: command 0x0401 tx timeout [ 132.411633][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 132.888897][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.888983][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.508987][ T6397] ======================================================= [ 133.508987][ T6397] WARNING: The mand mount option has been deprecated and [ 133.508987][ T6397] and is ignored by this kernel. Remove the mand [ 133.508987][ T6397] option from the mount to silence this warning. [ 133.508987][ T6397] ======================================================= [ 135.464741][ T5626] Bluetooth: hci2: command 0x0401 tx timeout [ 135.494782][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 136.175215][ T6428] nbd: must specify an index to disconnect [ 137.390783][ T6448] fuse: Bad value for 'fd' [ 137.970324][ T6460] zram0: detected capacity change from 0 to 8 [ 139.610384][ T6477] hub 5-0:1.0: USB hub found [ 139.611108][ T6477] hub 5-0:1.0: 1 port detected [ 140.074455][ T6485] block nbd3: NBD_DISCONNECT [ 140.686452][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 143.021585][ T6526] block nbd4: NBD_DISCONNECT [ 143.096302][ T52] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 144.699459][ T6565] hub 5-0:1.0: USB hub found [ 144.701314][ T6565] hub 5-0:1.0: 1 port detected [ 145.376118][ T6570] zram: Cannot change disksize for initialized device [ 145.377081][ T6570] zram: Cannot change disksize for initialized device [ 146.377124][ T52] Bluetooth: hci3: link tx timeout [ 146.377271][ T52] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.979755][ T6584] block nbd1: NBD_DISCONNECT [ 147.390488][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.245'. [ 148.614968][ T5626] Bluetooth: hci3: command 0x0405 tx timeout [ 150.367079][ T6604] ------------[ cut here ]------------ [ 150.367110][ T6604] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 150.367150][ T6604] WARNING: kernel/rcu/srcutree.c:707 at cleanup_srcu_struct+0x3d6/0x8b0, CPU#0: syz.1.248/6604 [ 150.398562][ T6604] Modules linked in: [ 150.402545][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(full) [ 150.411805][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.422858][ T6604] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 150.428850][ T6604] Code: 63 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 150.448567][ T6604] RSP: 0018:ffffc9000d53fcf0 EFLAGS: 00010206 [ 150.454822][ T6604] RAX: 1ffffd1ffff812ad RBX: 0000607edaf0d480 RCX: dffffc0000000000 [ 150.462825][ T6604] RDX: 0000000000000001 RSI: ffffffff8e45c43e RDI: 00000000ffffffff [ 150.473371][ T6604] RBP: ffffe8ffffc09480 R08: ffffffff9079847f R09: 1ffffffff20f308f [ 150.481439][ T6604] R10: dffffc0000000000 R11: fffffbfff20f3090 R12: ffff888025ccb000 [ 150.489683][ T6604] R13: 0000000000000000 R14: ffffe8ffffc09568 R15: 1ffffffff1ce5dde [ 150.497741][ T6604] FS: 00007f8d263c16c0(0000) GS:ffff888124cfc000(0000) knlGS:0000000000000000 [ 150.506718][ T6604] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.513329][ T6604] CR2: 000055e8e53f15c8 CR3: 0000000078c48000 CR4: 00000000003526f0 [ 150.521365][ T6604] Call Trace: [ 150.524710][ T6604] [ 150.527690][ T6604] blk_mq_free_tag_set+0x617/0x780 [ 150.532843][ T6604] loop_remove+0x4e/0xc0 [ 150.537174][ T6604] loop_control_ioctl+0x4a6/0x5a0 [ 150.542258][ T6604] ? __pfx_loop_control_ioctl+0x10/0x10 [ 150.547871][ T6604] ? __fget_files+0x2a/0x420 [ 150.552490][ T6604] ? bpf_lsm_file_ioctl+0x9/0x20 [ 150.557581][ T6604] ? __pfx_loop_control_ioctl+0x10/0x10 [ 150.563161][ T6604] __se_sys_ioctl+0xfc/0x170 [ 150.567831][ T6604] do_syscall_64+0x166/0x520 [ 150.572464][ T6604] ? trace_irq_disable+0x3b/0x140 [ 150.579728][ T6604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.585898][ T6604] ? clear_bhb_loop+0x70/0xc0 [ 150.590622][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.596588][ T6604] RIP: 0033:0x7f8d2559e0d9 [ 150.601063][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.620843][ T6604] RSP: 002b:00007f8d263c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.629317][ T6604] RAX: ffffffffffffffda RBX: 00007f8d25826180 RCX: 00007f8d2559e0d9 [ 150.637350][ T6604] RDX: 0000000000000006 RSI: 0000000000004c81 RDI: 0000000000000008 [ 150.645927][ T6604] RBP: 00007f8d25635024 R08: 0000000000000000 R09: 0000000000000000 [ 150.653938][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.662090][ T6604] R13: 00007f8d25826218 R14: 00007f8d25826180 R15: 00007fff37bfafa8 [ 150.670136][ T6604] [ 150.673194][ T6604] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 150.680510][ T6604] CPU: 0 UID: 0 PID: 6604 Comm: syz.1.248 Not tainted syzkaller #0 PREEMPT(full) [ 150.689892][ T6604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.699984][ T6604] Call Trace: [ 150.703276][ T6604] [ 150.706222][ T6604] vpanic+0x56d/0xa60 [ 150.710237][ T6604] ? __pfx__printk+0x10/0x10 [ 150.714842][ T6604] ? __pfx_vpanic+0x10/0x10 [ 150.719364][ T6604] ? is_bpf_text_address+0x292/0x2b0 [ 150.724676][ T6604] ? is_bpf_text_address+0x26/0x2b0 [ 150.729908][ T6604] panic+0xc5/0xd0 [ 150.733650][ T6604] ? __pfx_panic+0x10/0x10 [ 150.738100][ T6604] __warn+0x315/0x4c0 [ 150.742119][ T6604] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 150.747432][ T6604] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 150.752739][ T6604] __report_bug+0x276/0x570 [ 150.757281][ T6604] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 150.762598][ T6604] ? __pfx___report_bug+0x10/0x10 [ 150.768086][ T6604] ? do_raw_spin_lock+0x12b/0x2f0 [ 150.773132][ T6604] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 150.778579][ T6604] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 150.783900][ T6604] report_bug+0x16b/0x220 [ 150.788256][ T6604] ? cleanup_srcu_struct+0x3d6/0x8b0 [ 150.793570][ T6604] ? cleanup_srcu_struct+0x3d8/0x8b0 [ 150.798903][ T6604] handle_bug+0x9c/0x200 [ 150.803162][ T6604] exc_invalid_op+0x1a/0x50 [ 150.807705][ T6604] asm_exc_invalid_op+0x1a/0x20 [ 150.812610][ T6604] RIP: 0010:cleanup_srcu_struct+0x3d6/0x8b0 [ 150.818519][ T6604] Code: 63 8a 00 48 83 7d 00 00 4c 8b 74 24 10 0f 85 dd 03 00 00 41 ff c5 41 83 e5 0f 41 83 fd 07 0f 86 e2 fe ff ff e9 ab 00 00 00 90 <0f> 0b 90 4c 8d b5 00 02 00 00 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 [ 150.838151][ T6604] RSP: 0018:ffffc9000d53fcf0 EFLAGS: 00010206 [ 150.844231][ T6604] RAX: 1ffffd1ffff812ad RBX: 0000607edaf0d480 RCX: dffffc0000000000 [ 150.852214][ T6604] RDX: 0000000000000001 RSI: ffffffff8e45c43e RDI: 00000000ffffffff [ 150.860193][ T6604] RBP: ffffe8ffffc09480 R08: ffffffff9079847f R09: 1ffffffff20f308f [ 150.868172][ T6604] R10: dffffc0000000000 R11: fffffbfff20f3090 R12: ffff888025ccb000 [ 150.876152][ T6604] R13: 0000000000000000 R14: ffffe8ffffc09568 R15: 1ffffffff1ce5dde [ 150.884158][ T6604] blk_mq_free_tag_set+0x617/0x780 [ 150.889299][ T6604] loop_remove+0x4e/0xc0 [ 150.893558][ T6604] loop_control_ioctl+0x4a6/0x5a0 [ 150.898617][ T6604] ? __pfx_loop_control_ioctl+0x10/0x10 [ 150.904176][ T6604] ? __fget_files+0x2a/0x420 [ 150.908777][ T6604] ? bpf_lsm_file_ioctl+0x9/0x20 [ 150.913732][ T6604] ? __pfx_loop_control_ioctl+0x10/0x10 [ 150.919298][ T6604] __se_sys_ioctl+0xfc/0x170 [ 150.923910][ T6604] do_syscall_64+0x166/0x520 [ 150.928536][ T6604] ? trace_irq_disable+0x3b/0x140 [ 150.933593][ T6604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.939673][ T6604] ? clear_bhb_loop+0x70/0xc0 [ 150.944362][ T6604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.950267][ T6604] RIP: 0033:0x7f8d2559e0d9 [ 150.954691][ T6604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.974309][ T6604] RSP: 002b:00007f8d263c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.982742][ T6604] RAX: ffffffffffffffda RBX: 00007f8d25826180 RCX: 00007f8d2559e0d9 [ 150.990732][ T6604] RDX: 0000000000000006 RSI: 0000000000004c81 RDI: 0000000000000008 [ 150.998713][ T6604] RBP: 00007f8d25635024 R08: 0000000000000000 R09: 0000000000000000 [ 151.006692][ T6604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.014676][ T6604] R13: 00007f8d25826218 R14: 00007f8d25826180 R15: 00007fff37bfafa8 [ 151.022681][ T6604] [ 151.026292][ T6604] Kernel Offset: disabled [ 151.030620][ T6604] Rebooting in 86400 seconds..