last executing test programs: 11.7623952s ago: executing program 4 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x0) 10.854000608s ago: executing program 1 (id=14): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x14, 0x1, 0x5, 0xf}, {0x24, 0x3, 0x7}, {0x6, 0x81, 0x5, 0x7ffffdbd}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) inotify_init() r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x10000, 0x0, 0x9, 0x9, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0xf, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000000100, 0x0, 0x80000}) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3, 0x1bf, &(0x7f0000000680)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x40000080) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x1) preadv2(r5, 0x0, 0x0, 0x1, 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 9.955823955s ago: executing program 1 (id=17): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000001480)={0xb73, 0xd, 0x5, "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"}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000002d00010026bd7000fcdbdf250400000008000c00", @ANYRES32=r1, @ANYBLOB="0c0016"], 0x28}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000680)={0x0, 0x11, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000e00)={0x34, &(0x7f0000000b00)={0x20, 0x7, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x0, 0x2, 0x1}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r6, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = dup(r7) r9 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_delroute={0x24, 0x19, 0x1, 0x70bd2d, 0x25dfdbf8, {0x2, 0x20, 0x14, 0x0, 0xff, 0x2, 0xfd, 0x0, 0x1a00}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) sendfile(r8, r9, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x49, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x13, 0x11, 0x0, @private1, @mcast2, {[], {0xfffc, 0xe22, 0x13, 0x0, @opaque="c4e349a5c7407bebfbb0bc"}}}}}}, 0x0) 8.150565759s ago: executing program 4 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x0) 8.09249363s ago: executing program 2 (id=22): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 7.790573773s ago: executing program 2 (id=23): openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x10, 0x42, 0x44}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r1}, 0x38) 7.183228625s ago: executing program 0 (id=24): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300)) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8, 0x6, 0x34325842, 0x4, 0x6bb, 0xffffffff, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(r1, 0xe, 0x0, &(0x7f00000000c0)) 7.160429314s ago: executing program 3 (id=25): syz_open_procfs(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x80000000001, 0x0, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = open(0x0, 0x108843, 0x98) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r3, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x14a600, 0x78e22799f4a46f8f) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0xff, 0x0, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r7, 0xc01064c2, &(0x7f0000000080)) 6.795825762s ago: executing program 2 (id=26): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20008800) 6.220990257s ago: executing program 0 (id=27): r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b3", 0x40}], 0x1}], 0x1, 0x40800) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfd}]}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028006001900880000000500010001000000"], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\/A\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) 5.726891737s ago: executing program 3 (id=28): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r1, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r7, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r8, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r8, 0x4, 0x4800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xfffffffd, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0, 0xffffffffffffff78}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.558251429s ago: executing program 1 (id=29): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaa28bbbbbbbbbbbb8100130008050008fb82f1ff80114502115efa2edffe20909cab2da7c0ba8cc356fcdb59c3048b9ae94577115ca453482522b4556c46525a96e82073a9b6b5f9dba7f68e0acd9b71d2615886c26b036bef2c5ce88ea55818abc9b8ce892033dfe821fa6263b648e2bd1fcc2e0f5a7088bd59ef54b91786f90f4626ddac800b260e2f6292f759b1c6d9"], &(0x7f00000000c0)={0x1, 0x1, [0xf74, 0x8bf, 0xe4b, 0xa20]}) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r6], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r3) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4.519683489s ago: executing program 2 (id=30): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r0, &(0x7f0000002280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r6, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000001c0)={0x2020}, 0x2020) sendmsg$SMC_PNETID_GET(r0, 0x0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0xffb) fcntl$setstatus(r7, 0x4, 0x4800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xfffffffd, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz0\x00', 0x0, 0xffffffffffffff78}) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.471657616s ago: executing program 4 (id=31): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000080)=""/161, 0x40d000}, 0x20) mkdir(&(0x7f0000000180)='./file0\x00', 0x81) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) close_range(r1, r2, 0x2) read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = fsmount(r3, 0x0, 0xc) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000080)={0x1d, r9, 0xfffffffffffffffe}, 0x18) sendmsg$can_j1939(r10, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r7}, 0x18, &(0x7f0000000180)={0x0}}, 0xee) 4.464878087s ago: executing program 0 (id=32): socket$alg(0x26, 0x5, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000280)={0x4, @win={{0x6123, 0x400009, 0x8, 0x5}, 0x8, 0x1, 0x0, 0x2, 0x0, 0x9}}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0xa, @pix_mp={0x0, 0x0, 0x31364d59, 0x0, 0x0, [{}, {0x0, 0x7f}]}}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.422816157s ago: executing program 3 (id=33): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 4.328304876s ago: executing program 3 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.519113223s ago: executing program 4 (id=35): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a01"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @loopback, @empty}, 0xc) 3.5055383s ago: executing program 3 (id=36): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) close(r3) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x32) sched_setattr(0x0, 0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f00000003c0)={0x7, @raw_data="0c5437bed847eec15191c0b05624fbe7871efd881b0976db41ff036c861567207380568f2eda6f25af8c7e186c0266e4f10bc97bb2e4d5428abddf7b8089b22c804b88b3203c471c8128c9aa7cc3d71195867dfbdcc36d715c94893dcf1f86d0842741092051ba71482bcaf7a7571905ed4eb860307226b575af7320e3ed63b08f6ac4c415fcb877491444e4b35dfff1a10f9a5c67484ba4a3afdeedc436eba67623daf4dbdd005d9db7a69e2bdcc4d5f34bb6803b800554edf9f81d739db7d187e933f7763681bb"}) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect(0x6, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000002200)=""/4079, 0xfef}], 0x1, 0x4, 0x3, 0x5) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x14080) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) 2.844679879s ago: executing program 4 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300)) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8, 0x6, 0x34325842, 0x4, 0x6bb, 0xffffffff, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(r1, 0xe, 0x0, &(0x7f00000000c0)) 2.354272062s ago: executing program 1 (id=38): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x14, 0x1, 0x5, 0xf}, {0x24, 0x3, 0x7}, {0x6, 0x81, 0x5, 0x7ffffdbd}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) inotify_init() r3 = timerfd_create(0x8, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0) clock_adjtime(0x0, &(0x7f0000000300)={0x10000, 0x0, 0x9, 0x9, 0x43b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0xf, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000000100, 0x0, 0x80000}) syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3, 0x1bf, &(0x7f0000000680)="$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") mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000040)='./file0\x00', 0x40000080) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x1) preadv2(r5, 0x0, 0x0, 0x1, 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32], 0x48) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 2.26688445s ago: executing program 0 (id=39): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.205052233s ago: executing program 0 (id=40): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf250000", @ANYRES32=r2, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.925133162s ago: executing program 4 (id=41): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) preadv(r1, 0x0, 0x0, 0x3545889e, 0x6) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000000)={0x40, 0x2, 0x4, {0x4, 0x2, "34d0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf08", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf91000000000000b6080000000000008500000085000000b70000000000"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r4, &(0x7f0000e79000)=[{0x0}], 0x1, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208000, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000200)}], 0x1) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) mbind(&(0x7f000020f000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 1.456505272s ago: executing program 1 (id=42): ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x17, 0x13, 'dh\x00', 0x0, 0x3, 0x10000054}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) msgctl$IPC_INFO(0x0, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) 1.123257261s ago: executing program 0 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) write$6lowpan_control(r4, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x58}}, 0x0) 1.081715704s ago: executing program 2 (id=44): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 884.146276ms ago: executing program 2 (id=45): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000480)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x1}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x82}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x2010) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/132, 0x84}], 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r8, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r12, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) open_by_handle_at(r2, &(0x7f0000000500)=ANY=[@ANYRESHEX=r11, @ANYRES8=r7], 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 15.514578ms ago: executing program 1 (id=46): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$dsp(r2, 0x0, 0x0) syz_create_resource$binfmt(0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) 0s ago: executing program 3 (id=47): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x404e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f", 0x81}, {&(0x7f00000012c0)="361880853a70294931a79d1451eaa604703c25909bb1e9fac5d8a149d894f3950f32a11202b51f30d8c727a4ecd53f466a002eb67964e39b014ebbd9228f09", 0x3f}], 0x2) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.237' (ED25519) to the list of known hosts. [ 49.626592][ T5843] cgroup: Unknown subsys name 'net' [ 49.775056][ T5843] cgroup: Unknown subsys name 'cpuset' [ 49.782274][ T5843] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.853806][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.949160][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.956550][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.964228][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.971948][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.980627][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.980982][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.995751][ T5859] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.996647][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.010338][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.013718][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.025064][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.035545][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.042739][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.050472][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.057851][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.064995][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.072357][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.081726][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.088931][ T5867] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.096483][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.108331][ T5864] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.116815][ T5872] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.119289][ T5867] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.136382][ T5867] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.143807][ T5867] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.296836][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 53.449679][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.456958][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.464328][ T5857] bridge_slave_0: entered allmulticast mode [ 53.470881][ T5857] bridge_slave_0: entered promiscuous mode [ 53.492836][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 53.502946][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.510330][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.517537][ T5857] bridge_slave_1: entered allmulticast mode [ 53.524794][ T5857] bridge_slave_1: entered promiscuous mode [ 53.601765][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.617316][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.626837][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 53.638126][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 53.692942][ T5857] team0: Port device team_slave_0 added [ 53.728540][ T5857] team0: Port device team_slave_1 added [ 53.739320][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.746891][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.755066][ T5865] bridge_slave_0: entered allmulticast mode [ 53.761833][ T5865] bridge_slave_0: entered promiscuous mode [ 53.769097][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.776505][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.784120][ T5865] bridge_slave_1: entered allmulticast mode [ 53.790658][ T5865] bridge_slave_1: entered promiscuous mode [ 53.827716][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.834744][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.861090][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.887169][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 53.903335][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.910299][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.936622][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.954802][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.976898][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.984230][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.991482][ T5860] bridge_slave_0: entered allmulticast mode [ 53.998388][ T5860] bridge_slave_0: entered promiscuous mode [ 54.006906][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.027861][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.035075][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.042202][ T5868] bridge_slave_0: entered allmulticast mode [ 54.049395][ T5868] bridge_slave_0: entered promiscuous mode [ 54.056894][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.064194][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.071312][ T5860] bridge_slave_1: entered allmulticast mode [ 54.078180][ T5860] bridge_slave_1: entered promiscuous mode [ 54.097125][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.104436][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.111591][ T5868] bridge_slave_1: entered allmulticast mode [ 54.118596][ T5868] bridge_slave_1: entered promiscuous mode [ 54.135354][ T5865] team0: Port device team_slave_0 added [ 54.165382][ T5865] team0: Port device team_slave_1 added [ 54.190565][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.214691][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.228068][ T5857] hsr_slave_0: entered promiscuous mode [ 54.234769][ T5857] hsr_slave_1: entered promiscuous mode [ 54.242219][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.257440][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.265611][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.272739][ T5870] bridge_slave_0: entered allmulticast mode [ 54.279407][ T5870] bridge_slave_0: entered promiscuous mode [ 54.290675][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.319950][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.326979][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.353344][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.364604][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.371816][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.379185][ T5870] bridge_slave_1: entered allmulticast mode [ 54.386142][ T5870] bridge_slave_1: entered promiscuous mode [ 54.400976][ T5868] team0: Port device team_slave_0 added [ 54.414634][ T5860] team0: Port device team_slave_0 added [ 54.421088][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.428141][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.454450][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.481465][ T5868] team0: Port device team_slave_1 added [ 54.495804][ T5860] team0: Port device team_slave_1 added [ 54.517053][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.539915][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.547002][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.573266][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.589043][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.598980][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.606009][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.632443][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.644218][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.651160][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.677171][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.693717][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.700676][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.726812][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.762354][ T5865] hsr_slave_0: entered promiscuous mode [ 54.768540][ T5865] hsr_slave_1: entered promiscuous mode [ 54.775095][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 54.780840][ T5865] Cannot create hsr debugfs directory [ 54.797865][ T5870] team0: Port device team_slave_0 added [ 54.819664][ T5870] team0: Port device team_slave_1 added [ 54.860732][ T5868] hsr_slave_0: entered promiscuous mode [ 54.866807][ T5868] hsr_slave_1: entered promiscuous mode [ 54.872672][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 54.878933][ T5868] Cannot create hsr debugfs directory [ 54.899977][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.906970][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.933226][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.945248][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.952196][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.978436][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.996251][ T5860] hsr_slave_0: entered promiscuous mode [ 55.002402][ T5860] hsr_slave_1: entered promiscuous mode [ 55.009244][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 55.015196][ T5860] Cannot create hsr debugfs directory [ 55.023288][ T5859] Bluetooth: hci0: command tx timeout [ 55.093576][ T5859] Bluetooth: hci2: command tx timeout [ 55.152001][ T5870] hsr_slave_0: entered promiscuous mode [ 55.158330][ T5870] hsr_slave_1: entered promiscuous mode [ 55.165359][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 55.171224][ T5870] Cannot create hsr debugfs directory [ 55.176691][ T5859] Bluetooth: hci3: command tx timeout [ 55.183424][ T5859] Bluetooth: hci1: command tx timeout [ 55.183429][ T5867] Bluetooth: hci4: command tx timeout [ 55.231720][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.240469][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.259005][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.283748][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.352079][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.361632][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.395697][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.420267][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.456972][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.465795][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.487248][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.497975][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.526484][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.536145][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.562335][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.587220][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.618817][ T5870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.635234][ T5870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.649442][ T5870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.659876][ T5870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.705278][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.721494][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.737259][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.746972][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.754097][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.783630][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.815719][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.822792][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.834452][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.841560][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.868661][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.875797][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.910731][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.925661][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.944966][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.972486][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.983031][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.008389][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.015551][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.028653][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.042713][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.049866][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.062952][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.070108][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.087200][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.094378][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.116103][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.123278][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.138318][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.145554][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.198460][ T5870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.209232][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.285026][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.321836][ T5868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.363759][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.430918][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.488712][ T5865] veth0_vlan: entered promiscuous mode [ 56.542982][ T5865] veth1_vlan: entered promiscuous mode [ 56.559886][ T5857] veth0_vlan: entered promiscuous mode [ 56.576004][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.591968][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.614766][ T5857] veth1_vlan: entered promiscuous mode [ 56.626338][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.662835][ T5857] veth0_macvtap: entered promiscuous mode [ 56.671029][ T5865] veth0_macvtap: entered promiscuous mode [ 56.687154][ T5865] veth1_macvtap: entered promiscuous mode [ 56.700760][ T5857] veth1_macvtap: entered promiscuous mode [ 56.723073][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.734949][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.758554][ T3582] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.779179][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.804568][ T5860] veth0_vlan: entered promiscuous mode [ 56.817459][ T3582] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.834951][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.845311][ T5868] veth0_vlan: entered promiscuous mode [ 56.862590][ T3582] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.884774][ T5860] veth1_vlan: entered promiscuous mode [ 56.891005][ T3582] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.900628][ T3582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.925177][ T5868] veth1_vlan: entered promiscuous mode [ 56.937694][ T3582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.947101][ T3582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.974510][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.974705][ T3582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.982350][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.012529][ T5868] veth0_macvtap: entered promiscuous mode [ 57.058567][ T5870] veth0_vlan: entered promiscuous mode [ 57.065434][ T5868] veth1_macvtap: entered promiscuous mode [ 57.075362][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.084047][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.089568][ T5870] veth1_vlan: entered promiscuous mode [ 57.105767][ T5859] Bluetooth: hci0: command tx timeout [ 57.107652][ T5860] veth0_macvtap: entered promiscuous mode [ 57.121586][ T5860] veth1_macvtap: entered promiscuous mode [ 57.130116][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.145254][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.160263][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.167203][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.175359][ T5859] Bluetooth: hci2: command tx timeout [ 57.188615][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.208720][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.213919][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.233268][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.253553][ T5859] Bluetooth: hci1: command tx timeout [ 57.254576][ T5867] Bluetooth: hci3: command tx timeout [ 57.259052][ T5859] Bluetooth: hci4: command tx timeout [ 57.277731][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.286993][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.300740][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.309766][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.325822][ T3516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.340251][ T5870] veth0_macvtap: entered promiscuous mode [ 57.408118][ T5969] loop1: detected capacity change from 0 to 16 [ 57.435099][ T5969] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 57.447208][ T5969] erofs (device loop1): mounted with root inode @ nid 36. [ 57.473072][ T5969] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 57.482965][ T5969] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 57.491533][ T5969] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 57.630410][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.691835][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.779779][ T5870] veth1_macvtap: entered promiscuous mode [ 57.805686][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.816930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.823689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.834306][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 57.873080][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.901258][ T5971] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 57.928394][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.932370][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.940607][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.971560][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.980196][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.990979][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.012569][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.022076][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.040265][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.049292][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.061643][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.066776][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.069952][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.081671][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.095943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 58.153312][ T5939] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.222654][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.246986][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.296346][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.305820][ T5982] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.314921][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.332291][ T5939] usb 1-1: config 0 has an invalid interface number: 71 but max is 0 [ 58.341285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 58.376371][ T5939] usb 1-1: config 0 has no interface number 0 [ 58.394433][ T5939] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0012, bcdDevice=cc.c0 [ 58.431846][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.454114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.462424][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.471184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.498641][ T5939] usb 1-1: Product: syz [ 58.503399][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.512648][ T5939] usb 1-1: Manufacturer: syz [ 58.527224][ T5939] usb 1-1: SerialNumber: syz [ 58.557667][ T5939] usb 1-1: config 0 descriptor?? [ 58.564768][ T5939] kvaser_usb 1-1:0.71: error -ENODEV: Cannot get usb endpoint(s) [ 58.591423][ T5988] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 58.757931][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 58.772368][ T43] usb 1-1: USB disconnect, device number 2 [ 58.848254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.184086][ T5859] Bluetooth: hci0: command tx timeout [ 59.253296][ T5859] Bluetooth: hci2: command tx timeout [ 59.300866][ T6002] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.352103][ T5859] Bluetooth: hci4: command tx timeout [ 59.357902][ T5859] Bluetooth: hci3: command tx timeout [ 59.364175][ T5859] Bluetooth: hci1: command tx timeout [ 60.138427][ T30] audit: type=1326 audit(1755808727.776:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.173430][ T30] audit: type=1326 audit(1755808727.776:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.203709][ T30] audit: type=1326 audit(1755808727.776:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.233321][ T30] audit: type=1326 audit(1755808727.776:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.421505][ T6016] process 'syz.0.10' launched './file0' with NULL argv: empty string added [ 60.473294][ T30] audit: type=1326 audit(1755808727.776:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.528279][ T30] audit: type=1326 audit(1755808727.776:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.620182][ T30] audit: type=1326 audit(1755808727.776:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.776610][ T30] audit: type=1326 audit(1755808727.776:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.801384][ T30] audit: type=1326 audit(1755808727.776:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 60.903241][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 61.012175][ T30] audit: type=1326 audit(1755808727.896:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6009 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f1db8ebe9 code=0x7ffc0000 [ 61.213289][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 61.233646][ T43] usb 3-1: config 0 has no interfaces? [ 61.246524][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 61.256327][ T5867] Bluetooth: hci0: command tx timeout [ 61.261845][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.270270][ T43] usb 3-1: Product: syz [ 61.283310][ T43] usb 3-1: Manufacturer: syz [ 61.288066][ T43] usb 3-1: SerialNumber: syz [ 61.333496][ T5867] Bluetooth: hci2: command tx timeout [ 61.365458][ T9] IPVS: starting estimator thread 0... [ 61.382315][ T43] usb 3-1: config 0 descriptor?? [ 61.416711][ T5867] Bluetooth: hci1: command tx timeout [ 61.422228][ T5859] Bluetooth: hci3: command tx timeout [ 61.428144][ T5867] Bluetooth: hci4: command tx timeout [ 61.483468][ T6022] IPVS: using max 78 ests per chain, 187200 per kthread [ 62.598152][ T6036] loop1: detected capacity change from 0 to 16 [ 62.667475][ T6036] erofs (device loop1): mounted with root inode @ nid 36. [ 62.685156][ T6036] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 62.693706][ T6036] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 62.702312][ T6036] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 63.373798][ T6044] kAFS: unable to lookup cell '.,' [ 63.512981][ T5919] usb 3-1: USB disconnect, device number 2 [ 64.167447][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 64.293429][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.301990][ T6031] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 64.536066][ T6062] kAFS: unable to lookup cell '.,' [ 64.697988][ T6031] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.737704][ T6031] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 64.746312][ T6031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.753644][ T6031] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.798047][ T6031] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 64.807627][ T6031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.824505][ T6031] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.846139][ T6031] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 64.855059][ T6031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.861194][ T6031] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.877345][ T6031] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 64.887992][ T6031] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 64.897915][ T6031] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 64.946976][ T6031] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 65.283248][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 65.642977][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 65.663612][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.683344][ T9] usb 2-1: config 0 descriptor?? [ 65.869076][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 66.009260][ T6047] bridge_slave_0: left allmulticast mode [ 66.060259][ T6047] bridge_slave_0: left promiscuous mode [ 66.077585][ T6047] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.147611][ T6047] bridge_slave_1: left allmulticast mode [ 66.159154][ T6047] bridge_slave_1: left promiscuous mode [ 66.173143][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.297327][ T6080] program syz.1.17 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.312998][ T6047] bond0: (slave bond_slave_0): Releasing backup interface [ 66.338186][ T6047] bond0: (slave bond_slave_1): Releasing backup interface [ 66.359829][ T6047] team0: Port device team_slave_0 removed [ 66.377058][ T6089] netlink: 'syz.1.17': attribute type 11 has an invalid length. [ 66.400100][ T6047] team0: Port device team_slave_1 removed [ 66.530173][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.540472][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.602122][ T6047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.613382][ T6047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.774290][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 66.856595][ T5867] Bluetooth: hci2: command 0x0c1a tx timeout [ 66.933311][ T5867] Bluetooth: hci4: command 0x0405 tx timeout [ 66.933495][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout [ 66.971688][ T6047] netlink: 'syz.1.17': attribute type 11 has an invalid length. [ 68.087172][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.095963][ T6078] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 68.565680][ T6078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.572091][ T6078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.643364][ T6078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.649387][ T6078] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 68.705628][ T9] gp8psk: usb out operation failed. [ 68.710955][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 68.724782][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 68.813369][ T9] usb 2-1: USB disconnect, device number 2 [ 68.951040][ T6122] loop0: detected capacity change from 0 to 2048 [ 68.991240][ T6122] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 69.260688][ T6118] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 69.283292][ T6122] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 69.327172][ T6122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 69.341220][ T6126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 69.860238][ T6144] netlink: 'syz.4.35': attribute type 4 has an invalid length. [ 69.910543][ T6140] netlink: 'syz.4.35': attribute type 4 has an invalid length. [ 70.134832][ T6154] support for the xor transformation has been removed. [ 70.142637][ T5185] Bluetooth: hci1: command 0x0c1a tx timeout [ 70.142685][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.299849][ T6157] snd_dummy snd_dummy.0: control 0:-3:0:syz0:0 is already present [ 70.614053][ T5859] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.693321][ T5859] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.703259][ T5859] Bluetooth: hci4: command 0x0405 tx timeout [ 71.267329][ T6183] loop1: detected capacity change from 0 to 16 [ 71.287258][ T6183] erofs (device loop1): mounted with root inode @ nid 36. [ 71.377570][ T6183] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 71.384830][ T6184] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 71.395052][ T6183] erofs (device loop1): corrupted dir block 0 @ nid 36 [ 71.443935][ T6180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.40'. [ 71.533996][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.692374][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.123219][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 72.215998][ T5859] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.345203][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.423252][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.435237][ T9] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 72.444871][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.464547][ T9] usb 5-1: config 0 descriptor?? [ 72.716177][ T5185] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.775461][ T6206] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.781602][ T5185] Bluetooth: hci4: command 0x0405 tx timeout [ 72.781668][ T5185] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.941090][ T9] hid-led 0003:0FC5:B080.0001: item fetching failed at offset 1/3 [ 72.961206][ T9] hid-led 0003:0FC5:B080.0001: probe with driver hid-led failed with error -22 [ 72.988137][ T6206] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 73.005165][ T6206] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 73.022424][ T6206] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 73.029832][ T6206] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 73.591607][ T6223] /dev/nullb0: Can't open blockdev [ 73.634902][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.646590][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.689215][ T6212] ------------[ cut here ]------------ [ 73.694815][ T6212] kernel BUG at ./include/linux/pagemap.h:1404! [ 73.704637][ T6212] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 73.710916][ T6212] CPU: 0 UID: 0 PID: 6212 Comm: syz.2.45 Not tainted syzkaller #0 PREEMPT(full) [ 73.720052][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.730099][ T6212] RIP: 0010:mpage_readahead+0x765/0x790 [ 73.735656][ T6212] Code: c6 c0 f8 b9 8b e8 9b 20 e0 fe 90 0f 0b e8 23 af 78 ff 4c 89 ff 48 c7 c6 a0 f7 b9 8b e8 84 20 e0 fe 90 0f 0b e8 0c af 78 ff 90 <0f> 0b e8 04 af 78 ff 4c 89 ff 48 c7 c6 c0 f8 b9 8b e8 65 20 e0 fe [ 73.755518][ T6212] RSP: 0018:ffffc90004ad6f60 EFLAGS: 00010246 [ 73.761614][ T6212] RAX: ffffffff8247dfc4 RBX: 0000000000000004 RCX: 0000000000080000 [ 73.769568][ T6212] RDX: ffffc9000de40000 RSI: 000000000007ffff RDI: 0000000000080000 [ 73.777523][ T6212] RBP: ffffc90004ad7150 R08: ffffea00014ea507 R09: 1ffffd400029d4a0 [ 73.785499][ T6212] R10: dffffc0000000000 R11: fffff9400029d4a1 R12: ffffc90004ad73c8 [ 73.793591][ T6212] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90004ad73e0 [ 73.801634][ T6212] FS: 00007f1f1ea9c6c0(0000) GS:ffff8881259ff000(0000) knlGS:0000000000000000 [ 73.810546][ T6212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 73.817112][ T6212] CR2: fffffffffffffffd CR3: 0000000022314000 CR4: 00000000003526f0 [ 73.825078][ T6212] Call Trace: [ 73.828340][ T6212] [ 73.831257][ T6212] ? __pfx_mpage_readahead+0x10/0x10 [ 73.836543][ T6212] ? lru_add+0xa2f/0xd80 [ 73.840785][ T6212] ? __pfx_blkdev_get_block+0x10/0x10 [ 73.846153][ T6212] ? blk_start_plug+0x6f/0x1b0 [ 73.850905][ T6212] read_pages+0x177/0x580 [ 73.855238][ T6212] ? xa_load+0x60/0x210 [ 73.859393][ T6212] ? __pfx_read_pages+0x10/0x10 [ 73.864228][ T6212] ? xa_load+0x1ea/0x210 [ 73.868485][ T6212] page_cache_ra_unbounded+0x346/0x7b0 [ 73.873950][ T6212] do_sync_mmap_readahead+0x3aa/0x7a0 [ 73.879338][ T6212] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 73.885231][ T6212] ? rcu_is_watching+0x15/0xb0 [ 73.890017][ T6212] ? count_memcg_events+0x10b/0x270 [ 73.895212][ T6212] ? count_memcg_event_mm+0x1d/0x250 [ 73.900482][ T6212] filemap_fault+0x6b9/0x12b0 [ 73.905156][ T6212] ? __pfx_filemap_fault+0x10/0x10 [ 73.910266][ T6212] ? __pfx_filemap_map_pages+0x10/0x10 [ 73.915727][ T6212] ? rcu_is_watching+0x15/0xb0 [ 73.920489][ T6212] ? __handle_mm_fault+0x2789/0x5400 [ 73.925762][ T6212] ? rcu_is_watching+0x15/0xb0 [ 73.930526][ T6212] ? __handle_mm_fault+0x2789/0x5400 [ 73.935801][ T6212] __do_fault+0x138/0x390 [ 73.940131][ T6212] __handle_mm_fault+0x35e3/0x5400 [ 73.945269][ T6212] ? __pfx___handle_mm_fault+0x10/0x10 [ 73.950735][ T6212] ? rcu_is_watching+0x15/0xb0 [ 73.955510][ T6212] ? find_vma+0xe7/0x160 [ 73.959735][ T6212] ? __pfx_find_vma+0x10/0x10 [ 73.964398][ T6212] handle_mm_fault+0x40a/0x8e0 [ 73.969234][ T6212] do_user_addr_fault+0x764/0x1390 [ 73.974335][ T6212] exc_page_fault+0x82/0x100 [ 73.978909][ T6212] asm_exc_page_fault+0x26/0x30 [ 73.983742][ T6212] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 73.989537][ T6212] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 33 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 74.009127][ T6212] RSP: 0018:ffffc90004ad7a18 EFLAGS: 00050206 [ 74.015277][ T6212] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 74.023268][ T6212] RDX: 0000000000000001 RSI: 000020000022a000 RDI: ffffc90004ad7aa0 [ 74.031226][ T6212] RBP: ffffc90004ad7c30 R08: ffffc90004ad7ad7 R09: 1ffff9200095af5a [ 74.039183][ T6212] R10: dffffc0000000000 R11: fffff5200095af5b R12: 0000000000000002 [ 74.047162][ T6212] R13: dffffc0000000000 R14: ffffc90004ad7aa0 R15: 000020000022a000 [ 74.055123][ T6212] _copy_from_user+0x7a/0xb0 [ 74.059744][ T6212] ___sys_recvmsg+0x12e/0x510 [ 74.064460][ T6212] ? __pfx____sys_recvmsg+0x10/0x10 [ 74.069664][ T6212] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 74.075758][ T6212] ? rcu_is_watching+0x15/0xb0 [ 74.080507][ T6212] ? lock_release+0x4b/0x3e0 [ 74.085088][ T6212] ? __might_fault+0xcc/0x130 [ 74.089758][ T6212] do_recvmmsg+0x307/0x770 [ 74.094166][ T6212] ? __pfx_do_recvmmsg+0x10/0x10 [ 74.099088][ T6212] ? count_memcg_event_mm+0x21/0x260 [ 74.104358][ T6212] ? count_memcg_events+0x10b/0x270 [ 74.109547][ T6212] __x64_sys_recvmmsg+0x190/0x240 [ 74.114668][ T6212] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 74.120209][ T6212] ? rcu_is_watching+0x15/0xb0 [ 74.124993][ T6212] do_syscall_64+0xfa/0xfa0 [ 74.129486][ T6212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.135551][ T6212] ? clear_bhb_loop+0x60/0xb0 [ 74.140333][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.146224][ T6212] RIP: 0033:0x7f1f1db8ebe9 [ 74.150726][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.170495][ T6212] RSP: 002b:00007f1f1ea9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 74.178909][ T6212] RAX: ffffffffffffffda RBX: 00007f1f1ddb6090 RCX: 00007f1f1db8ebe9 [ 74.186876][ T6212] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 74.194920][ T6212] RBP: 00007f1f1dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 74.202896][ T6212] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 74.210859][ T6212] R13: 00007f1f1ddb6128 R14: 00007f1f1ddb6090 R15: 00007fffdb9ed5f8 [ 74.218830][ T6212] [ 74.222015][ T6212] Modules linked in: [ 74.226571][ T6212] ---[ end trace 0000000000000000 ]--- [ 74.256739][ T6212] RIP: 0010:mpage_readahead+0x765/0x790 [ 74.265537][ T6212] Code: c6 c0 f8 b9 8b e8 9b 20 e0 fe 90 0f 0b e8 23 af 78 ff 4c 89 ff 48 c7 c6 a0 f7 b9 8b e8 84 20 e0 fe 90 0f 0b e8 0c af 78 ff 90 <0f> 0b e8 04 af 78 ff 4c 89 ff 48 c7 c6 c0 f8 b9 8b e8 65 20 e0 fe [ 74.287978][ T6212] RSP: 0018:ffffc90004ad6f60 EFLAGS: 00010246 [ 74.300197][ T6212] RAX: ffffffff8247dfc4 RBX: 0000000000000004 RCX: 0000000000080000 [ 74.310758][ T6212] RDX: ffffc9000de40000 RSI: 000000000007ffff RDI: 0000000000080000 [ 74.318861][ T6212] RBP: ffffc90004ad7150 R08: ffffea00014ea507 R09: 1ffffd400029d4a0 [ 74.329922][ T6212] R10: dffffc0000000000 R11: fffff9400029d4a1 R12: ffffc90004ad73c8 [ 74.387004][ T6212] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90004ad73e0 [ 74.397460][ T6212] FS: 00007f1f1ea9c6c0(0000) GS:ffff8881259ff000(0000) knlGS:0000000000000000 [ 74.406713][ T6212] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.443270][ T6212] CR2: fffffffffffffffd CR3: 0000000022314000 CR4: 00000000003526f0 [ 74.451336][ T6212] Kernel panic - not syncing: Fatal exception [ 74.457775][ T6212] Kernel Offset: disabled [ 74.462084][ T6212] Rebooting in 86400 seconds..