last executing test programs: 5m47.739670642s ago: executing program 32 (id=775): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x82880, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x10, &(0x7f0000000240)=ANY=[@ANYRES8=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102385, 0x18ff1) r3 = fsopen(&(0x7f0000000280)='binder\x00', 0x1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000003, @mcast2, 0x6}, 0x1c) write(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000210300030000000000020000000000000083c10051783872b9773f7c68e710003ed4a7a77afa4ac6b6e5bfde2c493b6683899015ecef0d2d36db3d0d500df1d9825baa3abae7f67129ef5a8e043738d0f9fffd684e015698602b9dbea308f3ef9bf2dff4258e3e8edf3528ecdf030de79b0c32c177ff62ad1eab570d11a803", @ANYRES32, @ANYBLOB="000002000080", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00', 0x300}, 0x20) bind$alg(r4, 0x0, 0x0) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) 4m50.669877849s ago: executing program 33 (id=887): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}, 0x1, 0x0, 0x2000000}, 0x0) 4m44.509355313s ago: executing program 34 (id=897): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7483, 0x0, 0xd, 0x6c9, 0x10001, 0x0}) prlimit64(r2, 0x0, &(0x7f0000000100)={0xed, 0x3}, &(0x7f0000000280)) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012000000000000", @ANYRES32, @ANYBLOB="00000000000010000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000940)='./file0\x00', &(0x7f0000000b80)={0x48001, 0x2, 0x2}, 0x18) mknodat$null(r3, &(0x7f0000000bc0)='./file0\x00', 0x1000, 0x103) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)={0x1c, r5, 0x201, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0x36, 0x0, &(0x7f0000000040)="c1188e19b95d02ff4284860186ddb6f9ca4067f7ef59075bcf9b82142c67d1d263c0d9de7a013955f2696946aec060eb3214bd9478ac", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) syz_emit_ethernet(0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa2baaaaaaaaaaaa9900400086dd68ecad8000283afffe8000000000000000000000000000aaff0200e73617a818000000000000000000000000018900907800000000000000000000000000000001ff0000aaff01000000000000000000"], 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000240)={@private2, @rand_addr, 0x1b, 0x1d}}) 4m22.779859924s ago: executing program 35 (id=936): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x8, 0xe, 0x0, 0x2, 0x9}) 4m17.892509804s ago: executing program 36 (id=946): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="030000000400000004"], 0x48) socket$kcm(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x3, 0x5002) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='percpu_alloc_percpu_fail\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r7, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = syz_open_procfs(0x0, &(0x7f0000000700)='net/snmp6\x00') read$FUSE(r9, &(0x7f0000000980)={0x2020}, 0x2020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r11, 0x2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) 4m16.308808546s ago: executing program 37 (id=949): r0 = openat$random(0xffffffffffffff9c, 0x0, 0x40002, 0x0) fcntl$setownex(r0, 0x11, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}]}, 0x34}}, 0x0) 3m24.330523755s ago: executing program 38 (id=1023): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0xc4fc9e906872338b, 0x24, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x8, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005980)={0x1684, 0x34, 0x701, 0x0, 0x0, {0x3}, [@typed={0x8, 0xaa, 0x0, 0x0, @uid}, @nested={0x148, 0x80, 0x0, 0x1, [@typed={0xe, 0xf6, 0x0, 0x0, @str='syzkaller\x00'}, @typed={0x8, 0xf8, 0x0, 0x0, @fd=r0}, @nested={0x117, 0xe4, 0x0, 0x1, [@nested={0x4, 0x10e}, @nested={0x4, 0x24}, @generic="c77963444b8f6a3e402cd03555577d6c04e5957665fd048b2ad6c9c8e05f134b6a72d8ad0c2fe50e76563adc8b4f848508b51e9c5ce1b1b43ae93a1ae2611f6e094cda27e9e809e266a44ebd2520465d9771b0a88a6ec97d4cead58e144fb28c96d6083e06fdec1ceb4bd55e37259ea92fc226bd9254", @generic="4a1706e13a453877563e96c3ca02f2fdf19a7e8e4c21e50cc0f0a3c658207417bf7998a896074bccae0f9f9ea751403c7a886e6bc9de1ece86631931a95da634215c18a0dc403290591a9d64b180c52e4d35e5d848cd1e94dd94c622651931b8d2852f39d78f48eb72d32c26120e41599fc28fb7f68cf152f0234fdea04d519cf2abf20452a764a5e4fd39a877", @nested={0x4, 0x75}, @nested={0x4, 0xfb}]}, @typed={0xc, 0x142, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x117, 0x0, 0x0, @pid}]}, @nested={0x78, 0x62, 0x0, 0x1, [@nested={0x5b, 0xd6, 0x0, 0x1, [@typed={0x14, 0x93, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x41}}, @typed={0x8, 0x3a, 0x0, 0x0, @pid}, @generic="f8e4fb6e802707ed4af2301255c0b7279d76a9ae0ca31a9738468a34262b88e476dc0972c14868fc1999d192fe5542a24ec993f8c5774667bf9d15"]}, @typed={0x4, 0x93, 0x0, 0x0, @binary}, @typed={0x11, 0x110, 0x0, 0x0, @str='sched_switch\x00'}]}, @typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@loopback}, @generic="83abd4b21c9c6b537776830c7ad02504a694365a306fefa252aa70e0702c0ccd2db4549a541beaa5181fd7f14026fbaa3573956e13dbae20bd96bfec28af198235f7069b04d1a593e688113f7e8e3d5f6b4a42624c625f95f7aafad15be347c8479d06725e2b3142c8953062eb53fca9", @nested={0x12b6, 0x105, 0x0, 0x1, [@nested={0x4b, 0xb7, 0x0, 0x1, [@generic="c133431ff1762f513c05f793648cabc3d174cdd49078ab2ddf4923fc785356d7fac52bdec4f23a063a0306c278f4ca", @nested={0x4, 0xc3}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0xc7}]}, @typed={0x8, 0xff, 0x0, 0x0, @ipv4=@remote}, @nested={0x8, 0xe0, 0x0, 0x1, [@nested={0x4, 0x5}]}, @typed={0x14, 0x9, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @generic="458c8e2e42525081ab75bb0f63d80afc7bfbe89f1c4da7de85dc20e2a4729deaa864", @typed={0x8, 0xd5, 0x0, 0x0, @uid}, @nested={0x1210, 0x11a, 0x0, 0x1, [@generic="ca2613648c78fd532a6c89c5d1c614737fc196ed07aaa101191d7337b0709d43bbbd188780dc4697504bf688337ddf3849b43a0e5f7f80498ef8b56605a506859b6d99d6db18c0079a32d15ed565385f3f40a6a906233fab73cfdff476c712b2cdec507f94eabe97a251c5ec9073755602f7d6e4fee7dba3d1609de3663186218f597d93c42588f9834af298d2a02eaa7de14a2e55bc551977cee2372ce144168ec0b76876c54985e9a83e8962c71de210cbd820524caa35bc9ad809ad48b9a2192f4fa814de5c8a0de6b08589784d8826447392cf38563f6d03e23b0e2dabb78500c4eff1b06c610aa9a6", @typed={0x8, 0x20, 0x0, 0x0, @uid=r6}, @typed={0x4, 0xd0}, @generic, @generic="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", @typed={0x8, 0x14d, 0x0, 0x0, @pid}, @generic="22fa431619d2c45e9472e90bbf312a3fe37e42a9b3236a287db2cf17ff97ce48bb0b4c2c1854220575e5f0b8223c2a89af1bbd8a4d20f45846a976700838c7044c2c5b90f01147bf34d9d4ba7008e68c88937b01ef31c7b0072ffb1ade546139cff3477d2eb578b89098e65d637a9470228d8e174da3327a61ba809efe0cc5c45384cf8e6bf84fe1fbfb4eae06cc5f95aac9a85e7e4d8ec94bc526d8e7d0ccdd3f5022a010591cdf55a39bce6abdcdd5e7cc21a5caece8be1f72caf249a26432b4d430e13b7a5830c7f8f9bf7394aa8346045515f68fea992d307b9762c1067ed3fa98bc89a84632a602fd411399ec3665ad01a6bc63a82afa3042bc0c3475a4a6cc8e835ef8e9926088934407c93a2a6a2b4567334b15e37d7626a5b0d584f10212cb16fbd65337ad9a77bfd9f0e566a136ec98cd30821d3e26c4428aef1855d808843497af48a4904ea86efe4cb7ce9ecb15b0be10e5416c5f60b3c5bbc5a21f2edd0fe563e9f5a04e36fdc68260b7c7443013810c958d4bf71773e28847d3a26451e99c7e6b0c81db76f7af2be59b05c66a35850effd4c0fd95ac5836dff4144eaa15a703a3898c774ff9b321402e3dcb98aa3bca5628e897b8525c1c3f24ea71b48e8f3b5c999632a84ee8a27b067b4d609943b2dcf665347c3baf4041b4de9c2c40944a2b85e0d851969285f00b3a82aa4b9504a7d2881c6c777ef396cd3a4a1e0999c77c67ba52f7d398f0c12f8c126518116556581f6983f5cc191b9e908807997c4e7199c06a46339d5b1186ff82ecbecdf5bb7fef7f672998284c88cd47e7f077a6480941b6f5ad4b2e38fe20506e91b12fd9df9595e5227aea41d9c9e2e12f83826f79b3556b20e5f0fba92161d79133508b66a77066359494ca1bc314704868a3110a723bb03ab00d12f7ee5fef9e0991d6b2b5f74b7e30763031c861565b46ccce34ae94b705b53ec2678890509a476eb3aab987922e4d155b0f218549c65fb382e7c1cff41bcdf18c62b179880132c2b6bd5316d0a65aae66ce8a4adccb919394d8f1b4e282070ed6eb7d87faaa8d2313774b07b039665e63305c5c22bba4b2e4fd7524ebd6354cc87e9a5befe8f681869cd984444075fd237504bcf4a19269961e501929f78a769c62a3e59efd2866e79fca3b01a9f4a4d9e481973e756613286282edc07bc2845fb235ceeda4531fd04339847202e1c1d2dfcaafd4cc899ac23a6728daedecb414ab050e49147b9866ecf0d9fa1bf669e1febcec78d368868739011f2f40267afb6c51b0ad3e78ebc15031367d3b2ac963ea007393874d513567005e6549cbe745cffcde12156c2b0e3a940f487dc17be1e195659f35fd306454f9ef8558b1adcc23545299cbd3f440cdded943d7a415c42ec60362257f9dce3799ca0e7fd13f496c94f58062d9916755d586603bb8e603ea3a289ca2ae30ada0ef9b00645ba68da0fcf5065e85fbdacd942d7648f37470b3ef4eea7f24521b1cce82d22de3f0039ec3655637546f60fb52cd54d837cb2a7affcf25324854ebc7771cd1942ee5b014662be3d47a0de5b07fee643f6f58529afc54d8866bcf878b9530570bf3a3f15ef130c7e532dff2e2a3ea1ea6070853a5340ca8c562ed322657370d987707f0e080a8ab45c8230676b86848c7687302c9b338a024e5c0f4020627e4c96962c7833b6e0445b72730cafde581e0340cc00eb1dd0d9597dca5c190ff2f2d6dbd2402436df6d38589960cc460251aed7cc89038c49a026ee4ffb3098f13f3e4b70cb38eb6a26bb6554f842fe4493ef6027111ceeb50c62fa8c516ea8d8c16797b4d8b7a8ac2e31062db662781c94e79b6b6af2645bc661108e29c9c8849433a7fd6222c77501c42db106e339f282ddb4abe8ee99f30e8cbe94752af35505be60db7a802fa7ab3565bcc36cf285538f392160c7089e788865f0a5ad56ac59a8b37d6ecf5ec3dce08f16b610fda71cd081618f51be5d15a4fc8fd43fbcce2a81da36af68ad30ad12c4a8dfd6259e0023c50ec7278bf1e1158f186886378e40b4cc8253898a0ddf344b5042d867829c58a3c429233103a8ddf796198f3d7d36d9549b8c61cfbf2892efdc8959a8a1b26974ebbe0efbb405f5a0cc2982bf4a04c94e8e81940e50313ed303531e986ca3dbc47a10c26213eefbdebbd4fe2952e14263bd16eefe000bdf23de25925320b4e915b5ce3f11ac0c01375b6d556add97afb46d90a01bf108f5b52d6c175df5fee58ffae9d258f9dcfba1113a939411ffa6c24b6538369020a79333e1dd810700941eaf8f1d19e9c28e303fbbbd1cf8cb0df8033120277e76c83612c9f884bb2b80efcebc63bdf6c6221230e3ae3e10754bd0cb5db5a721d26caafc450104fa51973481e69c6b00552251811041933ed0fe8ec65539e5b93981f3da20577c8b853649f62218c702748c3cb40995edd831c687b9b34c2fbf56c6cd25b0583117eda75e9eeecd2c4c0557661241fcca822922d872f3b899a00098360837a0074bc09bf96b29c52e10ae8d4e2323b58cd4f34a084cbdd7b2a67f517eeb6ba3563766221e74a824cfd75979997fe7359555f780bb65da050e8ed454aaa817b357bc7c7f7c4d611cf9cc27f745b05df5089d344a565b23c54c7fa53250995428e828016fcde36843ed43031b23f4928ab6526e9848f75737c9482ad8bbf69233d9b1e0666962f5958bedef97466fec828d28fec37e51e173e8bfcae3d319141d90c0ee29e7c9b9f7b8b5ae80f1201748561aa8c272bf1216440635caef24fe12d6e6ce1a1fef9d6dc85e41af82a98776f3c62438b3b8b580eca3e2f3a2f2d5074cfaa8c338171b719945645356a1556d265b99b7ee0df79bfdd95ed9f035e8679adaa5fe31afaa8faa7ac59fb09e9e6f3e58008d1e4ce4a3d2fd44e9ed80fb8b48293da70e216feedb5b7466e7986a99109d10bacd9ad667d3e86a495612d99fd747bf6c7c7974d5b914747520c42ad70d6c85bb0dfde17f7d3b0afafa98cef661bc6908c4772d95e92b7b73fe25978d8bc97a651cd4c26653e91236e95996f5ab6b4b844e172678e3c5496224194c0d01716194c40a13119684e394c4b2773a788c1e8ebe58343a7db5bb6bf50dbcb83f9077b0755cf1f097d95d41b4e30da84f56aec76201cc2bf0069475faaad21b1ba1f4c62d410fb4dc4f1677c24c920c322f4713f7601c7377a2d5f53496910327b246899e95ccc2937bb20f4f9ba26a6777f2de49d4aa62ac530bb05b10878ba67bc924c486d98038d40cb969d0e60afab38e4a734065bba6478981adf726e96389ffc550c16d9fae3222419ca7e09bb0fe347f59ac5802b3e93fd05ba81fa412007a97ef70220e85c9acaa8d58743222cdf87f1627c30f801bb8491e2e5e5bdb55067145825ed03c587cea6f59c8fdc4e1fb88e9c509823dad62abb6d08f2c4ba2fc06fa282c24f7c829e41a3bdca3b98de0ddd225171cddbe8c294522a78fd7bcc674e9e22d80ba12e81c05593694d040f035a3eda0ef339ae48146576dc40abdfef7beb93985642adf406c9cdeabccfc086e2922d68ba2cbe66cd7aecf1f3530f2c575e8e405333286a91e58b431d415ec3e53588d7578420ca33f66e3f885004a658d5beaee68d22dead549236e627485d90451e4a1ee8a838f62e157e9d11efc41f338c1426f994b2c7472fe73e41c5d27dc7c3306e5028588f2e21516f74ab6127d414855dc12c32006440faa8ec80eac3789ffcc894b695d392bc7a28a234b16cc0adb960cd505a5da19a9a675190c04a2b5713a3bb0cf6472c9f2e98ae5acb913b02ced6aa7f6b8ce906066740b1f78706f0de5397c4d4ab84502da004f38eedbb3a49447d8a986c21419094c40b59aec177806ac2596d6419cd6b25e4ab61d1a6643f4c855c1ddeadd4d192f56424d1ed5322d5aad8cf369b899e02d3e80cc683c346d108650ab2f5ee947ab43bfb12dba1351bafeae8bb6cb00f3c24bc6618b5549155ed593c1864d1f235f33d7ac775977eae50d581885b7643f00673ab32a1416c0e104f245cc04fd8a191832f3a21fbc48e5359e8fc3058616362a95fbcda93ed6829711d524a55c7c9eea28fff717a3e4b8d7c31e309dcfb62647ecc333011a38a08604c33e2f36b266186dce5721b671ed8656a39d01031d3064de6cd610451f6c6e025c0c6365a3d7cf54f6657bc2e0c6aa784250ee348276eea2fee8927d83bee616da933c7735a7f8be5f169ec324b00021c7a5206ff46e42b1fb1d4ae7b45f291ff6300a9aab9459c39fd213e881a22b0188ae6a0998cc2b5d3c653b0a29e57491973f466c536e0e1c62f18f49122bacbfa5ddd6eeb0f461b8a9934b3acd74a30aa3d4ed5fd134b2816a4f3c348cb04366da18f40119e14e3b8665b0eeec05b44dc4b56463312b18c553d5f09fb98cc761d9e49b2432bb0beda8dc9614ef8b7bdebcd877476a2c1268e9444b2eb7188f3a414c08add18cd95fb64bd1f61cb6d6c2a86753fc322aac20f11517a2f8b3341577b4861907d1525a61072874161b38b2cb268b74e7298d9cbad909272a11f1e7054e217a5cfe9dd1c237adc1aef399ca8e866098c34a758ada88e86f06df18435ff66adf0158f31f8a59e224d009b5a5fbe15ec6d50d7a5764a08e7523752e8d82c032f415813112d7500f01532998e3c0191ec07da3dba3ddab732033a622bf59dc42207c92a6ece826961390ead52371c9f6d02af1aa0ca4b11b41d6f31b894c40ab9fbe2bfacfabd093210cd2821141a7660d3060238b4a6b97de399992b7b78d5f44806fbbe52d900a6db03fed729138ddd2cf767abd0b52eff7dfee29f78577d96b09a5f283f43e8d507d9cac40c09e5b3bfd156475c71fc3bceb1a1eff486fdb930c99555f4b052be893fdb579e17cb210222004560c70b371694ba9b875d0aca1ab11bf795a5407dfa9b123d70baaaaae0937178dd8e9eb828a76b6a80b1c5616bf0b3738bdeba3111f9ce3db718f3d1d4529b6b166ac105402566069430ce46bf749dbd72d74f59dd181877a99f625d6dbd4d627785312efd7fda1eb34ae5da1375c46ca9c702906df29bcfd52865377c87550f5f376f9cac3911c9cd89229eb4e6db3a519efa8dfa0f00311c956db572417ef8a91cfc914d327d40acfabb0fec95bcd5ff08565b1b3be2b39e6fde9b2b29e7c2ee6ace92c995cff934068178ed7313f1450468dbd6c72e8ddcc62d7ba9fcc376cd320730a10b0f38669b49f651d3b40eadb77feafc2af67d3b4acc30cbe155eb9354ba4d5656b6f9f6e7c90e4db3e0dad229285a2fcd52a6680ed1816ddcd7aa8bd9572cef838fb751304488c3ae286ddd9aad0084961496f1f6f0888316b3c384dd59e9bc443a25b9007a834eea77417c89f20267f3b193b8fde71db9584d696a036ac2fafd3688cc8bb6082c569b6a86f2624b1d361c83071953710fbace7215374df2fd5e76d1cf3bd6564c0bb84db5fe5abc9d47947188e37690ee8b8c51855a854cc54df8d85d1fc4af0d8652ac6daa0c11c4e6c0ba413ee7c2ea2a50f9b0b63a59957e67d8506291e5655697b64458cc07a176e80615d47483270813de3d57b9864a0880c351e780295d68a8be33d66517fec92d2353dcfc1cfd530c68b466356383955571f5103f1536c7a0a7c593fb9651542edf0c83c5f506b55eb0900129a558126ccbfde6a4821ccc0516ee74af5f05ba489bc036e3045919f585dedad67cb12585081ceeaf2051186ba874d79be229", @typed={0x4, 0x13c}]}]}, @generic="9c9ecf79f825ab8af389a19d34cc7bbe62c32e5951cf695febcb9c2eeac20daaa8e777cfb876039be2034e28a1572a35048c48fe29d4b36364ddc4a177c07c316d5be9c9319fd809919f0574042718fb37ae96f9c0b247a74c314d3d00b6990e6cba66f7eeb3f47840b240b6903772286a0343657c37e4b4964a399c59bf9cf26adc6152da2f68b24a7b09d91e0eece9b2b9290b710bc2", @generic="48f4e1d4ac6b3e1e898e129326c42b214e63e58efbb3681aa7a4b5f9dcff6d87a048922b624e7edf42d248f5a4506a14f3ae37092d35d80d27a33d5dc4d2a6a8a3c152e91f7b02a704fffd2f25f139e09192c006936f2f8629010131e2f0d5eac8f847c24434", @generic="dbbc66d771e7edc48cd887fef946c40bac13a6252f20072092932555fed41586b237aab926a425f1552f64455b941f29f358ab786b8f939706268974e38e51f5b3029397ae619b65912d2ec9a98809c570bc93eaf640ae220c8e589828b60621ac310ea44406c2031c79d60ce51925"]}, 0x1684}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) 3m23.690618239s ago: executing program 9 (id=1045): r0 = getpid() prlimit64(r0, 0x6, &(0x7f0000000140)={0x1000, 0xfffffffffffffffa}, &(0x7f0000000300)) 3m22.551357655s ago: executing program 3 (id=1047): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) pipe2(0x0, 0x80000) r4 = syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) modify_ldt$write(0x1, 0x0, 0xfffffffffffffe8a) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="668a00000000000061114c000040000085000021890000ff95376c43"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000001240)={{}, "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"}) socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x8800) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0xbeef, 0x3ff, 0x2, 0xcdb9, 0xfffffff1}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0xfffffffffffffff1}, 0x0) 3m22.396017797s ago: executing program 9 (id=1048): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x3ef}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4004850) 3m21.664786356s ago: executing program 3 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) read$dsp(r3, &(0x7f00000001c0)=""/95, 0x5f) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @rose={'rose', 0x0}, 0x81, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 3m20.243477322s ago: executing program 9 (id=1053): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000002140)={0x0, 0x4}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002280)=[{&(0x7f00000001c0)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000880)="1c25f0af45d4e4a14a998bfdd2ebd2bfbee925ef914b2a8a67fddebac1303a357e48064c8c1da641324d54fcd6d1da58e250a78689438ccee0f43b795db14a5e5af5ea559b937cf5d50a77e415ec0685c3ab70e25577b74d2519759134e912063f1b24dd7cfab4605ae44cc9dc583dc8aec43b196f4b43a922de63e3ee84f5de43c036d89b03535e94dd302bd9619080224d614169cc07b02479cc55cf818913defd0909c2eeacc1", 0xa8}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f00000002c0)="92586a8ee26186581908e99f7f6a2ff4c2dc469cdb121a165082e2f740260eda32602861a2b8c1e90d3f4c7d95ba780a564ee32aedee0ff41edd2c29d6b731202396137cd8", 0x45}, {&(0x7f0000000940)="f3b25eef82f5c6208faf26fc6afde3be4cba610c0572772232a4467cc3d296f59904d88c31189f78ddcc3ce61a6a87af25d5bcc4c1c41ff4448e76b54917e3926477ebf543fbd38f0c903017b6a6b469d728a33f97cf75948118fa24f55f7b641e5bec43436a5b91dc7b7f77d232b4c439b6326efc3b", 0x76}, {&(0x7f00000009c0)="6feac63023e0e9153fd3643b8210545d324d3dc515dd552330f0ef872ac55a66773f1fbe991d677b3f40363312cb89e243f2cdfa8926e8e9f1cd830b15d074a2c566819412038a7a1038601349501cb0858b2301d13327f8edf796fb0fd026442ca8b0205bf5ae2174424d00f784c15cc33bb129e4dbd3136b46b672d8f587322a9ba83874259e2c03dfe6f91a23370e71c84c0aad77800b8657dd", 0x9b}, {&(0x7f0000000a80)="b816e9b66c311b170ccabac192c12b27e71318b79758e626327fdbf134ce350eac57830e4b894eb4d39591cd50033e4c229ac03179c3ddef698977efed1e661e706a36500ab5ea1ab8794ba6", 0x4c}], 0x6, 0x0, 0x0, 0x8000}, {&(0x7f0000000200)=@in6={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7cdff477}, 0x1c, &(0x7f0000000c00)=[{&(0x7f0000000b80)="35e68023a04567ca8a88655e1433101e80f4cf6718425d4039e234a0", 0x1c}, {&(0x7f0000000bc0)="12c6ad8e", 0x4}], 0x2, &(0x7f00000021c0)=ANY=[@ANYBLOB="18000000000000008400000007000000e00000020000000030000000000000008400000001000000010000000082000009000000040000000700000001000000f05effff", @ANYRES32=0x0, @ANYBLOB="fb3effffffffffff84000000", @ANYRES32=r2, @ANYBLOB="180000000000000084000000060000000100000000000000180000000000000084000000050000001000000036000000180000000000000084000000050000000000000006000000"], 0xb0, 0x24008820}], 0x2, 0x40) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r3, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x9, 0x3, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x400000000000004, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0xfffffffc, 0x7]}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) writev(r4, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x4000, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xffffff7f, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0xfffffffe, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x2, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x8, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x61, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef529685167ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db7010003000000d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100", 0xd8}], 0x1}, 0x60044884) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) 3m18.85727446s ago: executing program 9 (id=1056): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000000000000850000002a000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x609, 0xe, 0x0, &(0x7f0000000140)="dd800000000060ff5d8ec6f10000", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3m18.027849394s ago: executing program 9 (id=1057): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x2f, 0x0, @remote, @local, {[], {{0x2000, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0) pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() prlimit64(r4, 0x6, &(0x7f0000000140)={0x1000, 0xfffffffffffffffa}, &(0x7f0000000300)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500003f"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3m17.269829636s ago: executing program 3 (id=1058): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'trylock', ' ', 'io'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000240)={'virt_wifi0\x00', 0x7}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "0080000000000080ffffffffffffff", "0c598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) socket$nl_netfilter(0x10, 0x3, 0xc) 3m17.266013019s ago: executing program 9 (id=1059): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xb17b1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000740)="a2603b1199e69fdd63d70a07a2fc6dc85953b250592986bc92020ef3c3c1a7671f5f748f2ec0fda5857d7f0a8f0f21a8fde99045f865f7395480345fb9e7da2c26a2d9dc91f4f4a1f651d380007cf6ddd7374eb000004a5951ec346c14a1a45c153e9ee256e3a39d422069db638059db95519580e3a190207d127a33b689053b3a464f127a4bf24c90f619c145d570ae856fb58afbacc092cd476b001fd3fbbb859254b24bf45dd72ed6b04ae7a3a432d20c52c61cf50c2e63c1484701e0700e8e814e465bf93a48b4d899ba4134353ddfed35f19f20e2db4018f8d3", 0xdc}, {&(0x7f00000005c0)="265c9b199cd1729cf983f2993e0234241661b7b3fd10c2275f49843f907100ccc9b05bc470f692d99fb56b15b72c5b5ab43185c424e4447c", 0x38}, {&(0x7f0000000840)="0f1026691da6ec72894681992959a6e0073842fbadd6f8a64207c74dea0f60450d49d8b5d9f6bad6f0ca40e4f9c9937f8bb33f5432d823e3f8546243aa9e8fb9d8d56b005d98dc14d6b222b82f9143df7a1ad9de3899f8f7be07c3baf83de37232f202323a5a3e34020f87fead9cc550a59590762680b8b80500139bca1fe8972d3385c905fa7742af06edb92786bdae0938ca694c5f6df4cba0efc4559532c822b9f3ba1678ba4c6cc711d6b2e66fa0ee96987858e68c81979ef5e039088d565e3bf5c6cc18652fec6c5601a16e64a57f3a51164e0be0ffa99e01e203d869563190b2efcac6", 0xe6}, {&(0x7f0000000940)="f961415933170cb5b2464f537c0fddef95ce13573b5aeeaef29241ed38637d98a5840731450944b13ab9c599093bd960e44ef7d515bd641b9ed75293e16dcc76df044d8c72216dcb6e1c13c458ad9d6e4f1230b3b22156f007c86730d5385ef5923b01200e769ac07bd2d9c9b6eb8e6530dca875c29451d23ddc804557f86d86edc7c1e166c05e7cc20224da3743cf79fa757e37011df9af5e7c6ba24d2291946239073cc171bc172eaf7ca7dc32c6f3b00638137973f11b1eda6fc6629e0cd721", 0xc1}, {&(0x7f0000000600)="98b69ca4863a4c95acca4fcc4f68a2f62ff8ead3a51f9db3932ddc9411e9e72ccaffa618a311657452881bbae81916946eb6cfa69e0e4cd1d39d34b2f4925eba31af1aa1183456219dd349c3ddee6e6fbdf56053b692b75ee1fd5d244b8f085c0b14", 0x62}], 0x5, &(0x7f0000000c40)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000101c000000000010000100210002c60000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x8000}}], 0x1, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0300001100010027bd7000fddbdf", @ANYRES32, @ANYBLOB="80140000042100001400140076657468305f746f5f68737200000000080028002595000008002300ff0300000a000200aaaaaaaaaaaa000008001c"], 0x35c}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009a8d373d4887960744bb90802000000", @ANYRES32=r6, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4e1e, @local}}, {{0x2, 0x4e1f, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000280)={0x8, {{0x2, 0x4e1f, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x42600, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 3m15.716100034s ago: executing program 3 (id=1064): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0xa0b41, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000280)={0x48, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000024000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x13a0e000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000005200010000000000000000000a0000000c01e5b2c4f2e6f9a3119987"], 0x20}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x8000}, 0x20008044) connect$unix(r2, &(0x7f0000000040)=@abs, 0x6e) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, @in6={0xa, 0x4e23, 0xa8, @mcast1, 0xfa0}], 0x58) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m14.276877487s ago: executing program 3 (id=1068): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x2f, 0x0, @remote, @local, {[], {{0x2000, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0) pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() prlimit64(r4, 0x6, &(0x7f0000000140)={0x1000, 0xfffffffffffffffa}, &(0x7f0000000300)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500003f"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3m11.842836359s ago: executing program 3 (id=1071): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x9, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00', r1, 0x69000000}, 0x18) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$binfmt_script(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) link(0x0, &(0x7f0000000300)='./bus\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_ts_info}) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x40000002}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 3m9.101285958s ago: executing program 6 (id=1074): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) fsync(r2) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r2, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0xab2f, @private2, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000001180)="a7", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x4, @empty, 0xc}}, 0x1, 0x2}, &(0x7f0000000340)=0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3m6.596866593s ago: executing program 6 (id=1076): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_MCAST_MLD_VERSION={0x5}]}}}]}, 0x44}, 0x1, 0xffffffea}, 0x0) 3m6.238808665s ago: executing program 6 (id=1077): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x200) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) socket$pppoe(0x18, 0x1, 0x0) sendto$inet(r0, &(0x7f00000002c0)="f0cdcf2af7e6c275", 0x8, 0xe61e2840a554b0d0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) 3m6.014052431s ago: executing program 6 (id=1078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000080000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2024) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) write$FUSE_LK(r1, &(0x7f0000002240)={0x28, 0x0, r2, {{0x6, 0x7fffffffffffffff, 0x2, r3}}}, 0x28) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, r5, 0x0) 3m5.75604386s ago: executing program 6 (id=1080): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x2f, 0x0, @remote, @local, {[], {{0x2000, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0) pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() prlimit64(r4, 0x6, &(0x7f0000000140)={0x1000, 0xfffffffffffffffa}, &(0x7f0000000300)) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500003f"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3m3.208909733s ago: executing program 6 (id=1083): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'trylock', ' ', 'io'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000240)={'virt_wifi0\x00', 0x7}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "0080000000000080ffffffffffffff", "0c598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) socket$nl_netfilter(0x10, 0x3, 0xc) 3m2.136256561s ago: executing program 39 (id=1059): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) r2 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xb17b1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000740)="a2603b1199e69fdd63d70a07a2fc6dc85953b250592986bc92020ef3c3c1a7671f5f748f2ec0fda5857d7f0a8f0f21a8fde99045f865f7395480345fb9e7da2c26a2d9dc91f4f4a1f651d380007cf6ddd7374eb000004a5951ec346c14a1a45c153e9ee256e3a39d422069db638059db95519580e3a190207d127a33b689053b3a464f127a4bf24c90f619c145d570ae856fb58afbacc092cd476b001fd3fbbb859254b24bf45dd72ed6b04ae7a3a432d20c52c61cf50c2e63c1484701e0700e8e814e465bf93a48b4d899ba4134353ddfed35f19f20e2db4018f8d3", 0xdc}, {&(0x7f00000005c0)="265c9b199cd1729cf983f2993e0234241661b7b3fd10c2275f49843f907100ccc9b05bc470f692d99fb56b15b72c5b5ab43185c424e4447c", 0x38}, {&(0x7f0000000840)="0f1026691da6ec72894681992959a6e0073842fbadd6f8a64207c74dea0f60450d49d8b5d9f6bad6f0ca40e4f9c9937f8bb33f5432d823e3f8546243aa9e8fb9d8d56b005d98dc14d6b222b82f9143df7a1ad9de3899f8f7be07c3baf83de37232f202323a5a3e34020f87fead9cc550a59590762680b8b80500139bca1fe8972d3385c905fa7742af06edb92786bdae0938ca694c5f6df4cba0efc4559532c822b9f3ba1678ba4c6cc711d6b2e66fa0ee96987858e68c81979ef5e039088d565e3bf5c6cc18652fec6c5601a16e64a57f3a51164e0be0ffa99e01e203d869563190b2efcac6", 0xe6}, {&(0x7f0000000940)="f961415933170cb5b2464f537c0fddef95ce13573b5aeeaef29241ed38637d98a5840731450944b13ab9c599093bd960e44ef7d515bd641b9ed75293e16dcc76df044d8c72216dcb6e1c13c458ad9d6e4f1230b3b22156f007c86730d5385ef5923b01200e769ac07bd2d9c9b6eb8e6530dca875c29451d23ddc804557f86d86edc7c1e166c05e7cc20224da3743cf79fa757e37011df9af5e7c6ba24d2291946239073cc171bc172eaf7ca7dc32c6f3b00638137973f11b1eda6fc6629e0cd721", 0xc1}, {&(0x7f0000000600)="98b69ca4863a4c95acca4fcc4f68a2f62ff8ead3a51f9db3932ddc9411e9e72ccaffa618a311657452881bbae81916946eb6cfa69e0e4cd1d39d34b2f4925eba31af1aa1183456219dd349c3ddee6e6fbdf56053b692b75ee1fd5d244b8f085c0b14", 0x62}], 0x5, &(0x7f0000000c40)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000101c000000000010000100210002c60000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x120, 0x8000}}], 0x1, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0300001100010027bd7000fddbdf", @ANYRES32, @ANYBLOB="80140000042100001400140076657468305f746f5f68737200000000080028002595000008002300ff0300000a000200aaaaaaaaaaaa000008001c"], 0x35c}, 0x1, 0x0, 0x0, 0x40}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000009a8d373d4887960744bb90802000000", @ANYRES32=r6, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000140)={0x8, {{0x2, 0x4e1e, @local}}, {{0x2, 0x4e1f, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000280)={0x8, {{0x2, 0x4e1f, @empty=0xe0000000}}, {{0x2, 0x4e23, @local}}}, 0x108) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x42600, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 3m0.420864396s ago: executing program 7 (id=1088): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) write(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141201, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r6, 0x701, 0x0, 0x0, {0x45, 0x0, 0x4100}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 2m59.358461145s ago: executing program 7 (id=1089): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000007bc0)={0x2, 0x4e21, @local}, 0x10) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='4:,:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f00000002c0)=0x3) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x384d, 0x10}, &(0x7f0000000100)=0xc) sendto$inet(r2, &(0x7f00000004c0)="e29da4dc449c30a28869a4c31c15d924907718516abcb7bd3ab9e102ae178d4e874728ce29a43abe2d91d327043a35a8041fd8361cc13f4ac1199f84e91e7ec3aae97139e4cf35035d21c27d759af65a777b598f38949e7168598f042a17be078443ddc39d557fe176c46b5375eb69adc9d4ec6966e53ba52f5d73761cc86d90dffb62dd0203679d0ad6f1ad679ffaa3eb0bb781a9c54d5aa8aaf2d66a0e61b92f1468ebfeda72df69d7ecc1ea3ad2b6501ed56dd14f4ec4614895ab7b2c1e0bc857", 0xc2, 0x0, &(0x7f0000000400)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000480)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './bus/../file0'}}]}) 2m59.12155549s ago: executing program 7 (id=1090): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(&(0x7f0000000740), 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0xa000005, 0x0, 0x0, 0x7, 0x80000000}) 2m58.045201634s ago: executing program 7 (id=1091): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'trylock', ' ', 'io'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r6, &(0x7f00000083c0)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000240)={'virt_wifi0\x00', 0x7}) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664e261326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "0080000000000080ffffffffffffff", "0c598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r10, r6, 0x80000) 2m56.851033525s ago: executing program 7 (id=1092): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x2f, 0x0, @remote, @local, {[], {{0x2000, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0) pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() prlimit64(r4, 0x6, &(0x7f0000000140)={0x1000, 0xfffffffffffffffa}, &(0x7f0000000300)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 2m56.752214052s ago: executing program 40 (id=1071): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x9, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x7d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00', r1, 0x69000000}, 0x18) r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$binfmt_script(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) link(0x0, &(0x7f0000000300)='./bus\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_ts_info}) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x40000002}) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 2m56.053031077s ago: executing program 7 (id=1094): socket$igmp(0x2, 0x3, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m48.122161972s ago: executing program 41 (id=1083): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000040)=@other={'trylock', ' ', 'io'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$sock_SIOCDELDLCI(r5, 0x8981, &(0x7f0000000240)={'virt_wifi0\x00', 0x7}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "0080000000000080ffffffffffffff", "0c598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) socket$nl_netfilter(0x10, 0x3, 0xc) 2m40.408488659s ago: executing program 42 (id=1094): socket$igmp(0x2, 0x3, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x6, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2m33.841184967s ago: executing program 2 (id=1115): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) unshare(0x480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r5}}, 0x30) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0952001f46c773a85c5a45c70f8940939649830b943bc33b7119d4600b403891a63ad716d55e00968f75e47c05a8aca4be81a621110c2d72dfcc7900df7bfa91af2310c174878c3b0ff6defd9c32c121c4054bd208a29fee91faf018e7c0870899545da9f85a3044907aa09a8d793df85b476e69d2a52730585cdbaaffabe3d18ec5570f8775d3a49402b7ca1bccf9d6bcea6", @ANYRES64=r7, @ANYRES16=r6, @ANYRES8, @ANYRESOCT=r7], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYRES64=r8, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000ca42272860007000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r8, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r7) 2m32.169779803s ago: executing program 2 (id=1117): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_io_uring_setup(0xa94, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0x7ff, &(0x7f0000000100)=0x0) r6 = eventfd2(0x8, 0x0) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r8 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) close(0x3) ftruncate(r8, 0xffff) fcntl$addseals(r8, 0x409, 0x3) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x8000}) io_submit(r5, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r6, 0x0}]) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x444000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 2m31.328828036s ago: executing program 2 (id=1118): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000040)={0x2a, 0x29, 0x2, {0x0, [{{0x44, 0x2, 0x3}, 0x10000, 0x0, 0x7, './file1'}]}}, 0x2a) fcntl$setstatus(r1, 0x4, 0x42000) read$FUSE(r1, &(0x7f0000001440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r1, &(0x7f0000000200)={0x60, 0x0, r2, {{0x9, 0x5, 0x5, 0x2, 0x400069a, 0xae, 0x2400000, 0x800}}}, 0xfffffec2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @multicast2}], 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="04010000", @ANYRES16=r5, @ANYBLOB="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"], 0x104}, 0x1, 0x9000000, 0x0, 0x200040c0}, 0x880) 2m30.326004509s ago: executing program 2 (id=1119): openat$cachefiles(0xffffff9c, &(0x7f0000000700), 0x40, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000009b19cd1f0000000000007b37c55950d5e742ff01000800"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f18e55afb9fdd672bad09dd4a7ccd2dfa8237788bb71f36b177a63fb78c7699c74e891a0c708000100134545000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ptrace(0x10, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400), 0xc) socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r7, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) 2m28.560835481s ago: executing program 2 (id=1121): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x2f, 0x0, @remote, @local, {[], {{0x2000, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0) pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() prlimit64(r5, 0x6, &(0x7f0000000140)={0x1000, 0xfffffffffffffffa}, &(0x7f0000000300)) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500003f"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 2m27.731808785s ago: executing program 2 (id=1123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2081, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0x5, 0x5, 0x6, 0x10, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bind$netrom(r0, &(0x7f0000000580)={{0x3, @null, 0x8}, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x1000, 0xa45b, {r4}, {r6}, 0xfff, 0x4408}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0x9, 0x200b, 0x1}) shutdown(r3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x23, 0x8, 0x7ffd}, 0x50) 2m12.509640517s ago: executing program 43 (id=1123): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2081, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0x5, 0x5, 0x6, 0x10, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bind$netrom(r0, &(0x7f0000000580)={{0x3, @null, 0x8}, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000000)={0x1000, 0xa45b, {r4}, {r6}, 0xfff, 0x4408}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0x9, 0x200b, 0x1}) shutdown(r3, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x23, 0x8, 0x7ffd}, 0x50) 19.57806779s ago: executing program 4 (id=1370): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x189040, 0x10a) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) chdir(&(0x7f0000000100)='./file1\x00') sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x16, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 15.753204546s ago: executing program 4 (id=1379): r0 = geteuid() setresuid(0xee01, 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001280)={r2, 0x217, {0x2a12, 0x80010000, 0x0, 0x10000000000000, 0x4, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea80000000000000002000000deff0000100000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x8a2]}}) mq_open(0x0, 0x2, 0x61, &(0x7f0000000480)={0x0, 0x2, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) tkill(0x0, 0x11) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 12.420925812s ago: executing program 0 (id=1382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) pipe2$9p(0x0, 0x4000) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xfe) 12.2012281s ago: executing program 4 (id=1383): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(0x0, &(0x7f0000000180)=0xfffffffa) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'ip6gretap0\x00', &(0x7f0000000480)=@ethtool_coalesce={0xf, 0x1, 0x0, 0x2, 0xc29, 0x6179, 0x8, 0x4, 0xc, 0x8, 0x90, 0xc, 0x80000000, 0x800, 0xfffff800, 0x400, 0x4b2800, 0x8, 0xf, 0x9, 0x5, 0x80, 0x80000001}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) 11.694113674s ago: executing program 1 (id=1384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x806d2a171408bfe5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x289, &(0x7f0000000300)={0x0, 0x932, 0x20000, 0x2, 0x23a}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "bd72e4d0477aa21b3d9872d5b18c0cbd"}) r2 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x7) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3a}, 0x1c) r9 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r9, &(0x7f0000000540)={'#! ', './file0', [{0x20, '\x86\x81\t\n\xac\"\xff4l\xaa\x91\xec\x99M.p\xdc4\x0e\x1c\xdf\xd3\xd4\x8d\xad\x99\x1c\xae\xb2vt\r@0K\x989\x1c\xd7%\x82\x94\x05\x06\xbeJ\x90\xd8&\xa6?~\x88\x01;\r7\xdf\xb7\xfb\x85\x133\x17I\xb4\xbc`7\xda\x91\xefP0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}]}, 0x34}}, 0x0) 10.037016645s ago: executing program 5 (id=1386): syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x79, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) socket(0xb, 0x6, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c1415f74c0053934c2bb05c7d09000000fffffdfd2c1eba54d11e47a700"}) 9.833677825s ago: executing program 5 (id=1387): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_io_uring_setup(0xa94, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0x7ff, &(0x7f0000000100)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) close(0x3) fcntl$addseals(r5, 0x409, 0x3) 8.579197202s ago: executing program 5 (id=1388): ioperm(0x0, 0x8, 0x8000000000004) syz_usb_connect(0x700, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="120100008e88052086800095d8b6010203010902"], 0x0) 8.490320776s ago: executing program 1 (id=1389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) unshare(0x480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r5}}, 0x30) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000007", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0952001f46c773a85c5a45c70f8940939649830b943bc33b7119d4600b403891a63ad716d55e00968f75e47c05a8aca4be81a621110c2d72dfcc7900df7bfa91af2310c174878c3b0ff6defd9c32c121c4054bd208a29fee91faf018e7c0870899545da9f85a3044907aa09a8d793df85b476e69d2a52730585cdbaaffabe3d18ec5570f8775d3a49402b7ca1bccf9d6bcea6", @ANYRES64=r7, @ANYRES16=r6, @ANYRES8, @ANYRESOCT=r7], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYRES64=r8, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000ca42272860007000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r8, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r7) 7.810184502s ago: executing program 0 (id=1391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x129100) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000600)={{0x3, 0x3, 0x8, 0x0, 0x6}, 0x7fff, 0x81, 'id1\x00', 'timer1\x00', 0x0, 0xffffffffffffff01, 0xf, 0xfffffffeffffffff, 0x3}) r7 = syz_pidfd_open(r5, 0x0) pidfd_send_signal(r7, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r3, @ANYBLOB="9500"/25, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000000000500"/28], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x2, 0x4, 0x0, 0x6, 0x0, 0x883d}, 0x29) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r8, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)=[0x7, 0x5, 0x2c, 0x5], &(0x7f0000000240)=[0x2], 0x0, 0x4}}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000fc07010200f4ffffffffffff0200000000000600024089145e3d82f14a1a3c83"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 6.947790142s ago: executing program 1 (id=1392): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_emit_ethernet(0x62, &(0x7f0000000240)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x24, 0x2f, 0x0, @remote, @local, {[], {{0x2000, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x80, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @timestamp={0x8, 0xa, 0x1, 0x5}]}}}}}}}}, 0x0) pivot_root(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file0\x00') mount$fuse(0x0, 0x0, 0x0, 0x2b3c094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() prlimit64(r5, 0x6, &(0x7f0000000140)={0x1000, 0xfffffffffffffffa}, &(0x7f0000000300)) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500003f"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) 6.465947418s ago: executing program 8 (id=1393): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f0000000180)=0xfffffffa) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000040)=ANY=[@ANYBLOB="a2a2359b8d", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r5 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) dup(r8) 5.84100207s ago: executing program 0 (id=1394): sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f00000002c0)={0xa4, 0x0, 0x1}) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x7f) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) preadv(r2, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000180)=""/34, 0x22}], 0x2, 0x583, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.907410169s ago: executing program 5 (id=1395): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) pipe2$9p(0x0, 0x4000) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x2) ioctl$TIOCSETD(r6, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0xff) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xfe) 4.887237809s ago: executing program 4 (id=1396): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffffff840000027c0000000039a0040008000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) 4.788436883s ago: executing program 1 (id=1397): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000080000580001c0"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x161283, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x2000000, [{}]}) 4.636149735s ago: executing program 8 (id=1398): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prlimit64(r0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_io_uring_setup(0xa94, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x2}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001b00)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) io_setup(0x7ff, &(0x7f0000000100)) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) close(0x3) fcntl$addseals(r5, 0x409, 0x3) 4.416934863s ago: executing program 4 (id=1399): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x806d2a171408bfe5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x289, &(0x7f0000000300)={0x0, 0x932, 0x20000, 0x2, 0x23a}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000100)={0x0, 0x0, "bd72e4d0477aa21b3d9872d5b18c0cbd"}) r2 = fsopen(&(0x7f0000000180)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x7) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r4, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3a}, 0x1c) r9 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r9, &(0x7f0000000540)={'#! ', './file0', [{0x20, '\x86\x81\t\n\xac\"\xff4l\xaa\x91\xec\x99M.p\xdc4\x0e\x1c\xdf\xd3\xd4\x8d\xad\x99\x1c\xae\xb2vt\r@0K\x989\x1c\xd7%\x82\x94\x05\x06\xbeJ\x90\xd8&\xa6?~\x88\x01;\r7\xdf\xb7\xfb\x85\x133\x17I\xb4\xbc`7\xda\x91\xefP0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x4, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4, 0x5}}]}, 0x34}}, 0x0) 3.500309323s ago: executing program 5 (id=1402): r0 = socket$kcm(0x29, 0x4, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d05, 0x0, 0x9}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r5}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_j1939(0x1d, 0x2, 0x7) memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x1fe, 0x121040) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000580)=ANY=[@ANYRES64=r8, @ANYRES64=r7]) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)='O', 0x1}], 0x1}, 0x44000044) timerfd_create(0x4, 0x80000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, 0x0, 0x25, 0x16, @void}, 0x10) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2701, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000000)={0xfffffffe, "94c408213d36be01d7000000000000e1100ad985544600"}) sendfile(r6, r10, 0x0, 0x200) 2.352821687s ago: executing program 8 (id=1403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x408, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket(0x2a, 0x800000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) r8 = timerfd_create(0x0, 0x0) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r7, 0x8002}], 0x1, 0x0, &(0x7f0000000200)={[0x87a]}, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x0) dup2(r6, r7) r9 = getpgid(0x0) fcntl$setown(r6, 0x8, r9) tkill(r5, 0x13) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 1.702542941s ago: executing program 8 (id=1404): socket$igmp(0x2, 0x3, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.467597878s ago: executing program 5 (id=1405): openat$random(0xffffffffffffff9c, 0x0, 0x40002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0x0}) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0xb0, 0xa, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xaca}}, {{{0x9, 0x5, 0x81, 0x3, 0x1bf, 0x4, 0x86, 0x2}}}}}]}}]}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000005ec0)=""/102394, &(0x7f0000000040)=0x18ffa) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000037400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x4000}, 0x0) 1.188819154s ago: executing program 8 (id=1406): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) semget$private(0x0, 0x7, 0x428) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280080007400000000c0500020000000000080003405700004a08000640000000", @ANYRES16=r1], 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) semop(0x0, &(0x7f00000002c0)=[{0x0, 0xff}, {0x0, 0x1f}, {0x4, 0x202}, {0x0, 0x8, 0x1000}, {0x0, 0xfff}], 0x26) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000300)="062586c0d44dc999855a9d3cefd7768dfec2125480724340518100"/43, 0x2b}, {&(0x7f0000001340)="f7bfadd032", 0x5}], 0x2) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8804"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r6, 0x207a98, 0x0, 0x0, 0x0, 0x0) 753.843528ms ago: executing program 4 (id=1407): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(0x0, &(0x7f0000000180)=0xfffffffa) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'ip6gretap0\x00', &(0x7f0000000480)=@ethtool_coalesce={0xf, 0x1, 0x0, 0x2, 0xc29, 0x6179, 0x8, 0x4, 0xc, 0x8, 0x90, 0xc, 0x80000000, 0x800, 0xfffff800, 0x400, 0x4b2800, 0x8, 0xf, 0x9, 0x5, 0x80, 0x80000001}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ebffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) 663.149523ms ago: executing program 8 (id=1408): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6000000000303a00fe880000000000000000000000000101ff020000000000000000000000000001020090faffffff03608cb02b00043b0000000000000000000000000000000001fe8000000000000000000000000000aa"], 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) listen(0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102384, 0x18ff0) r3 = syz_io_uring_setup(0x45b4, &(0x7f00000035c0)={0x0, 0x0, 0x10100, 0x200000}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0}) io_uring_enter(r3, 0x291c, 0x0, 0x0, 0x0, 0x0) keyctl$revoke(0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000300), 0x8) 270.707682ms ago: executing program 1 (id=1409): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r2, 0x0, 0x201e00) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x8000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280), 0x95, 0x0, &(0x7f0000000340)="c89f13046e29930834bd0da912b3da6ad7f84c8ec0410f8994a5f70047b6e99ec1f6bc3e9a33c2ff7678224785c1c5c19b5eb607cef6ee0e0643d782f2e7466cd7bd6787a34c529fa48349d60975d5cf23801fbb23e12ae58a01b42bb316c4494c4531b9d07f1d9c6fc89f4e0ea0190e7c3c22652cb980103b7aeb1183c3a499cd3881bf1bfd918dde8d9ebe0dba55d392a5a4a6af"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x0, 0x800) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x1e0000}, 0x18) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffff9) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, &(0x7f0000000040)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000440)={0x98, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) unshare(0x4020400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000080000000000000000000000040000000000000423b012098c1ab7099765779c20ff20b9b2f3fa14982b53bf8ee291f740206f4f7f9e9ce9ef524ae820066b0838aa8df8fe945ddf89ad5ef4d1431b2f3a6fc4661c7744b6d183a599fe6cc737c547c8dcf512680d16"], 0x0, 0x26}, 0x20) 0s ago: executing program 0 (id=1410): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea048500000050"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$cec(&(0x7f0000000280), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", '\x00', "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc56849f6236eb1c3c"]}) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x40b80) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664e261326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) kernel console output (not intermixed with test programs): 99.189762][ T9552] bridge_slave_1: entered allmulticast mode [ 499.202765][ T9552] bridge_slave_1: entered promiscuous mode [ 499.247532][ T9511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.260086][ T9511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.294670][ T9511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.356103][ T9552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.378291][ T9552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.505590][ T9552] team0: Port device team_slave_0 added [ 499.518536][ T9552] team0: Port device team_slave_1 added [ 499.537141][ T9511] hsr_slave_0: entered promiscuous mode [ 499.548116][ T9511] hsr_slave_1: entered promiscuous mode [ 499.555248][ T9511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.563183][ T9511] Cannot create hsr debugfs directory [ 499.637163][ T9552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.644637][ T9552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.677782][ T9552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.724438][ T9552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.734039][ T9552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.760199][ T9552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.865233][ T6033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.881819][ T6033] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.026564][ T6033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.040985][ T6033] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.128371][ T9552] hsr_slave_0: entered promiscuous mode [ 500.136405][ T9552] hsr_slave_1: entered promiscuous mode [ 500.149232][ T9552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.157246][ T9552] Cannot create hsr debugfs directory [ 500.185882][ T6033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.196554][ T6033] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.286770][ T6033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.297567][ T6033] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.558735][ T9511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 500.597178][ T9511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 500.634397][ T9511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 500.703904][ T9511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 500.768892][ T6033] bridge_slave_1: left allmulticast mode [ 500.776582][ T6033] bridge_slave_1: left promiscuous mode [ 500.783330][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.796163][ T6033] bridge_slave_0: left allmulticast mode [ 500.804916][ T6033] bridge_slave_0: left promiscuous mode [ 500.813910][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.414341][ T6033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.427636][ T6033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.440404][ T6033] bond0 (unregistering): Released all slaves [ 501.550088][ T6033] tipc: Left network mode [ 501.619983][ T9552] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 501.652747][ T9552] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 501.702287][ T9552] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 501.725842][ T9552] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 501.933085][ T9511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.036825][ T9511] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.065284][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.072519][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.106932][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.114143][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.140521][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.148332][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.157079][ T6033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.164851][ T6033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.193141][ T6033] veth1_macvtap: left promiscuous mode [ 502.198759][ T6033] veth0_macvtap: left promiscuous mode [ 502.210580][ T6033] veth1_vlan: left promiscuous mode [ 502.216803][ T6033] veth0_vlan: left promiscuous mode [ 502.730181][ T6033] team0 (unregistering): Port device team_slave_1 removed [ 502.775940][ T6033] team0 (unregistering): Port device team_slave_0 removed [ 503.397401][ T9552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.426947][ T9552] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.486377][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.493639][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.520266][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.527536][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.815683][ T9511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.020198][ T9552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.509162][ T9511] veth0_vlan: entered promiscuous mode [ 504.547432][ T9511] veth1_vlan: entered promiscuous mode [ 504.639847][ T9511] veth0_macvtap: entered promiscuous mode [ 504.689470][ T9511] veth1_macvtap: entered promiscuous mode [ 504.746844][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.773461][ T9552] veth0_vlan: entered promiscuous mode [ 504.795828][ T9552] veth1_vlan: entered promiscuous mode [ 504.813944][ T9511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.839404][ T9511] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.856666][ T9511] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.866777][ T9511] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.876045][ T9511] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.939311][ T9552] veth0_macvtap: entered promiscuous mode [ 504.970214][ T9552] veth1_macvtap: entered promiscuous mode [ 505.036806][ T9552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.067843][ T9552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.099609][ T3465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.112825][ T9552] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.125375][ T3465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.132820][ T9552] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.143147][ T9552] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.152285][ T9552] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.238976][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.276717][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.361597][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.387226][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.474230][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.500415][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.528644][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.911'. [ 507.167940][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.174398][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.370752][ T5893] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 507.781840][ T5893] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 507.810923][ T5893] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217 [ 507.848718][ T5893] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 507.878535][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.937859][ T5893] usb 8-1: config 0 descriptor?? [ 507.971787][ T9792] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 508.317790][ T5893] ath6kl: Failed to submit usb control message: -71 [ 508.320611][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 508.327030][ T5893] ath6kl: unable to send the bmi data to the device: -71 [ 508.340998][ T5893] ath6kl: Unable to send get target info: -71 [ 508.348612][ T5893] ath6kl: Failed to init ath6kl core: -71 [ 508.356130][ T5893] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 508.379460][ T5893] usb 8-1: USB disconnect, device number 2 [ 508.504394][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 508.527161][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 508.657591][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 508.669147][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 509.330953][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.957'. [ 509.745448][ T9828] netlink: 12 bytes leftover after parsing attributes in process `syz.7.958'. [ 510.840772][ T5837] Bluetooth: hci1: command tx timeout [ 511.192105][ T3465] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.679570][ T9810] chnl_net:caif_netlink_parms(): no params data found [ 511.959269][ T3465] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.405421][ T3465] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.698919][ T3465] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.769731][ T8922] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 512.780281][ T8922] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 512.791061][ T8922] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 512.803179][ T8922] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 512.811770][ T8922] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 512.952585][ T8922] Bluetooth: hci1: command tx timeout [ 513.049547][ T5900] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 513.407160][ T9810] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.430987][ T9810] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.481065][ T9810] bridge_slave_0: entered allmulticast mode [ 513.489048][ T9810] bridge_slave_0: entered promiscuous mode [ 513.501093][ T5900] usb 8-1: device descriptor read/64, error -71 [ 513.616558][ T9877] team0: Port device team_slave_0 removed [ 513.627298][ T9877] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 513.648004][ T9810] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.658617][ T9810] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.667218][ T9810] bridge_slave_1: entered allmulticast mode [ 513.683466][ T9810] bridge_slave_1: entered promiscuous mode [ 513.740837][ T5900] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 513.890865][ T5900] usb 8-1: device descriptor read/64, error -71 [ 514.031607][ T5900] usb usb8-port1: attempt power cycle [ 514.478178][ T9810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.539502][ T9810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.780882][ T5900] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 514.826873][ T5900] usb 8-1: device descriptor read/8, error -71 [ 514.921152][ T8922] Bluetooth: hci5: command tx timeout [ 514.933233][ T9810] team0: Port device team_slave_0 added [ 514.947862][ T3465] bridge_slave_1: left allmulticast mode [ 514.960502][ T3465] bridge_slave_1: left promiscuous mode [ 514.972945][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.989984][ T3465] bridge_slave_0: left allmulticast mode [ 515.003227][ T3465] bridge_slave_0: left promiscuous mode [ 515.011073][ T8922] Bluetooth: hci1: command tx timeout [ 515.023871][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.091571][ T5900] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 515.129528][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.150417][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.171083][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.189242][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.200887][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.209240][ T5900] usb 8-1: device descriptor read/8, error -71 [ 515.321710][ T5900] usb usb8-port1: unable to enumerate USB device [ 515.805664][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.818461][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.845977][ T3465] bond0 (unregistering): Released all slaves [ 516.219068][ T9810] team0: Port device team_slave_1 added [ 517.003842][ T8922] Bluetooth: hci5: command tx timeout [ 517.090833][ T8922] Bluetooth: hci1: command tx timeout [ 517.330820][ T8922] Bluetooth: hci0: command tx timeout [ 518.856412][ T9916] tipc: Enabling of bearer rejected, failed to enable media [ 519.045508][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.063058][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.106668][ T8922] Bluetooth: hci5: command tx timeout [ 519.241877][ T9810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.402171][ T8922] Bluetooth: hci0: command tx timeout [ 519.521289][ T9810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.550932][ T9810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.648562][ T9931] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x42474752, 6, 0, 5, 0) [ 519.660802][ T9810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.947371][ T9871] chnl_net:caif_netlink_parms(): no params data found [ 520.011475][ T9927] mmap: syz.6.978 (9927): VmData 25767936 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 520.203239][ T9810] hsr_slave_0: entered promiscuous mode [ 520.219430][ T9810] hsr_slave_1: entered promiscuous mode [ 520.233465][ T9810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.245423][ T9810] Cannot create hsr debugfs directory [ 520.324716][ T3465] hsr_slave_0: left promiscuous mode [ 520.334620][ T3465] hsr_slave_1: left promiscuous mode [ 520.351585][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.359086][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.421259][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.428773][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.503297][ T3465] veth1_macvtap: left promiscuous mode [ 520.510051][ T3465] veth0_macvtap: left promiscuous mode [ 520.517836][ T3465] veth1_vlan: left promiscuous mode [ 520.524352][ T3465] veth0_vlan: left promiscuous mode [ 521.225146][ T8922] Bluetooth: hci5: command tx timeout [ 521.481769][ T8922] Bluetooth: hci0: command tx timeout [ 523.936224][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 523.982889][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 524.281063][ T8922] Bluetooth: hci0: command tx timeout [ 525.752274][ T9871] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.759552][ T9871] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.768277][ T9871] bridge_slave_0: entered allmulticast mode [ 525.776521][ T9871] bridge_slave_0: entered promiscuous mode [ 525.812928][ T9871] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.820150][ T9871] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.846454][ T9871] bridge_slave_1: entered allmulticast mode [ 525.891157][ T9871] bridge_slave_1: entered promiscuous mode [ 526.192006][ T9871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.214782][ T9871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.413163][ T9993] Device name cannot be null; rc = [-22] [ 526.527578][ T9871] team0: Port device team_slave_0 added [ 526.562979][ T9871] team0: Port device team_slave_1 added [ 526.927344][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.969884][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.131331][ T9871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.157073][ T9871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.164170][ T9871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.196380][ T9871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.406356][ T3465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.418131][ T3465] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.493595][ T9895] chnl_net:caif_netlink_parms(): no params data found [ 527.703931][ T3465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.744313][ T3465] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.077664][ T3465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.089454][ T3465] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.665776][ T9871] hsr_slave_0: entered promiscuous mode [ 528.678095][ T9871] hsr_slave_1: entered promiscuous mode [ 528.687630][ T9871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.701197][ T9871] Cannot create hsr debugfs directory [ 528.759761][ T3465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 528.810731][ T3465] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.241583][ T9810] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 529.397282][ T9810] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 530.015444][ T9810] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 530.173899][ T9810] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 530.234987][ T9895] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.242458][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.255632][ T9895] bridge_slave_0: entered allmulticast mode [ 530.269696][ T9895] bridge_slave_0: entered promiscuous mode [ 530.354766][ T9895] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.372491][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.394180][ T9895] bridge_slave_1: entered allmulticast mode [ 530.417135][ T9895] bridge_slave_1: entered promiscuous mode [ 530.547142][T10070] Device name cannot be null; rc = [-22] [ 530.770330][ T9895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.964831][ T9895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.479528][ T3465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.555557][ T9895] team0: Port device team_slave_0 added [ 531.584885][ T9895] team0: Port device team_slave_1 added [ 532.023203][ T3465] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.429372][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 532.455924][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.537006][ T9895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 532.570547][ T9895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 532.585907][ T9895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.637733][ T9895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.716870][ T3465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.796093][ T5929] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 533.935085][ T3465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.945795][ T5929] usb 8-1: device descriptor read/64, error -71 [ 534.003074][T10106] No control pipe specified [ 534.042348][ T9895] hsr_slave_0: entered promiscuous mode [ 534.048856][ T9895] hsr_slave_1: entered promiscuous mode [ 534.056060][ T9895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 534.065480][ T9895] Cannot create hsr debugfs directory [ 534.072343][ T9871] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 534.082839][ T9871] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 534.118248][ T9871] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 534.162173][ T9871] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 534.230825][ T5929] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 534.375083][ T5929] usb 8-1: device descriptor read/64, error -71 [ 534.456604][ T9810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.469353][ T3465] bridge_slave_1: left allmulticast mode [ 534.479784][ T3465] bridge_slave_1: left promiscuous mode [ 534.487130][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.498657][ T3465] bridge_slave_0: left allmulticast mode [ 534.504461][ T3465] bridge_slave_0: left promiscuous mode [ 534.504903][ T5929] usb usb8-port1: attempt power cycle [ 534.510269][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.547172][ T3465] dummy0: left allmulticast mode [ 534.553708][ T3465] bridge0: port 3(dummy0) entered disabled state [ 534.566435][ T3465] bridge_slave_1: left allmulticast mode [ 534.581051][ T3465] bridge_slave_1: left promiscuous mode [ 534.593037][ T3465] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.625159][ T3465] bridge_slave_0: left allmulticast mode [ 534.631719][ T3465] bridge_slave_0: left promiscuous mode [ 534.638373][ T3465] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.928932][ T5929] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 534.965905][ T5929] usb 8-1: device descriptor read/8, error -71 [ 535.093179][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.105793][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.115896][ T3465] bond0 (unregistering): Released all slaves [ 535.212390][ T5929] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 535.241889][ T5929] usb 8-1: device descriptor read/8, error -71 [ 535.351270][ T5929] usb usb8-port1: unable to enumerate USB device [ 535.567134][ T3465] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.608466][ T3465] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.636069][ T3465] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 535.649135][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1006'. [ 535.677064][ T3465] bond0 (unregistering): Released all slaves [ 535.865090][T10120] Device name cannot be null; rc = [-22] [ 536.057669][ T3465] tipc: Left network mode [ 536.214381][ T3465] tipc: Left network mode [ 536.218004][ T9810] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.815112][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.822406][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.892692][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.899884][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.474301][T10142] overlay: Unknown parameter '/dev/cpu/#/msr' [ 537.739650][T10137] ISOFS: Unable to identify CD-ROM format. [ 539.193093][ T9871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.377843][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1011'. [ 539.387066][T10153] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1011'. [ 539.513539][ T9895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 539.813273][ T9895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 541.665178][ T9895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 541.743661][ T9895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 541.794488][ T3465] hsr_slave_0: left promiscuous mode [ 541.828476][ T3465] hsr_slave_1: left promiscuous mode [ 541.874592][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 541.890902][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 541.911750][ T3465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 541.919888][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.005902][ T3465] hsr_slave_0: left promiscuous mode [ 542.168122][ T3465] hsr_slave_1: left promiscuous mode [ 542.222211][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 542.354768][ T3465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.890260][ T3465] veth1_macvtap: left promiscuous mode [ 542.913389][ T3465] veth0_macvtap: left promiscuous mode [ 542.919115][ T3465] veth1_vlan: left promiscuous mode [ 542.952917][ T3465] veth0_vlan: left promiscuous mode [ 543.587105][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 543.634413][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 544.666193][ T3465] team0 (unregistering): Port device team_slave_1 removed [ 544.713915][ T3465] team0 (unregistering): Port device team_slave_0 removed [ 545.308097][ T9871] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.398125][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.405315][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.509228][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.516484][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.608591][ T9810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.680816][T10054] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 545.846406][T10054] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.898669][T10054] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.906880][ T9895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.924524][T10054] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.987865][T10054] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 546.022495][T10054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.034655][T10054] usb 7-1: config 0 descriptor?? [ 546.059121][ T9895] 8021q: adding VLAN 0 to HW filter on device team0 [ 546.167332][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.174885][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.264587][ T3465] IPVS: stop unused estimator thread 0... [ 546.298152][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.305435][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.501698][T10196] kvm: Disabled LAPIC found during irq injection [ 546.585284][T10054] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 546.659540][ T9871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.099242][ T9810] veth0_vlan: entered promiscuous mode [ 547.586596][ T9810] veth1_vlan: entered promiscuous mode [ 547.981141][T10063] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 548.056936][ T9810] veth0_macvtap: entered promiscuous mode [ 548.073322][ T9810] veth1_macvtap: entered promiscuous mode [ 548.114882][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.158458][ T9810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.185675][ T9810] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.211558][ T9810] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.215723][T10221] x_tables: duplicate entry at hook 1 [ 548.220450][ T9810] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.240607][ T9810] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.341559][ T9895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.452195][ T5900] IPVS: starting estimator thread 0... [ 548.460476][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.479407][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.519788][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.539538][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.571519][T10230] IPVS: using max 24 ests per chain, 57600 per kthread [ 548.613664][ T9895] veth0_vlan: entered promiscuous mode [ 548.666540][ T9895] veth1_vlan: entered promiscuous mode [ 548.706003][ T9871] veth0_vlan: entered promiscuous mode [ 548.768440][ T9871] veth1_vlan: entered promiscuous mode [ 548.808289][ T9895] veth0_macvtap: entered promiscuous mode [ 548.848712][T10054] usb 7-1: USB disconnect, device number 2 [ 549.163277][ T9895] veth1_macvtap: entered promiscuous mode [ 549.545938][ T9871] veth0_macvtap: entered promiscuous mode [ 549.794433][ T9871] veth1_macvtap: entered promiscuous mode [ 549.815761][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.827777][ T9871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.843138][ T9895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.873798][ T9871] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.918450][ T9871] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.026260][ T9871] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.075143][ T9871] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.696175][ T9895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.798437][ T9895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.839480][ T9895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.849635][ T9895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.863203][ T9895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.215475][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.243414][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.370798][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.407302][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.459848][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.494523][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.637971][T10246] Bluetooth: (null): Invalid header checksum [ 551.743807][ T56] Bluetooth: (null): Invalid header checksum [ 551.894245][ T56] Bluetooth: (null): Invalid header checksum [ 552.061547][ T56] Bluetooth: (null): Invalid header checksum [ 552.114315][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.137371][ T56] Bluetooth: (null): Invalid header checksum [ 552.160933][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.729693][T10054] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 552.841116][T10255] hfsplus: unable to find HFS+ superblock [ 552.857627][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.971'. [ 552.889888][T10054] usb 8-1: device descriptor read/64, error -71 [ 553.313510][T10054] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 553.546817][T10054] usb 8-1: device descriptor read/64, error -71 [ 553.770468][T10054] usb usb8-port1: attempt power cycle [ 554.462815][T10054] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 554.495118][T10054] usb 8-1: device descriptor read/8, error -71 [ 554.611045][T10063] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 554.762618][T10054] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 554.790951][T10063] usb 7-1: Using ep0 maxpacket: 8 [ 554.803213][T10054] usb 8-1: device descriptor read/8, error -71 [ 554.816461][T10063] usb 7-1: unable to get BOS descriptor or descriptor too short [ 554.844673][T10063] usb 7-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.886768][T10063] usb 7-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024 [ 554.924559][T10063] usb 7-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 554.953632][T10054] usb usb8-port1: unable to enumerate USB device [ 554.999921][T10063] usb 7-1: config 1 interface 0 has no altsetting 0 [ 555.056624][T10063] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.095092][T10063] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.178084][T10063] usb 7-1: Product: syz [ 555.228430][T10063] usb 7-1: Manufacturer: syz [ 555.289396][T10063] usb 7-1: SerialNumber: syz [ 555.744520][T10260] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 555.781094][T10260] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 556.971012][T10285] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 557.391834][T10295] Bluetooth: (null): Invalid header checksum [ 557.529827][ T56] Bluetooth: (null): Invalid header checksum [ 557.860907][ T56] Bluetooth: (null): Invalid header checksum [ 557.876881][T10285] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 558.526680][T10063] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 558.593180][T10304] netlink: 'syz.7.1034': attribute type 11 has an invalid length. [ 559.120220][ T5929] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 559.194185][T10063] usb 7-1: USB disconnect, device number 3 [ 559.303984][ T5929] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 559.333722][ T5929] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.391791][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1036'. [ 559.453221][ T9328] udevd[9328]: setting mode of /dev/bus/usb/007/003 to 020664 failed: No such file or directory [ 559.487201][ T9328] udevd[9328]: setting owner of /dev/bus/usb/007/003 to uid=0, gid=0 failed: No such file or directory [ 559.509345][ T5929] usb 10-1: config 0 descriptor?? [ 560.035483][T10063] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 561.308754][ T5929] usb 10-1: Cannot set autoneg [ 561.322048][ T5929] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 561.510532][T10063] usb 7-1: device descriptor read/64, error -71 [ 561.618401][ T5929] usb 10-1: USB disconnect, device number 2 [ 561.744073][T10328] hfsplus: unable to find HFS+ superblock [ 561.756007][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1040'. [ 563.633472][T10063] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 567.609281][T10349] 9pnet_fd: Insufficient options for proto=fd [ 568.280020][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.288829][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.399798][T10356] vlan2: entered promiscuous mode [ 568.499342][T10356] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 568.537316][T10356] vlan2: entered allmulticast mode [ 568.591317][T10356] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 568.612418][T10356] team0: Device vlan2 is up. Set it down before adding it as a team port [ 570.015368][T10375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.110694][T10380] netlink: 'syz.9.1053': attribute type 10 has an invalid length. [ 570.178048][T10382] netlink: 'syz.9.1053': attribute type 4 has an invalid length. [ 570.205259][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.221003][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.228504][T10382] netlink: 152 bytes leftover after parsing attributes in process `syz.9.1053'. [ 570.240279][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.255788][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.263520][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.399195][ T3017] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.700769][T10380] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 570.964830][T10382] : renamed from bond0 (while UP) [ 570.980422][T10387] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1054'. [ 571.343847][ T3017] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.622318][T10405] usb usb8: usbfs: process 10405 (syz.7.1055) did not claim interface 0 before use [ 572.163883][ T3017] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.362313][ T8922] Bluetooth: hci1: command tx timeout [ 572.957690][ T3017] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.605868][ T3017] bridge_slave_1: left allmulticast mode [ 573.643893][ T3017] bridge_slave_1: left promiscuous mode [ 573.681909][ T3017] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.730608][ T3017] bridge_slave_0: left allmulticast mode [ 573.745226][ T3017] bridge_slave_0: left promiscuous mode [ 573.757604][ T3017] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.258721][ T3017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.276478][ T3017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.289151][ T3017] bond0 (unregistering): Released all slaves [ 574.444471][ T8922] Bluetooth: hci1: command tx timeout [ 574.599246][T10378] chnl_net:caif_netlink_parms(): no params data found [ 574.676371][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 575.903533][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1067'. [ 576.142899][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1067'. [ 576.543681][ T8922] Bluetooth: hci1: command tx timeout [ 577.623663][T10477] netlink: 'syz.6.1069': attribute type 11 has an invalid length. [ 578.470794][ T3017] hsr_slave_0: left promiscuous mode [ 578.920420][ T8922] Bluetooth: hci1: command tx timeout [ 579.006035][T10486] netlink: 'syz.7.1070': attribute type 11 has an invalid length. [ 579.310816][ T3017] hsr_slave_1: left promiscuous mode [ 579.330962][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.370743][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.415881][ T3017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 579.444278][ T3017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.502986][ T3017] veth1_macvtap: left promiscuous mode [ 579.518801][ T3017] veth0_macvtap: left promiscuous mode [ 579.529054][ T3017] veth1_vlan: left promiscuous mode [ 579.539448][ T3017] veth0_vlan: left promiscuous mode [ 580.917434][ T3017] team0 (unregistering): Port device team_slave_1 removed [ 581.064828][ T3017] team0 (unregistering): Port device team_slave_0 removed [ 582.113423][T10378] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.120609][T10378] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.128273][T10378] bridge_slave_0: entered allmulticast mode [ 582.136510][T10378] bridge_slave_0: entered promiscuous mode [ 582.147418][T10378] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.154937][T10378] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.163677][T10378] bridge_slave_1: entered allmulticast mode [ 582.171852][T10378] bridge_slave_1: entered promiscuous mode [ 582.514889][T10378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 582.527556][T10378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.315544][T10378] team0: Port device team_slave_0 added [ 583.362050][T10378] team0: Port device team_slave_1 added [ 583.564021][T10378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.579050][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.621786][T10378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.747661][T10378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.784346][T10378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 583.821088][T10378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.989892][T10378] hsr_slave_0: entered promiscuous mode [ 584.007568][T10378] hsr_slave_1: entered promiscuous mode [ 588.368230][T10586] Bluetooth: (null): Invalid header checksum [ 588.486791][ T56] Bluetooth: (null): Invalid header checksum [ 588.503478][ T56] Bluetooth: (null): Invalid header checksum [ 588.585780][ T49] Bluetooth: (null): Invalid header checksum [ 588.689154][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 588.701967][ T3465] Bluetooth: (null): Invalid header checksum [ 588.708321][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 588.719195][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 588.725617][T10378] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 588.736606][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.746477][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.769297][T10378] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 588.790283][T10378] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 588.815465][ T3017] Bluetooth: (null): Invalid header checksum [ 588.825651][T10378] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 589.120317][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1086'. [ 589.140976][ T1026] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.317177][ T1026] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.425559][ T1026] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.539699][ T1026] : (slave netdevsim0): Releasing backup interface [ 589.568616][ T1026] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.692366][T10378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.724550][ T1026] bridge_slave_1: left allmulticast mode [ 590.772925][ T1026] bridge_slave_1: left promiscuous mode [ 590.778753][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.828030][ T1026] bridge_slave_0: left allmulticast mode [ 590.846043][T10630] libceph: resolve '4' (ret=-3): failed [ 590.847652][ T8922] Bluetooth: hci3: command tx timeout [ 590.858442][ T1026] bridge_slave_0: left promiscuous mode [ 590.866860][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.895097][T10630] overlayfs: missing 'workdir' [ 592.925776][ T8922] Bluetooth: hci3: command tx timeout [ 593.903544][ T1026]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.981345][ T1026]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.020002][ T1026]  (unregistering): Released all slaves [ 594.088173][T10590] chnl_net:caif_netlink_parms(): no params data found [ 594.179740][T10378] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.548706][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 594.560856][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 594.569421][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 594.582913][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.590126][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.605207][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 594.615223][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.736192][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.743556][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.814612][T10590] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.825862][T10590] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.841595][T10590] bridge_slave_0: entered allmulticast mode [ 594.851675][T10590] bridge_slave_0: entered promiscuous mode [ 594.869043][T10590] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.876583][T10590] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.892879][T10590] bridge_slave_1: entered allmulticast mode [ 594.905213][T10590] bridge_slave_1: entered promiscuous mode [ 595.002859][ T8922] Bluetooth: hci3: command tx timeout [ 595.024891][T10590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.048976][ T1026] hsr_slave_0: left promiscuous mode [ 595.055303][ T1026] hsr_slave_1: left promiscuous mode [ 595.064004][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.073027][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.084146][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.091794][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.130302][ T1026] veth1_macvtap: left promiscuous mode [ 595.136186][ T1026] veth0_macvtap: left promiscuous mode [ 595.143810][ T1026] veth1_vlan: left promiscuous mode [ 595.149209][ T1026] veth0_vlan: left promiscuous mode [ 595.951015][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 596.013443][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 596.684548][ T8922] Bluetooth: hci0: command tx timeout [ 596.888203][T10590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.022110][T10590] team0: Port device team_slave_0 added [ 597.076823][T10590] team0: Port device team_slave_1 added [ 597.083440][ T8922] Bluetooth: hci3: command tx timeout [ 597.282716][T10590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.289726][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.320509][T10590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.366813][T10590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.379804][T10590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.407086][T10590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.626117][ T1026] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.733841][T10590] hsr_slave_0: entered promiscuous mode [ 597.762409][T10590] hsr_slave_1: entered promiscuous mode [ 597.768909][T10590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.803460][T10590] Cannot create hsr debugfs directory [ 597.942229][ T1026] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.075155][ T1026] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.103212][T10671] chnl_net:caif_netlink_parms(): no params data found [ 598.190226][ T1026] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.338513][T10671] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.351978][T10671] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.359290][T10671] bridge_slave_0: entered allmulticast mode [ 598.367314][T10671] bridge_slave_0: entered promiscuous mode [ 598.461702][T10671] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.468963][T10671] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.479829][T10671] bridge_slave_1: entered allmulticast mode [ 598.493283][T10671] bridge_slave_1: entered promiscuous mode [ 598.519641][T10378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 598.616530][T10671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.712924][T10671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.761606][ T8922] Bluetooth: hci0: command tx timeout [ 598.789914][T10671] team0: Port device team_slave_0 added [ 598.869312][T10671] team0: Port device team_slave_1 added [ 598.903058][ T1026] bridge_slave_1: left allmulticast mode [ 598.908746][ T1026] bridge_slave_1: left promiscuous mode [ 598.915158][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.926161][ T1026] bridge_slave_0: left allmulticast mode [ 598.932330][ T1026] bridge_slave_0: left promiscuous mode [ 598.938064][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.306951][ T1026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.317868][ T1026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.329852][ T1026] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 599.352815][ T1026] bond0 (unregistering): Released all slaves [ 599.390180][T10671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 599.398533][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.428809][T10671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 599.499141][T10671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 599.506476][T10671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.533380][T10671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.574019][T10378] veth0_vlan: entered promiscuous mode [ 599.598728][T10378] veth1_vlan: entered promiscuous mode [ 599.682498][T10671] hsr_slave_0: entered promiscuous mode [ 599.689155][T10671] hsr_slave_1: entered promiscuous mode [ 599.696256][T10671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.704268][T10671] Cannot create hsr debugfs directory [ 599.848658][ T1026] hsr_slave_0: left promiscuous mode [ 599.856182][ T1026] hsr_slave_1: left promiscuous mode [ 599.862641][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.870099][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.879368][ T1026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.886984][ T1026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.909041][ T1026] veth1_macvtap: left promiscuous mode [ 599.915030][ T1026] veth0_macvtap: left promiscuous mode [ 599.921743][ T1026] veth1_vlan: left promiscuous mode [ 599.928265][ T1026] veth0_vlan: left promiscuous mode [ 600.429186][ T1026] team0 (unregistering): Port device team_slave_1 removed [ 600.476173][ T1026] team0 (unregistering): Port device team_slave_0 removed [ 600.846995][ T8922] Bluetooth: hci0: command tx timeout [ 600.959342][T10378] veth0_macvtap: entered promiscuous mode [ 601.009632][T10378] veth1_macvtap: entered promiscuous mode [ 601.067675][T10590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 601.106645][T10590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 601.157727][T10590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 601.232517][T10378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.245407][T10590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 601.323677][T10378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.381637][T10378] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.390493][T10378] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.403125][T10378] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.414810][T10378] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.696077][ T8058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.717818][ T8058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.742009][T10590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.779676][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 601.796008][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 601.836261][T10590] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.857824][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.865073][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.903620][ T8058] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.910872][ T8058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.818415][T10671] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 602.868300][T10671] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 602.921574][ T8922] Bluetooth: hci0: command tx timeout [ 602.942803][T10671] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.018713][T10671] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 603.501015][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 603.534905][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 603.545879][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 603.562931][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 603.575309][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 603.637632][T10671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.697057][ T2958] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.723930][T10590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.845379][ T2958] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.888842][T10671] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.939507][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.946751][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.996942][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.004188][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.082115][ T2958] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.749886][ T2958] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.128741][T10590] veth0_vlan: entered promiscuous mode [ 605.662130][ T8922] Bluetooth: hci4: command tx timeout [ 605.965452][T10590] veth1_vlan: entered promiscuous mode [ 606.469451][T10590] veth0_macvtap: entered promiscuous mode [ 606.505586][ T2958] bridge_slave_1: left allmulticast mode [ 606.512517][ T2958] bridge_slave_1: left promiscuous mode [ 606.518793][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.536396][ T2958] bridge_slave_0: left allmulticast mode [ 606.545594][ T2958] bridge_slave_0: left promiscuous mode [ 606.552849][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.123223][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.144019][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.164143][ T2958] bond0 (unregistering): Released all slaves [ 607.203301][T10590] veth1_macvtap: entered promiscuous mode [ 607.217073][T10797] chnl_net:caif_netlink_parms(): no params data found [ 607.303996][T10671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.603825][T10590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.721668][ T8922] Bluetooth: hci4: command tx timeout [ 607.794840][T10590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.851642][T10797] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.859751][T10797] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.873842][T10797] bridge_slave_0: entered allmulticast mode [ 607.888400][T10797] bridge_slave_0: entered promiscuous mode [ 607.912896][T10797] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.920193][T10797] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.931698][T10797] bridge_slave_1: entered allmulticast mode [ 607.939586][T10797] bridge_slave_1: entered promiscuous mode [ 607.964985][T10590] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.978481][T10590] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.987736][T10590] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.997674][T10590] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.095794][T10867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 608.134766][ T2958] hsr_slave_0: left promiscuous mode [ 608.141404][ T2958] hsr_slave_1: left promiscuous mode [ 608.163312][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.184038][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.232657][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.240153][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.304557][ T2958] veth1_macvtap: left promiscuous mode [ 608.310165][ T2958] veth0_macvtap: left promiscuous mode [ 608.332163][ T2958] veth1_vlan: left promiscuous mode [ 608.337581][ T2958] veth0_vlan: left promiscuous mode [ 609.801704][ T5850] Bluetooth: hci4: command tx timeout [ 610.102422][T10896] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 610.307433][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 610.319121][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 610.413426][T10900] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 610.422456][T10900] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 610.433482][T10900] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 610.442265][T10900] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 611.250736][T10900] Bluetooth: hci2: command 0x0406 tx timeout [ 611.891008][ T8922] Bluetooth: hci4: command tx timeout [ 611.951451][T10797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.053353][T10797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.284635][T10797] team0: Port device team_slave_0 added [ 612.302231][T10797] team0: Port device team_slave_1 added [ 612.559104][T10797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.567634][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.601794][ T8922] Bluetooth: hci5: command tx timeout [ 612.618588][T10797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.660448][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.675115][T10671] veth0_vlan: entered promiscuous mode [ 612.695833][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.740505][T10797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.761085][T10797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.814555][T10797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.929939][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1109'. [ 612.974472][T10671] veth1_vlan: entered promiscuous mode [ 613.056555][ T8058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.069657][ T8058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.337170][T10797] hsr_slave_0: entered promiscuous mode [ 613.357262][T10797] hsr_slave_1: entered promiscuous mode [ 613.379511][T10797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.418993][T10797] Cannot create hsr debugfs directory [ 613.615032][ T2958] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.091638][ T2958] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.178428][T10898] chnl_net:caif_netlink_parms(): no params data found [ 614.871872][ T8922] Bluetooth: hci5: command tx timeout [ 615.343661][T10671] veth0_macvtap: entered promiscuous mode [ 615.365698][T10671] veth1_macvtap: entered promiscuous mode [ 615.459507][ T2958] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.346810][T10979] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.604369][ T2958] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.931296][ T8922] Bluetooth: hci5: command tx timeout [ 617.272416][T10988] hfsplus: unable to find HFS+ superblock [ 617.290406][T10988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1116'. [ 617.977413][T10898] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.993041][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.000341][T10898] bridge_slave_0: entered allmulticast mode [ 618.022999][T10898] bridge_slave_0: entered promiscuous mode [ 618.620436][T10898] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.635707][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.644286][T10898] bridge_slave_1: entered allmulticast mode [ 618.664585][T10898] bridge_slave_1: entered promiscuous mode [ 618.698221][T10671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.855803][T10898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.968759][T10898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 619.010817][ T8922] Bluetooth: hci5: command tx timeout [ 619.104647][T10671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.147088][T10898] team0: Port device team_slave_0 added [ 619.217517][T10898] team0: Port device team_slave_1 added [ 619.238859][T10671] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.250384][T10671] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.264159][T10671] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.275623][T10671] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.380266][ T2958] bridge_slave_1: left allmulticast mode [ 619.394286][ T2958] bridge_slave_1: left promiscuous mode [ 619.400199][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.422904][ T2958] bridge_slave_0: left allmulticast mode [ 619.428742][ T2958] bridge_slave_0: left promiscuous mode [ 619.443456][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.211180][T11022] netlink: 'syz.2.1119': attribute type 11 has an invalid length. [ 621.093849][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.106166][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.117788][ T2958] bond0 (unregistering): Released all slaves [ 621.186439][T10898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.197734][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.233445][T10898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.257976][T10898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.269819][T10898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.306212][T10898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.453589][T10797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 622.165221][T10797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 622.223729][T10797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 622.257044][T10797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 622.278569][T11045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 622.476001][T11054] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 622.597914][ T2958] hsr_slave_0: left promiscuous mode [ 622.608036][ T2958] hsr_slave_1: left promiscuous mode [ 622.617662][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.626775][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.636232][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.644484][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.680097][ T2958] veth1_macvtap: left promiscuous mode [ 622.686407][ T2958] veth0_macvtap: left promiscuous mode [ 622.693482][ T2958] veth1_vlan: left promiscuous mode [ 622.699089][ T2958] veth0_vlan: left promiscuous mode [ 623.498237][ T2958] team0 (unregistering): Port device team_slave_1 removed [ 623.543793][ T2958] team0 (unregistering): Port device team_slave_0 removed [ 623.970477][T11054] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 623.988204][T10898] hsr_slave_0: entered promiscuous mode [ 623.996262][T10898] hsr_slave_1: entered promiscuous mode [ 624.017873][T10898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 624.031000][T10898] Cannot create hsr debugfs directory [ 624.650794][ T7330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.675849][ T7330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.814706][ T2958] IPVS: stop unused estimator thread 0... [ 624.821033][ T3465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.881983][ T3465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.128376][T10797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.241748][T10797] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.339982][T11100] hfsplus: unable to find HFS+ superblock [ 625.355737][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1127'. [ 625.909257][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.916512][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.107883][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.115180][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.284487][T11114] hfsplus: unable to find HFS+ superblock [ 629.303354][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 629.896116][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.911003][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.171885][T11121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1131'. [ 630.232665][T10797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.245756][T10898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 630.259451][T10898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 630.310266][T10898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 630.338614][T10898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 630.606001][T10898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.675832][T10898] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.697263][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.704543][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 630.759123][ T3017] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.766415][ T3017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.949315][T10898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 630.975808][T10898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 631.125505][T10797] veth0_vlan: entered promiscuous mode [ 631.152443][T10797] veth1_vlan: entered promiscuous mode [ 631.247641][T10797] veth0_macvtap: entered promiscuous mode [ 631.268563][T10797] veth1_macvtap: entered promiscuous mode [ 631.333642][T10797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.379984][T10797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.409143][T10797] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.433879][T10797] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.452593][T10797] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.469468][T10797] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.642886][T10898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.759242][ T8058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.870781][ T8058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.908028][ T1026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.947755][ T1026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.982238][T10898] veth0_vlan: entered promiscuous mode [ 632.028639][T10898] veth1_vlan: entered promiscuous mode [ 632.216736][T10898] veth0_macvtap: entered promiscuous mode [ 632.226570][T10898] veth1_macvtap: entered promiscuous mode [ 632.306955][T11173] fuse: Invalid rootmode [ 632.929991][T10898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.029623][T10898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.224190][T10898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.255931][T10898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.296389][T10898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.321747][T10898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.633148][ T1026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.676960][ T1026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.818725][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 633.843140][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.890841][T11205] hfsplus: unable to find HFS+ superblock [ 634.907982][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1137'. [ 636.072656][ T5964] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 636.131125][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1140'. [ 636.240729][ T5964] usb 6-1: device descriptor read/64, error -71 [ 636.490849][ T5964] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 637.458985][ T5964] usb 6-1: device descriptor read/64, error -71 [ 637.588651][ T5964] usb usb6-port1: attempt power cycle [ 638.021609][ T5964] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 638.228242][ T5964] usb 6-1: device descriptor read/8, error -71 [ 638.570796][ T5964] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 638.629846][ T5964] usb 6-1: device descriptor read/8, error -71 [ 638.726252][T11249] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 638.770563][ T5964] usb usb6-port1: unable to enumerate USB device [ 639.857378][T10900] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 639.867673][T10900] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 639.878485][T10900] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 639.912091][T10900] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 639.922217][T10900] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 641.205880][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.541835][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 641.569395][T11283] netlink: 'syz.4.1154': attribute type 5 has an invalid length. [ 641.662303][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1154'. [ 641.681844][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.768020][T11283] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 641.813595][T11283] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 641.834400][T11283] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 641.854110][T11283] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 641.874274][T11283] geneve2: entered promiscuous mode [ 641.891449][T11283] geneve2: entered allmulticast mode [ 641.961034][ T8922] Bluetooth: hci2: command tx timeout [ 641.974881][T11288] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1156'. [ 642.019515][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.225800][T11292] ptrace attach of "./syz-executor exec"[10797] was attempted by " [ 643.522599][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.748591][T11303] 9pnet_fd: Insufficient options for proto=fd [ 644.880803][ T8922] Bluetooth: hci2: command tx timeout [ 646.092974][T11311] FAULT_INJECTION: forcing a failure. [ 646.092974][T11311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.134057][T11311] CPU: 0 UID: 0 PID: 11311 Comm: syz.1.1162 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 646.134088][T11311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 646.134102][T11311] Call Trace: [ 646.134111][T11311] [ 646.134121][T11311] dump_stack_lvl+0x189/0x250 [ 646.134153][T11311] ? __pfx____ratelimit+0x10/0x10 [ 646.134178][T11311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 646.134202][T11311] ? __pfx__printk+0x10/0x10 [ 646.134230][T11311] ? __might_fault+0xb0/0x130 [ 646.134263][T11311] should_fail_ex+0x414/0x560 [ 646.134292][T11311] _copy_from_user+0x2d/0xb0 [ 646.134323][T11311] iommufd_fops_ioctl+0x3f9/0x520 [ 646.134355][T11311] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 646.134406][T11311] ? bpf_lsm_file_ioctl+0x9/0x20 [ 646.134431][T11311] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 646.134460][T11311] __se_sys_ioctl+0xfc/0x170 [ 646.134496][T11311] do_syscall_64+0xfa/0x3b0 [ 646.134520][T11311] ? lockdep_hardirqs_on+0x9c/0x150 [ 646.134542][T11311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.134564][T11311] ? clear_bhb_loop+0x60/0xb0 [ 646.134592][T11311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.134613][T11311] RIP: 0033:0x7f70e538ebe9 [ 646.134632][T11311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 646.134651][T11311] RSP: 002b:00007f70e61fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 646.134675][T11311] RAX: ffffffffffffffda RBX: 00007f70e55b5fa0 RCX: 00007f70e538ebe9 [ 646.134691][T11311] RDX: 00002000000001c0 RSI: 0000000000003b83 RDI: 0000000000000003 [ 646.134705][T11311] RBP: 00007f70e61fc090 R08: 0000000000000000 R09: 0000000000000000 [ 646.134719][T11311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.134732][T11311] R13: 00007f70e55b6038 R14: 00007f70e55b5fa0 R15: 00007ffd5c34d6a8 [ 646.134767][T11311] [ 646.417776][T11321] netlink: 'syz.5.1165': attribute type 9 has an invalid length. [ 646.434311][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 646.507300][T11259] chnl_net:caif_netlink_parms(): no params data found [ 646.641297][T10061] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 646.644681][T11327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.926827][ T8922] Bluetooth: hci2: command tx timeout [ 647.222037][T10061] usb 5-1: Using ep0 maxpacket: 32 [ 647.273779][T10061] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 647.650818][T10061] usb 5-1: config 1 has no interface number 0 [ 647.679713][T10061] usb 5-1: config 1 interface 242 has no altsetting 0 [ 647.684915][T11321] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.695462][T11321] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.704982][T11321] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.710871][T10061] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 647.714521][T11321] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 647.731875][T10061] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.750707][T10061] usb 5-1: Product: syz [ 647.754962][T10061] usb 5-1: Manufacturer: syz [ 647.759587][T10061] usb 5-1: SerialNumber: syz [ 647.792869][T11321] netlink: 'syz.5.1165': attribute type 9 has an invalid length. [ 647.820684][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 648.061769][T10061] aqc111 5-1:1.242: probe with driver aqc111 failed with error -71 [ 648.138580][T10061] usb 5-1: USB disconnect, device number 12 [ 648.203472][T11349] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1170'. [ 648.324882][ T56] bridge_slave_1: left allmulticast mode [ 648.340325][ T56] bridge_slave_1: left promiscuous mode [ 648.354112][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.390571][ T56] bridge_slave_0: left allmulticast mode [ 648.401863][ T56] bridge_slave_0: left promiscuous mode [ 648.411635][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.559223][T11360] hfsplus: unable to find HFS+ superblock [ 648.568465][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 648.970822][T10063] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 649.001028][ T8922] Bluetooth: hci2: command tx timeout [ 649.152369][T10063] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 649.174538][T10063] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 649.223127][T10063] usb 1-1: config 0 has no interface number 0 [ 649.262028][T10063] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 649.299799][T10063] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.353634][T10063] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 649.372810][T10063] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.392597][T10063] usb 1-1: Product: syz [ 649.397013][T10063] usb 1-1: Manufacturer: syz [ 649.406307][T10063] usb 1-1: SerialNumber: syz [ 649.446706][T10063] usb 1-1: config 0 descriptor?? [ 649.657907][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.677808][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.689328][ T56] bond0 (unregistering): Released all slaves [ 650.133557][T11259] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.148327][T11259] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.173654][T10058] usb 1-1: USB disconnect, device number 20 [ 650.194410][T11259] bridge_slave_0: entered allmulticast mode [ 650.220171][T11259] bridge_slave_0: entered promiscuous mode [ 650.300821][T11077] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 650.463694][T11077] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.496891][T11077] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 650.509005][T11259] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.509444][T11077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 650.517051][T11259] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.533232][T11077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 650.576078][T11259] bridge_slave_1: entered allmulticast mode [ 650.718871][T11390] netlink: 'syz.5.1175': attribute type 11 has an invalid length. [ 651.275160][T11077] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.287656][T11077] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 651.297768][T11077] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 651.310165][T11077] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 651.320543][T11259] bridge_slave_1: entered promiscuous mode [ 651.355401][T11077] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.391681][T11077] usb 5-1: Product: syz [ 651.395923][T11077] usb 5-1: Manufacturer: syz [ 651.400546][T11077] usb 5-1: SerialNumber: syz [ 651.534486][T11077] usb 5-1: config 0 descriptor?? [ 651.707351][ T56] hsr_slave_0: left promiscuous mode [ 651.732036][ T56] hsr_slave_1: left promiscuous mode [ 651.753388][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.779201][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.798662][T11077] usb 5-1: ucan: probing device on interface #0 [ 651.815620][T11077] usb 5-1: ucan: invalid endpoint configuration [ 651.828404][T11077] usb 5-1: ucan: probe failed; try to update the device firmware [ 651.839286][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.860675][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.900692][T11077] usb 5-1: USB disconnect, device number 13 [ 651.970551][ T56] veth1_macvtap: left promiscuous mode [ 651.990197][ T56] veth0_macvtap: left promiscuous mode [ 652.205030][ T56] veth1_vlan: left promiscuous mode [ 652.211193][ T56] veth0_vlan: left promiscuous mode [ 655.697702][ T56] team0 (unregistering): Port device team_slave_1 removed [ 655.757359][T11446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1185'. [ 655.806525][ T56] team0 (unregistering): Port device team_slave_0 removed [ 656.260981][ T5964] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 656.369410][T11407] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.413121][ T5964] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 656.461220][ T5964] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 3 [ 656.509382][ T5964] usb 5-1: New USB device found, idVendor=082d, idProduct=0300, bcdDevice=b5.17 [ 656.566071][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.601556][T11259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.626927][ T5964] usb 5-1: Product: syz [ 656.640878][ T5964] usb 5-1: Manufacturer: syz [ 656.645564][ T5964] usb 5-1: SerialNumber: syz [ 656.733212][T11453] FAULT_INJECTION: forcing a failure. [ 656.733212][T11453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.746761][T11453] CPU: 1 UID: 0 PID: 11453 Comm: syz.1.1188 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 656.746789][T11453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.746804][T11453] Call Trace: [ 656.746812][T11453] [ 656.746822][T11453] dump_stack_lvl+0x189/0x250 [ 656.746854][T11453] ? __pfx____ratelimit+0x10/0x10 [ 656.746879][T11453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.746904][T11453] ? __pfx__printk+0x10/0x10 [ 656.746947][T11453] should_fail_ex+0x414/0x560 [ 656.746985][T11453] _copy_to_user+0x31/0xb0 [ 656.747020][T11453] simple_read_from_buffer+0xe1/0x170 [ 656.747049][T11453] proc_fail_nth_read+0x1df/0x250 [ 656.747081][T11453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 656.747113][T11453] ? rw_verify_area+0x258/0x650 [ 656.747147][T11453] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 656.747177][T11453] vfs_read+0x200/0x980 [ 656.747217][T11453] ? __pfx___mutex_lock+0x10/0x10 [ 656.747244][T11453] ? __pfx_vfs_read+0x10/0x10 [ 656.747280][T11453] ? __fget_files+0x2a/0x420 [ 656.747311][T11453] ? __fget_files+0x3a0/0x420 [ 656.747334][T11453] ? __fget_files+0x2a/0x420 [ 656.747370][T11453] ksys_read+0x145/0x250 [ 656.747394][T11453] ? __pfx_ksys_read+0x10/0x10 [ 656.747421][T11453] ? do_syscall_64+0xbe/0x3b0 [ 656.747451][T11453] do_syscall_64+0xfa/0x3b0 [ 656.747477][T11453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.747498][T11453] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 656.747520][T11453] ? clear_bhb_loop+0x60/0xb0 [ 656.747548][T11453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.747569][T11453] RIP: 0033:0x7f70e538d5fc [ 656.747589][T11453] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 656.747608][T11453] RSP: 002b:00007f70e61db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 656.747631][T11453] RAX: ffffffffffffffda RBX: 00007f70e55b6090 RCX: 00007f70e538d5fc [ 656.747647][T11453] RDX: 000000000000000f RSI: 00007f70e61db0a0 RDI: 000000000000000a [ 656.747662][T11453] RBP: 00007f70e61db090 R08: 0000000000000000 R09: 0000000000000000 [ 656.747675][T11453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 656.747688][T11453] R13: 00007f70e55b6128 R14: 00007f70e55b6090 R15: 00007ffd5c34d6a8 [ 656.747724][T11453] [ 657.043625][T11259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.101003][T10058] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 657.195977][T11457] netlink: 'syz.1.1189': attribute type 10 has an invalid length. [ 657.216971][T11259] team0: Port device team_slave_0 added [ 657.235134][T11259] team0: Port device team_slave_1 added [ 657.274493][T10058] usb 6-1: Using ep0 maxpacket: 8 [ 657.334632][T10058] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.358469][T10058] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 657.404254][T10058] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 657.461650][T11457] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 657.470303][T10058] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 657.518865][T10058] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 657.554630][T10058] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.599450][T11259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.619699][T10058] hub 6-1:1.0: bad descriptor, ignoring hub [ 657.625998][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.661661][T10058] hub 6-1:1.0: probe with driver hub failed with error -5 [ 657.670166][T10058] cdc_wdm 6-1:1.0: skipping garbage [ 657.690205][T10058] cdc_wdm 6-1:1.0: skipping garbage [ 657.716593][T10058] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 657.732363][T11259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.758426][T10058] cdc_wdm 6-1:1.0: Unknown control protocol [ 657.873229][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 657.901771][T11259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 657.909011][T11259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.951466][T11463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.963255][T11259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.976587][T11463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.028213][T11462] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 658.060892][T11462] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 658.087956][T11462] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 658.218949][T11259] hsr_slave_0: entered promiscuous mode [ 658.229671][T11259] hsr_slave_1: entered promiscuous mode [ 658.239610][T11259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.261456][T11259] Cannot create hsr debugfs directory [ 659.213305][T11482] hfsplus: unable to find HFS+ superblock [ 659.248129][T11482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'. [ 659.756016][ T5964] usb 5-1: active config #6 != 1 ?? [ 659.794495][T11259] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 659.801754][ T5964] usb 5-1: USB disconnect, device number 14 [ 659.832456][T11259] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 659.857009][T11259] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 659.893320][T11259] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 659.982387][T11484] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.287179][T11259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.370743][T11259] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.029449][ T5964] usb 6-1: USB disconnect, device number 6 [ 661.090711][T11498] syz.4.1197 (11498) used greatest stack depth: 16808 bytes left [ 661.157381][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.164691][ T7330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.225525][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.232905][ T7330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.444509][T11259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 661.580551][T11508] netlink: 'syz.4.1200': attribute type 10 has an invalid length. [ 661.612001][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1199'. [ 661.718378][T11512] netlink: 384 bytes leftover after parsing attributes in process `syz.5.1198'. [ 661.728820][T11512] netlink: 'syz.5.1198': attribute type 2 has an invalid length. [ 662.803540][T11508] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 662.822012][T11521] Bluetooth: (null): Invalid header checksum [ 663.126570][T11526] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 663.166414][T11526] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1203'. [ 663.218004][T11526] netlink: 'syz.1.1203': attribute type 2 has an invalid length. [ 663.438999][T11526] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 664.291038][T11537] fuse: Bad value for 'fd' [ 665.310988][T11543] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 665.395929][T11259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.918329][T11548] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 666.928133][T11548] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 666.936660][T11548] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 667.583448][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.669231][T11567] hfsplus: unable to find HFS+ superblock [ 667.677904][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1210'. [ 670.185753][T11259] veth0_vlan: entered promiscuous mode [ 670.262186][T11259] veth1_vlan: entered promiscuous mode [ 670.420872][T11259] veth0_macvtap: entered promiscuous mode [ 670.519732][T11598] fuse: Bad value for 'fd' [ 671.198775][T11259] veth1_macvtap: entered promiscuous mode [ 671.294398][T11259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.443841][T11259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.868458][T11259] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.903833][T11259] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.930656][T11259] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.939429][T11259] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.399686][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.427002][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.614822][ T8058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.630121][ T8058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.281310][T11647] netlink: 'syz.4.1226': attribute type 10 has an invalid length. [ 678.396395][T11662] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 678.424549][T11662] CIFS mount error: No usable UNC path provided in device string! [ 678.424549][T11662] [ 678.611054][T11662] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 680.741220][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 680.903455][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.030935][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.059043][ T10] usb 5-1: New USB device found, idVendor=0486, idProduct=0185, bcdDevice= 0.00 [ 681.071897][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.138645][T11691] hfsplus: unable to find HFS+ superblock [ 681.154305][T11691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 681.778402][ T10] usb 5-1: config 0 descriptor?? [ 681.844937][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1233'. [ 682.672122][ T10] hid-generic 0003:0486:0185.0008: hidraw0: USB HID v0.00 Device [HID 0486:0185] on usb-dummy_hcd.4-1/input0 [ 683.476201][T10058] usb 5-1: USB disconnect, device number 15 [ 685.584835][ T5964] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 686.105093][ T5964] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 686.123571][ T5964] usb 1-1: config 0 has no interface number 0 [ 686.129746][ T5964] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 686.199749][ T5964] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 686.212296][ T5964] usb 1-1: config 0 interface 12 has no altsetting 0 [ 686.228515][ T5964] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 686.258070][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.303129][ T5964] usb 1-1: Product: syz [ 686.307367][ T5964] usb 1-1: Manufacturer: syz [ 686.337680][ T5964] usb 1-1: SerialNumber: syz [ 686.410919][T10058] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 686.579038][ T5964] usb 1-1: config 0 descriptor?? [ 687.292944][T11713] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 687.300659][T10058] usb 2-1: Using ep0 maxpacket: 32 [ 687.312425][T10058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.449878][T10058] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.459806][T10058] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 687.460517][T11713] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 687.469006][T10058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.501677][T10058] usb 2-1: config 0 descriptor?? [ 687.983284][ T5964] f81534 1-1:0.12: unsupported endpoint max packet size [ 688.149810][T10058] usbhid 2-1:0.0: can't add hid device: -32 [ 688.168847][T11747] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 688.960848][T10058] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 689.021277][T10058] usb 2-1: USB disconnect, device number 18 [ 690.034579][T10059] usb 1-1: USB disconnect, device number 21 [ 691.088149][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.376464][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.398461][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 691.485096][T11774] hfsplus: unable to find HFS+ superblock [ 691.501056][T11774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1249'. [ 691.577228][T11770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1251'. [ 692.093112][ T5964] IPVS: starting estimator thread 0... [ 692.099137][T11775] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 692.258117][T11778] IPVS: using max 37 ests per chain, 88800 per kthread [ 692.416043][T11782] tipc: Started in network mode [ 692.652081][T11782] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 692.932996][T11782] tipc: Enabled bearer , priority 10 [ 693.560494][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 694.701241][ T10] tipc: Node number set to 4269801488 [ 699.891504][T11834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 701.421945][T11841] batadv_slave_0: entered promiscuous mode [ 701.467214][T11841] loop6: detected capacity change from 0 to 2560 [ 701.501961][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.496325][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.774837][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 702.811965][T11848] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1269'. [ 702.821937][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.863285][T11849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.897455][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 702.970907][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 703.916262][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 703.949641][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.007291][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.586543][T11841] ldm_validate_partition_table(): Disk read failed. [ 704.640775][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.649061][T11841] Buffer I/O error on dev loop6, logical block 0, async page read [ 704.665401][T11841] Dev loop6: unable to read RDB block 0 [ 704.694145][T11841] loop6: unable to read partition table [ 704.725646][T11841] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 705.633255][T11849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.716992][T11879] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 705.725305][T11879] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 705.735344][T11879] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 705.744566][T11879] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 707.638978][T11848] delete_channel: no stack [ 707.877688][T11897] netlink: 'syz.5.1276': attribute type 10 has an invalid length. [ 708.313476][T11897] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 708.329948][T11901] netlink: 'syz.0.1278': attribute type 12 has an invalid length. [ 708.465739][T11901] netlink: 'syz.0.1278': attribute type 29 has an invalid length. [ 708.541383][T11901] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1278'. [ 708.585017][T11901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1278'. [ 708.732371][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1281'. [ 709.321448][T11934] netlink: 'syz.1.1280': attribute type 11 has an invalid length. [ 712.071950][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1288'. [ 712.081187][T11961] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1288'. [ 713.452042][T11974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 713.459562][T11974] IPv6: NLM_F_CREATE should be set when creating new route [ 713.525414][T11976] lo: entered allmulticast mode [ 713.553274][T11976] tunl0: entered allmulticast mode [ 713.689147][T11976] gre0: entered allmulticast mode [ 714.156594][T11976] gretap0: entered allmulticast mode [ 714.201098][T11976] erspan0: entered allmulticast mode [ 714.240715][T11976] ip_vti0: entered allmulticast mode [ 714.383970][T11991] devtmpfs: Too few inodes for current use [ 714.797902][T11976] ip6_vti0: entered allmulticast mode [ 714.818043][T11976] sit0: entered allmulticast mode [ 714.954570][T11976] ip6tnl0: entered allmulticast mode [ 715.125384][T11976] ip6gre0: entered allmulticast mode [ 715.277528][T11976] syz_tun: entered allmulticast mode [ 715.351353][T11976] ip6gretap0: entered allmulticast mode [ 715.397694][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.407556][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.429771][T11976] bridge0: entered allmulticast mode [ 715.443546][T11976] vcan0: entered allmulticast mode [ 715.457277][T11976] bond0: entered allmulticast mode [ 715.464285][T11976] bond_slave_0: entered allmulticast mode [ 715.470194][T11976] bond_slave_1: entered allmulticast mode [ 715.481224][T11976] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode [ 715.500540][T11976] team0: entered allmulticast mode [ 715.506371][T11976] team_slave_0: entered allmulticast mode [ 715.609993][T11976] team_slave_1: entered allmulticast mode [ 715.634586][T11976] dummy0: entered allmulticast mode [ 716.446691][T11976] nlmon0: entered allmulticast mode [ 716.487806][T11976] caif0: entered allmulticast mode [ 716.525358][T11976] batadv0: entered allmulticast mode [ 716.595496][T11976] vxcan0: entered allmulticast mode [ 716.664090][T11976] vxcan1: entered allmulticast mode [ 716.687649][T11976] veth0: entered allmulticast mode [ 716.714750][T11976] veth1: entered allmulticast mode [ 716.748241][T11976] wg0: entered allmulticast mode [ 716.781550][T12010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1298'. [ 716.792077][T11976] wg1: entered allmulticast mode [ 716.809820][T11976] wg2: entered allmulticast mode [ 716.833545][T11976] veth0_to_bridge: entered allmulticast mode [ 716.867428][T11976] veth1_to_bridge: entered allmulticast mode [ 716.901151][T11976] veth0_to_bond: entered allmulticast mode [ 716.933726][T11976] veth1_to_bond: entered allmulticast mode [ 716.949945][T11976] veth0_to_team: entered allmulticast mode [ 716.981817][T11976] veth1_to_team: entered allmulticast mode [ 717.127055][T11976] veth0_to_batadv: entered allmulticast mode [ 717.177823][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.204604][T11976] batadv_slave_0: entered allmulticast mode [ 717.233297][T11976] veth1_to_batadv: entered allmulticast mode [ 717.266424][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.345123][T11976] batadv_slave_1: entered allmulticast mode [ 717.389728][T11976] xfrm0: entered allmulticast mode [ 717.442727][T11976] veth0_to_hsr: entered allmulticast mode [ 717.482532][T11976] hsr_slave_0: entered allmulticast mode [ 717.490538][T11976] veth1_to_hsr: entered allmulticast mode [ 717.542875][T11976] hsr_slave_1: entered allmulticast mode [ 717.583485][T11976] hsr0: entered allmulticast mode [ 717.650740][T11976] veth1_virt_wifi: entered allmulticast mode [ 717.680213][T11976] veth0_virt_wifi: entered allmulticast mode [ 717.723420][T11976] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 717.755674][T11976] veth1_vlan: entered allmulticast mode [ 717.791884][T11976] veth0_vlan: entered allmulticast mode [ 717.849901][T11976] vlan0: entered allmulticast mode [ 717.880205][T11976] vlan1: entered allmulticast mode [ 717.915390][T11976] macvlan0: entered allmulticast mode [ 717.961909][T12020] netlink: 'syz.1.1299': attribute type 39 has an invalid length. [ 717.980141][T11976] macvlan1: entered allmulticast mode [ 718.011282][T11976] ipvlan0: entered allmulticast mode [ 718.016747][T11976] ipvlan1: entered allmulticast mode [ 718.048250][T11976] veth1_macvtap: entered allmulticast mode [ 718.062929][T11976] veth0_macvtap: entered allmulticast mode [ 718.091465][T11976] macvtap0: entered allmulticast mode [ 718.231469][T11976] macsec0: entered allmulticast mode [ 718.292633][T11976] geneve0: entered allmulticast mode [ 718.404728][T11976] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.620695][T11976] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.629655][T11976] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.653227][T11976] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.693420][T11976] geneve1: entered allmulticast mode [ 718.708707][T11976] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 718.723922][T11976] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 718.736813][T11976] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 718.748796][T11976] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 718.760964][ T8922] Bluetooth: hci0: command 0x0406 tx timeout [ 718.797729][T11976] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 718.809477][T11976] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 718.820013][T11976] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 718.829311][T11976] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 718.838752][T11976] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 718.849767][T11976] geneve2: left promiscuous mode [ 719.232879][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 720.482320][T12048] Falling back ldisc for ttyprintk. [ 720.802827][T12027] hsr_slave_1 (unregistering): left promiscuous mode [ 721.713405][T12092] netlink: 'syz.8.1300': attribute type 11 has an invalid length. [ 724.033757][T12099] No such timeout policy "syz0" [ 725.254106][T12118] sctp: [Deprecated]: syz.0.1311 (pid 12118) Use of int in max_burst socket option. [ 725.254106][T12118] Use struct sctp_assoc_value instead [ 725.289037][T12122] x_tables: duplicate underflow at hook 2 [ 725.504347][T12126] netlink: 'syz.4.1312': attribute type 21 has an invalid length. [ 725.660791][T12012] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 725.896216][T12012] usb 1-1: config 0 has an invalid interface descriptor of length 3, skipping [ 725.913169][T12012] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.949953][T12012] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 725.980400][T12012] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 726.046136][T12012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.090034][T12012] usb 1-1: config 0 descriptor?? [ 726.352083][T12012] usb 1-1: USB disconnect, device number 22 [ 727.293451][T12141] hfsplus: unable to find HFS+ superblock [ 727.316376][T12139] input: syz1 as /devices/virtual/input/input13 [ 727.371132][T12141] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1314'. [ 729.260298][ T8922] Bluetooth: hci4: command 0x0406 tx timeout [ 730.308611][T12176] netlink: 'syz.8.1320': attribute type 11 has an invalid length. [ 730.491509][T12178] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1323'. [ 732.521955][T12196] Bluetooth: (null): Invalid header checksum [ 734.203251][T10900] Bluetooth: hci5: command 0x0406 tx timeout [ 736.057019][T12231] hfsplus: unable to find HFS+ superblock [ 736.065162][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1334'. [ 736.460851][T12238] netlink: 'syz.4.1335': attribute type 11 has an invalid length. [ 737.615975][T12243] No such timeout policy "syz0" [ 739.295529][T12256] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1339'. [ 739.471254][T12264] overlayfs: missing 'lowerdir' [ 741.268672][T12292] Bluetooth: (null): Invalid header checksum [ 741.680760][T10050] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 741.822017][T12295] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1347'. [ 741.990666][T10050] usb 2-1: Using ep0 maxpacket: 16 [ 742.005119][T10050] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=f8.a6 [ 742.033998][T10050] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.093541][T12303] hfsplus: unable to find HFS+ superblock [ 742.109544][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1348'. [ 742.710020][T10050] usb 2-1: Product: syz [ 742.714441][T10050] usb 2-1: Manufacturer: syz [ 742.719074][T10050] usb 2-1: SerialNumber: syz [ 742.732477][T10050] usb 2-1: config 0 descriptor?? [ 743.002002][T12286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.010838][T12286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.157768][T10050] usb 2-1: USB disconnect, device number 19 [ 744.557897][T12330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.648616][T12330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 745.081426][T10065] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 745.241629][T10065] usb 6-1: Using ep0 maxpacket: 16 [ 745.480388][T10065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 745.535005][T10065] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 745.547040][T10065] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.589679][T10065] usb 6-1: Product: syz [ 745.600095][T10065] usb 6-1: Manufacturer: syz [ 745.609975][T10065] usb 6-1: SerialNumber: syz [ 745.628500][T10065] usb 6-1: config 0 descriptor?? [ 745.678539][T10065] hub 6-1:0.0: bad descriptor, ignoring hub [ 745.709421][T10065] hub 6-1:0.0: probe with driver hub failed with error -5 [ 745.761041][T10065] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15 [ 745.819919][T10065] input: failed to attach handler mousedev to device input15, error: -5 [ 747.000860][T12012] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 747.203459][T12012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 747.229464][T12367] Bluetooth: MGMT ver 1.23 [ 747.239753][T12012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 747.271500][T12012] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 747.321260][T12012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.346852][T12372] Bluetooth: (null): Invalid header checksum [ 747.395348][T12012] usb 1-1: config 0 descriptor?? [ 747.669548][T12359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 748.237000][T12012] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 748.238797][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 748.238816][ T30] audit: type=1326 audit(1755608562.970:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 748.277372][T12012] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 748.310684][T12012] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 748.337898][T12012] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 748.370693][T12012] sony 0003:1345:3008.0009: unknown main item tag 0x0 [ 748.406139][ T30] audit: type=1326 audit(1755608563.020:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 748.434758][T12359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.451567][T12359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.455726][T12012] sony 0003:1345:3008.0009: hiddev0,hidraw0: USB HID v80.05 Device [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 748.529727][ T30] audit: type=1326 audit(1755608563.030:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 748.551296][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.776383][T12012] sony 0003:1345:3008.0009: failed to claim input [ 748.803206][ T30] audit: type=1326 audit(1755608563.030:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 748.868205][T12391] hfsplus: unable to find HFS+ superblock [ 748.884076][T12391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'. [ 749.000241][ T30] audit: type=1326 audit(1755608563.030:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 749.073479][T12394] vxfs: WRONG superblock magic 00000000 at 1 [ 749.083373][T12394] vxfs: WRONG superblock magic 00000000 at 8 [ 749.089626][T12394] vxfs: can't find superblock. [ 749.234592][T10058] libceph: connect (1)[c::]:6789 error -101 [ 749.391606][ T30] audit: type=1326 audit(1755608563.030:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 749.403659][T10058] libceph: mon0 (1)[c::]:6789 connect error [ 749.426659][ T30] audit: type=1326 audit(1755608563.030:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 749.509139][ T30] audit: type=1326 audit(1755608563.030:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 749.569189][ T30] audit: type=1326 audit(1755608563.030:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 749.632875][ T30] audit: type=1326 audit(1755608563.030:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12381 comm="syz.1.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70e538ebe9 code=0x7ffc0000 [ 749.654475][ C1] vkms_vblank_simulate: vblank timer overrun [ 749.703080][T10058] libceph: connect (1)[c::]:6789 error -101 [ 749.709291][T10058] libceph: mon0 (1)[c::]:6789 connect error [ 750.113505][T12392] ceph: No mds server is up or the cluster is laggy [ 750.271432][T12012] usb 1-1: USB disconnect, device number 23 [ 750.330397][T10065] usb 6-1: USB disconnect, device number 7 [ 750.877682][T12410] input: syz1 as /devices/virtual/input/input16 [ 752.655826][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.671714][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.168808][T12452] Invalid logical block size (535) [ 757.900715][T12012] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 758.263869][T12465] Bluetooth: (null): Invalid header checksum [ 758.300271][T12012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.311422][T12012] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 758.323498][T12012] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 758.332808][T12012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.373314][ T3465] Bluetooth: (null): Invalid header checksum [ 758.441444][ T3465] Bluetooth: (null): Invalid header checksum [ 758.645185][T12012] usb 6-1: config 0 descriptor?? [ 758.660787][ T3465] Bluetooth: (null): Invalid header checksum [ 758.675307][T12012] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 758.683188][ T3465] Bluetooth: (null): Invalid header checksum [ 758.698772][T12012] dvb-usb: bulk message failed: -22 (3/0) [ 758.709584][T12012] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 758.746810][T12469] netlink: 'syz.8.1381': attribute type 11 has an invalid length. [ 758.815412][T12012] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 758.826744][T12012] usb 6-1: media controller created [ 758.832628][T12472] Device name cannot be null; rc = [-22] [ 758.859722][T12455] dvb-usb: bulk message failed: -22 (2/0) [ 758.892819][T12012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 758.973348][T12012] dvb-usb: bulk message failed: -22 (6/0) [ 759.014014][T12012] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 759.061772][T12012] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 759.120292][T12012] dvb-usb: schedule remote query interval to 150 msecs. [ 759.149427][T12012] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 759.261414][T12012] usb 6-1: USB disconnect, device number 8 [ 759.357219][T12481] hfsplus: unable to find HFS+ superblock [ 759.382971][T12481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'. [ 759.997664][T12012] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 761.691045][T12501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 762.060589][T12014] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 762.386658][T12014] usb 6-1: Using ep0 maxpacket: 32 [ 762.421685][T12014] usb 6-1: config 0 has no interfaces? [ 762.437957][T12014] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 762.460909][T12014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.484731][T12014] usb 6-1: Product: syz [ 762.513369][T12014] usb 6-1: Manufacturer: syz [ 762.519267][T12014] usb 6-1: SerialNumber: syz [ 762.848829][T12014] usb 6-1: config 0 descriptor?? [ 763.592722][T12014] usb 6-1: USB disconnect, device number 9 [ 764.930694][ T8922] Bluetooth: hci2: command 0x0406 tx timeout [ 765.286545][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 765.784336][T12537] Bluetooth: (null): Invalid header checksum [ 765.884543][ T56] Bluetooth: (null): Invalid header checksum [ 766.057254][ T56] Bluetooth: (null): Invalid header checksum [ 766.239750][ T56] Bluetooth: (null): Invalid header checksum [ 766.351116][T12542] Device name cannot be null; rc = [-22] [ 766.906845][T12550] hfsplus: unable to find HFS+ superblock [ 766.935447][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1401'. [ 767.530826][T10058] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 767.562155][T12551] program syz.5.1402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 767.705681][T10058] usb 1-1: Using ep0 maxpacket: 16 [ 767.734909][T10058] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 767.777117][T10058] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 767.811448][T10058] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 767.841738][T10058] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 767.872975][T10058] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 767.898112][T10058] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.940473][T10058] usb 1-1: Product: syz [ 767.984343][T10058] usb 1-1: Manufacturer: syz [ 768.015770][T10058] usb 1-1: SerialNumber: syz [ 768.077302][T10058] usb 1-1: config 0 descriptor?? [ 768.360753][T12548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.423472][T12548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.483832][T10058] appledisplay: Apple Cinema Display connected [ 768.612747][T12568] netlink: 'syz.8.1404': attribute type 10 has an invalid length. [ 768.719034][T12568] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 769.046957][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1406'. [ 769.349156][T12577] hfsplus: unable to find HFS+ superblock [ 769.358323][T12577] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1405'. [ 770.040056][ T5893] usb 1-1: USB disconnect, device number 24 [ 770.040218][ C1] usb 1-1: appledisplay_complete - usb_submit_urb failed with result -19 [ 770.482962][ T5893] appledisplay: Apple Cinema Display disconnected [ 771.203655][T12589] ------------[ cut here ]------------ [ 771.209760][T12589] kernel BUG at ./include/linux/pagemap.h:1379! [ 771.396225][T12598] /dev/nullb0: Can't open blockdev SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 771.558528][T12589] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 771.564941][T12589] CPU: 0 UID: 0 PID: 12589 Comm: syz.1.1409 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 771.575077][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 771.585167][T12589] RIP: 0010:mpage_readahead+0x637/0x650 [ 771.590743][T12589] Code: c6 60 d9 99 8b e8 09 12 c1 ff 90 0f 0b e8 51 e5 7c ff 4c 89 ef 48 c7 c6 c0 d9 99 8b e8 f2 11 c1 ff 90 0f 0b e8 3a e5 7c ff 90 <0f> 0b e8 32 e5 7c ff 90 0f 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 [ 771.610369][T12589] RSP: 0000:ffffc9001137f180 EFLAGS: 00010287 [ 771.616453][T12589] RAX: ffffffff82434086 RBX: 0000000000000001 RCX: 0000000000080000 [ 771.624436][T12589] RDX: ffffc9000e0e2000 RSI: 00000000000051b0 RDI: 00000000000051b1 [ 771.632423][T12589] RBP: ffffc9001137f370 R08: ffffea0001de4d07 R09: 1ffffd40003bc9a0 [ 771.640413][T12589] R10: dffffc0000000000 R11: fffff940003bc9a1 R12: dffffc0000000000 [ 771.648491][T12589] R13: ffffc9001137f728 R14: 0000000000000004 R15: ffffc9001137f740 [ 771.656480][T12589] FS: 00007f70e61fc6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 771.665511][T12589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.672120][T12589] CR2: 000000110c2a978c CR3: 000000002c43a000 CR4: 00000000003526f0 [ 771.680192][T12589] Call Trace: [ 771.683480][T12589] [ 771.686429][T12589] ? __pfx_mpage_readahead+0x10/0x10 [ 771.691763][T12589] ? __pfx_blkdev_get_block+0x10/0x10 [ 771.697185][T12589] ? blk_start_plug+0x6f/0x1b0 [ 771.701988][T12589] read_pages+0x17a/0x580 [ 771.706428][T12589] ? xa_load+0x60/0x210 [ 771.710623][T12589] ? __pfx_read_pages+0x10/0x10 [ 771.715518][T12589] ? xa_load+0x1ea/0x210 [ 771.719805][T12589] page_cache_ra_unbounded+0x346/0x7b0 [ 771.725329][T12589] filemap_get_pages+0x43c/0x1ea0 [ 771.730395][T12589] ? __kasan_slab_free+0x62/0x70 [ 771.735356][T12589] ? iter_file_splice_write+0xe55/0x1000 [ 771.741018][T12589] ? splice_direct_to_actor+0x5a5/0xcc0 [ 771.746602][T12589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.752698][T12589] ? __pfx_filemap_get_pages+0x10/0x10 [ 771.758186][T12589] ? __pfx___might_resched+0x10/0x10 [ 771.763486][T12589] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.768715][T12589] filemap_splice_read+0x4fc/0xbc0 [ 771.773847][T12589] ? __pfx_filemap_splice_read+0x10/0x10 [ 771.779517][T12589] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 771.784964][T12589] ? file_end_write+0xd8/0x250 [ 771.789777][T12589] ? direct_splice_actor+0x10c/0x160 [ 771.795087][T12589] ? __pfx_filemap_splice_read+0x10/0x10 [ 771.800737][T12589] splice_direct_to_actor+0x4a6/0xcc0 [ 771.806143][T12589] ? __pfx_direct_splice_actor+0x10/0x10 [ 771.811796][T12589] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 771.817711][T12589] do_splice_direct+0x181/0x270 [ 771.822574][T12589] ? __pfx_do_splice_direct+0x10/0x10 [ 771.827957][T12589] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 771.833869][T12589] ? bpf_lsm_file_permission+0x9/0x20 [ 771.839264][T12589] ? security_file_permission+0x75/0x290 [ 771.844923][T12589] ? rw_verify_area+0x258/0x650 [ 771.849814][T12589] do_sendfile+0x4da/0x7e0 [ 771.854251][T12589] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.859472][T12589] ? __pfx_do_sendfile+0x10/0x10 [ 771.864425][T12589] ? __se_sys_futex+0x36f/0x400 [ 771.869297][T12589] __se_sys_sendfile64+0x13e/0x190 [ 771.874429][T12589] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 771.880072][T12589] ? rcu_is_watching+0x15/0xb0 [ 771.884850][T12589] ? do_syscall_64+0xbe/0x3b0 [ 771.889539][T12589] do_syscall_64+0xfa/0x3b0 [ 771.894058][T12589] ? lockdep_hardirqs_on+0x9c/0x150 [ 771.899268][T12589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.905434][T12589] ? clear_bhb_loop+0x60/0xb0 [ 771.910132][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.916036][T12589] RIP: 0033:0x7f70e538ebe9 [ 771.920459][T12589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.940083][T12589] RSP: 002b:00007f70e61fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 771.948512][T12589] RAX: ffffffffffffffda RBX: 00007f70e55b5fa0 RCX: 00007f70e538ebe9 [ 771.956497][T12589] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 771.964479][T12589] RBP: 00007f70e5411e19 R08: 0000000000000000 R09: 0000000000000000 [ 771.972479][T12589] R10: 0000000000201e00 R11: 0000000000000246 R12: 0000000000000000 [ 771.980476][T12589] R13: 00007f70e55b6038 R14: 00007f70e55b5fa0 R15: 00007ffd5c34d6a8 [ 771.988476][T12589] [ 771.991530][T12589] Modules linked in: [ 771.996176][T12589] ---[ end trace 0000000000000000 ]--- [ 772.066129][T12589] RIP: 0010:mpage_readahead+0x637/0x650 [ 772.081819][T12589] Code: c6 60 d9 99 8b e8 09 12 c1 ff 90 0f 0b e8 51 e5 7c ff 4c 89 ef 48 c7 c6 c0 d9 99 8b e8 f2 11 c1 ff 90 0f 0b e8 3a e5 7c ff 90 <0f> 0b e8 32 e5 7c ff 90 0f 0b 66 66 66 66 66 66 2e 0f 1f 84 00 00 [ 772.160599][T12589] RSP: 0000:ffffc9001137f180 EFLAGS: 00010287 [ 772.166750][T12589] RAX: ffffffff82434086 RBX: 0000000000000001 RCX: 0000000000080000 [ 772.370656][T12589] RDX: ffffc9000e0e2000 RSI: 00000000000051b0 RDI: 00000000000051b1 [ 772.378894][T12589] RBP: ffffc9001137f370 R08: ffffea0001de4d07 R09: 1ffffd40003bc9a0 [ 772.390571][T12589] R10: dffffc0000000000 R11: fffff940003bc9a1 R12: dffffc0000000000 [ 772.398586][T12589] R13: ffffc9001137f728 R14: 0000000000000004 R15: ffffc9001137f740 [ 772.421331][T12589] FS: 00007f70e61fc6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 772.494618][T12589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.546725][T12589] CR2: 00007ff18b516e9c CR3: 000000002c43a000 CR4: 00000000003526f0 [ 772.571135][T12589] Kernel panic - not syncing: Fatal exception [ 772.577573][T12589] Kernel Offset: disabled [ 772.581909][T12589] Rebooting in 86400 seconds..