last executing test programs: 13.35906494s ago: executing program 5 (id=125): setuid(0xee01) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0xd) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = io_uring_setup(0x3249, &(0x7f0000000200)={0x0, 0x2c3f, 0x0, 0x2, 0x2}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x600, 0x10, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x84, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xe8, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000c00)=0x10, 0x6, 0x2) 12.267664045s ago: executing program 0 (id=133): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000001dc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x4, @remote, 0x1}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="cc12", 0x2}], 0x1}}], 0x1, 0x200400c0) 11.746773273s ago: executing program 0 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) 10.606807395s ago: executing program 0 (id=139): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x1, 0x5507}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setpriority(0x2, 0x0, 0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 10.412666994s ago: executing program 4 (id=142): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x3996, 0x5, 0x1, 0x2}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r3 = syz_open_dev$evdev(0x0, 0x2, 0x860b81) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/235) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4337965941538"], 0x40) 10.063502242s ago: executing program 4 (id=144): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2902, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.262729758s ago: executing program 4 (id=146): syz_read_part_table(0x1054, &(0x7f0000001080)="$eJzsz7utwkAQBdBr+SNb75EgeqACYqogpxJEPUR0R4QWrW1RAhCck8yd3dmVJnxdKSXjEvf3HHLZbd937Vqfazcmw7GrcUxJ8pf+Ud+ny1QnmvTzeerk/xzObTbrL9epqWVYuiGn24dWBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICf9goAAP//F6gOQw==") 8.959237632s ago: executing program 1 (id=147): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, 0x0, 0x0, 0x85, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f000043f000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7fffff7a, 0x0, 0x0, 0x1000, 0x0, 0x2, 0x0, 0x19}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={r5, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8], [0x0, 0x20000000000]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) 7.673971942s ago: executing program 5 (id=150): openat(0xffffffffffffff9c, 0x0, 0x101002, 0x40) r0 = syz_pidfd_open(0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f00000001c0)='ba\xa5J_\xe5\xf9|a\x1dv]\x13mave_1\x00\xe0\xb2\xf0\xabT\x87I\xa4\xd4)c\xf2\xe0\xd0\xba\xdb\f\x16n\x96J\x90c\xc5~#\xc9\xfb\xef5\xab\xb9\xe8\xc7\xde\xc2\x80\f\x19L\xdb\xdc\x14\xb4\x86\x1d\xe0\x9b\xe4\"m\'+\xc8\x05\xa4\x1cT`\xdcL\x8f\xf0\xc9\xb7\xc8D\xcdWG\xe6%\xd9', 0x8c2, 0x30, 0x0) mq_getsetattr(r3, &(0x7f0000001080)={0x0, 0x0, 0x8001, 0x55e}, 0x0) 7.633656943s ago: executing program 4 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) 6.874360008s ago: executing program 2 (id=152): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x34) getgroups(0x2, &(0x7f0000000480)=[0xee00, 0xffffffffffffffff]) lchown(&(0x7f0000000000)='./file1\x00', 0x0, r0) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 6.405873891s ago: executing program 2 (id=154): file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) 6.267712574s ago: executing program 4 (id=155): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) syz_emit_ethernet(0x11, &(0x7f00000001c0)={@remote, @local, @void, {@llc_tr={0x11, {@llc={0xd4, 0x7e, 'g'}}}}}, 0x0) 5.613542605s ago: executing program 5 (id=156): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x3996, 0x5, 0x1, 0x2}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r3 = syz_open_dev$evdev(0x0, 0x2, 0x860b81) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/235) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4337965941538"], 0x40) 5.510246564s ago: executing program 2 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.349760545s ago: executing program 0 (id=158): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2902, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.935570582s ago: executing program 3 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0xd, 0x4, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x90) 4.880330634s ago: executing program 2 (id=160): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) mount(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r3, &(0x7f000000a240)={0x2020}, 0x2020) 4.879512831s ago: executing program 4 (id=161): openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x40200, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) getsockopt$ax25_int(r2, 0x101, 0x7, 0x0, &(0x7f0000000240)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYBLOB="14000100004000"/20], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) 4.72306019s ago: executing program 5 (id=162): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x58) getdents(r0, 0xfffffffffffffffd, 0x58) 4.500280065s ago: executing program 0 (id=163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000200)={@remote, 0x8, 0x2, 0x2, 0x0, 0x0, 0x6}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x9, 0x0, 0x3}, 0x20) close(0x3) 4.241384253s ago: executing program 5 (id=164): r0 = syz_open_dev$video(&(0x7f0000000100), 0x9, 0x1e3a00) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20004010) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create1(0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, 0x0, 0x0) r5 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) syz_init_net_socket$llc(0x1a, 0x801, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x0, 0xe3c1, 0x2, 0x6, 0xfffa, 0x6, 0x3, 0x4, 0x1, 0xfffb, 0x0, 0x9, 0x18, 0xef, 0x5e6d, 0x3], 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xffffff00, 0xff000000, 0xff], [0x0, 0x0, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'wlan0\x00', {0x873054bc4ee3b02d}, {0xff}, 0x89, 0xb8, 0x5, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0xe25, 0x664}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x3d, "52a7c9017ed5048ad31b0477f146377ff2b6d287373519532f5bff53ee26"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000002c0)={0x3, "c5c2a91e002b1ba00000ffe73d5eff0010ffffffe70000ffe7fffffffffffffd", 0x3, 0x4, 0x0, 0x1000, 0xb5217881d29ded7e, 0x4}) 4.162512132s ago: executing program 3 (id=165): signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 4.102054381s ago: executing program 0 (id=166): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000000) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) unshare(0x28000600) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x400448cc, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newvlan={0x18, 0x76, 0x200, 0x2, 0xffffffff, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x4004891}, 0x20004000) 4.101347439s ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) 3.022166149s ago: executing program 3 (id=168): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) fanotify_init(0x200, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_DIRENTPLUS(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) 3.014057142s ago: executing program 1 (id=169): r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x202000) file_setattr(r0, 0x0, &(0x7f0000000000)={0x2000, 0xfffffffc, 0xed, 0x0, 0x400}, 0x18, 0x1000) 2.948730197s ago: executing program 5 (id=170): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x1, 0x5507}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setpriority(0x2, 0x0, 0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 2.49005662s ago: executing program 1 (id=171): r0 = fsopen(&(0x7f0000000000)='zonefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$SEG6_CMD_SETHMAC(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x10) sendto$l2tp(r4, &(0x7f0000000500)="850823", 0x3, 0xc004, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000000000e6ffffff000a48000000060a0b040000000000000000020000011c00048018000180080001006c6f67000c00028006000140000700000900010073797a30000000000900020073797a32000000001400000011000100"/109], 0x70}}, 0x0) sendmmsg$sock(r3, &(0x7f0000035ac0), 0x0, 0x20044054) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x40, 0x8000, 0x6c8, 0x8, {{0x9, 0x4, 0x1, 0x15, 0x24, 0x66, 0x0, 0xb1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0xb2}, @lsrr={0x83, 0x3, 0xe7}, @generic={0x89, 0x5, "f510cc"}, @timestamp_addr={0x44, 0x4, 0xb6, 0x1, 0x8}]}}}}}) sendmsg$inet(r5, 0x0, 0x0) 2.228539815s ago: executing program 3 (id=172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0x76be, 0xc000, 0x3, 0x20002f7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc260}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.663307019s ago: executing program 3 (id=173): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x9, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) ptrace(0x10, r0) ptrace$peeksig(0x1a, r0, 0x0, &(0x7f0000000040)) 1.553633834s ago: executing program 1 (id=174): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x0, 0x3996, 0x5, 0x1, 0x2}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) r3 = syz_open_dev$evdev(0x0, 0x2, 0x860b81) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000280)=""/235) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write$nbd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000040000900000082b0cfc4337965941538"], 0x40) 1.041309577s ago: executing program 2 (id=175): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2004890, 0x0) 1.040071324s ago: executing program 1 (id=176): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4$alg(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000001000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44011}], 0x1, 0x4) recvmmsg(r2, &(0x7f0000003940), 0x0, 0x23, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x103a00, 0x160) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xb, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d81cd4a524bd3ffe70c7f3f04002f7b6aa54cc50a1fcaed1e15ee3748", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x9, 0x3, 0x1c, 0x8, "0ceb90402c5827ea4006fb62081d4aa8a947e3a21ee927a3a59c7cb6ccd5d6dbc6f6b1d5de774b8d95292d06960d35f3ba8a6e3d72eb83176f9c7345ee7c15ba", "fd4b583a721051931a624f272500551408f0efbfe7ce0099201113656cd32a63", [0x8, 0x3]}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x1000000, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x80) 930.634918ms ago: executing program 3 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) socket$tipc(0x1e, 0x2, 0x0) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000180)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) syz_usb_connect(0x5, 0x5d, &(0x7f0000000b00)=ANY=[@ANYBLOB="12018000551b8920b822276080c20102030109024b0001000000000904a20000020a0000052406000005240000000d240f010000000000000000000724140000000004"], 0x0) syz_open_dev$ndb(0x0, 0x0, 0x80403) 0s ago: executing program 2 (id=178): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0xd, 0x4, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xa888, r6, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x1}], 0x1}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.172' (ED25519) to the list of known hosts. [ 99.835358][ T5806] cgroup: Unknown subsys name 'net' [ 99.916701][ T9] cfg80211: failed to load regulatory.db [ 99.950010][ T5806] cgroup: Unknown subsys name 'cpuset' [ 99.960607][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.619278][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 104.158925][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.174964][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.183076][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.190983][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.198450][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.207484][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.216439][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.224953][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.235970][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.243211][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.247166][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.251595][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.257882][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.267169][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.275372][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.279012][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.292894][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.300976][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.301534][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.314584][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.316489][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.322469][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.336596][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.340634][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.351235][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.354545][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.366300][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.383242][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 104.386070][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.407178][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 105.262712][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 105.287143][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 105.381117][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 105.648839][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 105.671956][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 105.693248][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 105.900358][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.908248][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.915841][ T5840] bridge_slave_0: entered allmulticast mode [ 105.923529][ T5840] bridge_slave_0: entered promiscuous mode [ 105.958086][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.965459][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.972676][ T5825] bridge_slave_0: entered allmulticast mode [ 105.980496][ T5825] bridge_slave_0: entered promiscuous mode [ 106.011396][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.018691][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.027122][ T5840] bridge_slave_1: entered allmulticast mode [ 106.035275][ T5840] bridge_slave_1: entered promiscuous mode [ 106.050958][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.058499][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.066248][ T5831] bridge_slave_0: entered allmulticast mode [ 106.073835][ T5831] bridge_slave_0: entered promiscuous mode [ 106.082022][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.089179][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.096713][ T5825] bridge_slave_1: entered allmulticast mode [ 106.104389][ T5825] bridge_slave_1: entered promiscuous mode [ 106.169149][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.176422][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.183865][ T5831] bridge_slave_1: entered allmulticast mode [ 106.191893][ T5831] bridge_slave_1: entered promiscuous mode [ 106.292484][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.300086][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.307361][ T5830] bridge_slave_0: entered allmulticast mode [ 106.316333][ T5830] bridge_slave_0: entered promiscuous mode [ 106.341275][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.380680][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.395001][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.405619][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.406269][ T5837] Bluetooth: hci1: command tx timeout [ 106.412827][ T5838] Bluetooth: hci2: command tx timeout [ 106.419598][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.432339][ T5830] bridge_slave_1: entered allmulticast mode [ 106.440341][ T5830] bridge_slave_1: entered promiscuous mode [ 106.450170][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.459496][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.466896][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.474304][ T5827] bridge_slave_0: entered allmulticast mode [ 106.474592][ T5838] Bluetooth: hci4: command tx timeout [ 106.474778][ T5837] Bluetooth: hci5: command tx timeout [ 106.481172][ T5829] Bluetooth: hci3: command tx timeout [ 106.487111][ T5839] Bluetooth: hci0: command tx timeout [ 106.505153][ T5827] bridge_slave_0: entered promiscuous mode [ 106.512764][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.520063][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.527391][ T5828] bridge_slave_0: entered allmulticast mode [ 106.535355][ T5828] bridge_slave_0: entered promiscuous mode [ 106.546751][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.559937][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.611628][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.619099][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.626427][ T5827] bridge_slave_1: entered allmulticast mode [ 106.634075][ T5827] bridge_slave_1: entered promiscuous mode [ 106.641893][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.649242][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.657181][ T5828] bridge_slave_1: entered allmulticast mode [ 106.664956][ T5828] bridge_slave_1: entered promiscuous mode [ 106.765189][ T5825] team0: Port device team_slave_0 added [ 106.774302][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.786176][ T5840] team0: Port device team_slave_0 added [ 106.820361][ T5831] team0: Port device team_slave_0 added [ 106.828307][ T5825] team0: Port device team_slave_1 added [ 106.837432][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.848905][ T5840] team0: Port device team_slave_1 added [ 106.857831][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.870933][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.896035][ T5831] team0: Port device team_slave_1 added [ 106.943641][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.955946][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.993561][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.000897][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.027362][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.107048][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.114041][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.140743][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.154102][ T5830] team0: Port device team_slave_0 added [ 107.163145][ T5830] team0: Port device team_slave_1 added [ 107.169482][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.176872][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.203003][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.241749][ T5828] team0: Port device team_slave_0 added [ 107.248630][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.256243][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.282467][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.303620][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.310646][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.336602][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.362697][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.369912][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.396059][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.409286][ T5827] team0: Port device team_slave_0 added [ 107.417879][ T5828] team0: Port device team_slave_1 added [ 107.485159][ T5827] team0: Port device team_slave_1 added [ 107.492753][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.500060][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.526201][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.566445][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.573518][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.600586][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.617052][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.624013][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.650479][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.689378][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.696981][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.723357][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.751958][ T5825] hsr_slave_0: entered promiscuous mode [ 107.759053][ T5825] hsr_slave_1: entered promiscuous mode [ 107.788670][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.796026][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.822459][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.871030][ T5831] hsr_slave_0: entered promiscuous mode [ 107.877664][ T5831] hsr_slave_1: entered promiscuous mode [ 107.884010][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 107.890040][ T5831] Cannot create hsr debugfs directory [ 107.911959][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.919019][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.945428][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.012910][ T5840] hsr_slave_0: entered promiscuous mode [ 108.019695][ T5840] hsr_slave_1: entered promiscuous mode [ 108.026331][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 108.032082][ T5840] Cannot create hsr debugfs directory [ 108.117173][ T5828] hsr_slave_0: entered promiscuous mode [ 108.124429][ T5828] hsr_slave_1: entered promiscuous mode [ 108.131006][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 108.136802][ T5828] Cannot create hsr debugfs directory [ 108.228649][ T5830] hsr_slave_0: entered promiscuous mode [ 108.237373][ T5830] hsr_slave_1: entered promiscuous mode [ 108.243620][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 108.249536][ T5830] Cannot create hsr debugfs directory [ 108.301747][ T5827] hsr_slave_0: entered promiscuous mode [ 108.308371][ T5827] hsr_slave_1: entered promiscuous mode [ 108.315771][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 108.321521][ T5827] Cannot create hsr debugfs directory [ 108.474954][ T5837] Bluetooth: hci1: command tx timeout [ 108.480492][ T5839] Bluetooth: hci2: command tx timeout [ 108.555101][ T5837] Bluetooth: hci4: command tx timeout [ 108.555616][ T5838] Bluetooth: hci5: command tx timeout [ 108.560659][ T5839] Bluetooth: hci3: command tx timeout [ 108.566009][ T5829] Bluetooth: hci0: command tx timeout [ 108.989408][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.012147][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.022728][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.054147][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.143726][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.155798][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.169780][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.185305][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.287789][ T5831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.300926][ T5831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.311912][ T5831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.325603][ T5831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.459037][ T5840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.488150][ T5840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.502919][ T5840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 109.519542][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.535612][ T5840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 109.629754][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.683344][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.698760][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.706133][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.734801][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.742687][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.792994][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.805226][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.825121][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.832348][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.911400][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.923342][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.938261][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.950359][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.962331][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.997467][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.004692][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.025652][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.032873][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.101289][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.182766][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.254908][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.262107][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.307809][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.348986][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.356763][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.373737][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.423222][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.430433][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.511711][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.518980][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.556388][ T5829] Bluetooth: hci2: command tx timeout [ 110.562352][ T5838] Bluetooth: hci1: command tx timeout [ 110.635315][ T5829] Bluetooth: hci3: command tx timeout [ 110.640820][ T5838] Bluetooth: hci4: command tx timeout [ 110.644758][ T5839] Bluetooth: hci0: command tx timeout [ 110.646334][ T5829] Bluetooth: hci5: command tx timeout [ 110.739019][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.778149][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.801747][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.889114][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.929946][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.952461][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.959823][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.987493][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.994699][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.027539][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.034785][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.057477][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.064792][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.108596][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.322869][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.370122][ T5825] veth0_vlan: entered promiscuous mode [ 111.403334][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.434122][ T5830] veth0_vlan: entered promiscuous mode [ 111.448452][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.489965][ T5825] veth1_vlan: entered promiscuous mode [ 111.538982][ T5830] veth1_vlan: entered promiscuous mode [ 111.596215][ T5825] veth0_macvtap: entered promiscuous mode [ 111.681090][ T5825] veth1_macvtap: entered promiscuous mode [ 111.767538][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.812321][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.867383][ T5830] veth0_macvtap: entered promiscuous mode [ 111.925104][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.976682][ T5830] veth1_macvtap: entered promiscuous mode [ 112.021717][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.050295][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.097504][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.152219][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.200654][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.289491][ T74] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.318495][ T74] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.327721][ T74] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.347952][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.356934][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.369359][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.383627][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.393182][ T74] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.467373][ T5831] veth0_vlan: entered promiscuous mode [ 112.477163][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.488260][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.586970][ T5831] veth1_vlan: entered promiscuous mode [ 112.611696][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.620337][ T5840] veth0_vlan: entered promiscuous mode [ 112.635638][ T5829] Bluetooth: hci2: command tx timeout [ 112.641071][ T5829] Bluetooth: hci1: command tx timeout [ 112.715188][ T5838] Bluetooth: hci4: command tx timeout [ 112.719137][ T5837] Bluetooth: hci0: command tx timeout [ 112.720628][ T5838] Bluetooth: hci3: command tx timeout [ 112.731478][ T5829] Bluetooth: hci5: command tx timeout [ 112.743298][ T5827] veth0_vlan: entered promiscuous mode [ 112.763030][ T5828] veth0_vlan: entered promiscuous mode [ 112.784268][ T5840] veth1_vlan: entered promiscuous mode [ 112.784474][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.819104][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.839459][ T5828] veth1_vlan: entered promiscuous mode [ 112.873526][ T5827] veth1_vlan: entered promiscuous mode [ 112.897935][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.911073][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.940693][ T5840] veth0_macvtap: entered promiscuous mode [ 112.970302][ T5840] veth1_macvtap: entered promiscuous mode [ 113.006848][ T5827] veth0_macvtap: entered promiscuous mode [ 113.020367][ T5831] veth0_macvtap: entered promiscuous mode [ 113.057026][ T5827] veth1_macvtap: entered promiscuous mode [ 113.076499][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.092220][ T5831] veth1_macvtap: entered promiscuous mode [ 113.128734][ T5828] veth0_macvtap: entered promiscuous mode [ 113.151464][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.174205][ T5828] veth1_macvtap: entered promiscuous mode [ 113.205147][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.215960][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.250838][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.285208][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.305926][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.323246][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.343039][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.400932][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.430329][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.456370][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.469894][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.480269][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.509174][ T74] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.550653][ T74] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.642189][ T74] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.675180][ T74] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.709468][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.726003][ T74] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.744805][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.745827][ T74] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.807333][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.848140][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.862875][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.920211][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.967360][ T5975] openvswitch: netlink: IP tunnel dst address not specified [ 114.014543][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.032644][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.254202][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.303189][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.411285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.441678][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.713047][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.751990][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.802991][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.824449][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.913316][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.963767][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.062403][ T5982] fuse: Bad value for 'fd' [ 115.192027][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.253643][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.665924][ T5993] overlayfs: failed to resolve './file1': -2 [ 118.882831][ T6018] syzkaller0: entered promiscuous mode [ 118.891039][ T6018] syzkaller0: entered allmulticast mode [ 121.640900][ T6049] Illegal XDP return value 4294967294 on prog (id 5) dev syz_tun, expect packet loss! [ 122.993233][ T6051] loop3: detected capacity change from 0 to 8192 [ 123.597665][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.785733][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 125.484389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.654373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 125.789163][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.732162][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 126.810128][ T10] usb 1-1: can't read configurations, error -71 [ 126.964100][ T6077] loop1: detected capacity change from 0 to 512 [ 127.055741][ T6077] ======================================================= [ 127.055741][ T6077] WARNING: The mand mount option has been deprecated and [ 127.055741][ T6077] and is ignored by this kernel. Remove the mand [ 127.055741][ T6077] option from the mount to silence this warning. [ 127.055741][ T6077] ======================================================= [ 128.755285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 129.205489][ T6099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.46'. [ 130.191325][ T6094] fuse: Bad value for 'fd' [ 130.739022][ T6120] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 130.798846][ T6121] syzkaller0: entered promiscuous mode [ 130.805104][ T6121] syzkaller0: entered allmulticast mode [ 130.960830][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 130.982050][ T6124] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 131.474750][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 131.507021][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.544396][ T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.054728][ T5978] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.630587][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.640234][ T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 132.655669][ T9] usb 6-1: Product: syz [ 132.659865][ T9] usb 6-1: Manufacturer: syz [ 132.821453][ T9] hub 6-1:4.0: USB hub found [ 132.866868][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 133.162973][ T9] hub 6-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 133.391127][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.458267][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 133.534482][ T5978] usb 5-1: can't read configurations, error -71 [ 133.617658][ T6143] 9p: Bad value for 'rfdno' [ 134.226117][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 135.307012][ T5909] usb 6-1: USB disconnect, device number 2 [ 135.369823][ T6156] ubi16: attaching mtd0 [ 135.431777][ T6156] ubi16: scanning is finished [ 135.437258][ T6156] ubi16: empty MTD device detected [ 135.820152][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.834571][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.334455][ T6156] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB) [ 136.384652][ T6156] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 136.392037][ T6156] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 136.474936][ T6164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.489799][ T6156] ubi16: VID header offset: 64 (aligned 64), data offset: 128 [ 136.598695][ T6156] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 136.639646][ T6156] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 136.683366][ T6156] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1357370005 [ 136.744813][ T6156] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 136.829766][ T6163] ubi16: background thread "ubi_bgt16d" started, PID 6163 [ 136.938945][ T6173] macsec1: entered promiscuous mode [ 137.071461][ T6173] macsec1: entered allmulticast mode [ 137.083084][ T6177] syzkaller0: entered promiscuous mode [ 137.104621][ T6177] syzkaller0: entered allmulticast mode [ 137.500115][ T5909] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.718659][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 137.747026][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.805255][ T5909] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.844446][ T5909] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.851130][ T5909] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 138.124686][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.137155][ T5909] usb 2-1: config 0 descriptor?? [ 138.148634][ T5909] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 138.278815][ T6192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.74'. [ 138.936817][ T6190] warning: `syz.3.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 140.091348][ T5942] usb 2-1: USB disconnect, device number 2 [ 140.225765][ T6211] fuse: Bad value for 'fd' [ 141.674454][ T6228] ubi: mtd0 is already attached to ubi16 [ 142.953271][ T6233] syzkaller0: entered promiscuous mode [ 142.958916][ T6233] syzkaller0: entered allmulticast mode [ 146.240156][ T6279] ubi: mtd0 is already attached to ubi16 [ 146.674374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.800528][ T6272] syzkaller0: entered promiscuous mode [ 146.830997][ T6272] syzkaller0: entered allmulticast mode [ 146.955762][ T6282] fuse: Bad value for 'fd' [ 148.972992][ T6309] macsec1: entered promiscuous mode [ 149.017417][ T6309] macsec1: entered allmulticast mode [ 149.362523][ T5927] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 149.754530][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 149.893973][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.922722][ T5927] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 149.993304][ T5927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 150.013570][ T5927] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 150.048766][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.110417][ T5927] usb 5-1: config 0 descriptor?? [ 150.140910][ T5927] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 151.744821][ T6337] syzkaller0: entered promiscuous mode [ 151.770693][ T6337] syzkaller0: entered allmulticast mode [ 152.002049][ T5942] usb 5-1: USB disconnect, device number 4 [ 153.706837][ T6367] ubi: mtd0 is already attached to ubi16 [ 154.606516][ T6378] macsec1: entered promiscuous mode [ 154.626969][ T6378] macsec1: entered allmulticast mode [ 154.904460][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 155.054530][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 155.062348][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.282516][ T10] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.297397][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 155.305076][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 155.314979][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.328683][ T10] usb 4-1: config 0 descriptor?? [ 155.340448][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 155.621923][ T6391] Zero length message leads to an empty skb [ 155.666007][ T6391] syzkaller0: entered promiscuous mode [ 155.681680][ T6391] syzkaller0: entered allmulticast mode [ 156.159536][ T6393] loop4: detected capacity change from 0 to 8192 [ 156.227950][ T5808] loop4: p1 < > p2 < p5 > p4 [ 156.233092][ T5808] loop4: partition table partially beyond EOD, truncated [ 156.277084][ T5808] loop4: p1 start 67109119 is beyond EOD, truncated [ 156.616356][ T5808] loop4: p4 size 393216 extends beyond EOD, truncated [ 156.638218][ T5808] loop4: p5 size 393216 extends beyond EOD, truncated [ 156.701840][ T6393] loop4: p1 < > p2 < p5 > p4 [ 156.729327][ T6393] loop4: partition table partially beyond EOD, truncated [ 156.772410][ T6393] loop4: p1 start 67109119 is beyond EOD, truncated [ 156.785804][ T6393] loop4: p4 size 393216 extends beyond EOD, truncated [ 156.799158][ T6393] loop4: p5 size 393216 extends beyond EOD, truncated [ 157.136065][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 157.369391][ T6405] xt_l2tp: missing protocol rule (udp|l2tpip) [ 158.136403][ T5912] usb 4-1: USB disconnect, device number 2 [ 158.781500][ T5808] udevd[5808]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 158.847425][ T6419] ubi: mtd0 is already attached to ubi16 [ 159.064615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 159.355729][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 159.374131][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 159.874307][ T5808] udevd[5808]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 160.037777][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 160.068283][ T5811] udevd[5811]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 160.368089][ T6431] syzkaller0: entered promiscuous mode [ 160.383900][ T6431] syzkaller0: entered allmulticast mode [ 160.969606][ T6442] netlink: 16 bytes leftover after parsing attributes in process `syz.5.164'. [ 161.131844][ T6450] xt_l2tp: missing protocol rule (udp|l2tpip) [ 162.019395][ T5942] IPVS: starting estimator thread 0... [ 162.164533][ T6454] IPVS: using max 23 ests per chain, 55200 per kthread [ 162.214896][ T6462] openvswitch: netlink: IP tunnel dst address not specified [ 162.226912][ T6462] 9p: Bad value for 'rfdno' [ 162.831107][ T6465] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 163.352572][ T6467] ubi: mtd0 is already attached to ubi16 [ 164.132710][ T6479] loop5: detected capacity change from 0 to 7 [ 164.744503][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.943806][ T6489] netlink: 'syz.1.176': attribute type 13 has an invalid length. [ 165.008886][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 165.042477][ T6489] gretap0: refused to change device tx_queue_len [ 165.051487][ T10] usb 4-1: config 0 has an invalid interface number: 162 but max is 0 [ 165.085489][ T6489] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 165.104957][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.155461][ T10] usb 4-1: config 0 has no interface number 0 [ 165.236260][ T10] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 165.302925][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.362478][ T10] usb 4-1: Product: syz [ 165.392871][ T10] usb 4-1: Manufacturer: syz [ 165.412444][ T10] usb 4-1: SerialNumber: syz [ 165.462408][ T10] usb 4-1: config 0 descriptor?? [ 165.481305][ T6479] Dev loop5: unable to read RDB block 7 [ 165.505063][ T6482] [ 165.507418][ T6482] ====================================================== [ 165.514452][ T6482] WARNING: possible circular locking dependency detected [ 165.521516][ T6482] syzkaller #0 Not tainted [ 165.525930][ T6482] ------------------------------------------------------ [ 165.532934][ T6482] syz.1.176/6482 is trying to acquire lock: [ 165.538829][ T6482] ffff88801c6ada20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 165.549045][ T6482] [ 165.549045][ T6482] but task is already holding lock: [ 165.556405][ T6482] ffff888026b189e8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.567731][ T6482] [ 165.567731][ T6482] which lock already depends on the new lock. [ 165.567731][ T6482] [ 165.578145][ T6482] [ 165.578145][ T6482] the existing dependency chain (in reverse order) is: [ 165.587588][ T6482] [ 165.587588][ T6482] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 165.596326][ T6482] blk_alloc_queue+0x610/0x790 [ 165.601713][ T6482] blk_mq_alloc_queue+0x174/0x290 [ 165.607258][ T6482] __blk_mq_alloc_disk+0x29/0x120 [ 165.612820][ T6482] loop_add+0x498/0xb60 [ 165.617594][ T6482] loop_init+0x1d3/0x200 [ 165.622370][ T6482] do_one_initcall+0x11d/0x760 [ 165.627671][ T6482] kernel_init_freeable+0x6e5/0x7a0 [ 165.633494][ T6482] kernel_init+0x1f/0x1e0 [ 165.638356][ T6482] ret_from_fork+0x754/0xd80 [ 165.643488][ T6482] ret_from_fork_asm+0x1a/0x30 [ 165.648888][ T6482] [ 165.648888][ T6482] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 165.656113][ T6482] fs_reclaim_acquire+0xc4/0x100 [ 165.661583][ T6482] kmem_cache_alloc_noprof+0x4c/0x6e0 [ 165.667485][ T6482] __kernfs_iattrs+0x126/0x400 [ 165.672820][ T6482] __kernfs_setattr+0x4d/0x3c0 [ 165.678139][ T6482] kernfs_iop_setattr+0xda/0x130 [ 165.683619][ T6482] notify_change+0xb25/0x1330 [ 165.688828][ T6482] do_truncate+0x1df/0x240 [ 165.693775][ T6482] path_openat+0x2a55/0x31a0 [ 165.698985][ T6482] do_file_open+0x20e/0x430 [ 165.704028][ T6482] do_sys_openat2+0x10d/0x1e0 [ 165.709223][ T6482] __x64_sys_openat+0x12d/0x210 [ 165.714614][ T6482] do_syscall_64+0x106/0xf80 [ 165.719745][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.726183][ T6482] [ 165.726183][ T6482] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 165.734791][ T6482] __lock_acquire+0x14b8/0x2630 [ 165.740184][ T6482] lock_acquire+0x1cf/0x380 [ 165.745225][ T6482] down_read+0x99/0x460 [ 165.749915][ T6482] kernfs_iop_getattr+0x9c/0xf0 [ 165.755294][ T6482] vfs_getattr_nosec+0x2d4/0x430 [ 165.760789][ T6482] vfs_getattr+0x4a/0x60 [ 165.765566][ T6482] loop_query_min_dio_size.isra.0+0x117/0x250 [ 165.772188][ T6482] lo_ioctl+0x13aa/0x1bc0 [ 165.777048][ T6482] blkdev_ioctl+0x5ad/0x6f0 [ 165.782083][ T6482] __x64_sys_ioctl+0x18e/0x210 [ 165.787372][ T6482] do_syscall_64+0x106/0xf80 [ 165.792484][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.798895][ T6482] [ 165.798895][ T6482] other info that might help us debug this: [ 165.798895][ T6482] [ 165.809281][ T6482] Chain exists of: [ 165.809281][ T6482] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 165.809281][ T6482] [ 165.823822][ T6482] Possible unsafe locking scenario: [ 165.823822][ T6482] [ 165.831272][ T6482] CPU0 CPU1 [ 165.836620][ T6482] ---- ---- [ 165.841970][ T6482] lock(&q->q_usage_counter(io)#22); [ 165.847374][ T6482] lock(fs_reclaim); [ 165.854062][ T6482] lock(&q->q_usage_counter(io)#22); [ 165.861965][ T6482] rlock(&root->kernfs_iattr_rwsem); [ 165.867366][ T6482] [ 165.867366][ T6482] *** DEADLOCK *** [ 165.867366][ T6482] [ 165.875496][ T6482] 3 locks held by syz.1.176/6482: [ 165.880507][ T6482] #0: ffff888026c7b448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 165.890728][ T6482] #1: ffff888026b189e8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.902441][ T6482] #2: ffff888026b18a20 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 165.914330][ T6482] [ 165.914330][ T6482] stack backtrace: [ 165.920242][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.1.176 Not tainted syzkaller #0 PREEMPT(full) [ 165.920277][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.920297][ T6482] Call Trace: [ 165.920319][ T6482] [ 165.920333][ T6482] dump_stack_lvl+0x100/0x190 [ 165.920382][ T6482] print_circular_bug.cold+0x178/0x1c7 [ 165.920432][ T6482] check_noncircular+0x146/0x160 [ 165.920488][ T6482] __lock_acquire+0x14b8/0x2630 [ 165.920541][ T6482] lock_acquire+0x1cf/0x380 [ 165.920587][ T6482] ? kernfs_iop_getattr+0x9c/0xf0 [ 165.920627][ T6482] ? __pfx___might_resched+0x10/0x10 [ 165.920662][ T6482] down_read+0x99/0x460 [ 165.920701][ T6482] ? kernfs_iop_getattr+0x9c/0xf0 [ 165.920739][ T6482] ? find_held_lock+0x2b/0x80 [ 165.920774][ T6482] ? __pfx_down_read+0x10/0x10 [ 165.920809][ T6482] ? kernfs_root+0xee/0x2a0 [ 165.920843][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.920885][ T6482] kernfs_iop_getattr+0x9c/0xf0 [ 165.920923][ T6482] vfs_getattr_nosec+0x2d4/0x430 [ 165.920971][ T6482] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 165.921011][ T6482] vfs_getattr+0x4a/0x60 [ 165.921061][ T6482] loop_query_min_dio_size.isra.0+0x117/0x250 [ 165.921110][ T6482] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 165.921170][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.921209][ T6482] lo_ioctl+0x13aa/0x1bc0 [ 165.921256][ T6482] ? __pfx_lo_ioctl+0x10/0x10 [ 165.921300][ T6482] ? tomoyo_path_number_perm+0x46d/0x580 [ 165.921336][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.921373][ T6482] ? kasan_quarantine_put+0x104/0x240 [ 165.921409][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.921444][ T6482] ? blk_get_meta_cap+0xd4/0x6c0 [ 165.921488][ T6482] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 165.921530][ T6482] ? tomoyo_path_number_perm+0x28f/0x580 [ 165.921563][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.921601][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.921635][ T6482] ? blkdev_common_ioctl+0x515/0x2ba0 [ 165.921680][ T6482] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 165.921728][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.921761][ T6482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 165.921807][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.921840][ T6482] ? do_vfs_ioctl+0x226/0x13e0 [ 165.921875][ T6482] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 165.921917][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.921950][ T6482] ? find_held_lock+0x2b/0x80 [ 165.921984][ T6482] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.922024][ T6482] ? __pfx_lo_ioctl+0x10/0x10 [ 165.922067][ T6482] blkdev_ioctl+0x5ad/0x6f0 [ 165.922109][ T6482] ? __pfx_blkdev_ioctl+0x10/0x10 [ 165.922154][ T6482] ? __pfx_blkdev_ioctl+0x10/0x10 [ 165.922200][ T6482] __x64_sys_ioctl+0x18e/0x210 [ 165.922237][ T6482] do_syscall_64+0x106/0xf80 [ 165.922266][ T6482] ? irqentry_exit+0x138/0x670 [ 165.922297][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.922326][ T6482] RIP: 0033:0x7fc04b19c819 [ 165.922349][ T6482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.922377][ T6482] RSP: 002b:00007fc04bf92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.922410][ T6482] RAX: ffffffffffffffda RBX: 00007fc04b416090 RCX: 00007fc04b19c819 [ 165.922429][ T6482] RDX: 0000000000000007 RSI: 0000000000004c06 RDI: 0000000000000006 [ 165.922445][ T6482] RBP: 00007fc04b232c91 R08: 0000000000000000 R09: 0000000000000000 [ 165.922462][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.922480][ T6482] R13: 00007fc04b416128 R14: 00007fc04b416090 R15: 00007ffcbb628a58 [ 165.922511][ T6482] [ 166.331788][ T6491] syzkaller0: entered promiscuous mode [ 166.337696][ T6491] syzkaller0: entered allmulticast mode [ 166.349617][ T10] cdc_ether 4-1:0.162: skipping garbage [ 166.353465][ T6479] loop5: unable to read partition table [ 166.355233][ T10] usb 4-1: bad CDC descriptors [ 166.355851][ T10] usb 4-1: unsupported MDLM descriptors [ 166.411850][ T6479] loop5: partition table beyond EOD, truncated [ 166.450695][ T6479] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 166.636584][ T5808] Dev loop5: unable to read RDB block 7 [ 166.642692][ T5808] loop5: unable to read partition table [ 166.649912][ T5808] loop5: partition table beyond EOD, truncated [ 166.813265][ T6482] Dev loop5: unable to read RDB block 7 [ 166.840020][ T6482] loop5: unable to read partition table [ 166.871783][ T6482] loop5: partition table beyond EOD, truncated [ 166.889498][ T6482] loop_reread_partitions: partition scan of loop5 (Wý* %4FLQk݊5) failed (rc=-5) [ 167.582801][ T5912] usb 4-1: USB disconnect, device number 3