last executing test programs: 3m9.201057573s ago: executing program 1 (id=112): r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="bee900000080", 0x0, 0x7, 0x0, 0x0, 0x0}) 3m5.931128042s ago: executing program 1 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x80803, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x0, 0x37f, 0x148, 0x150, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0xe8, 0x150, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) 3m4.30051422s ago: executing program 1 (id=121): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) lsm_set_self_attr(0x69, 0x0, 0x106, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r1) r3 = getuid() r4 = getegid() fchown(0xffffffffffffffff, r3, r4) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x1c}}, 0x0) chdir(&(0x7f0000000140)='./file1\x00') shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x50, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0x50}}, 0x0) write$binfmt_script(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m59.476154279s ago: executing program 1 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x2, {0xa, 0x4e23, 0x1, @remote, 0xfffff801}}}, 0x32) io_setup(0x1, &(0x7f0000000080)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x20}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323}, {}, {}, 0x70bd29, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @encap={0x1c, 0x4, {0x2, 0x4e21}}]}, 0x170}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="bee900000080", 0x0, 0x7, 0x0, 0x0, 0x0}) 2m52.930648141s ago: executing program 1 (id=140): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0x3, 0x4, 0x7d, 0x6}, 0x8) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x151, 0xfffffffffffffffe) unshare(0x22020400) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x2, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r7 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r7, &(0x7f0000000040)={0x22, 0x20, 0x9, 0x8, 0xea}, 0x6) 2m49.638625209s ago: executing program 1 (id=144): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x6}}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x9a39, 0x80001) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000005c0)=""/22) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) 2m34.478823963s ago: executing program 32 (id=144): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0xc8, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x6}}}}]}, 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x9a39, 0x80001) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f00000005c0)=""/22) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000080)) 16.554814652s ago: executing program 3 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000000000)="11868a0fceae284c00000001", 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x80) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) bind$x25(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x10, 0x80002, 0x4) 16.501759689s ago: executing program 0 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 15.705421388s ago: executing program 0 (id=461): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000240)=0x7, 0x4) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000280)={{0x2, 0x4e23, @empty}, {}, 0x6a, {0x2, 0x0, @broadcast}}) sendto$phonet(r3, &(0x7f0000000040)="0bbab5943069427e115d649869c6dc499dfff39b58af73235d3daf66b4916a072f95455507dfdf30054fb84a85037599beed58978b3b85430e9d6ec6b05811b44ad9fc49ced50b230b6f78a9a8310d0324faf93659f545a45c8a755fd12c529a52f5ac0b8d015b414499767a826fd78d85a3a72f5c42902cc7ba1f1d8bfafaaa8f280a96c45295bb75d4880719c48ffa59434adf3716f93225b92e1dbc1ca5004499de14e9d16ac51b2c65d28568b4397b1721", 0xffffffffffffffe0, 0x4000, &(0x7f0000000100), 0x10) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack_perm, @md5sig={0x13, 0x3c, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') lstat(&(0x7f00000048c0)='./file0\x00', &(0x7f0000004900)) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, 0x0, 0x200040d1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, 0x0) 15.624496182s ago: executing program 3 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x8aa, 0x0, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0x0, r0, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) 14.811632401s ago: executing program 3 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc02}}}]}, 0x38}}, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @remote}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x800) 14.496699999s ago: executing program 0 (id=465): r0 = io_uring_setup(0x4827, &(0x7f00000000c0)={0x0, 0x96c5, 0x4, 0x1, 0xe6}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@x={0x94, 0xd, "31d02bcdd7a9"}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20044015}, 0x230d770ad5116c88) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.144971129s ago: executing program 3 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000000)='./file1/file3\x00', 0x1, 0x43) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 10.121956982s ago: executing program 2 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000000000)="11868a0fceae284c00000001", 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x80) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x10, 0x80002, 0x4) 9.971415309s ago: executing program 3 (id=473): io_uring_setup(0x4827, &(0x7f00000000c0)={0x0, 0x96c5, 0x4, 0x1, 0xe6}) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@x={0x94, 0xd, "31d02bcdd7a9"}) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20044015}, 0x230d770ad5116c88) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r4, r4, 0x0, 0x9) 8.980728569s ago: executing program 2 (id=474): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000240)=0x7, 0x4) ioctl$sock_inet_SIOCDARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x4e23, @empty}, {}, 0x6a, {0x2, 0x0, @broadcast}}) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="0bbab5943069427e115d649869c6dc499dfff39b58af73235d3daf66b4916a072f95455507dfdf30054fb84a85037599beed58978b3b85430e9d6ec6b05811b44ad9fc49ced50b230b6f78a9a8310d0324faf93659f545a45c8a755fd12c529a52f5ac0b8d015b414499767a826fd78d85a3a72f5c42902cc7ba1f1d8bfafaaa8f280a96c45295bb75d4880719c48ffa59434adf3716f93225b92e1dbc1ca5004499de14e9d16ac51b2c65d28568b4397b1721", 0xffffffffffffffe0, 0x4000, &(0x7f0000000100), 0x10) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack_perm, @md5sig={0x13, 0x3c, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') lstat(&(0x7f00000048c0)='./file0\x00', &(0x7f0000004900)) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, 0x0, 0x200040d1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, 0x0) 7.148489897s ago: executing program 2 (id=476): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) time(0x0) 7.005728569s ago: executing program 4 (id=477): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigaction(0x10, &(0x7f00000004c0)={&(0x7f0000002700)="f3dfd2c4237d390b35650fa8c4831d02fc06c42191d9eff3400f7edfc4e2dd288f00000000473c0167660f71e5d12e660f7f0e", 0x1, 0x0, {[0xab4]}}, 0x0, 0x8, &(0x7f00000028c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0x0) 6.755988931s ago: executing program 0 (id=478): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) move_pages(r0, 0x0, &(0x7f0000001040), &(0x7f0000001080)=[0xe, 0x10001, 0x9a8, 0x2, 0xfffffff8, 0x8000], 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0x3, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001180)={r3}, &(0x7f0000001040)=ANY=[], 0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8002, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read$FUSE(r5, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"a2e3ad21ed0d09f90e3d090987f70e06d038e7ff7fc6e5539b0d5b0e8b099b3f36006e090890e0878f0e1ac6e7f89b334d959b4a9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0a6193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000400000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617679314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec230911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918c91243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac5a4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4b333bd5bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3be3b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ce0700c7e658828163e2d25c4aa348561f927eff7f3aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f05004b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d486046b2c0e2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee6157eb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de225727aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d78749a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29c60acebdbe8ddbd75c2f998d8a57f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95ff80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8870b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513007000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae8489d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60299473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d946a2daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810300000000000000a12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf000000800000000007b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae0e797e8bd1f4108b7807fb36207685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ad50dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b9048017848416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b00f1000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9c0587c2cb5fe36d7d3e5db21b013b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cf4b23329072e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06810002000000000000957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f3e90d5943dbc10360a1a49700d1dfbf66d69f6fbafe1e83cdde8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000100", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1) keyctl$link(0x8, r3, r3) 4.192947274s ago: executing program 0 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\t'}]}, @NFTA_CMP_OP={0x8}]}}}]}]}], {0x14}}, 0x84}}, 0x0) 4.105115647s ago: executing program 2 (id=480): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 4.068200145s ago: executing program 4 (id=481): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000006c0)={&(0x7f0000000280)={{@hyper}, {@local}, 0x41b, "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"}, 0x418, 0x7fffffff}) 3.986553004s ago: executing program 0 (id=482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000280)='tunl0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(&(0x7f0000000080)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@filename='./bus\x00', &(0x7f00000000c0)='./bus\x00', 0x0, 0x400080, 0x0) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x5, 0x5, 0x0) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x6, 0x7ff, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) socket$inet6(0xa, 0x5, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000740)={'HL\x00'}, &(0x7f0000000780)=0x1e) r4 = accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000004b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004ac0)=0x6c) ioperm(0x0, 0x7, 0x7) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4008040) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000010c00"/20, @ANYRES32=0x0, @ANYBLOB="0006000000000000140012800a00010069706f69620000000400028008000500", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 3.460903316s ago: executing program 4 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980), 0x0, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000000000)="11868a0fceae284c00000001", 0xc) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x80) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x10, 0x80002, 0x4) 3.037898581s ago: executing program 2 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x8aa, 0x0, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r3, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) 1.848161818s ago: executing program 2 (id=485): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000880)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000240)=0x7, 0x4) ioctl$sock_inet_SIOCDARP(r3, 0x8955, &(0x7f0000000280)={{0x2, 0x4e23, @empty}, {}, 0x6a, {0x2, 0x0, @broadcast}}) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="0bbab5943069427e115d649869c6dc499dfff39b58af73235d3daf66b4916a072f95455507dfdf30054fb84a85037599beed58978b3b85430e9d6ec6b05811b44ad9fc49ced50b230b6f78a9a8310d0324faf93659f545a45c8a755fd12c529a52f5ac0b8d015b414499767a826fd78d85a3a72f5c42902cc7ba1f1d8bfafaaa8f280a96c45295bb75d4880719c48ffa59434adf3716f93225b92e1dbc1ca5004499de14e9d16ac51b2c65d28568b4397b1721", 0xffffffffffffffe0, 0x4000, &(0x7f0000000100), 0x10) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack_perm, @md5sig={0x13, 0x3c, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00') lstat(&(0x7f00000048c0)='./file0\x00', &(0x7f0000004900)) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, 0x0, 0x200040d1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, 0x0) 1.769761154s ago: executing program 4 (id=486): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000001c0)={0x3, 0x4, 0x7d, 0x6}, 0x8) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="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", 0x151, 0xfffffffffffffffe) unshare(0x22020400) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0x2, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, 0x0, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r7 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r7, &(0x7f0000000040)={0x22, 0x20, 0x9, 0x8, 0xea}, 0x6) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x1c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x6, 0x11, 0x0, 0x1, [@generic="2fe5"]}]}, 0x1c}], 0x1}, 0x0) 1.768838267s ago: executing program 3 (id=487): r0 = io_uring_setup(0x4827, &(0x7f00000000c0)={0x0, 0x96c5, 0x4, 0x1, 0xe6}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@x={0x94, 0xd, "31d02bcdd7a9"}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20044015}, 0x230d770ad5116c88) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="930200007d00000005f1000000000000000000000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec60200fdfa673e20eb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8105b494e11200cfc2001000000000000000000000f313f6005500f8f669fb716dcf315ecaf385409ac65b9408678c2c3b9e1d52c36cde7ba4a400b4b0b4f174a666a8529a451b3407dbdab2884baf05000000000000000ab7bea336baaa96fe34af65bcebee47ec21cabff20f9c1cbe36f4fd1a4cc280e8d489da649a37002c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76feff6841f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9b813d83387bea0589b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fdf0000000000000000000000000000000000355e6ccabc36323e612dc39378eddb491ec95672f14e925f71e72b8a17320028cf54674b56292ba4930db7bdff2bda260d53339918aee32a27820167a599744a9620fcd0702de18f7045107296d65e5c86c583080cca7f78ea8f5f603f760d63868cf1b879ed47f74325be40956eec8a61407ad011905025852931841d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 101.864656ms ago: executing program 4 (id=488): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000016c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x548, 0x3a8, 0x8, 0x7f02ae, 0x3a8, 0x200, 0x478, 0x2e8, 0x2e8, 0x478, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x3a8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv4=@remote, @ipv4=@empty, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0xfffa, 0xab, 0xfffffff9, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff], 'batadv_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x3e}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x4, 0x1, 0x4}, {0x3, 0x4, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) 0s ago: executing program 4 (id=489): socket$key(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0xb) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 86.009988][ T5818] cgroup: Unknown subsys name 'net' [ 86.141626][ T5818] cgroup: Unknown subsys name 'cpuset' [ 86.151461][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.888584][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.681824][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.690216][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.706734][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.715136][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.723934][ T5837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.727006][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.738875][ T5837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.746266][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.755294][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.759474][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.771224][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.778080][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.792287][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.797532][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.801420][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.814009][ T5837] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.814523][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.829857][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.837510][ T5837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.837534][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.853821][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.854419][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.866848][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.869120][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.938429][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.958178][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.970832][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.991015][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.000423][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.008501][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.759726][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 93.940948][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 94.104838][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 94.159548][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 94.268076][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 94.298867][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.307021][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.314542][ T5832] bridge_slave_0: entered allmulticast mode [ 94.323222][ T5832] bridge_slave_0: entered promiscuous mode [ 94.394465][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.401769][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.409644][ T5832] bridge_slave_1: entered allmulticast mode [ 94.418029][ T5832] bridge_slave_1: entered promiscuous mode [ 94.578654][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.585848][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.593153][ T5831] bridge_slave_0: entered allmulticast mode [ 94.601030][ T5831] bridge_slave_0: entered promiscuous mode [ 94.611955][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.619249][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.627120][ T5831] bridge_slave_1: entered allmulticast mode [ 94.635098][ T5831] bridge_slave_1: entered promiscuous mode [ 94.682798][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.699798][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.772113][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.779976][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.788012][ T5830] bridge_slave_0: entered allmulticast mode [ 94.795598][ T5830] bridge_slave_0: entered promiscuous mode [ 94.802434][ T5841] Bluetooth: hci0: command tx timeout [ 94.828910][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.836549][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.843791][ T5847] bridge_slave_0: entered allmulticast mode [ 94.851771][ T5847] bridge_slave_0: entered promiscuous mode [ 94.920516][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.930266][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.937816][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.944993][ T5830] bridge_slave_1: entered allmulticast mode [ 94.953222][ T5830] bridge_slave_1: entered promiscuous mode [ 94.960891][ T5843] Bluetooth: hci3: command tx timeout [ 94.960903][ T5837] Bluetooth: hci2: command tx timeout [ 94.962199][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.966728][ T5841] Bluetooth: hci1: command tx timeout [ 94.972346][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.992484][ T5847] bridge_slave_1: entered allmulticast mode [ 95.002381][ T5847] bridge_slave_1: entered promiscuous mode [ 95.051827][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.118804][ T5832] team0: Port device team_slave_0 added [ 95.125044][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.132528][ T5841] Bluetooth: hci4: command tx timeout [ 95.132731][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.145198][ T5828] bridge_slave_0: entered allmulticast mode [ 95.153187][ T5828] bridge_slave_0: entered promiscuous mode [ 95.179652][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.210327][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.226786][ T5832] team0: Port device team_slave_1 added [ 95.233144][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.241412][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.248869][ T5828] bridge_slave_1: entered allmulticast mode [ 95.257274][ T5828] bridge_slave_1: entered promiscuous mode [ 95.283728][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.295841][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.382570][ T5831] team0: Port device team_slave_0 added [ 95.449359][ T5847] team0: Port device team_slave_0 added [ 95.475360][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.483713][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.509696][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.525718][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.540668][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.552481][ T5831] team0: Port device team_slave_1 added [ 95.562038][ T5830] team0: Port device team_slave_0 added [ 95.573990][ T5847] team0: Port device team_slave_1 added [ 95.597313][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.604269][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.630272][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.681208][ T5830] team0: Port device team_slave_1 added [ 95.771851][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.779227][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.805576][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.823043][ T5828] team0: Port device team_slave_0 added [ 95.833551][ T5828] team0: Port device team_slave_1 added [ 95.840611][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.847780][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.874315][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.923105][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.930635][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.957217][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.998931][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.009727][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.036412][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.049000][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.056294][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.089706][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.104062][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.111127][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.137508][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.275837][ T5832] hsr_slave_0: entered promiscuous mode [ 96.282523][ T5832] hsr_slave_1: entered promiscuous mode [ 96.292073][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.299211][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.326767][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.368964][ T5847] hsr_slave_0: entered promiscuous mode [ 96.375585][ T5847] hsr_slave_1: entered promiscuous mode [ 96.382679][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.390677][ T5847] Cannot create hsr debugfs directory [ 96.397316][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.404290][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.430526][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.566507][ T5831] hsr_slave_0: entered promiscuous mode [ 96.572979][ T5831] hsr_slave_1: entered promiscuous mode [ 96.579666][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.587266][ T5831] Cannot create hsr debugfs directory [ 96.622772][ T5830] hsr_slave_0: entered promiscuous mode [ 96.629441][ T5830] hsr_slave_1: entered promiscuous mode [ 96.635757][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.645041][ T5830] Cannot create hsr debugfs directory [ 96.734915][ T5828] hsr_slave_0: entered promiscuous mode [ 96.742006][ T5828] hsr_slave_1: entered promiscuous mode [ 96.749527][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.757488][ T5828] Cannot create hsr debugfs directory [ 96.886806][ T5841] Bluetooth: hci0: command tx timeout [ 97.036233][ T5843] Bluetooth: hci3: command tx timeout [ 97.041720][ T5841] Bluetooth: hci1: command tx timeout [ 97.046404][ T5843] Bluetooth: hci2: command tx timeout [ 97.196910][ T5843] Bluetooth: hci4: command tx timeout [ 97.207118][ T974] cfg80211: failed to load regulatory.db [ 97.510627][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.530613][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.554866][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.579956][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.669466][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.689411][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.702148][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.715200][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.835197][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.854066][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.865764][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.890396][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.014527][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.025683][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.081705][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.092964][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.219546][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.240391][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.265103][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.280791][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.358148][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.447410][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.540371][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.561695][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.589794][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.597228][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.641430][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.648873][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.659335][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.666613][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.678087][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.685235][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.741968][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.779428][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.835372][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.877793][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.905185][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.912539][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.956674][ T5843] Bluetooth: hci0: command tx timeout [ 98.982014][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.989297][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.010406][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.018192][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.105328][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.117855][ T5843] Bluetooth: hci2: command tx timeout [ 99.121606][ T5841] Bluetooth: hci1: command tx timeout [ 99.123306][ T5837] Bluetooth: hci3: command tx timeout [ 99.169233][ T1906] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.176509][ T1906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.276385][ T5837] Bluetooth: hci4: command tx timeout [ 99.363863][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.419207][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.426474][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.443479][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.485657][ T1906] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.492894][ T1906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.598094][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.709634][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.981815][ T5832] veth0_vlan: entered promiscuous mode [ 100.112265][ T5832] veth1_vlan: entered promiscuous mode [ 100.174266][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.270072][ T5847] veth0_vlan: entered promiscuous mode [ 100.292012][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.337805][ T5832] veth0_macvtap: entered promiscuous mode [ 100.360545][ T5832] veth1_macvtap: entered promiscuous mode [ 100.370556][ T5847] veth1_vlan: entered promiscuous mode [ 100.416938][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.462655][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.528034][ T5830] veth0_vlan: entered promiscuous mode [ 100.535114][ T5847] veth0_macvtap: entered promiscuous mode [ 100.554693][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.591300][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.601988][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.610794][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.619580][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.638356][ T5847] veth1_macvtap: entered promiscuous mode [ 100.664817][ T5830] veth1_vlan: entered promiscuous mode [ 100.684269][ T5831] veth0_vlan: entered promiscuous mode [ 100.753114][ T5828] veth0_vlan: entered promiscuous mode [ 100.761329][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.773153][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.784802][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.813254][ T5831] veth1_vlan: entered promiscuous mode [ 100.832053][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.849900][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.864057][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.904186][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.913261][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.922119][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.932259][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.948107][ T5828] veth1_vlan: entered promiscuous mode [ 100.990540][ T5830] veth0_macvtap: entered promiscuous mode [ 101.032149][ T5830] veth1_macvtap: entered promiscuous mode [ 101.048448][ T5837] Bluetooth: hci0: command tx timeout [ 101.087389][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.098069][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.196976][ T5837] Bluetooth: hci1: command tx timeout [ 101.207993][ T5843] Bluetooth: hci2: command tx timeout [ 101.213480][ T5837] Bluetooth: hci3: command tx timeout [ 101.255305][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.270914][ T5828] veth0_macvtap: entered promiscuous mode [ 101.288122][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.298789][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.308725][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.315973][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.319243][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.340249][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.354491][ T5831] veth0_macvtap: entered promiscuous mode [ 101.367971][ T5837] Bluetooth: hci4: command tx timeout [ 101.430842][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.442037][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.453704][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.471535][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.493606][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.501583][ T5831] veth1_macvtap: entered promiscuous mode [ 101.520575][ T5828] veth1_macvtap: entered promiscuous mode [ 101.534329][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.561953][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.570391][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.576681][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.601521][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.610714][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.619823][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.683555][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.703048][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.725950][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.746037][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.757172][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.768389][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.788525][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.806286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.886834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.268184][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.281474][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.295242][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.308276][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.341993][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.355655][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.368437][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.394678][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.398684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.409906][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.531293][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.543704][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.551811][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.562155][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.575792][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.588705][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.599586][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.611657][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.623700][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.646827][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.658766][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.670666][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.682424][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.693370][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.707848][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.719258][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.730429][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.742275][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.772910][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.784050][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.805111][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.824635][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.874905][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.913027][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.924683][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.942009][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.997538][ T5926] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 103.076397][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.109252][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.429270][ T5930] syz.1.6: attempt to access beyond end of device [ 103.429270][ T5930] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 103.443476][ T5930] (syz.1.6,5930,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 103.450921][ T5930] (syz.1.6,5930,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 103.458089][ T5930] (syz.1.6,5930,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 103.467066][ T5930] (syz.1.6,5930,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 105.187137][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.212398][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.521735][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.567010][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.906907][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.988927][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.597482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.976270][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.984115][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.211971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.358296][ T1906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.395446][ T1906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.739008][ T5975] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 110.787159][ T29] audit: type=1326 audit(1740269670.598:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.4.13" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8b3b8d169 code=0x0 [ 111.486156][ T5975] bond1: entered promiscuous mode [ 111.491329][ T5975] bond1: entered allmulticast mode [ 111.837048][ T5975] bond1 (unregistering): Released all slaves [ 111.935243][ T5978] netlink: 'syz.0.14': attribute type 1 has an invalid length. [ 113.288578][ T5985] slcan: can't register candev [ 113.293899][ T5985] Falling back ldisc for ttyS3. [ 113.319312][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15'. [ 113.561207][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 113.838032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 113.998576][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.192836][ T5998] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.380381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 114.586273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 114.616332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 116.776945][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 118.185227][ T6027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.388856][ T6030] netlink: 'syz.4.30': attribute type 1 has an invalid length. [ 119.559597][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 119.941982][ T6039] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 119.948525][ T6039] PKCS7: Only support pkcs7_signedData type [ 121.549139][ T6046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'. [ 124.556538][ T6057] pim6reg1: entered promiscuous mode [ 124.561901][ T6057] pim6reg1: entered allmulticast mode [ 126.698144][ T6078] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 126.704351][ T6078] PKCS7: Only support pkcs7_signedData type [ 128.759386][ T6101] netlink: 'syz.3.51': attribute type 1 has an invalid length. [ 129.464713][ T6108] syz.3.51: attempt to access beyond end of device [ 129.464713][ T6108] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 129.477431][ T6108] (syz.3.51,6108,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 129.484834][ T6108] (syz.3.51,6108,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 129.492134][ T6108] (syz.3.51,6108,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 129.502343][ T6108] (syz.3.51,6108,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 130.949702][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.55'. [ 131.056021][ T6124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 131.726510][ T976] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.401957][ T6132] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 132.415366][ T6132] PKCS7: Only support pkcs7_signedData type [ 132.464564][ T976] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.496357][ T976] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 132.509213][ T976] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.528777][ T6127] Cannot find add_set index 0 as target [ 132.695988][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 132.713541][ T976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 133.086950][ T976] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.286341][ T976] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.336274][ T976] usb 2-1: Product: syz [ 133.340528][ T976] usb 2-1: Manufacturer: syz [ 133.434092][ T976] usb 2-1: can't set config #1, error -71 [ 133.481296][ T976] usb 2-1: USB disconnect, device number 2 [ 134.829145][ T6142] xt_cgroup: path and classid specified [ 136.524499][ T5885] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.716684][ T5885] usb 4-1: Using ep0 maxpacket: 32 [ 136.889532][ T5885] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 136.931765][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.299196][ T5885] usb 4-1: config 0 descriptor?? [ 137.409666][ T5885] as10x_usb: device has been detected [ 137.563252][ T5885] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 137.813164][ T6163] netlink: 'syz.0.68': attribute type 32 has an invalid length. [ 137.939040][ T6164] capability: warning: `syz.0.68' uses 32-bit capabilities (legacy support in use) [ 138.095315][ T5885] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 138.212821][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.231345][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.946557][ T5885] as10x_usb: error during firmware upload part1 [ 138.954237][ T5885] Registered device nBox DVB-T Dongle [ 138.979981][ T5885] usb 4-1: USB disconnect, device number 2 [ 139.017424][ T6175] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 139.023621][ T6175] PKCS7: Only support pkcs7_signedData type [ 139.037071][ T5885] Unregistered device nBox DVB-T Dongle [ 139.039703][ T5885] as10x_usb: device has been disconnected [ 139.516085][ T6187] overlayfs: overlapping lowerdir path [ 140.045690][ T976] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 141.418910][ T976] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 141.441661][ T976] usb 4-1: config 0 has no interface number 0 [ 141.456389][ T976] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 141.496015][ T976] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 141.529654][ T976] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.584457][ T976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.098069][ T976] usb 4-1: config 0 descriptor?? [ 142.126467][ T6194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.147020][ T976] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 142.815537][ T5885] usb 4-1: USB disconnect, device number 3 [ 145.019068][ T6244] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 145.025300][ T6244] PKCS7: Only support pkcs7_signedData type [ 145.119511][ T6217] loop4: detected capacity change from 0 to 32768 [ 145.134616][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.262857][ T6217] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.586457][ T6243] bond0: (slave rose0): Enslaving as an active interface with an up link [ 146.506084][ T6217] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 146.796484][ T6217] XFS (loop4): Starting recovery (logdev: internal) [ 146.998148][ T6217] XFS (loop4): Ending recovery (logdev: internal) [ 147.112781][ T5847] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.310928][ T6304] batman_adv: batadv0: Adding interface: dummy0 [ 150.317349][ T6304] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.416266][ T6304] batman_adv: batadv0: Interface activated: dummy0 [ 150.471840][ T6306] batadv0: mtu less than device minimum [ 150.526506][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.539961][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.552604][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.565194][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.577816][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.590347][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.602364][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.614996][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.628401][ T6306] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 150.947530][ T6318] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 150.953767][ T6318] PKCS7: Only support pkcs7_signedData type [ 151.208435][ T6319] input: syz0 as /devices/virtual/input/input5 [ 151.801172][ T29] audit: type=1800 audit(1740269712.618:3): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.104" name="file1" dev="tmpfs" ino=110 res=0 errno=0 [ 153.019826][ T6340] overlayfs: missing 'lowerdir' [ 154.839724][ T6354] netlink: 'syz.1.108': attribute type 4 has an invalid length. [ 155.624294][ T6361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.351318][ T6366] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 157.804938][ T6371] syz.2.111: attempt to access beyond end of device [ 157.804938][ T6371] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 157.818572][ T6371] (syz.2.111,6371,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 157.826223][ T6371] (syz.2.111,6371,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 157.833500][ T6371] (syz.2.111,6371,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 157.842158][ T6371] (syz.2.111,6371,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 160.848800][ T6389] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'. [ 161.375879][ T6402] No such timeout policy "syz0" [ 166.300640][ T6430] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 166.717328][ T6431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.573114][ T6430] syz.2.126: attempt to access beyond end of device [ 167.573114][ T6430] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 167.588094][ T6430] (syz.2.126,6430,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 167.595752][ T6430] (syz.2.126,6430,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 167.612756][ T6430] (syz.2.126,6430,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 167.626398][ T6430] (syz.2.126,6430,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 169.672178][ T6448] net_ratelimit: 10 callbacks suppressed [ 169.672198][ T6448] dccp_invalid_packet: P.Data Offset(86) too large [ 170.752875][ T6449] netlink: 'syz.1.128': attribute type 32 has an invalid length. [ 172.411389][ T6473] netlink: 40 bytes leftover after parsing attributes in process `syz.4.136'. [ 173.693261][ T6478] netlink: 'syz.3.137': attribute type 39 has an invalid length. [ 174.664485][ T6484] slcan: can't register candev [ 174.669638][ T6484] Falling back ldisc for ttyS3. [ 174.858087][ T6488] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 174.869623][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 176.608977][ T6486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.138'. [ 178.210793][ T6506] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 178.569690][ T6512] syz.1.144: attempt to access beyond end of device [ 178.569690][ T6512] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 178.582948][ T6512] (syz.1.144,6512,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 178.593104][ T6512] (syz.1.144,6512,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 178.600491][ T6512] (syz.1.144,6512,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 178.609078][ T6512] (syz.1.144,6512,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 182.098083][ T6546] process 'syz.0.150' launched '/dev/fd/5' with NULL argv: empty string added [ 182.663999][ T6551] can0: slcan on ttyS3. [ 182.784966][ T6552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 184.112509][ T6540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.151'. [ 184.296671][ T6537] can0 (unregistered): slcan off ttyS3. [ 186.456541][ T6574] bond0: entered promiscuous mode [ 186.465986][ T6574] rose0: entered promiscuous mode [ 188.089429][ T6598] netlink: 'syz.2.164': attribute type 20 has an invalid length. [ 192.402315][ T6634] syz.4.170: attempt to access beyond end of device [ 192.402315][ T6634] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 192.416361][ T6634] (syz.4.170,6634,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 192.423912][ T6634] (syz.4.170,6634,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 192.433197][ T6634] (syz.4.170,6634,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 192.442432][ T6634] (syz.4.170,6634,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 193.928156][ T6629] netlink: 'syz.4.170': attribute type 1 has an invalid length. [ 196.599548][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 196.616207][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 196.624353][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.644643][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.656922][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 196.666152][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.786655][ T5843] Bluetooth: hci5: command tx timeout [ 198.864883][ T6655] chnl_net:caif_netlink_parms(): no params data found [ 199.511561][ T6698] syz.2.184: attempt to access beyond end of device [ 199.511561][ T6698] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 199.524767][ T6698] (syz.2.184,6698,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 199.532355][ T6698] (syz.2.184,6698,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 199.539707][ T6698] (syz.2.184,6698,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 199.548304][ T6698] (syz.2.184,6698,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 199.606959][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.613379][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.414601][ T5882] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 200.469196][ T6692] netlink: 'syz.2.184': attribute type 1 has an invalid length. [ 200.575918][ T5882] usb 4-1: Using ep0 maxpacket: 8 [ 200.603321][ T5882] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.647952][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.887063][ T5843] Bluetooth: hci5: command tx timeout [ 200.915930][ T5882] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.944789][ T5882] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.965948][ T5882] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.975026][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.056077][ T6710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 201.981896][ T5882] usb 4-1: GET_CAPABILITIES returned 0 [ 202.005284][ T5882] usbtmc 4-1:16.0: can't read capabilities [ 202.602200][ T5882] usb 4-1: USB disconnect, device number 4 [ 202.800865][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.824761][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.832073][ T6655] bridge_slave_0: entered allmulticast mode [ 202.840604][ T6655] bridge_slave_0: entered promiscuous mode [ 202.856006][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.863283][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.870512][ T6655] bridge_slave_1: entered allmulticast mode [ 202.908870][ T6655] bridge_slave_1: entered promiscuous mode [ 202.956014][ T5843] Bluetooth: hci5: command tx timeout [ 204.499985][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.036569][ T5843] Bluetooth: hci5: command tx timeout [ 205.409713][ T6753] capability: warning: `syz.2.196' uses deprecated v2 capabilities in a way that may be insecure [ 206.115417][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.579768][ T6759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 207.681087][ T6761] slcan: can't register candev [ 207.686204][ T6761] Falling back ldisc for ttyS3. [ 207.905308][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.275550][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 209.233559][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.477463][ T6655] team0: Port device team_slave_0 added [ 209.531304][ T6655] team0: Port device team_slave_1 added [ 209.719147][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.651786][ T6821] slcan: can't register candev [ 212.656856][ T6821] Falling back ldisc for ttyS3. [ 212.678665][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.054938][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.109435][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.148182][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.190315][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 213.305382][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.312440][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.338695][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.663591][ T6847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.219'. [ 215.062483][ T6655] hsr_slave_0: entered promiscuous mode [ 215.158277][ T6655] hsr_slave_1: entered promiscuous mode [ 215.164761][ T6655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.330591][ T6655] Cannot create hsr debugfs directory [ 217.042315][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 217.042357][ T5142] Bluetooth: hci4: command 0x0406 tx timeout [ 217.049680][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 217.054602][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 219.230404][ T6883] syz.2.225: attempt to access beyond end of device [ 219.230404][ T6883] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 219.244019][ T6883] (syz.2.225,6883,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 219.251630][ T6883] (syz.2.225,6883,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 219.258958][ T6883] (syz.2.225,6883,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 219.267590][ T6883] (syz.2.225,6883,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 220.429055][ T6882] slcan: can't register candev [ 220.434151][ T6882] Falling back ldisc for ttyS3. [ 220.596288][ T12] bridge_slave_1: left allmulticast mode [ 220.602301][ T12] bridge_slave_1: left promiscuous mode [ 220.697586][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.801102][ T12] bridge_slave_0: left allmulticast mode [ 220.833744][ T12] bridge_slave_0: left promiscuous mode [ 220.850981][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.009470][ T6897] loop4: detected capacity change from 0 to 32768 [ 223.031356][ T6897] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.229 (6897) [ 223.107480][ T6897] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.129316][ T6897] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 223.139140][ T6897] BTRFS info (device loop4): disk space caching is enabled [ 223.151335][ T6897] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 223.890513][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 223.965141][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 224.006277][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 224.047334][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 224.076858][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 224.126768][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 224.162158][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.180489][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 224.180964][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 224.200029][ T6897] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 224.241291][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.283891][ T6897] BTRFS error (device loop4): open_ctree failed: -12 [ 224.284773][ T12] bond0 (unregistering): Released all slaves [ 224.366361][ T6874] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 224.376013][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 224.702398][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.235'. [ 230.032641][ T12] hsr_slave_0: left promiscuous mode [ 230.058357][ T12] hsr_slave_1: left promiscuous mode [ 230.077005][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.099587][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.141807][ T7000] Zero length message leads to an empty skb [ 230.166143][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.173604][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.314587][ T12] veth1_macvtap: left promiscuous mode [ 230.370737][ T12] veth0_macvtap: left promiscuous mode [ 230.399253][ T12] veth1_vlan: left promiscuous mode [ 230.447013][ T12] veth0_vlan: left promiscuous mode [ 231.817605][ T7019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.253'. [ 232.665377][ T7026] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 233.034320][ T12] team0 (unregistering): Port device team_slave_1 removed [ 233.382963][ T12] team0 (unregistering): Port device team_slave_0 removed [ 234.985138][ T6655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.089010][ T6655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.112042][ T7040] overlayfs: missing 'lowerdir' [ 235.137915][ T6655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 235.180506][ T6655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 236.301092][ T7054] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 236.390604][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.086821][ T6655] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.140768][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.148008][ T5990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.833478][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.840812][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.985760][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.271'. [ 241.276986][ T7102] overlayfs: missing 'lowerdir' [ 242.815069][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.247351][ T6655] veth0_vlan: entered promiscuous mode [ 247.381959][ T6655] veth1_vlan: entered promiscuous mode [ 247.999337][ T7164] overlayfs: missing 'lowerdir' [ 248.309781][ T6655] veth0_macvtap: entered promiscuous mode [ 248.380937][ T7171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 248.384256][ T6655] veth1_macvtap: entered promiscuous mode [ 248.589446][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.685406][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.727288][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.773998][ T7142] loop0: detected capacity change from 0 to 32768 [ 248.780822][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.795502][ T7142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.285 (7142) [ 248.808447][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.808467][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.808479][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.808493][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.813570][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.909481][ T7142] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 248.922172][ T7150] loop3: detected capacity change from 0 to 32768 [ 248.938198][ T7142] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 248.976199][ T7150] BTRFS: device /dev/loop3 (7:3) using temp-fsid 40c0a8ee-42b2-487a-869c-011cdb811c48 [ 249.006023][ T7142] BTRFS info (device loop0): disk space caching is enabled [ 249.013287][ T7142] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 249.025789][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.029735][ T7150] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.287 (7150) [ 249.099299][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.128583][ T7150] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 249.139433][ T7150] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 249.158649][ T7150] BTRFS info (device loop3): disk space caching is enabled [ 249.169110][ T7142] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 249.170728][ T7142] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 249.185921][ T7150] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 249.216655][ T7142] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 249.217198][ T7142] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 249.264290][ T7142] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 249.304538][ T7142] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 249.425969][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.446551][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.457716][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.366167][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 250.366890][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 250.576758][ T7142] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 250.625980][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.630104][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 250.635554][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.717427][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 250.717844][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 250.730787][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.756505][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 250.756965][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 250.796895][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 250.816982][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.880013][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 250.888977][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 251.022914][ T7150] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 251.032334][ T6655] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.032404][ T6655] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.032436][ T6655] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.645778][ T7150] BTRFS error (device loop3): open_ctree failed: -12 [ 251.847494][ T7142] BTRFS error (device loop0): open_ctree failed: -12 [ 251.899083][ T6655] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.220370][ T7243] overlayfs: missing 'lowerdir' [ 253.241321][ T7242] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.404330][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.421986][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.440837][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.456507][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.466031][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 256.473477][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.407358][ T47] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.561247][ T5843] Bluetooth: hci3: command tx timeout [ 259.007967][ T47] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.101644][ T7304] overlayfs: missing 'lowerdir' [ 259.159565][ T7307] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 259.520020][ T47] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.289218][ T47] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.560649][ T7272] chnl_net:caif_netlink_parms(): no params data found [ 260.673066][ T5843] Bluetooth: hci3: command tx timeout [ 261.048519][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.056886][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.721111][ T5843] Bluetooth: hci3: command tx timeout [ 264.150604][ T7272] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.169811][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.216540][ T7272] bridge_slave_0: entered allmulticast mode [ 264.798344][ T5843] Bluetooth: hci3: command tx timeout [ 264.845526][ T7272] bridge_slave_0: entered promiscuous mode [ 265.130910][ T7272] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.155653][ T7272] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.188175][ T7272] bridge_slave_1: entered allmulticast mode [ 265.196416][ T7367] overlayfs: missing 'lowerdir' [ 265.229465][ T7272] bridge_slave_1: entered promiscuous mode [ 265.566321][ T7378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 265.697054][ T7272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.849224][ T7272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.283267][ T47] bridge_slave_1: left allmulticast mode [ 266.529132][ T47] bridge_slave_1: left promiscuous mode [ 266.602324][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.956970][ T47] bridge_slave_0: left allmulticast mode [ 267.705942][ T47] bridge_slave_0: left promiscuous mode [ 267.720709][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.490141][ T7408] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 269.511408][ T7408] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 269.847834][ T7416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.340'. [ 272.287589][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.315071][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.354708][ T47] bond0 (unregistering): Released all slaves [ 273.475182][ T47] hsr_slave_0: left promiscuous mode [ 273.526116][ T47] hsr_slave_1: left promiscuous mode [ 273.532408][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.555885][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.576581][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.608895][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.644578][ T47] veth1_macvtap: left promiscuous mode [ 273.650582][ T47] veth0_macvtap: left promiscuous mode [ 273.670763][ T47] veth1_vlan: left promiscuous mode [ 273.695139][ T47] veth0_vlan: left promiscuous mode [ 273.953414][ T7454] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 274.208952][ T7454] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 275.779132][ T7464] loop0: detected capacity change from 0 to 32768 [ 275.790386][ T7464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.351 (7464) [ 275.837502][ T7464] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 275.849476][ T7464] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 275.873162][ T7464] BTRFS info (device loop0): disk space caching is enabled [ 275.884006][ T7464] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 276.093109][ T7464] BTRFS info (device loop0): rebuilding free space tree [ 276.210419][ T7464] BTRFS info (device loop0): disabling free space tree [ 276.221528][ T7464] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 276.232453][ T7464] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 276.349786][ T47] team0 (unregistering): Port device team_slave_1 removed [ 276.536792][ T47] team0 (unregistering): Port device team_slave_0 removed [ 276.550784][ T5828] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 278.068982][ T7272] team0: Port device team_slave_0 added [ 278.081525][ T7272] team0: Port device team_slave_1 added [ 278.623183][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.671263][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.713558][ T7272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.993519][ T7272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.005612][ T7272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.617564][ T7502] slcan: can't register candev [ 279.622617][ T7502] Falling back ldisc for ttyS3. [ 279.841651][ T7272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.871249][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 281.104162][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.357'. [ 281.426844][ T7519] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 281.609174][ T7272] hsr_slave_0: entered promiscuous mode [ 281.626070][ T7519] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 281.626865][ T7272] hsr_slave_1: entered promiscuous mode [ 281.946043][ T7527] mmap: syz.2.358 (7527) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 284.818208][ T7555] slcan: can't register candev [ 284.824260][ T7555] Falling back ldisc for ttyS3. [ 285.257760][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.365'. [ 287.678256][ T7582] overlayfs: missing 'lowerdir' [ 291.442628][ T7272] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.571424][ T7272] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.666779][ T7272] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.714550][ T7617] overlayfs: missing 'lowerdir' [ 291.754203][ T7272] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.921590][ T7623] can0: slcan on ttyS3. [ 292.001301][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 293.298802][ T7611] can0 (unregistered): slcan off ttyS3. [ 295.115359][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.290320][ T7272] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.391567][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.398865][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.489022][ T7654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.760046][ T1906] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.767291][ T1906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.775748][ T7670] overlayfs: missing 'lowerdir' [ 298.644819][ T7674] can0: slcan on ttyS3. [ 300.261447][ T7669] netlink: 56 bytes leftover after parsing attributes in process `syz.3.394'. [ 300.298948][ T7665] can0 (unregistered): slcan off ttyS3. [ 300.407367][ T7669] syz.3.394 uses obsolete (PF_INET,SOCK_PACKET) [ 301.354158][ T7272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.886814][ T7710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 304.344008][ T7272] veth0_vlan: entered promiscuous mode [ 305.034289][ T7272] veth1_vlan: entered promiscuous mode [ 305.047163][ T7738] overlayfs: missing 'workdir' [ 305.735736][ T7744] can0: slcan on ttyS3. [ 306.483277][ T7272] veth0_macvtap: entered promiscuous mode [ 306.506343][ T7740] can0 (unregistered): slcan off ttyS3. [ 306.584731][ T7272] veth1_macvtap: entered promiscuous mode [ 306.874190][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.885490][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.453478][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.474361][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.503448][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.018401][ T7760] slcan: can't register candev [ 308.023504][ T7760] Falling back ldisc for ttyS3. [ 308.469301][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.511769][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.530601][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.560578][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.484936][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.532298][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.793708][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.815179][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.887811][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.058444][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.270490][ T7272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.283444][ T7272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.971380][ T7272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.082885][ T7272] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.114893][ T7781] overlayfs: missing 'workdir' [ 311.120578][ T7272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.168895][ T7272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.193754][ T7272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.605132][ T7794] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 312.587650][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.008706][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.737777][ T7812] slcan: can't register candev [ 313.742898][ T7812] Falling back ldisc for ttyS3. [ 318.881909][ T7855] overlayfs: missing 'workdir' [ 319.363369][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 319.379159][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 319.388319][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 319.434279][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 319.449751][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 319.460068][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.625967][ T5841] Bluetooth: hci3: command tx timeout [ 321.848543][ T7891] can0: slcan on ttyS3. [ 322.642145][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.656671][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.856334][ T7890] can0 (unregistered): slcan off ttyS3. [ 324.069359][ T5841] Bluetooth: hci3: command tx timeout [ 324.328822][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.558573][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.751192][ T7865] chnl_net:caif_netlink_parms(): no params data found [ 326.077013][ T5843] Bluetooth: hci3: command tx timeout [ 326.146043][ T7933] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 326.838094][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.012752][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.156015][ T5843] Bluetooth: hci3: command tx timeout [ 329.250876][ T7865] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.360044][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.414053][ T7865] bridge_slave_0: entered allmulticast mode [ 329.448597][ T7865] bridge_slave_0: entered promiscuous mode [ 329.494031][ T7865] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.516041][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.544061][ T7865] bridge_slave_1: entered allmulticast mode [ 329.596255][ T7865] bridge_slave_1: entered promiscuous mode [ 330.702039][ T7865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.818005][ T7865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.596083][ T61] bridge_slave_1: left allmulticast mode [ 331.613081][ T61] bridge_slave_1: left promiscuous mode [ 331.626286][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.669603][ T61] bridge_slave_0: left allmulticast mode [ 331.688272][ T61] bridge_slave_0: left promiscuous mode [ 331.730040][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.407299][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.451368][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.481036][ T61] bond0 (unregistering): Released all slaves [ 335.554514][ T7865] team0: Port device team_slave_0 added [ 336.266442][ T7865] team0: Port device team_slave_1 added [ 336.479236][ T8011] overlayfs: failed to resolve './file1': -2 [ 337.819547][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.849027][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.950664][ T7865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.998407][ T7865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.105363][ T7865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.698767][ T7865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.369165][ T7865] hsr_slave_0: entered promiscuous mode [ 341.019271][ T7865] hsr_slave_1: entered promiscuous mode [ 341.025478][ T7865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.008551][ T7865] Cannot create hsr debugfs directory [ 342.229184][ T8046] syz.0.478 (8046): drop_caches: 3 [ 342.490423][ T61] hsr_slave_0: left promiscuous mode [ 342.554456][ T61] hsr_slave_1: left promiscuous mode [ 342.569794][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.610898][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.655512][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.692238][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.114890][ T61] veth1_macvtap: left promiscuous mode [ 343.243168][ T61] veth0_macvtap: left promiscuous mode [ 343.550635][ T61] veth1_vlan: left promiscuous mode [ 343.556684][ T61] veth0_vlan: left promiscuous mode [ 346.928124][ T61] team0 (unregistering): Port device team_slave_1 removed [ 347.092854][ T61] team0 (unregistering): Port device team_slave_0 removed [ 347.490155][ T8082] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 347.502798][ T8082] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 347.511225][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.4.489 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 347.521300][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.531364][ T8082] RIP: 0010:skb_queue_purge_reason+0xaa/0x500 [ 347.537476][ T8082] Code: 89 44 24 78 42 c6 44 30 13 f3 e8 21 4b f9 f7 48 8d bc 24 b0 00 00 00 ba 48 00 00 00 31 f6 e8 7d cf 60 f8 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 97 cc 60 f8 49 8b 45 00 4c 39 e8 [ 347.557106][ T8082] RSP: 0018:ffffc90003ea7a20 EFLAGS: 00010202 [ 347.563201][ T8082] RAX: ffffc90003ea7ad0 RBX: 0000000000000000 RCX: 0000000000000000 [ 347.571264][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003ea7b18 [ 347.579258][ T8082] RBP: ffffc90003ea7b90 R08: ffffc90003ea7b17 R09: 0000000000000000 [ 347.587231][ T8082] R10: ffffc90003ea7ad0 R11: fffff520007d4f63 R12: dffffc0000000000 [ 347.595201][ T8082] R13: 0000000000000008 R14: dffffc0000000000 R15: 0000000000000001 [ 347.603187][ T8082] FS: 000055556b778500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 347.612140][ T8082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.618720][ T8082] CR2: 000000110c393974 CR3: 000000006934e000 CR4: 00000000003526f0 [ 347.626709][ T8082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.634686][ T8082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 347.642662][ T8082] Call Trace: [ 347.645951][ T8082] [ 347.648899][ T8082] ? __die_body+0x5f/0xb0 [ 347.653242][ T8082] ? die_addr+0xb0/0xe0 [ 347.657403][ T8082] ? exc_general_protection+0x3dd/0x5d0 [ 347.662977][ T8082] ? asm_exc_general_protection+0x26/0x30 [ 347.668717][ T8082] ? skb_queue_purge_reason+0xaa/0x500 [ 347.674193][ T8082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.681073][ T8082] ? enable_work+0x22a/0x360 [ 347.685692][ T8082] ? lockdep_hardirqs_on+0x99/0x150 [ 347.690904][ T8082] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 347.696811][ T8082] ? enable_work+0x2e3/0x360 [ 347.701435][ T8082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 347.707790][ T8082] mrvl_close+0x8e/0x120 [ 347.712044][ T8082] hci_uart_tty_close+0x205/0x290 [ 347.717079][ T8082] tty_ldisc_kill+0xa3/0x1a0 [ 347.721693][ T8082] tty_ldisc_release+0x1a1/0x200 [ 347.726641][ T8082] tty_release_struct+0x2b/0xe0 [ 347.731500][ T8082] tty_release+0xd06/0x12c0 [ 347.736020][ T8082] ? __pfx_tty_release+0x10/0x10 [ 347.740970][ T8082] __fput+0x3e9/0x9f0 [ 347.744961][ T8082] task_work_run+0x24f/0x310 [ 347.749557][ T8082] ? _raw_spin_unlock+0x28/0x50 [ 347.754413][ T8082] ? __pfx_task_work_run+0x10/0x10 [ 347.759527][ T8082] ? syscall_exit_to_user_mode+0xa3/0x340 [ 347.765253][ T8082] syscall_exit_to_user_mode+0x13f/0x340 [ 347.770905][ T8082] do_syscall_64+0x100/0x230 [ 347.775501][ T8082] ? clear_bhb_loop+0x45/0xa0 [ 347.780194][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.786100][ T8082] RIP: 0033:0x7fb8b3b8d169 [ 347.790530][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.810137][ T8082] RSP: 002b:00007ffecce331e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 347.818552][ T8082] RAX: 0000000000000000 RBX: 00007fb8b3da7ba0 RCX: 00007fb8b3b8d169 [ 347.826541][ T8082] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 347.834508][ T8082] RBP: 00007fb8b3da7ba0 R08: 0000000000000160 R09: 00000011cce334df [ 347.842489][ T8082] R10: 00007fb8b3da7ac0 R11: 0000000000000246 R12: 0000000000054d22 [ 347.850456][ T8082] R13: 00007fb8b3da6160 R14: ffffffffffffffff R15: 00007ffecce33300 [ 347.858452][ T8082] [ 347.861465][ T8082] Modules linked in: [ 347.866064][ T8082] ---[ end trace 0000000000000000 ]--- [ 347.871551][ T8082] RIP: 0010:skb_queue_purge_reason+0xaa/0x500 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.878481][ T8082] Code: 89 44 24 78 42 c6 44 30 13 f3 e8 21 4b f9 f7 48 8d bc 24 b0 00 00 00 ba 48 00 00 00 31 f6 e8 7d cf 60 f8 4d 89 ef 49 c1 ef 03 <43> 80 3c 37 00 74 08 4c 89 ef e8 97 cc 60 f8 49 8b 45 00 4c 39 e8 [ 347.898156][ T8082] RSP: 0018:ffffc90003ea7a20 EFLAGS: 00010202 [ 347.904251][ T8082] RAX: ffffc90003ea7ad0 RBX: 0000000000000000 RCX: 0000000000000000 [ 347.912265][ T8082] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003ea7b18 [ 347.920310][ T8082] RBP: ffffc90003ea7b90 R08: ffffc90003ea7b17 R09: 0000000000000000 [ 347.928332][ T8082] R10: ffffc90003ea7ad0 R11: fffff520007d4f63 R12: dffffc0000000000 [ 347.936361][ T8082] R13: 0000000000000008 R14: dffffc0000000000 R15: 0000000000000001 [ 347.944352][ T8082] FS: 000055556b778500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 347.956132][ T8082] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.962761][ T8082] CR2: 000000110c393974 CR3: 000000006934e000 CR4: 00000000003526f0 [ 347.970848][ T8082] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 347.978906][ T8082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 347.986973][ T8082] Kernel panic - not syncing: Fatal exception [ 347.993384][ T8082] Kernel Offset: disabled [ 347.997712][ T8082] Rebooting in 86400 seconds..