last executing test programs: 3.80875203s ago: executing program 0 (id=110): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x1, 0xffff1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000acbd7bc8beb81b6f05f1207ab4577be4dcc535e8ffa2d2631d61f0135e06b22504ab977561695b52ad12efb862b2faad3ad4098bc75a517b8375336e7fbd7bce977d0484f63f6b38face3efe23e19fd715d3e63bcdeb905220eb971a30cf175f607b36d6e42fc872b19c9ff2dd6c625be23bcf8615a9a1d6afba36680e347b8d8f74cf47ec323d0f6dbad1f270f7d7acda61d12fb967a7438873b4c61b9fa2b4ab8d6ae06d200e7008c8b071760884cb84fcf0b1fa100b2cbebc47839a9f17c538be22d03c344e092c184b9e78159c9cd613a4b662423b000000000000"], 0xa) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r5, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x28, 0x2000, @fd=r5, 0x1000, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x4e14, 0x912a, 0x41, 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x110000, 0x8}) 3.209562158s ago: executing program 2 (id=113): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x2663}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x13, &(0x7f00006dbffc)=0x2, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) pwrite64(r3, &(0x7f0000000840)="e67ab166972ce298f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce6236501dd64c37eeaeec2d13731c56a864da45a465e64de685887f27f84f348e4149ccee167605da33c412d53af0256fc973711375855a0a610654714099f4d540f9cba457b1813b73957a98aa2cc497c1e3ea0000", 0x7a, 0x1) ioctl$COMEDI_CMDTEST(r2, 0x8040640a, &(0x7f0000000100)={0x0, 0x8, 0x40, 0xfffff2cc, 0x100, 0x2, 0x2, 0x1, 0x40, 0x9, 0x100, 0xfffffffe, &(0x7f0000000000)=[0x4], 0x1, 0x0}) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x2, &(0x7f00000001c0)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x4}) 2.319927744s ago: executing program 1 (id=114): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000001e00003000000fffff00000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x4000044) 2.199837601s ago: executing program 1 (id=115): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) read(r1, 0x0, 0x5715a3ab) 1.979362398s ago: executing program 0 (id=118): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x9f, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x9d, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000340)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100253d7000ffdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="400002803c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000c000300060000000400040008000600", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4004009}, 0x40000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100253d7000ffdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="400002803c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000c000300060000000400040008000600", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4004009}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000700)={'sit0\x00', 0x0, 0x10, 0x7800, 0x6, 0x7, {{0x10, 0x4, 0x2, 0x1, 0x40, 0x64, 0x0, 0x31, 0x29, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x2c, 0xcf, 0x0, 0x9, [0xd, 0xffffc8a2, 0x5, 0x9, 0xec, 0x6, 0x0, 0x4, 0x2, 0x7f]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) getsockname$packet(r4, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000ac0)={'ip6gre0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x8, 0x5, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x40, 0x7800, 0x6, 0xfff}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b40)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6_vti0\x00', 0x0, 0x2f, 0x7c, 0x3, 0x2d37, 0x0, @local, @remote, 0x10, 0x8, 0x80000001, 0x80000001}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'ip6_vti0\x00', 0x0, 0x2f, 0x7c, 0x3, 0x2d37, 0x0, @local, @remote, 0x10, 0x8, 0x80000001, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d00)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip_vti0\x00', 0x0, 0x8, 0x20, 0x1530, 0x800, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x65, 0x0, 0xc, 0x2d, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x83, 0xe, "a7bacb449d680c4629b0c6da"}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0xf6, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000e00)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000e40)=0x0, &(0x7f0000000e80)=0x4) r23 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r23, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r25 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r25, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r24, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa8}}, 0x0) (async) sendmsg$nl_route_sched(r25, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r24, {}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa8}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001780)={&(0x7f0000000ec0)={0x888, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe7b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8600, 0xe, 0x2, 0x3}, {0x3, 0x6, 0xa, 0x400}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8}, {0x88, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffff800}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r18}}, {0x8}}}]}}, {{0x8, 0x1, r19}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x771}}}]}}]}, 0x888}, 0x1, 0x0, 0x0, 0x20}, 0x54000010) socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 1.979110364s ago: executing program 1 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) (async) r1 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_usbip_server_init(0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x104) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) syz_open_dev$sg(&(0x7f0000000280), 0xffffffff, 0x49cc02) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r7 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r7, 0x5404) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x5c, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0x1, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "f102dcf29effae15cd"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000010000000000000000000001800000004000000000000000700000085100000fbfffff2186400000300000000000000020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@getaddr={0x14, 0x16, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8c40) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x0, 0xb, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda1", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x3e, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.919647702s ago: executing program 2 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x140, 0x1000, 0x0, 0x1, 0x0, {0x816, 0x3}, {0x350, 0x2, 0xfffffdfd}, {0xf4ef, 0xfffffffe}, {0x4, 0x0, 0x7fb}, 0x1, 0x100, 0x4, 0xd614, 0x0, 0x0, 0x0, 0x3ff, 0xe, 0x0, 0x0, 0x0, 0x2c, 0x100, 0x0, 0x4}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, 0x0, 0x0) write$FUSE_LSEEK(r6, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x7}}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00016514000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007400000000004000680"], 0xa0}}, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000500)=ANY=[@ANYBLOB="64000000000000000200000000000000d700000000000000b70000000000000064d77f6ab0ed0223374beb771492d9dd84de9dcb914aeef4bf7b95fd0200000000000000ddad73542d8740306b23f1bde23cec0fa0ad5cad3c742d3e50cd101d97899a54a60b75802bbd1452fe0b525b3f8d0feeff92d85c89165291b29e10f7db12105ff09680b9d47186a8822bb9bb08edc9cc03265d908f5a12d201b02ca34b73fe857b62e4cacca4c4c61919a7a0eb08dbfe9585225c272e7aec057a885e3f470a58ae2d639c4406b15b20d18a0c2374eaedba8331"], 0xd7, 0x0) write$uinput_user_dev(r8, &(0x7f0000000a00)={'syz0\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x7, 0x2, 0x18, 0x2, 0x2, 0x5806, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x4000007, 0xa17, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0x4e, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x1000006, 0x2, 0x9, 0xffffffff, 0x1, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x4, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x800001, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x1, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x1, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x3, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) readv(r8, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r8, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x400}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="f2ab93ed", @ANYRES16=r3, @ANYBLOB="200026bd7000fbdbdf251c0000000c0099000a2f00006c000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x7f30192b25063f26) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="0500"/12, @ANYRES16=r1, @ANYBLOB="6b8d0da4cd259602f1089a8ec7565968c2b9ae4a5510e75ed5115747ea402eb33c1b3123cc03b9ba65b969ce395452c66281f07ba9f0bf60b817cc9f0f5c8d3c2f7c578d8c9997005aaa0da8f710642a8e655ff564c9c87e1bf5c8f44f6e0dd49e559c1e3ae5465f5373d1c209e7b8b48cea90566ae2ee6ff02067de7475ead611d964b65dd259f9d4dd0e9f88ad4f7a661c483d105e48969681ef83c5fe6d822e7506dba2b1f6776f", @ANYRES32=0x77359400, @ANYRESOCT=r7, @ANYRESHEX=r1, @ANYRESHEX=0x0], 0x48}, 0x300}, 0x20000000) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x8040) openat$procfs(0xffffff9c, &(0x7f0000000600)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8004) 1.779311795s ago: executing program 0 (id=121): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0x140, 0x30, 0x1, 0x0, 0x0, {}, [{0x12c, 0x1, [@m_ct={0x128, 0x2, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "490c53025b133c9ced59dfbe4da3ee18"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "31ad7ad08b82ec218cbb39bc4606cc96"}]}, {0xd5, 0x6, "4d48485b237aff96b5b8780a02e824244ac56017132a9c7e685fd12a382c5b1ec144a6b08860cfa93d9f12a2cb37c918213a85f95d4a1df4e9cbab7f00a222aefcd914fbc2aedd9c35769ff7d003424935320a663f56a06cdc0a9d86a0a34774f3175218c9bb072879a37c8dc63c9d117640a361958a7062a165b9f63f7916767332a3aec21da08d0c6e8aec0d12519c90ca392ec8722923f55552510847219750336d9e4cb17e78f4f65def1152202569bbe48eb289dc9eb4fc46a4b67fb3d2fc6c4b9eb233271e9c49fbe6e50008a5df"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x2010, 0xffffffffffffffff, 0xf857e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) recvfrom(0xffffffffffffffff, &(0x7f0000000940)=""/155, 0x9b, 0x10000, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1000) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r3, 0x0, 0x5}, 0xfffffe2e) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES64=r4], 0xa8}}, 0x4000) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x0, 0x0) pwritev2(r2, &(0x7f00000004c0)=[{&(0x7f0000000300)="0efde4326bcc4928", 0x8}, {&(0x7f0000000340)="7998ef77293482e6c1ebcd401d207f2a12e8964133ff21c0697be75840d0d790956c8ea675512dd121b7fde1e4f7d52a6efc1904ac9f", 0x36}, {&(0x7f0000000580)="840e6f3230bd4e06225b861560ec5b0bc5aba08db3e48c070113e364784680eab7ea164e6f6c272364e8d61e5c9f91c4a41390690c900fde536eef9f86cee9fc2e547af76eb4f835645cdd046284020438d7c6167d2cc356c1937616eeba39f458c5455925a1ded7a2c98fe4a7cf620936753e6e2ae8c87c8947bd69fb31de0d6c29f61d91b53a58136eee4eb764fef64261a6d198699de9befba4d902e660feaaea1e35d97329cc2c65a22020411ca1d54fa98163f73519e67025311181ca004ffd6b2b51f8c3dcfc6e05b01501d3c13705b4ecb4ddcc25344642993e1bf0897f21b12fe4ea1a51dbdd0219d8c4808d7969da", 0xf3}, {&(0x7f0000000380)="b39e0078f3d4056603510ab9a11697270a8e3680a76632b34b9d031f6fceec0167", 0x21}, {&(0x7f0000000740)="43881c26385709a74097e918b3e7272bd20878c3df366804d5d9f8ca631a9629c075f916111a40558e2333db21dae41e0b2803af9ea08ca6e33e74a8ba40ae613e0a75f77d9d95a45781b24f9f58f8a6254020b9908adcc9e3aba198a340a2851fee3478f9fee5d697d186ac1cf3b2c53227557ce722f93b34fac9e73b302f6a27680b0d19c5c9b4bc01041b688f7e", 0x8f}], 0x5, 0x769d, 0x81, 0x11) 1.649790867s ago: executing program 1 (id=122): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff1f80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x400c}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2000001, 0x4c092, r0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x400448e2, 0x0) (async) lgetxattr(0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f00"], 0x0}, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff1f80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (async) syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x400c}) (async) 1.645726604s ago: executing program 0 (id=123): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x1a0, 0x0, 0x101}]}) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x140f, 0x1, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 1.569331343s ago: executing program 1 (id=124): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0xfffffffffffffff1) r2 = socket$pppoe(0x18, 0x1, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x36f0516f) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x28, 0x10, 0x801, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a042, 0x41c23}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.439524158s ago: executing program 0 (id=125): openat$binderfs(0xffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001040)=ANY=[@ANYBLOB="aaaaaaaaaaaa86082b9827c186dd60cb653e00383a00fc020000000000000000000500000000ff02000000000000000004009078000000006097436700002f00fe880000000000000000000000000001ee8000000000000000000000000000aa3c00000000000000000000000000ea50c4d1c297abf07b520b89816d627e6c158426cd906c7682ceca5068383b85d6792dd736694ed8b34f05675949bf3d1f7397c721acdad4f75db3f2c5cab8b42452eb32c44d9535f1be28223817a2cc7a216549f7a90f0584a82f872d19f1150f0bf7b34c02db64df09ef0357064fbe72f48b78b4320d5fbaec5ba026b4e5d5d7bc6065709b754fe9e2a57e3a016966e2fd98e74ec78562dc3f3dbf7861ffc191b816bf79"], 0x0) mmap(&(0x7f0000121000/0x1000)=nil, 0x1000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x401, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e51326bd7000ffffffff07000000", @ANYRES32, @ANYBLOB=' \x00', @ANYRES32, @ANYBLOB], 0x38}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={0x0}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001c000000bca300ffe40000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000500000000002604fdffff02000015010000033800001d13fcff000000007a0af0ff0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000f80)={0x16, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x3, 0x7, {"a0a50f8fe5883ff48c127252efc65f92"}, 0x9, 0x100000000, 0x52b6}}}, 0x90) 1.439192891s ago: executing program 3 (id=126): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523c"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704110180fc5409000c00b17d10cc40a886ddb96648e582003c9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) 1.379089863s ago: executing program 3 (id=127): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x13}}]}}}, @IFLA_MASTER={0x20, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.279425124s ago: executing program 1 (id=128): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000000), 0x8) listen(r1, 0x6227) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_usb_connect(0x6, 0x0, 0x0, &(0x7f0000001b80)={0xa, &(0x7f0000001740)={0xa, 0x6, 0x310, 0x8, 0x8, 0x4, 0xff, 0xf}, 0x0, 0x0, 0x7, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0xc0a}}, {0x3, &(0x7f0000002080)=ANY=[@ANYBLOB]}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1c31}}, {0x2, &(0x7f0000001900)=@string={0x2}}, {0x1f, &(0x7f00000019c0)=@string={0x1f, 0x3, "caa55aa465add4665172d446680609008d085b181d50ae78d14e9bafbb"}}, {0x95, &(0x7f0000001a00)=@string={0x95, 0x3, "19545cd88b20105939d5669c5375f941d1729eea8a613021f237acdd78f682271bdcd127c90991e4df0fcbefe81b52d55e71a97b1db3c5834c5347f35fce5dec6ecf96e1b0454fc1d4d7f8d71c4ea0ea437024954c9e5f967b08042de57239a9bf69f1aca405e275e4210d5576b34c77bab2c059d520e1206dd37ab0d8ba7d8c12605f54c42458291dbc9a6166f08d655bdd0d"}}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x11, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18f9ff00000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x48, 0x3, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x1, 0x1d, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x5, 0x6c}}}}}]}}]}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 1.27928045s ago: executing program 3 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x58}, 0x1, 0x11}, 0x0) 1.27748728s ago: executing program 3 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv4_getrule={0x1c, 0x22, 0x4, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x80, 0x0, 0xf, 0x0, 0x0, 0x7, 0x2}}, 0x1c}}, 0x0) 1.209322829s ago: executing program 3 (id=131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810000850000007d000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='sys_exit\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ff000000000099308d35a2c9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) listxattr(&(0x7f0000001cc0)='./bus\x00', 0x0, 0x0) 1.209062428s ago: executing program 3 (id=132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x1, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0xd, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) 827.850264ms ago: executing program 2 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r4 = openat$cuse(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001800)={0x2020}, 0x2020) write$UHID_INPUT(r3, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000500)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r8 = gettid() sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r7, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r8], 0x28}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x2, &(0x7f0000000000)) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="010f06bd7000fea3c3253b00000008e20200", @ANYRES32=r5, @ANYBLOB="710033008000e100080211000000080211000000505050505050000003000000000000000100010001000406f897020002000503d0f103250300a9032d1a0c00160700000000000000fb000300110000000008090000000f720603030303030371070000010002054076060510050002000000000e00cd000800ff7f0800730101800000"], 0xa0}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 699.994726ms ago: executing program 2 (id=134): r0 = syz_open_dev$swradio(&(0x7f00000013c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x0, 0x3, 0x7, 0x8, 0xd3c5, 0x5, 0x8}) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000000c0)={0x400, 0x1, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 429.112393ms ago: executing program 0 (id=135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd26, 0x0, {0x25}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)="0a561de5a7bb922dea1502de5dc4d83723a60598148642c8a41ced8e16edac2464d775708af42a16423ebe505a58009ed66b31f3d59e89942592738d021a0ae6cdb0ba0f54eca0a2c95fbce32b2fc19ef0827de6f87de4251801aae7cf2e86cbad3be89106376939fd36c0b967f98d01a006b01789543f3d22a5b20fa4a908c709a0f021a0f0b2074165965d4779209469f274cd104aad2049363b61c681a8aa995a0e120bfca567c570d4af64faa26a6713d70277847a0c3c53fbb4", 0xbc, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x880, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r4, 0x8b32, &(0x7f0000000040)) sendmsg(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000500"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x0, 0x0, 0x1, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$pfkey(0xffffff9c, &(0x7f0000000280), 0x521800, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000340)) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) r7 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r6, 0x0, 0x0, 0x0, 0x80000}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter(r7, 0x47f5, 0x0, 0x0, 0x0, 0x4000) 255.271263ms ago: executing program 2 (id=136): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="28030000400007012bbd7000fedbdf25047c00000400c280180009801400ff80100046800c00008008000800", @ANYRES32, @ANYBLOB="040008000400"], 0x328}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) epoll_create(0x80) 0s ago: executing program 2 (id=137): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r1, r1) setpgid(0x0, r1) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x1) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) r4 = openat$vcsa(0xffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000140)={0x42, r4, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0xb2d40, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:17651' (ED25519) to the list of known hosts. [ 48.534193][ T5853] cgroup: Unknown subsys name 'net' [ 48.716142][ T5853] cgroup: Unknown subsys name 'cpuset' [ 48.721341][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.700830][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.710771][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.711888][ T5951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.711966][ T5952] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.712318][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.713714][ T5952] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.714244][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.714589][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.715172][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.715683][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.718237][ T5951] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.718364][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.719006][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.719026][ T5953] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.719525][ T5953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.720482][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.723945][ T5951] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.727013][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.728493][ T5951] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.732646][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.757851][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.105345][ T5948] chnl_net:caif_netlink_parms(): no params data found [ 54.252688][ T5936] chnl_net:caif_netlink_parms(): no params data found [ 54.257627][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 54.269663][ T5937] chnl_net:caif_netlink_parms(): no params data found [ 54.284764][ T5948] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.287106][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.289450][ T5948] bridge_slave_0: entered allmulticast mode [ 54.292600][ T5948] bridge_slave_0: entered promiscuous mode [ 54.340528][ T5948] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.342964][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.345244][ T5948] bridge_slave_1: entered allmulticast mode [ 54.347917][ T5948] bridge_slave_1: entered promiscuous mode [ 54.483055][ T5948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.490917][ T5948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.535324][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.537720][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.539998][ T5937] bridge_slave_0: entered allmulticast mode [ 54.542737][ T5937] bridge_slave_0: entered promiscuous mode [ 54.558600][ T5948] team0: Port device team_slave_0 added [ 54.561090][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.564231][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.567374][ T5936] bridge_slave_0: entered allmulticast mode [ 54.571811][ T5936] bridge_slave_0: entered promiscuous mode [ 54.576343][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.579406][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.583157][ T5937] bridge_slave_1: entered allmulticast mode [ 54.587323][ T5937] bridge_slave_1: entered promiscuous mode [ 54.591477][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.595204][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.598396][ T5940] bridge_slave_0: entered allmulticast mode [ 54.602222][ T5940] bridge_slave_0: entered promiscuous mode [ 54.607493][ T5948] team0: Port device team_slave_1 added [ 54.615718][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.617985][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.620286][ T5936] bridge_slave_1: entered allmulticast mode [ 54.623529][ T5936] bridge_slave_1: entered promiscuous mode [ 54.637172][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.640249][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.643708][ T5940] bridge_slave_1: entered allmulticast mode [ 54.647653][ T5940] bridge_slave_1: entered promiscuous mode [ 54.672808][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.675018][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.683268][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.713585][ T5937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.716911][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.719148][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.727249][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.732574][ T5936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.736810][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.741294][ T5937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.758516][ T5936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.762691][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.788748][ T5937] team0: Port device team_slave_0 added [ 54.796919][ T5937] team0: Port device team_slave_1 added [ 54.827975][ T5940] team0: Port device team_slave_0 added [ 54.830823][ T5936] team0: Port device team_slave_0 added [ 54.838580][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.840862][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.849131][ T5937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.853813][ T5940] team0: Port device team_slave_1 added [ 54.857219][ T5936] team0: Port device team_slave_1 added [ 54.861758][ T5948] hsr_slave_0: entered promiscuous mode [ 54.864348][ T5948] hsr_slave_1: entered promiscuous mode [ 54.867107][ T5937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.869361][ T5937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.877785][ T5937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.924629][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.927083][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.935671][ T5936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.939619][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.941929][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.952170][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.963930][ T5936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.966103][ T5936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.974212][ T5936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.978031][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.980222][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.988294][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.029814][ T5937] hsr_slave_0: entered promiscuous mode [ 55.032213][ T5937] hsr_slave_1: entered promiscuous mode [ 55.034349][ T5937] debugfs: 'hsr0' already exists in 'hsr' [ 55.036193][ T5937] Cannot create hsr debugfs directory [ 55.097260][ T5940] hsr_slave_0: entered promiscuous mode [ 55.100571][ T5940] hsr_slave_1: entered promiscuous mode [ 55.103832][ T5940] debugfs: 'hsr0' already exists in 'hsr' [ 55.106224][ T5940] Cannot create hsr debugfs directory [ 55.143526][ T5936] hsr_slave_0: entered promiscuous mode [ 55.145739][ T5936] hsr_slave_1: entered promiscuous mode [ 55.147851][ T5936] debugfs: 'hsr0' already exists in 'hsr' [ 55.149647][ T5936] Cannot create hsr debugfs directory [ 55.394348][ T5948] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.421151][ T5948] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.432695][ T5948] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.449197][ T5948] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.506142][ T5937] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.519694][ T5937] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.537899][ T5937] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.544401][ T5937] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.580521][ T5940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.585717][ T5940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.591011][ T5940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.595496][ T5940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.651424][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.656931][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.661223][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.670212][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.686243][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.709828][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.723424][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.725873][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.733849][ T5937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.741533][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.743951][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.755837][ T5937] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.762576][ T64] Bluetooth: hci0: command tx timeout [ 55.762583][ T5941] Bluetooth: hci3: command tx timeout [ 55.762752][ T5946] Bluetooth: hci2: command tx timeout [ 55.768654][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.772904][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.796082][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.799104][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.827430][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.842739][ T5941] Bluetooth: hci1: command tx timeout [ 55.863177][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.888639][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.891856][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.905454][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.908272][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.946277][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.969892][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.978310][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.980648][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.991812][ T1243] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.994084][ T1243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.050329][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.111855][ T5937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.144027][ T5937] veth0_vlan: entered promiscuous mode [ 56.163481][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.166827][ T5937] veth1_vlan: entered promiscuous mode [ 56.182822][ T5948] veth0_vlan: entered promiscuous mode [ 56.197348][ T5948] veth1_vlan: entered promiscuous mode [ 56.206810][ T5937] veth0_macvtap: entered promiscuous mode [ 56.225101][ T5937] veth1_macvtap: entered promiscuous mode [ 56.233684][ T5940] veth0_vlan: entered promiscuous mode [ 56.246866][ T5948] veth0_macvtap: entered promiscuous mode [ 56.255622][ T5940] veth1_vlan: entered promiscuous mode [ 56.259415][ T5948] veth1_macvtap: entered promiscuous mode [ 56.264436][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.276875][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.288803][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.295544][ T5937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.304812][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.317312][ T1243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.328075][ T1243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.337524][ T5940] veth0_macvtap: entered promiscuous mode [ 56.340185][ T1243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.347804][ T5940] veth1_macvtap: entered promiscuous mode [ 56.350239][ T1243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.354019][ T1243] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.361674][ T1243] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.365298][ T1243] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.378101][ T1243] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.388248][ T5936] veth0_vlan: entered promiscuous mode [ 56.401803][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.421931][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.434181][ T5936] veth1_vlan: entered promiscuous mode [ 56.449092][ T1140] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.456832][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.456977][ T1140] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.459610][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.464692][ T1140] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.478759][ T1140] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.499478][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.502701][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.506199][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.508811][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.551218][ T5936] veth0_macvtap: entered promiscuous mode [ 56.558123][ T5937] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.566390][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.569656][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.579137][ T5936] veth1_macvtap: entered promiscuous mode [ 56.592494][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.595841][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.634545][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.642459][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.654977][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.657787][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.675808][ T1243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.684352][ T1243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.687315][ T1243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.712408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.799483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.819366][ T1243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.822943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.826913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.830488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.900864][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.904245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.912579][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.949429][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.951973][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.362470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.372661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.379793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 57.820139][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 57.843149][ T64] Bluetooth: hci3: command tx timeout [ 57.844959][ T5941] Bluetooth: hci0: command tx timeout [ 57.852527][ T5941] Bluetooth: hci2: command tx timeout [ 57.932322][ T5941] Bluetooth: hci1: command tx timeout [ 58.336364][ T6047] __vm_enough_memory: pid: 6047, comm: syz.2.5, bytes: 4294963200 not enough memory for the allocation [ 58.512210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.565088][ T6065] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9'. [ 59.797757][ T6064] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 59.800272][ T6064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.809886][ T6064] vhci_hcd vhci_hcd.0: Device attached [ 59.945685][ T5941] Bluetooth: hci2: command tx timeout [ 59.945714][ T5946] Bluetooth: hci3: command tx timeout [ 59.945777][ T64] Bluetooth: hci0: command tx timeout [ 60.001449][ T29] cfg80211: failed to load regulatory.db [ 60.084260][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 60.092714][ T6005] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 60.099148][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 61.146072][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 61.150346][ T6087] Zero length message leads to an empty skb [ 61.153551][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.156608][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.162763][ T6087] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.165783][ T6087] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.003596][ T5941] Bluetooth: hci0: command tx timeout [ 62.005464][ T5941] Bluetooth: hci3: command tx timeout [ 62.012458][ T64] Bluetooth: hci2: command tx timeout [ 62.066526][ T6088] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 62.068691][ T6088] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 62.071917][ T6088] vhci_hcd vhci_hcd.0: Device attached [ 62.345782][ T55] usb 38-1: SetAddress Request (2) to port 0 [ 62.345837][ T55] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 62.472867][ T6066] vhci_hcd: connection reset by peer [ 62.475655][ T1243] vhci_hcd vhci_hcd.3: stop threads [ 62.475865][ T1243] vhci_hcd vhci_hcd.3: release socket [ 62.476341][ T1243] vhci_hcd vhci_hcd.3: disconnect device [ 62.484008][ T64] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 62.484163][ T64] Bluetooth: hci1: Injecting HCI hardware error event [ 62.484823][ T64] Bluetooth: hci1: hardware error 0x00 [ 62.642939][ T6101] lo speed is unknown, defaulting to 1000 [ 62.645448][ T6101] lo speed is unknown, defaulting to 1000 [ 62.652223][ T6101] lo speed is unknown, defaulting to 1000 [ 62.664888][ T6101] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.686533][ T6101] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 62.773524][ T6101] lo speed is unknown, defaulting to 1000 [ 62.776675][ T6101] lo speed is unknown, defaulting to 1000 [ 62.779432][ T6101] lo speed is unknown, defaulting to 1000 [ 62.782268][ T6101] lo speed is unknown, defaulting to 1000 [ 62.794939][ T6104] warning: `syz.3.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.879761][ T6105] fuse: Bad value for 'fd' [ 64.490309][ T6089] vhci_hcd: connection reset by peer [ 64.490558][ T6116] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 64.494660][ T6116] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.503686][ T1176] vhci_hcd vhci_hcd.0: stop threads [ 64.506264][ T1176] vhci_hcd vhci_hcd.0: release socket [ 64.508801][ T1176] vhci_hcd vhci_hcd.0: disconnect device [ 64.512151][ T6116] vhci_hcd vhci_hcd.0: Device attached [ 64.562535][ T64] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 64.762137][ T34] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 65.206368][ T6005] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 65.227903][ T6122] binder: 6121:6122 ioctl 0 80000040 returned -22 [ 65.232153][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 65.397717][ T10] usb 8-1: config 160 has an invalid interface number: 200 but max is 0 [ 65.400494][ T10] usb 8-1: config 160 has no interface number 0 [ 65.402819][ T10] usb 8-1: config 160 interface 200 has no altsetting 0 [ 65.408066][ T10] usb 8-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 65.411033][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.414464][ T10] usb 8-1: Product: syz [ 65.417706][ T10] usb 8-1: Manufacturer: syz [ 65.419205][ T10] usb 8-1: SerialNumber: syz [ 65.749232][ T6139] syz.0.24 uses obsolete (PF_INET,SOCK_PACKET) [ 66.237866][ T40] audit: type=1804 audit(1766512693.361:2): pid=6145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.25" name="/newroot/9/file0/file0" dev="9p" ino=71827843 res=1 errno=0 [ 67.211691][ T6117] vhci_hcd: connection reset by peer [ 67.214324][ T1243] vhci_hcd vhci_hcd.1: stop threads [ 67.216078][ T1243] vhci_hcd vhci_hcd.1: release socket [ 67.217903][ T1243] vhci_hcd vhci_hcd.1: disconnect device [ 67.355265][ T6160] Cannot find map_set index 2 as target [ 67.442155][ T55] usb 38-1: device descriptor read/8, error -110 [ 67.729327][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 67.731897][ T10] usb 8-1: MIDIStreaming interface descriptor not found [ 67.760887][ T10] usb 8-1: USB disconnect, device number 2 [ 67.764359][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 67.768073][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 67.818936][ T6166] udevd[6166]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 67.834633][ T55] usb usb38-port1: attempt power cycle [ 68.502558][ T55] usb usb38-port1: unable to enumerate USB device [ 68.604980][ T6192] vlan2: entered promiscuous mode [ 68.607166][ T6192] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 69.012149][ T40] audit: type=1804 audit(1766512696.101:3): pid=6203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.37" name="/newroot/12/file0/file0" dev="9p" ino=71827843 res=1 errno=0 [ 69.221885][ T6202] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.392375][ T6205] [U] : [ 69.393513][ T6205] [U] [ 69.398356][ T6205] [U] [ 69.399317][ T6205] [U]  [ 69.403750][ T6205] [U] [ 69.406951][ T6205] [U] [ 69.407938][ T6205] [U] [ 69.408877][ T6205] [U] [ 69.415481][ T6205] [U] [ 69.417859][ T6205] [U] [ 69.418843][ T6205] [U] [ 69.419803][ T6205] [U] [ 69.420849][ T6205] [U] [ 69.430590][ T6205] [U] [ 69.431603][ T6205] [U] [ 69.432576][ T6205] [U] [ 69.433495][ T6205] [U] [ 69.443349][ T6205] [U] [ 69.444363][ T6205] [U] [ 69.445312][ T6205] [U] [ 69.446257][ T6205] [U] [ 69.454128][ T6205] [U] [ 69.455114][ T6205] [U] [ 69.456060][ T6205] [U] [ 69.457018][ T6205] [U] [ 69.464773][ T6205] [U] [ 69.465753][ T6205] [U] [ 69.466737][ T6205] [U] [ 69.467681][ T6205] [U] [ 69.476432][ T6205] [U] [ 69.477420][ T6205] [U] [ 69.478385][ T6205] [U] [ 69.479343][ T6205] [U] [ 69.488074][ T6205] [U] [ 69.489045][ T6205] [U] [ 69.489998][ T6205] [U] [ 69.491001][ T6205] [U] [ 69.501053][ T6205] [U] [ 69.502057][ T6205] [U] [ 69.503066][ T6205] [U] [ 69.504014][ T6205] [U] [ 69.515999][ T6205] [U] [ 69.517059][ T6205] [U] [ 69.518094][ T6205] [U] [ 69.519059][ T6205] [U] [ 69.544996][ T6205] [U] [ 69.545997][ T6205] [U] [ 69.547018][ T6205] [U] [ 69.548061][ T6205] [U] [ 69.549415][ T6205] [U] [ 69.550396][ T6205] [U] [ 69.551394][ T6205] [U] [ 69.552350][ T6205] [U] [ 69.609446][ T6205] [U] [ 69.610468][ T6205] [U] [ 69.611492][ T6205] [U] [ 69.612493][ T6205] [U] [ 69.617586][ T6205] [U] [ 69.618811][ T6205] [U] [ 69.619766][ T6205] [U] [ 69.621023][ T6205] [U] [ 69.632466][ T6205] [U] [ 69.633900][ T6205] [U] [ 69.635162][ T6205] [U] [ 69.636445][ T6205] [U] [ 69.638064][ T6205] [U] [ 69.639348][ T6205] [U] [ 69.640407][ T6205] [U] [ 69.641404][ T6205] [U] [ 69.643197][ T6205] [U] [ 69.644218][ T6205] [U] [ 69.645182][ T6205] [U] [ 69.646114][ T6205] [U] [ 69.647369][ T6205] [U] [ 69.648322][ T6205] [U] [ 69.649279][ T6205] [U] [ 69.650210][ T6205] [U] [ 69.651171][ T6205] [U] [ 69.652403][ T6205] [U] [ 69.653354][ T6205] [U] [ 69.654302][ T6205] [U] [ 69.655251][ T6205] [U] [ 69.656404][ T6205] [U] [ 69.657390][ T6205] [U] [ 69.658331][ T6205] [U] [ 69.659305][ T6205] [U] [ 69.660496][ T6205] [U] [ 69.661429][ T6205] [U] [ 69.662392][ T6205] [U] [ 69.663345][ T6205] [U] [ 69.664512][ T6205] [U] [ 69.665750][ T6205] [U] [ 69.667024][ T6205] [U] [ 69.668052][ T6205] [U] [ 69.669153][ T6205] [U] [ 69.670102][ T6205] [U] [ 69.671096][ T6205] [U] [ 69.672043][ T6205] [U] [ 69.673167][ T6205] [U] [ 69.674118][ T6205] [U] [ 69.675079][ T6205] [U] [ 69.676011][ T6205] [U] [ 69.677325][ T6205] [U] [ 69.678276][ T6205] [U] [ 69.679232][ T6205] [U] [ 69.680168][ T6205] [U] [ 69.681338][ T6205] [U] [ 69.682300][ T6205] [U] [ 69.683287][ T6205] [U] [ 69.684225][ T6205] [U] [ 69.684730][ T6200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 69.685364][ T6205] [U] [ 69.689424][ T6205] [U] [ 69.690378][ T6205] [U] [ 69.691361][ T6205] [U] [ 69.692687][ T6205] [U] [ 69.693632][ T6205] [U] [ 69.694611][ T6205] [U] [ 69.695574][ T6205] [U] [ 69.696915][ T6205] [U] [ 69.697896][ T6205] [U] [ 69.698836][ T6205] [U] [ 69.699781][ T6205] [U] [ 69.701750][ T6205] [U] [ 69.702750][ T6205] [U] [ 69.703684][ T6205] [U] [ 69.704607][ T6205] [U] [ 69.706448][ T6205] [U] [ 69.707459][ T6205] [U] [ 69.708388][ T6205] [U] [ 69.709324][ T6205] [U] [ 69.710713][ T6205] [U] [ 69.711666][ T6205] [U] [ 69.712821][ T6205] [U] [ 69.716959][ T6205] [U] [ 69.761395][ T6208] process 'syz.0.39' launched './file1' with NULL argv: empty string added [ 69.922463][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 70.219233][ T6217] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 70.221473][ T6217] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.224212][ T6217] vhci_hcd vhci_hcd.0: Device attached [ 70.272981][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 70.275880][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.41'. [ 70.463828][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.42'. [ 70.466774][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.42'. [ 70.492263][ T6005] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 70.605685][ T6228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 70.866928][ T6228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.879390][ T53] lo speed is unknown, defaulting to 1000 [ 71.728869][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 71.733150][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 72.830108][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 72.919464][ T6219] vhci_hcd: connection reset by peer [ 72.921571][ T1141] vhci_hcd vhci_hcd.2: stop threads [ 72.925188][ T1141] vhci_hcd vhci_hcd.2: release socket [ 72.929722][ T1141] vhci_hcd vhci_hcd.2: disconnect device [ 73.181453][ T6263] capability: warning: `syz.0.55' uses 32-bit capabilities (legacy support in use) [ 73.597947][ T6278] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 75.005143][ T6293] capability: warning: `syz.3.64' uses deprecated v2 capabilities in a way that may be insecure [ 75.117463][ T6294] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 75.119672][ T6294] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.132166][ T6294] vhci_hcd vhci_hcd.0: Device attached [ 75.192126][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 75.202321][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'. [ 75.234231][ T6296] geneve2: entered promiscuous mode [ 75.392675][ T6006] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 75.592198][ T6005] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 76.006807][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.009189][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.632639][ T6005] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 77.193718][ T6318] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 77.968859][ T6297] vhci_hcd: connection reset by peer [ 77.971114][ T1176] vhci_hcd vhci_hcd.1: stop threads [ 77.973717][ T1176] vhci_hcd vhci_hcd.1: release socket [ 77.976459][ T1176] vhci_hcd vhci_hcd.1: disconnect device [ 78.115269][ T6394] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 78.402641][ T64] Bluetooth: hci0: command 0x080f tx timeout [ 80.473125][ T6006] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 84.030374][ T6424] netlink: 'syz.2.83': attribute type 5 has an invalid length. [ 84.739819][ T6438] loop5: detected capacity change from 0 to 7 [ 84.753866][ T6438] Dev loop5: unable to read RDB block 7 [ 84.755856][ T6438] loop5: AHDI p1 p2 p3 [ 84.757472][ T6438] loop5: partition table partially beyond EOD, truncated [ 84.767517][ T6438] loop5: p1 start 1601398130 is beyond EOD, truncated [ 84.769992][ T6438] loop5: p2 start 1702059890 is beyond EOD, truncated [ 84.865994][ T6436] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 84.867519][ T6441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.86'. [ 84.868706][ T6436] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.872273][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.86'. [ 84.877067][ T6436] vhci_hcd vhci_hcd.0: Device attached [ 85.122250][ T6163] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 86.248074][ T6462] team_slave_0: entered promiscuous mode [ 86.250895][ T6462] team_slave_1: entered promiscuous mode [ 86.380263][ T6468] IPv6: addrconf: prefix option has invalid lifetime [ 86.394108][ T6469] fuse: Bad value for 'fd' [ 87.239521][ T6483] siw: device registration error -23 [ 87.468278][ T6439] vhci_hcd: connection reset by peer [ 87.473895][ T78] vhci_hcd vhci_hcd.2: stop threads [ 87.475823][ T78] vhci_hcd vhci_hcd.2: release socket [ 87.477633][ T78] vhci_hcd vhci_hcd.2: disconnect device [ 87.967438][ T6006] kernel write not supported for file /snd/seq (pid: 6006 comm: kworker/0:4) [ 88.245719][ T6513] sctp: [Deprecated]: syz.0.109 (pid 6513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.245719][ T6513] Use struct sctp_sack_info instead [ 88.672197][ T6025] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 88.832405][ T6025] usb 8-1: Using ep0 maxpacket: 32 [ 88.835682][ T6025] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 88.840369][ T6025] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 88.843808][ T6025] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 88.846920][ T6025] usb 8-1: Product: syz [ 88.848340][ T6025] usb 8-1: Manufacturer: syz [ 88.849864][ T6025] usb 8-1: SerialNumber: syz [ 88.859498][ T6025] usb 8-1: config 0 descriptor?? [ 88.862925][ T6521] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 89.077160][ T34] usb 8-1: USB disconnect, device number 3 [ 89.999731][ T6539] binder_alloc: 6538: binder_alloc_buf size 12528 failed, no address space [ 90.003815][ T6539] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 90.200008][ T6543] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 90.208104][ T6543] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 90.213447][ T6545] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 90.216805][ T6545] netlink: 'syz.0.118': attribute type 3 has an invalid length. [ 90.242146][ T6163] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 90.448028][ T6553] exFAT-fs (nbd0): unable to read boot sector [ 90.450088][ T6553] exFAT-fs (nbd0): failed to read boot sector [ 90.462067][ T6553] exFAT-fs (nbd0): failed to recognize exfat type [ 90.511590][ T6561] vivid-007: ================= START STATUS ================= [ 90.515411][ T6561] vivid-007: Generate PTS: true [ 90.518070][ T6561] vivid-007: Generate SCR: true [ 90.520528][ T6561] tpg source WxH: 320x240 (Y'CbCr) [ 90.522746][ T6561] tpg field: 1 [ 90.524152][ T6561] tpg crop: (0,0)/320x240 [ 90.525595][ T6561] tpg compose: (0,0)/320x240 [ 90.527149][ T6561] tpg colorspace: 8 [ 90.529219][ T6561] tpg transfer function: 0/0 [ 90.530829][ T6561] tpg Y'CbCr encoding: 0/0 [ 90.532562][ T6561] tpg quantization: 0/0 [ 90.534147][ T6561] tpg RGB range: 0/2 [ 90.535479][ T6561] vivid-007: ================== END STATUS ================== [ 90.582115][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.586279][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.599425][ T6563] team_slave_0: left promiscuous mode [ 90.601944][ T6563] team_slave_1: left promiscuous mode [ 90.685686][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.687117][ T6567] netlink: 208568 bytes leftover after parsing attributes in process `syz.3.126'. [ 90.694625][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.738805][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 90.774802][ T6182] lo speed is unknown, defaulting to 1000 [ 90.776916][ T6182] syz0: Port: 1 Link DOWN [ 90.781156][ T1218] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.791743][ T1218] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.795352][ T1218] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.798456][ T1218] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.243253][ T6025] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 91.320217][ T6598] loop8: detected capacity change from 0 to 8 [ 91.328714][ T6444] Dev loop8: unable to read RDB block 8 [ 91.330717][ T6444] loop8: unable to read partition table [ 91.336459][ T6444] loop8: partition table beyond EOD, truncated [ 91.353836][ T6598] Dev loop8: unable to read RDB block 8 [ 91.356176][ T6598] loop8: unable to read partition table [ 91.358960][ T6598] loop8: partition table beyond EOD, truncated [ 91.362120][ T6598] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 91.412615][ T6025] usb 6-1: Using ep0 maxpacket: 32 [ 91.873876][ T6607] netlink: 752 bytes leftover after parsing attributes in process `syz.2.136'. [ 91.947496][ T6025] usb 6-1: unable to get BOS descriptor or descriptor too short [ 91.950771][ T6025] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 91.980035][ T6025] usb 6-1: can't read configurations, error -71 [ 92.275556][ T6614] [ 92.276642][ T6614] ====================================================== [ 92.279606][ T6614] WARNING: possible circular locking dependency detected [ 92.282601][ T6614] syzkaller #0 Tainted: G L [ 92.285213][ T6614] ------------------------------------------------------ [ 92.288111][ T6614] syz.2.137/6614 is trying to acquire lock: [ 92.290646][ T6614] ffff888027e6ec68 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x15d/0x1bd0 [ 92.294492][ T6614] [ 92.294492][ T6614] but task is already holding lock: [ 92.297599][ T6614] ffff88801318c148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 92.301788][ T6614] [ 92.301788][ T6614] which lock already depends on the new lock. [ 92.301788][ T6614] [ 92.306220][ T6614] [ 92.306220][ T6614] the existing dependency chain (in reverse order) is: [ 92.310065][ T6614] [ 92.310065][ T6614] -> #2 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 92.312764][ T6614] __mutex_lock+0x1aa/0x1ca0 [ 92.314477][ T6614] autofs_notify_daemon+0x4a6/0xd60 [ 92.316356][ T6614] autofs_wait+0x10f3/0x1ac0 [ 92.318061][ T6614] autofs_mount_wait+0x132/0x3c0 [ 92.319870][ T6614] autofs_d_automount+0x4b2/0x960 [ 92.321714][ T6614] __traverse_mounts+0x1b9/0x830 [ 92.323511][ T6614] step_into_slowpath+0x772/0xf50 [ 92.325321][ T6614] path_lookupat+0x627/0xc40 [ 92.327041][ T6614] filename_lookup+0x224/0x5f0 [ 92.328790][ T6614] kern_path+0x35/0x50 [ 92.330339][ T6614] lookup_bdev+0xd8/0x280 [ 92.331792][ T6614] resume_store+0x1d6/0x490 [ 92.333469][ T6614] kobj_attr_store+0x58/0x80 [ 92.335177][ T6614] sysfs_kf_write+0xf2/0x150 [ 92.336872][ T6614] kernfs_fop_write_iter+0x3af/0x570 [ 92.338783][ T6614] vfs_write+0x7d3/0x11d0 [ 92.340363][ T6614] ksys_write+0x12a/0x250 [ 92.341956][ T6614] __do_fast_syscall_32+0xe8/0x680 [ 92.343785][ T6614] do_fast_syscall_32+0x32/0x80 [ 92.345539][ T6614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.347817][ T6614] [ 92.347817][ T6614] -> #1 (&of->mutex){+.+.}-{4:4}: [ 92.350177][ T6614] __mutex_lock+0x1aa/0x1ca0 [ 92.351907][ T6614] kernfs_fop_write_iter+0x28f/0x570 [ 92.353818][ T6614] iter_file_splice_write+0xa24/0x12b0 [ 92.355788][ T6614] do_splice+0x1478/0x1fc0 [ 92.357439][ T6614] __do_splice+0x32a/0x360 [ 92.359088][ T6614] __ia32_sys_splice+0x189/0x250 [ 92.360877][ T6614] __do_fast_syscall_32+0xe8/0x680 [ 92.362887][ T6614] do_fast_syscall_32+0x32/0x80 [ 92.364680][ T6614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.366952][ T6614] [ 92.366952][ T6614] -> #0 (&pipe->mutex){+.+.}-{4:4}: [ 92.369385][ T6614] __lock_acquire+0x1669/0x2890 [ 92.371220][ T6614] lock_acquire+0x179/0x330 [ 92.372917][ T6614] __mutex_lock+0x1aa/0x1ca0 [ 92.374627][ T6614] anon_pipe_write+0x15d/0x1bd0 [ 92.376399][ T6614] __kernel_write_iter+0x720/0xb10 [ 92.378290][ T6614] __kernel_write+0xf5/0x140 [ 92.379974][ T6614] autofs_notify_daemon+0x4db/0xd60 [ 92.381873][ T6614] autofs_wait+0x10f3/0x1ac0 [ 92.383550][ T6614] autofs_mount_wait+0x132/0x3c0 [ 92.385138][ T6614] autofs_d_automount+0x4b2/0x960 [ 92.386932][ T6614] __traverse_mounts+0x1b9/0x830 [ 92.388733][ T6614] step_into_slowpath+0x772/0xf50 [ 92.390593][ T6614] path_lookupat+0x627/0xc40 [ 92.392286][ T6614] filename_lookup+0x224/0x5f0 [ 92.394040][ T6614] kern_path+0x35/0x50 [ 92.395580][ T6614] lookup_bdev+0xd8/0x280 [ 92.397191][ T6614] resume_store+0x1d6/0x490 [ 92.398867][ T6614] kobj_attr_store+0x58/0x80 [ 92.400620][ T6614] sysfs_kf_write+0xf2/0x150 [ 92.402306][ T6614] kernfs_fop_write_iter+0x3af/0x570 [ 92.404255][ T6614] vfs_write+0x7d3/0x11d0 [ 92.405848][ T6614] ksys_write+0x12a/0x250 [ 92.407492][ T6614] __do_fast_syscall_32+0xe8/0x680 [ 92.409605][ T6614] do_fast_syscall_32+0x32/0x80 [ 92.411848][ T6614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.414641][ T6614] [ 92.414641][ T6614] other info that might help us debug this: [ 92.414641][ T6614] [ 92.418748][ T6614] Chain exists of: [ 92.418748][ T6614] &pipe->mutex --> &of->mutex --> &sbi->pipe_mutex [ 92.418748][ T6614] [ 92.423586][ T6614] Possible unsafe locking scenario: [ 92.423586][ T6614] [ 92.426625][ T6614] CPU0 CPU1 [ 92.428785][ T6614] ---- ---- [ 92.430954][ T6614] lock(&sbi->pipe_mutex); [ 92.432778][ T6614] lock(&of->mutex); [ 92.435449][ T6614] lock(&sbi->pipe_mutex); [ 92.438154][ T6614] lock(&pipe->mutex); [ 92.439948][ T6614] [ 92.439948][ T6614] *** DEADLOCK *** [ 92.439948][ T6614] [ 92.443142][ T6614] 5 locks held by syz.2.137/6614: [ 92.445136][ T6614] #0: ffff88804b6d9b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 92.448702][ T6614] #1: ffff888044536420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 92.452293][ T6614] #2: ffff8880485d2888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 92.456032][ T6614] #3: ffff88801c3cc0f8 (kn->active#66){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 92.460069][ T6614] #4: ffff88801318c148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 92.463341][ T6614] [ 92.463341][ T6614] stack backtrace: [ 92.465686][ T6614] CPU: 0 UID: 0 PID: 6614 Comm: syz.2.137 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.465711][ T6614] Tainted: [L]=SOFTLOCKUP [ 92.465717][ T6614] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 92.465728][ T6614] Call Trace: [ 92.465735][ T6614] [ 92.465743][ T6614] dump_stack_lvl+0x116/0x1f0 [ 92.465771][ T6614] print_circular_bug+0x275/0x340 [ 92.465799][ T6614] check_noncircular+0x146/0x160 [ 92.465825][ T6614] __lock_acquire+0x1669/0x2890 [ 92.465841][ T6614] ? __kasan_check_byte+0x13/0x50 [ 92.465869][ T6614] lock_acquire+0x179/0x330 [ 92.465884][ T6614] ? anon_pipe_write+0x15d/0x1bd0 [ 92.465907][ T6614] ? __pfx___might_resched+0x10/0x10 [ 92.465928][ T6614] ? rcu_is_watching+0x12/0xc0 [ 92.465952][ T6614] __mutex_lock+0x1aa/0x1ca0 [ 92.465978][ T6614] ? anon_pipe_write+0x15d/0x1bd0 [ 92.466001][ T6614] ? is_bpf_text_address+0x94/0x1a0 [ 92.466019][ T6614] ? kernel_text_address+0x8d/0x100 [ 92.466038][ T6614] ? anon_pipe_write+0x15d/0x1bd0 [ 92.466061][ T6614] ? unwind_get_return_address+0x59/0xa0 [ 92.466084][ T6614] ? __bfs+0x148/0x290 [ 92.466104][ T6614] ? __pfx___mutex_lock+0x10/0x10 [ 92.466127][ T6614] ? check_irq_usage+0xe8/0xbc0 [ 92.466156][ T6614] ? anon_pipe_write+0x15d/0x1bd0 [ 92.466179][ T6614] anon_pipe_write+0x15d/0x1bd0 [ 92.466203][ T6614] ? irqentry_exit+0x1dd/0x8c0 [ 92.466222][ T6614] ? lockdep_hardirqs_on+0x7c/0x110 [ 92.466245][ T6614] ? irqentry_exit+0x1dd/0x8c0 [ 92.466269][ T6614] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 92.466298][ T6614] ? __pfx_anon_pipe_write+0x10/0x10 [ 92.466319][ T6614] ? lock_acquire+0x62/0x330 [ 92.466335][ T6614] ? __pfx_anon_pipe_write+0x10/0x10 [ 92.466359][ T6614] __kernel_write_iter+0x720/0xb10 [ 92.466384][ T6614] ? __pfx___kernel_write_iter+0x10/0x10 [ 92.466402][ T6614] ? __mutex_lock+0x27b/0x1ca0 [ 92.466426][ T6614] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 92.466484][ T6614] ? autofs_notify_daemon+0x45a/0xd60 [ 92.466507][ T6614] __kernel_write+0xf5/0x140 [ 92.466532][ T6614] ? __pfx___kernel_write+0x10/0x10 [ 92.466556][ T6614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 92.466585][ T6614] autofs_notify_daemon+0x4db/0xd60 [ 92.466605][ T6614] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 92.466624][ T6614] ? kernfs_fop_write_iter+0x3af/0x570 [ 92.466648][ T6614] ? vfs_write+0x7d3/0x11d0 [ 92.466667][ T6614] ? ksys_write+0x12a/0x250 [ 92.466695][ T6614] ? lockdep_init_map_type+0x5c/0x270 [ 92.466711][ T6614] ? lockdep_init_map_type+0x5c/0x270 [ 92.466729][ T6614] autofs_wait+0x10f3/0x1ac0 [ 92.466749][ T6614] ? __pfx_autofs_wait+0x10/0x10 [ 92.466766][ T6614] ? __pfx_path_check_mount+0x10/0x10 [ 92.466781][ T6614] ? find_held_lock+0x2b/0x80 [ 92.466801][ T6614] ? path_has_submounts+0xcf/0x120 [ 92.466821][ T6614] ? do_raw_spin_unlock+0x172/0x230 [ 92.466840][ T6614] ? find_held_lock+0x2b/0x80 [ 92.466861][ T6614] autofs_mount_wait+0x132/0x3c0 [ 92.466879][ T6614] autofs_d_automount+0x4b2/0x960 [ 92.466898][ T6614] __traverse_mounts+0x1b9/0x830 [ 92.466916][ T6614] step_into_slowpath+0x772/0xf50 [ 92.466938][ T6614] ? __up_read+0x2d1/0x700 [ 92.466954][ T6614] ? __pfx_step_into_slowpath+0x10/0x10 [ 92.466971][ T6614] ? __lookup_slow+0x420/0x460 [ 92.466991][ T6614] path_lookupat+0x627/0xc40 [ 92.467014][ T6614] filename_lookup+0x224/0x5f0 [ 92.467036][ T6614] ? __pfx_filename_lookup+0x10/0x10 [ 92.467060][ T6614] ? getname_kernel+0x52/0x370 [ 92.467076][ T6614] ? __asan_memcpy+0x3c/0x60 [ 92.467097][ T6614] kern_path+0x35/0x50 [ 92.467118][ T6614] lookup_bdev+0xd8/0x280 [ 92.467135][ T6614] ? __pfx_lookup_bdev+0x10/0x10 [ 92.467148][ T6614] ? __asan_memcpy+0x3c/0x60 [ 92.467166][ T6614] resume_store+0x1d6/0x490 [ 92.467185][ T6614] ? __pfx_resume_store+0x10/0x10 [ 92.467207][ T6614] ? find_held_lock+0x2b/0x80 [ 92.467229][ T6614] ? __pfx_resume_store+0x10/0x10 [ 92.467247][ T6614] kobj_attr_store+0x58/0x80 [ 92.467269][ T6614] ? __pfx_kobj_attr_store+0x10/0x10 [ 92.467294][ T6614] sysfs_kf_write+0xf2/0x150 [ 92.467310][ T6614] kernfs_fop_write_iter+0x3af/0x570 [ 92.467334][ T6614] ? __pfx_sysfs_kf_write+0x10/0x10 [ 92.467349][ T6614] vfs_write+0x7d3/0x11d0 [ 92.467369][ T6614] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 92.467395][ T6614] ? __pfx_vfs_write+0x10/0x10 [ 92.467416][ T6614] ? find_held_lock+0x2b/0x80 [ 92.467442][ T6614] ksys_write+0x12a/0x250 [ 92.467468][ T6614] ? __pfx_ksys_write+0x10/0x10 [ 92.467495][ T6614] __do_fast_syscall_32+0xe8/0x680 [ 92.467524][ T6614] do_fast_syscall_32+0x32/0x80 [ 92.467540][ T6614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 92.467559][ T6614] RIP: 0023:0xf70ad579 [ 92.467572][ T6614] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 92.467588][ T6614] RSP: 002b:00000000f545b55c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 92.467604][ T6614] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040 [ 92.467614][ T6614] RDX: 0000000000000012 RSI: 0000000000000000 RDI: 0000000000000000 [ 92.467624][ T6614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.467633][ T6614] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 92.467643][ T6614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 92.467658][ T6614] [ 92.521934][ T6603] base_sock_release(ffff888052652280) sk=ffff88802786c000 [ 92.979195][ T6614] PM: Image not found (code -22)