last executing test programs: 22.27631394s ago: executing program 1 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r7, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000200)={0x0, 0x8001}) 18.278801535s ago: executing program 0 (id=116): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) creat(&(0x7f00000001c0)='./file0\x00', 0x8) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) stat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x8c880, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) 16.171340337s ago: executing program 3 (id=118): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x5}, 0xc) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) 16.03806775s ago: executing program 0 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) 15.672769575s ago: executing program 1 (id=120): set_mempolicy(0x4005, 0x0, 0x4) openat$userio(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, 0x0, 0x0, 0x12}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvmmsg(r5, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 15.660077122s ago: executing program 3 (id=121): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x1000000ffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = fanotify_init(0x200, 0x0) fanotify_mark(r6, 0x1, 0x40000032, r4, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000000c0)=0x1) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000500)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x48, 0x7b, 0x33}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) writev(0xffffffffffffffff, 0x0, 0x0) 14.914306084s ago: executing program 0 (id=122): epoll_create1(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r8, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="d5aaaaaaaa9b"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 14.628475174s ago: executing program 4 (id=123): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000280)={[], [], 0x2c}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 11.761417646s ago: executing program 3 (id=125): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10.381992563s ago: executing program 2 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000000306010100000000000000000200000605000100070000000900020073797a3200000000bae50f8f9c6623731517b4fbd84cb6ed6e5bc2fc636f838ae4e69bb20a71891aee9ddc7795173c16fdbf793c699becb25e9624998de51ad430a22a9dc228065448a7bebcf4aa4edf9c67523577307aadc1ec25953ef050b76dadab91ea02"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x40080d0) 10.247792023s ago: executing program 1 (id=127): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00090599"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r2, 0x0, 0x481e) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x2000000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c73697274696f657874656e642c6163638173733d616e792c676b6368653d66736361636865a14a697273696f6e3d3970323030302e75"]) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="0a010100ac14140d2b7d05396a010000000300000000000000e000000100000010"], 0x1c) chdir(&(0x7f0000000300)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x3, 0x0, 0x0) 10.163849039s ago: executing program 4 (id=128): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) ptrace(0x10, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000032, 0xffffffffffffffff, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40080, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) 10.132371557s ago: executing program 2 (id=129): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x108001, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r2, 0x80304d65, &(0x7f0000000280)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000002b40), &(0x7f0000002b80)=0x30) 8.540433936s ago: executing program 4 (id=130): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000002c0)={r3}, &(0x7f0000000200)=0x8) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000380)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) setrlimit(0x6, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0x6}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[r7], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 7.212419975s ago: executing program 2 (id=131): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x5}, 0xc) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) 6.525508232s ago: executing program 3 (id=132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x480000, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) getpeername$netrom(0xffffffffffffffff, 0x0, 0x0) 6.088178325s ago: executing program 4 (id=133): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./bus\x00') 5.932093924s ago: executing program 2 (id=134): syz_open_dev$tty1(0xc, 0x4, 0x2) socket(0xa, 0x3, 0x3a) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x4008014}, 0x20000480) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0xe}, 0x4a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x2], [0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe654, 0x0, 0xae, 0x0, 0x0, 0x88, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x4, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x80, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r1, 0x5501) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa6, 0x200000) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000080)={0x1, @capture={0x0, 0x0, {}, 0x0, 0x33}}) 5.908880666s ago: executing program 4 (id=135): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x53) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005ff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="ffff0000000000000000"], 0x48}}, 0x40800) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8042) fcntl$dupfd(r3, 0x0, r3) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgrp(0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x141) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/power/reserved_size', 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000078c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="00c5409361ed00"/20, @ANYRES32, @ANYRES32, @ANYBLOB="04000000050000000200"/28], 0x50) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) 4.876347115s ago: executing program 3 (id=136): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x18000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x100000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x0, 0xb021, 0x0}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) 4.288139455s ago: executing program 1 (id=137): keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 4.211580633s ago: executing program 4 (id=138): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000280)={[], [], 0x2c}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2.94557271s ago: executing program 0 (id=139): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x607b, 0x8, 0x0, 0x284}, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000e40)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x48}, &(0x7f00000004c0)=0x40) 1.62654556s ago: executing program 2 (id=140): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) 1.614760588s ago: executing program 1 (id=141): socket$inet6(0xa, 0x11, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) chown(&(0x7f00000079c0)='.\x00', 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x80, 0x80, 0x4}, {0x10000, 0xffff1000, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x3}, {0x0, 0xffff1000, 0xc, 0x2, 0x3, 0x10, 0x6, 0x0, 0x1, 0x0, 0x4}, {0x8080000, 0x10000, 0x0, 0x0, 0x0, 0xfd}, {0x0, 0x0, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0x0, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x2, 0x400}, {}, 0xddf8ffdb, 0x0, 0x11111001, 0x100, 0x8, 0x8000, 0x3000, [0x0, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 1.554439052s ago: executing program 0 (id=142): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) mount$overlay(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000000280)={[], [], 0x2c}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 1.364240504s ago: executing program 2 (id=143): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4", 0xb) recvmmsg(r3, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x39, 0x80, {0x0, @in6={{0xa, 0x4e24, 0x3, @private0, 0x1}}, 0x2, 0x8, 0x200, 0x9, 0x8}}, &(0x7f0000000300)=0xb0) 391.16704ms ago: executing program 0 (id=144): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 947.346µs ago: executing program 1 (id=145): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/ipc\x00') add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001000000008"]) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) 0s ago: executing program 3 (id=146): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x26}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. [ 84.651835][ T5821] cgroup: Unknown subsys name 'net' [ 84.812162][ T5821] cgroup: Unknown subsys name 'cpuset' [ 84.821607][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.483450][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.237058][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.248006][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.255879][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.268918][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.276811][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.358364][ T5154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.368628][ T5154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.376404][ T5154] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.385071][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.393882][ T5154] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.434885][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.444055][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.458559][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.466302][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.526958][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.534991][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.542984][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.552078][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.569374][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.576965][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.585699][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.595067][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.617971][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.628115][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.636485][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.991946][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 90.043883][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 90.298339][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.305664][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.313310][ T5837] bridge_slave_0: entered allmulticast mode [ 90.320824][ T5837] bridge_slave_0: entered promiscuous mode [ 90.388609][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.396326][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.408500][ T5837] bridge_slave_1: entered allmulticast mode [ 90.416395][ T5837] bridge_slave_1: entered promiscuous mode [ 90.444590][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.452622][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.461896][ T5831] bridge_slave_0: entered allmulticast mode [ 90.469321][ T5831] bridge_slave_0: entered promiscuous mode [ 90.482489][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.489722][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.496925][ T5831] bridge_slave_1: entered allmulticast mode [ 90.504348][ T5831] bridge_slave_1: entered promiscuous mode [ 90.549213][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 90.576089][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.585666][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 90.636111][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.692148][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.710585][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.828741][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 90.843167][ T5831] team0: Port device team_slave_0 added [ 90.851468][ T5837] team0: Port device team_slave_0 added [ 90.859782][ T5831] team0: Port device team_slave_1 added [ 90.903942][ T5837] team0: Port device team_slave_1 added [ 90.959418][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.966619][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.973980][ T5840] bridge_slave_0: entered allmulticast mode [ 90.981319][ T5840] bridge_slave_0: entered promiscuous mode [ 91.012081][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.019288][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.045440][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.086383][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.094193][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.101914][ T5840] bridge_slave_1: entered allmulticast mode [ 91.110060][ T5840] bridge_slave_1: entered promiscuous mode [ 91.133608][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.140832][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.166889][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.185435][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.192823][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.218837][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.288986][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.295976][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.322527][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.329208][ T51] Bluetooth: hci0: command tx timeout [ 91.342952][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.350243][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.357416][ T5839] bridge_slave_0: entered allmulticast mode [ 91.364996][ T5839] bridge_slave_0: entered promiscuous mode [ 91.374871][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.388231][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.407947][ T51] Bluetooth: hci1: command tx timeout [ 91.435759][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.443064][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.450757][ T5839] bridge_slave_1: entered allmulticast mode [ 91.459214][ T5839] bridge_slave_1: entered promiscuous mode [ 91.509388][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.516541][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.524274][ T5843] bridge_slave_0: entered allmulticast mode [ 91.532485][ T5843] bridge_slave_0: entered promiscuous mode [ 91.583367][ T5840] team0: Port device team_slave_0 added [ 91.590728][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.598739][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.605954][ T5843] bridge_slave_1: entered allmulticast mode [ 91.613588][ T5843] bridge_slave_1: entered promiscuous mode [ 91.640340][ T5837] hsr_slave_0: entered promiscuous mode [ 91.646998][ T5837] hsr_slave_1: entered promiscuous mode [ 91.656744][ T51] Bluetooth: hci3: command tx timeout [ 91.662436][ T5154] Bluetooth: hci2: command tx timeout [ 91.676388][ T5840] team0: Port device team_slave_1 added [ 91.699234][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.711651][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.726414][ T5831] hsr_slave_0: entered promiscuous mode [ 91.732461][ T51] Bluetooth: hci4: command tx timeout [ 91.739613][ T5831] hsr_slave_1: entered promiscuous mode [ 91.745968][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 91.752959][ T5831] Cannot create hsr debugfs directory [ 91.844856][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.878857][ T5839] team0: Port device team_slave_0 added [ 91.885328][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.892576][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.919438][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.932927][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.977287][ T5839] team0: Port device team_slave_1 added [ 91.984632][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.991784][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.017812][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.088775][ T5843] team0: Port device team_slave_0 added [ 92.132719][ T5843] team0: Port device team_slave_1 added [ 92.188913][ T5840] hsr_slave_0: entered promiscuous mode [ 92.195451][ T5840] hsr_slave_1: entered promiscuous mode [ 92.202219][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 92.215270][ T10] cfg80211: failed to load regulatory.db [ 92.219950][ T5840] Cannot create hsr debugfs directory [ 92.227295][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.235008][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.261402][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.302251][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.309309][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.335735][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.371477][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.378577][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.404818][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.468620][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.475658][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.502121][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.704759][ T5839] hsr_slave_0: entered promiscuous mode [ 92.714151][ T5839] hsr_slave_1: entered promiscuous mode [ 92.720845][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 92.726609][ T5839] Cannot create hsr debugfs directory [ 92.753318][ T5843] hsr_slave_0: entered promiscuous mode [ 92.759835][ T5843] hsr_slave_1: entered promiscuous mode [ 92.765956][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 92.771985][ T5843] Cannot create hsr debugfs directory [ 93.014821][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.028384][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.071752][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.112516][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.208579][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.224371][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.263054][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.290686][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.371116][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.390478][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.402677][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.409733][ T51] Bluetooth: hci0: command tx timeout [ 93.420523][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.489572][ T51] Bluetooth: hci1: command tx timeout [ 93.616244][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.633720][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.644663][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.673821][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.728641][ T51] Bluetooth: hci3: command tx timeout [ 93.730911][ T5154] Bluetooth: hci2: command tx timeout [ 93.753051][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.779907][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.808135][ T5154] Bluetooth: hci4: command tx timeout [ 93.834578][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.871323][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.884393][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.897357][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.918929][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.926343][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.936625][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.943791][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.953857][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.961030][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.980692][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.993429][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.027350][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.034570][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.063043][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.141578][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.177650][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.184842][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.216058][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.223346][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.274729][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.350487][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.382874][ T1339] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.390139][ T1339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.422127][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.429319][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.623992][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.752291][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.810676][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.817914][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.845924][ T3464] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.853163][ T3464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.947426][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.073063][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.191821][ T5837] veth0_vlan: entered promiscuous mode [ 95.244563][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.262566][ T5837] veth1_vlan: entered promiscuous mode [ 95.295749][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.394666][ T5831] veth0_vlan: entered promiscuous mode [ 95.410504][ T5837] veth0_macvtap: entered promiscuous mode [ 95.439109][ T5837] veth1_macvtap: entered promiscuous mode [ 95.463821][ T5831] veth1_vlan: entered promiscuous mode [ 95.490536][ T5154] Bluetooth: hci0: command tx timeout [ 95.522965][ T5840] veth0_vlan: entered promiscuous mode [ 95.536472][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.551429][ T5839] veth0_vlan: entered promiscuous mode [ 95.565477][ T5840] veth1_vlan: entered promiscuous mode [ 95.582157][ T5154] Bluetooth: hci1: command tx timeout [ 95.590514][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.653703][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.663490][ T5839] veth1_vlan: entered promiscuous mode [ 95.702932][ T5831] veth0_macvtap: entered promiscuous mode [ 95.716465][ T3464] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.727127][ T3464] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.762856][ T5831] veth1_macvtap: entered promiscuous mode [ 95.777157][ T3464] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.809292][ T5154] Bluetooth: hci3: command tx timeout [ 95.813833][ T51] Bluetooth: hci2: command tx timeout [ 95.824568][ T3464] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.868520][ T5840] veth0_macvtap: entered promiscuous mode [ 95.891502][ T51] Bluetooth: hci4: command tx timeout [ 95.913707][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.935098][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.954726][ T5840] veth1_macvtap: entered promiscuous mode [ 95.963999][ T5839] veth0_macvtap: entered promiscuous mode [ 96.014003][ T5839] veth1_macvtap: entered promiscuous mode [ 96.032083][ T3464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.041365][ T3464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.052527][ T3464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.075053][ T3464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.090730][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.128469][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.163377][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.172351][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.183731][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.193241][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.207306][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.215109][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.243056][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.253171][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.285037][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.336510][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.365730][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.384695][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.386750][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.393347][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.503971][ T5843] veth0_vlan: entered promiscuous mode [ 96.523611][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.540429][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.560125][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.572115][ T5843] veth1_vlan: entered promiscuous mode [ 96.583001][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.590962][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.661243][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.691547][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.731085][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.747442][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.806902][ T5843] veth0_macvtap: entered promiscuous mode [ 96.841955][ T5843] veth1_macvtap: entered promiscuous mode [ 96.874381][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.885880][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.894707][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.917430][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.971330][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.995166][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.056616][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.056668][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.140123][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.165788][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.420923][ T1339] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 97.515341][ T5959] Bluetooth: MGMT ver 1.23 [ 97.573002][ T5154] Bluetooth: hci0: command tx timeout [ 97.649999][ T5154] Bluetooth: hci1: command tx timeout [ 97.831429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 97.888161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 97.888388][ T5835] Bluetooth: hci2: command tx timeout [ 97.933484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.935642][ T5844] Bluetooth: hci3: command tx timeout [ 97.968765][ T5844] Bluetooth: hci4: command tx timeout [ 97.977872][ T5902] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.031041][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.087950][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.145063][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 98.178887][ T5902] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.222986][ T5902] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 98.263361][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.307911][ T5902] usb 4-1: Product: syz [ 98.315216][ T5902] usb 4-1: Manufacturer: syz [ 98.323589][ T5902] usb 4-1: SerialNumber: syz [ 98.346793][ T5902] usb 4-1: config 0 descriptor?? [ 98.358694][ T5964] "syz.2.8" (5964) uses obsolete ecb(arc4) skcipher [ 98.377529][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.392263][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 98.396555][ T5902] cdc_ether 4-1:0.0: probe with driver cdc_ether failed with error -22 [ 98.410060][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.439130][ T5902] usb 4-1: unsupported MDLM descriptors [ 98.451205][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.459620][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.628436][ T10] usb 4-1: USB disconnect, device number 2 [ 98.803451][ T5983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.115029][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.474705][ T5844] Bluetooth: hci5: command 0x1003 tx timeout [ 99.486077][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 99.809005][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.815362][ T5154] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 99.955896][ T5991] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.254590][ T5993] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 101.003188][ T5995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 101.028350][ T5916] usb 1-1: Using ep0 maxpacket: 8 [ 101.067837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.122541][ T5991] overlayfs: failed to set xattr on upper [ 101.163824][ T5991] overlayfs: ...falling back to redirect_dir=nofollow. [ 101.180289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.213198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.481319][ T5991] overlayfs: ...falling back to index=off. [ 101.504560][ T5998] 9pnet_virtio: no channels available for device syz [ 102.033043][ T5916] usb 1-1: unable to read config index 0 descriptor/all [ 102.040187][ T5916] usb 1-1: can't read configurations, error -71 [ 102.378435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.387146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.398400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 102.406807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 103.391186][ T6016] program syz.1.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.485616][ T6019] loop6: detected capacity change from 0 to 524287999 [ 103.922071][ T6021] program syz.1.22 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.978386][ T6021] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 104.440874][ T6027] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.746618][ T6037] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 105.757522][ T6037] overlayfs: failed to set xattr on upper [ 105.763852][ T6037] overlayfs: ...falling back to redirect_dir=nofollow. [ 105.778316][ T6037] overlayfs: ...falling back to index=off. [ 105.966593][ T6040] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26'. [ 109.806364][ T6071] syz.0.39 (6071) used greatest stack depth: 16880 bytes left [ 111.810420][ T5939] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 111.979415][ T5939] usb 1-1: Using ep0 maxpacket: 32 [ 112.035889][ T5939] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 112.062336][ T5939] usb 1-1: config 0 has no interface number 0 [ 112.198866][ T6096] can0: slcan on ttyS3. [ 112.301257][ T6097] capability: warning: `syz.1.47' uses 32-bit capabilities (legacy support in use) [ 112.440282][ T6096] can0 (unregistered): slcan off ttyS3. [ 112.825121][ T5834] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.869416][ T5939] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.886668][ T5939] usb 1-1: config 0 interface 85 has no altsetting 0 [ 112.897453][ T5939] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 112.915523][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.923810][ T5939] usb 1-1: Product: syz [ 112.928286][ T5939] usb 1-1: Manufacturer: syz [ 112.938580][ T5939] usb 1-1: SerialNumber: syz [ 112.946365][ T5939] usb 1-1: config 0 descriptor?? [ 113.004536][ T6105] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.019564][ T5834] usb 3-1: Using ep0 maxpacket: 32 [ 113.035737][ T6105] overlayfs: failed to set xattr on upper [ 113.045954][ T5834] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 113.061934][ T5834] usb 3-1: config 0 has no interface number 0 [ 113.069436][ T6105] overlayfs: ...falling back to redirect_dir=nofollow. [ 113.080179][ T6105] overlayfs: ...falling back to index=off. [ 113.093634][ T5834] usb 3-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 113.113441][ T5834] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.138979][ T5834] usb 3-1: Product: syz [ 113.164154][ T5834] usb 3-1: Manufacturer: syz [ 113.203673][ T5834] usb 3-1: SerialNumber: syz [ 113.270869][ T6110] ntfs3(nullb0): Primary boot signature is not NTFS. [ 113.279062][ T6110] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 113.665840][ T5834] usb 3-1: config 0 descriptor?? [ 113.692433][ T5939] appletouch 1-1:0.85: Geyser mode initialized. [ 113.776744][ T5939] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input5 [ 115.081767][ T5834] mos7840 3-1:0.186: required endpoints missing [ 115.252497][ T5939] usb 1-1: USB disconnect, device number 4 [ 115.273860][ T5834] usb 3-1: USB disconnect, device number 2 [ 116.841633][ T5939] appletouch 1-1:0.85: input: appletouch disconnected [ 117.159417][ T6132] kvm: pic: non byte read [ 117.178549][ T6132] kvm: pic: level sensitive irq not supported [ 117.178658][ T6132] kvm: pic: non byte read [ 117.232066][ T6132] kvm: pic: level sensitive irq not supported [ 117.232141][ T6132] kvm: pic: non byte read [ 117.273697][ T6132] kvm: pic: level sensitive irq not supported [ 117.273778][ T6132] kvm: pic: non byte read [ 117.304332][ T6132] kvm: pic: level sensitive irq not supported [ 117.304410][ T6132] kvm: pic: non byte read [ 117.431435][ T6132] kvm: pic: level sensitive irq not supported [ 117.431509][ T6132] kvm: pic: non byte read [ 117.445880][ T6132] kvm: pic: level sensitive irq not supported [ 117.445940][ T6132] kvm: pic: non byte read [ 117.457138][ T6132] kvm: pic: level sensitive irq not supported [ 117.457193][ T6132] kvm: pic: non byte read [ 117.497984][ T5939] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 117.532036][ T6132] kvm: pic: level sensitive irq not supported [ 117.532109][ T6132] kvm: pic: non byte read [ 117.587533][ T6132] kvm: pic: level sensitive irq not supported [ 117.587605][ T6132] kvm: pic: non byte read [ 117.648526][ T6132] kvm: pic: level sensitive irq not supported [ 117.659600][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 117.696401][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 117.708757][ T5939] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 117.736581][ T5939] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 117.764463][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.71'. [ 117.782801][ T5939] usb 3-1: config 8 has no interface number 0 [ 117.804602][ T5939] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 117.853338][ T5939] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 117.872476][ T5939] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 118.055013][ T5939] usb 3-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.069968][ T979] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.248067][ T979] usb 1-1: Using ep0 maxpacket: 32 [ 118.304778][ T5939] usb 3-1: config 8 interface 206 has no altsetting 0 [ 118.439135][ T979] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 118.749526][ T979] usb 1-1: config 0 has no interface number 0 [ 118.777530][ T979] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 118.811812][ T5939] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 118.821086][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.873846][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.890773][ T979] usb 1-1: Product: syz [ 118.906180][ T979] usb 1-1: Manufacturer: syz [ 118.915721][ T5939] usb 3-1: Product: syz [ 118.926900][ T979] usb 1-1: SerialNumber: syz [ 118.938038][ T5939] usb 3-1: Manufacturer: syz [ 118.942709][ T5939] usb 3-1: SerialNumber: syz [ 118.953554][ T979] usb 1-1: config 0 descriptor?? [ 119.059578][ T6168] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 119.385524][ T979] mos7840 1-1:0.186: required endpoints missing [ 119.407591][ T5939] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 119.427422][ T5939] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 119.443305][ T5939] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 119.485960][ T24] usb 1-1: USB disconnect, device number 5 [ 119.719050][ T5939] usb 3-1: USB disconnect, device number 3 [ 119.729925][ T5939] garmin_gps 3-1:8.206: device disconnected [ 120.185359][ T6181] binder: 6178:6181 ioctl c0306201 200000000540 returned -22 [ 121.828489][ T6203] QAT: failed to copy from user cfg_data. [ 121.997758][ C0] hrtimer: interrupt took 49828 ns [ 122.553891][ T6207] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.174834][ T6223] tipc: Started in network mode [ 123.253947][ T6223] tipc: Node identity 080211, cluster identity 4711 [ 123.414255][ T6223] tipc: Enabled bearer , priority 0 [ 123.651759][ T6228] Zero length message leads to an empty skb [ 124.066781][ T6223] syzkaller0: mtu less than device minimum [ 124.628393][ T5916] tipc: Node number set to 134353152 [ 125.965192][ T6242] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.099063][ T6253] vxfs: WRONG superblock magic 00000000 at 1 [ 127.100946][ T6253] vxfs: WRONG superblock magic 00000000 at 8 [ 127.100992][ T6253] vxfs: can't find superblock. [ 127.246155][ T6250] ceph: No mds server is up or the cluster is laggy [ 127.262324][ T5916] libceph: connect (1)[c::]:6789 error -101 [ 127.626666][ T5916] libceph: mon0 (1)[c::]:6789 connect error [ 128.136263][ T6263] QAT: failed to copy from user cfg_data. [ 129.909900][ T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.108221][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 130.232383][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 130.507805][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 130.564619][ T24] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 130.587136][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.617864][ T849] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.673858][ T24] usb 4-1: Product: syz [ 130.691397][ T24] usb 4-1: Manufacturer: syz [ 130.706294][ T24] usb 4-1: SerialNumber: syz [ 130.724816][ T24] usb 4-1: config 0 descriptor?? [ 130.750298][ T24] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 130.769067][ T6285] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 130.784002][ T6285] overlayfs: failed to set xattr on upper [ 130.790505][ T6285] overlayfs: ...falling back to redirect_dir=nofollow. [ 130.802536][ T6285] overlayfs: ...falling back to index=off. [ 130.822110][ T849] usb 1-1: Using ep0 maxpacket: 8 [ 130.830839][ T849] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 130.835783][ T6287] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 130.863439][ T849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 130.886031][ T849] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 130.895881][ T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.908264][ T849] usb 1-1: Product: syz [ 130.912501][ T849] usb 1-1: Manufacturer: syz [ 130.921023][ T849] usb 1-1: SerialNumber: syz [ 130.931474][ T849] usb 1-1: config 0 descriptor?? [ 130.971151][ T849] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 131.399784][ T6296] 9pnet_virtio: no channels available for device syz [ 131.411038][ T6296] warning: `syz.3.104' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.980738][ T6297] 9pnet_virtio: no channels available for device syz [ 132.119436][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 132.468177][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 132.904808][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 132.988603][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 133.040825][ T5894] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 133.050928][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.061566][ T5894] usb 3-1: Product: syz [ 133.065940][ T5894] usb 3-1: Manufacturer: syz [ 133.071109][ T5894] usb 3-1: SerialNumber: syz [ 133.093154][ T5894] usb 3-1: config 0 descriptor?? [ 133.110711][ T5894] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 133.220656][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227393][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.235652][ T5894] usb 4-1: USB disconnect, device number 3 [ 133.673090][ T6305] 9pnet_virtio: no channels available for device syz [ 135.055499][ T5894] usb 1-1: USB disconnect, device number 6 [ 135.319672][ T6310] overlayfs: missing 'lowerdir' [ 136.391207][ T5894] usb 3-1: USB disconnect, device number 4 [ 137.488988][ T849] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 138.707938][ T849] usb 5-1: device not accepting address 2, error -71 [ 141.527421][ T6340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.122'. [ 142.723754][ T6338] bridge_slave_0: left allmulticast mode [ 142.735064][ T6338] bridge_slave_0: left promiscuous mode [ 142.746410][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.813064][ T6356] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 142.851307][ T6356] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 142.863438][ T6338] bridge_slave_1: left allmulticast mode [ 142.893685][ T6338] bridge_slave_1: left promiscuous mode [ 142.997672][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.082560][ T6338] bond0: (slave bond_slave_0): Releasing backup interface [ 143.158649][ T6338] bond0: (slave bond_slave_1): Releasing backup interface [ 143.179496][ T6338] team0: Port device team_slave_0 removed [ 143.192057][ T6338] team0: Port device team_slave_1 removed [ 143.201521][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.209192][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.220314][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.228193][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.378118][ T5931] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 144.061443][ T5931] usb 2-1: Using ep0 maxpacket: 8 [ 144.170193][ T5931] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 144.259743][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 144.395664][ T5931] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 144.467508][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.521604][ T5931] usb 2-1: Product: syz [ 144.551783][ T6339] team0: Mode changed to "loadbalance" [ 144.576263][ T5931] usb 2-1: Manufacturer: syz [ 144.595793][ T5931] usb 2-1: SerialNumber: syz [ 144.683767][ T5931] usb 2-1: config 0 descriptor?? [ 144.705824][ T5931] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 146.185301][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 146.367015][ T6382] 9pnet_virtio: no channels available for device syz [ 147.116835][ T6386] binder: 6385:6386 ioctl c0306201 200000000540 returned -22 [ 147.362954][ T6393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.135'. [ 148.889868][ T5916] usb 2-1: USB disconnect, device number 2 [ 149.343592][ T6399] input: syz1 as /devices/virtual/input/input6 [ 150.327815][ T5916] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 150.608836][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 151.308252][ T5916] usb 4-1: config 0 has no interface number 0 [ 151.450878][ T5916] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 151.468063][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.476253][ T5916] usb 4-1: Product: syz [ 151.581056][ T5916] usb 4-1: Manufacturer: syz [ 151.585738][ T5916] usb 4-1: SerialNumber: syz [ 151.638957][ T5916] usb 4-1: config 0 descriptor?? [ 152.785567][ T5916] dvb_usb_ec168 4-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 152.973359][ T5916] usb 4-1: USB disconnect, device number 4 [ 153.198177][ T5837] [ 153.200574][ T5837] ============================================ [ 153.206737][ T5837] WARNING: possible recursive locking detected [ 153.212920][ T5837] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 153.219550][ T5837] -------------------------------------------- [ 153.225706][ T5837] syz-executor/5837 is trying to acquire lock: [ 153.231858][ T5837] ffff88807764c8c8 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: rpc_close_pipes+0x10a/0x730 [ 153.242178][ T5837] [ 153.242178][ T5837] but task is already holding lock: [ 153.249549][ T5837] ffff8880776491c8 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 153.260814][ T5837] [ 153.260814][ T5837] other info that might help us debug this: [ 153.268878][ T5837] Possible unsafe locking scenario: [ 153.268878][ T5837] [ 153.276340][ T5837] CPU0 [ 153.279622][ T5837] ---- [ 153.282913][ T5837] lock(&sb->s_type->i_mutex_key#25); [ 153.288395][ T5837] lock(&sb->s_type->i_mutex_key#25); [ 153.293882][ T5837] [ 153.293882][ T5837] *** DEADLOCK *** [ 153.293882][ T5837] [ 153.302126][ T5837] May be due to missing lock nesting notation [ 153.302126][ T5837] [ 153.310464][ T5837] 4 locks held by syz-executor/5837: [ 153.315744][ T5837] #0: ffff88807fad20e0 (&type->s_umount_key#63){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 153.325948][ T5837] #1: ffff88802776d8a0 (&sn->pipefs_sb_lock){+.+.}-{4:4}, at: rpc_kill_sb+0x77/0x190 [ 153.335542][ T5837] #2: ffffffff8f6d0e30 ((rpc_pipefs_notifier_list).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 153.347656][ T5837] #3: ffff8880776491c8 (&sb->s_type->i_mutex_key#25){+.+.}-{4:4}, at: __simple_recursive_removal+0x190/0x510 [ 153.359346][ T5837] [ 153.359346][ T5837] stack backtrace: [ 153.365256][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 153.365276][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.365294][ T5837] Call Trace: [ 153.365302][ T5837] [ 153.365310][ T5837] dump_stack_lvl+0x189/0x250 [ 153.365338][ T5837] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.365362][ T5837] ? __pfx__printk+0x10/0x10 [ 153.365380][ T5837] ? print_lock_name+0xde/0x100 [ 153.365398][ T5837] print_deadlock_bug+0x28b/0x2a0 [ 153.365422][ T5837] validate_chain+0x1a3f/0x2140 [ 153.365455][ T5837] __lock_acquire+0xab9/0xd20 [ 153.365477][ T5837] ? rpc_close_pipes+0x10a/0x730 [ 153.365496][ T5837] lock_acquire+0x120/0x360 [ 153.365514][ T5837] ? rpc_close_pipes+0x10a/0x730 [ 153.365539][ T5837] down_write+0x96/0x1f0 [ 153.365557][ T5837] ? rpc_close_pipes+0x10a/0x730 [ 153.365576][ T5837] ? __pfx_down_write+0x10/0x10 [ 153.365592][ T5837] ? __pfx_find_submount+0x10/0x10 [ 153.365610][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 153.365631][ T5837] ? d_walk+0x6f4/0x780 [ 153.365648][ T5837] rpc_close_pipes+0x10a/0x730 [ 153.365668][ T5837] ? d_invalidate+0x204/0x260 [ 153.365686][ T5837] ? __pfx_rpc_close_pipes+0x10/0x10 [ 153.365707][ T5837] ? up_write+0x1c4/0x420 [ 153.365733][ T5837] ? __pfx_rpc_close_pipes+0x10/0x10 [ 153.365753][ T5837] __simple_recursive_removal+0x20b/0x510 [ 153.365776][ T5837] ? __pfx_rpc_close_pipes+0x10/0x10 [ 153.365797][ T5837] rpc_unlink+0x56/0x80 [ 153.365816][ T5837] rpc_pipefs_event+0xc0/0x170 [ 153.365832][ T5837] notifier_call_chain+0x1b3/0x3e0 [ 153.365859][ T5837] blocking_notifier_call_chain+0x6a/0x90 [ 153.365883][ T5837] rpc_kill_sb+0xd0/0x190 [ 153.365906][ T5837] deactivate_locked_super+0xb9/0x130 [ 153.365926][ T5837] cleanup_mnt+0x425/0x4c0 [ 153.365945][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.365975][ T5837] task_work_run+0x1d1/0x260 [ 153.365993][ T5837] ? __pfx_task_work_run+0x10/0x10 [ 153.366009][ T5837] ? __x64_sys_umount+0x122/0x160 [ 153.366033][ T5837] ? exit_to_user_mode_loop+0x40/0x110 [ 153.366053][ T5837] exit_to_user_mode_loop+0xec/0x110 [ 153.366071][ T5837] do_syscall_64+0x2bd/0x3b0 [ 153.366087][ T5837] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.366110][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.366126][ T5837] ? clear_bhb_loop+0x60/0xb0 [ 153.366144][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.366160][ T5837] RIP: 0033:0x7f2f87d8fc57 [ 153.366180][ T5837] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 153.366194][ T5837] RSP: 002b:00007ffc9cb04bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 153.366212][ T5837] RAX: 0000000000000000 RBX: 00007f2f87e10925 RCX: 00007f2f87d8fc57 [ 153.366223][ T5837] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9cb04c90 [ 153.366233][ T5837] RBP: 00007ffc9cb04c90 R08: 0000000000000000 R09: 0000000000000000 [ 153.366243][ T5837] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9cb05d20 [ 153.366254][ T5837] R13: 00007f2f87e10925 R14: 00000000000254a1 R15: 00007ffc9cb05d60 [ 153.366272][ T5837] [ 154.166973][ T6438] program syz.1.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.228798][ T6440] program syz.1.145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.260890][ T6440] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0