last executing test programs: 6.595341159s ago: executing program 1 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) 6.593872879s ago: executing program 3 (id=70): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r6, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e000000d3008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800400121fe248d68ae2b2f37f154ec343b0e1f41f60b7abd39bfc0337ce66e8", 0x49}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x3f00, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r10, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 5.280604179s ago: executing program 1 (id=71): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r4, &(0x7f0000009940)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006c80)=""/214, 0xd6}], 0x1, &(0x7f0000006dc0)=""/142, 0x8e}, 0x3}], 0x3, 0x1, 0x0) 5.195943914s ago: executing program 2 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, r1, 0x303, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.873730784s ago: executing program 0 (id=73): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.669632591s ago: executing program 0 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x202, 0x1, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.586649931s ago: executing program 2 (id=75): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x60, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_POLICE={0x4}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x24048084) 3.622184544s ago: executing program 2 (id=76): r0 = syz_io_uring_setup(0x463d, &(0x7f0000000480)={0x0, 0xb6c6, 0x800, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000100)={0x0, r0, 0x34, {0x1, 0x7f}, 0x8}, 0x1) 3.620731923s ago: executing program 4 (id=77): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9cb]}, 0x8) read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 3.351597137s ago: executing program 0 (id=78): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) 2.692293483s ago: executing program 4 (id=79): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x28fe, &(0x7f0000000580)={0x0, 0x0, 0x80, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x11, &(0x7f00000002c0), 0x2) 2.514661693s ago: executing program 3 (id=80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="d2cf4071eedf8b7b757a8a7286590f3b2b73e4d6501d0dcc9ade7118283ba63b6a59c5d5b4171e791290e0ed52580ccb12807717e072cf88cfb3c53a48a6dbff03000000000000c3540370d05aadfd82ee3d47b93dc852cea8715c826bf5c6b35e41f12c3e8347784e01e2e8666080b9d0f0461cc15d5724ba4ac41a7de92272a0c00dd240c18e9a6b2e", 0x8a}, {&(0x7f0000002440)="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", 0x1b7}], 0x2}}], 0x1, 0x4002000) r1 = dup(r0) shutdown(r1, 0x1) 2.441086066s ago: executing program 4 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) 2.362375554s ago: executing program 2 (id=82): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020}, 0x2020) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000"], 0x0) 2.290658095s ago: executing program 3 (id=83): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=alw']) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000140), 0x80800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.629259238s ago: executing program 1 (id=84): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='?!\x00@', @ANYBLOB="100028bd7000fbdbdf250800000008000600040000000800050019010000240002800800070087420000080003000200000006000e004e22000006000e"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x24000054) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 1.474415869s ago: executing program 1 (id=85): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) pselect6(0x40, &(0x7f00000001c0)={0x1ff, 0x9, 0x2283, 0x0, 0x71, 0x0, 0x100000001, 0xffffffffffffff42}, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1.470065613s ago: executing program 4 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x60, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x10, 0x2, [@TCA_FLOW_POLICE={0x4}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0xffff}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x24048084) 1.395709493s ago: executing program 2 (id=87): bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.394849118s ago: executing program 0 (id=88): r0 = socket$nl_route(0x10, 0x3, 0x0) pwritev2(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e489bcdd", 0x4}], 0x1, 0xfffffffc, 0xb, 0x2) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 1.27625314s ago: executing program 1 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 1.270813409s ago: executing program 3 (id=90): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r1, 0x0, 0x1}, 0x18) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc9cb]}, 0x8) read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.243878726s ago: executing program 0 (id=91): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x28fe, &(0x7f0000000580)={0x0, 0x0, 0x80, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x11, &(0x7f00000002c0), 0x2) 1.174627067s ago: executing program 1 (id=92): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 1.171859873s ago: executing program 4 (id=93): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x1) 1.087916805s ago: executing program 0 (id=94): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmmsg(r3, &(0x7f0000009940)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000006c80)=""/214, 0xd6}], 0x1, &(0x7f0000006dc0)=""/142, 0x8e}, 0x3}], 0x3, 0x1, 0x0) 363.036334ms ago: executing program 3 (id=95): sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='?!\x00@', @ANYBLOB="100028bd7000fbdbdf250800000008000600040000000800050019010000240002800800070087420000080003000200000006000e004e22000006000e"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x24000054) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 202.499695ms ago: executing program 4 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) 176.096315ms ago: executing program 3 (id=97): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020}, 0x2020) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000"], 0x0) 0s ago: executing program 2 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000020000003400128009000100626f6e640000000024000280080003000400040005000600000000000b000f00ffff"], 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 65.080814][ T5847] cgroup: Unknown subsys name 'net' [ 65.212261][ T5847] cgroup: Unknown subsys name 'cpuset' [ 65.219710][ T5847] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.550034][ T5847] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.749760][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.756843][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.764353][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.771608][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.778864][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.786012][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.799473][ T5876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.811728][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.819014][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.819102][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.829441][ T5876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.834141][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.841707][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.855557][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.856105][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.869908][ T5878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.877354][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.885555][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.886379][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.893023][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.913287][ T5877] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.920524][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.928216][ T5877] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.946323][ T5867] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.954838][ T5867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.182402][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 69.239030][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 69.362769][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.370100][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.377435][ T5865] bridge_slave_0: entered allmulticast mode [ 69.384204][ T5865] bridge_slave_0: entered promiscuous mode [ 69.393794][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.402082][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.409507][ T5865] bridge_slave_1: entered allmulticast mode [ 69.416373][ T5865] bridge_slave_1: entered promiscuous mode [ 69.423213][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 69.512296][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.522316][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.530686][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.537822][ T5857] bridge_slave_0: entered allmulticast mode [ 69.545163][ T5857] bridge_slave_0: entered promiscuous mode [ 69.552327][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.560118][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.567408][ T5857] bridge_slave_1: entered allmulticast mode [ 69.574167][ T5857] bridge_slave_1: entered promiscuous mode [ 69.605499][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.615169][ T5873] chnl_net:caif_netlink_parms(): no params data found [ 69.641439][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.664310][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 69.674763][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.698280][ T5865] team0: Port device team_slave_0 added [ 69.727470][ T5865] team0: Port device team_slave_1 added [ 69.751472][ T5857] team0: Port device team_slave_0 added [ 69.780590][ T5857] team0: Port device team_slave_1 added [ 69.786494][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.793737][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.801772][ T5869] bridge_slave_0: entered allmulticast mode [ 69.808247][ T5869] bridge_slave_0: entered promiscuous mode [ 69.821374][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.828351][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.854729][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.880119][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.887743][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.895382][ T5869] bridge_slave_1: entered allmulticast mode [ 69.902086][ T5869] bridge_slave_1: entered promiscuous mode [ 69.915530][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.922860][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.949096][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.960314][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.967279][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.993384][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.023894][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.031054][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.057475][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.099901][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.109077][ T5873] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.116546][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.125115][ T5873] bridge_slave_0: entered allmulticast mode [ 70.131861][ T5873] bridge_slave_0: entered promiscuous mode [ 70.139112][ T5873] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.146387][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.153719][ T5873] bridge_slave_1: entered allmulticast mode [ 70.160990][ T5873] bridge_slave_1: entered promiscuous mode [ 70.167539][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.175171][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.182633][ T5860] bridge_slave_0: entered allmulticast mode [ 70.189143][ T5860] bridge_slave_0: entered promiscuous mode [ 70.198087][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.237288][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.244495][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.251722][ T5860] bridge_slave_1: entered allmulticast mode [ 70.258341][ T5860] bridge_slave_1: entered promiscuous mode [ 70.286158][ T5873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.303381][ T5869] team0: Port device team_slave_0 added [ 70.320135][ T5865] hsr_slave_0: entered promiscuous mode [ 70.326207][ T5865] hsr_slave_1: entered promiscuous mode [ 70.340740][ T5873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.359156][ T5869] team0: Port device team_slave_1 added [ 70.366999][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.378650][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.391615][ T5857] hsr_slave_0: entered promiscuous mode [ 70.398275][ T5857] hsr_slave_1: entered promiscuous mode [ 70.404729][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 70.410588][ T5857] Cannot create hsr debugfs directory [ 70.444184][ T5860] team0: Port device team_slave_0 added [ 70.451158][ T5873] team0: Port device team_slave_0 added [ 70.483444][ T5860] team0: Port device team_slave_1 added [ 70.490590][ T5873] team0: Port device team_slave_1 added [ 70.496766][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.505007][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.531168][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.565113][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.572531][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.598864][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.642894][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.650037][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.676618][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.688034][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.695399][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.721783][ T5873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.733856][ T5873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.740918][ T5873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.766916][ T5873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.784220][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.791397][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.817358][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.881934][ T5869] hsr_slave_0: entered promiscuous mode [ 70.887941][ T5869] hsr_slave_1: entered promiscuous mode [ 70.894174][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 70.899961][ T5869] Cannot create hsr debugfs directory [ 70.919418][ T5867] Bluetooth: hci2: command tx timeout [ 70.979132][ T5873] hsr_slave_0: entered promiscuous mode [ 70.985505][ T5873] hsr_slave_1: entered promiscuous mode [ 70.991199][ T5185] Bluetooth: hci3: command tx timeout [ 70.991230][ T5185] Bluetooth: hci0: command tx timeout [ 70.991524][ T5867] Bluetooth: hci4: command tx timeout [ 71.000113][ T5867] Bluetooth: hci1: command tx timeout [ 71.003325][ T5873] debugfs: 'hsr0' already exists in 'hsr' [ 71.019195][ T5873] Cannot create hsr debugfs directory [ 71.030773][ T5860] hsr_slave_0: entered promiscuous mode [ 71.036928][ T5860] hsr_slave_1: entered promiscuous mode [ 71.043049][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 71.048788][ T5860] Cannot create hsr debugfs directory [ 71.154505][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.177911][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.201047][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.213029][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.291131][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.300237][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.318111][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.328879][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.379264][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.402294][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.417352][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.426318][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.472869][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.474627][ T5873] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.479205][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.507568][ T5873] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.517440][ T5873] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.527335][ T5873] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.571469][ T5860] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.582962][ T5860] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.602528][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.613996][ T5860] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.638296][ T5860] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.658209][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.689223][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.707611][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.714810][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.724244][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.731430][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.763479][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.781572][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.788709][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.822611][ T5873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.844800][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.851896][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.872694][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.937519][ T5873] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.954117][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.967260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.974402][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.004620][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.011785][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.030801][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.037957][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.086620][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.106173][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.113374][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.155399][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.183511][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.190677][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.203594][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.210759][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.234923][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.297011][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.387483][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.459087][ T5865] veth0_vlan: entered promiscuous mode [ 72.469002][ T5857] veth0_vlan: entered promiscuous mode [ 72.488248][ T5865] veth1_vlan: entered promiscuous mode [ 72.515044][ T5857] veth1_vlan: entered promiscuous mode [ 72.541966][ T5865] veth0_macvtap: entered promiscuous mode [ 72.554607][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.567442][ T5865] veth1_macvtap: entered promiscuous mode [ 72.607088][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.621289][ T5857] veth0_macvtap: entered promiscuous mode [ 72.644265][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.658637][ T5873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.681633][ T5857] veth1_macvtap: entered promiscuous mode [ 72.711878][ T3562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.722612][ T3562] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.743589][ T3562] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.753501][ T3562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.778681][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.808980][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.846258][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.857704][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.868436][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.904485][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.925911][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.935741][ T5873] veth0_vlan: entered promiscuous mode [ 72.951405][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.962215][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.989053][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.997212][ T5867] Bluetooth: hci2: command tx timeout [ 73.007037][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.039952][ T5873] veth1_vlan: entered promiscuous mode [ 73.059013][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.081051][ T5866] Bluetooth: hci4: command tx timeout [ 73.081225][ T5860] veth0_vlan: entered promiscuous mode [ 73.086479][ T5866] Bluetooth: hci0: command tx timeout [ 73.097607][ T5185] Bluetooth: hci3: command tx timeout [ 73.101050][ T5860] veth1_vlan: entered promiscuous mode [ 73.103513][ T5867] Bluetooth: hci1: command tx timeout [ 73.139421][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.163482][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.187815][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.195979][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.199112][ T5976] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4'. [ 73.221807][ T5873] veth0_macvtap: entered promiscuous mode [ 73.248070][ T5873] veth1_macvtap: entered promiscuous mode [ 73.265161][ T5869] veth0_vlan: entered promiscuous mode [ 73.292869][ T5860] veth0_macvtap: entered promiscuous mode [ 73.304971][ T5869] veth1_vlan: entered promiscuous mode [ 73.335950][ T5860] veth1_macvtap: entered promiscuous mode [ 73.346691][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.361134][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.375519][ T5873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.383657][ T5978] loop3: detected capacity change from 0 to 4096 [ 73.398978][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.410790][ T1157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.421470][ T1157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.438540][ T5980] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 73.452222][ T5980] netlink: 'syz.0.1': attribute type 29 has an invalid length. [ 73.460697][ T5980] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.472778][ T5980] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.478746][ T30] audit: type=1800 audit(1755662111.130:2): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 73.484169][ T5981] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 73.511292][ T5981] netlink: 'syz.0.1': attribute type 29 has an invalid length. [ 73.519858][ T5981] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.528746][ T5981] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1'. [ 73.539984][ T5981] Zero length message leads to an empty skb [ 73.557339][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.566428][ T1157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.579892][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.605124][ T30] audit: type=1804 audit(1755662111.260:3): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6" name="/newroot/1/file1/bus" dev="loop3" ino=34 res=1 errno=0 [ 73.619433][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.644109][ T5869] veth0_macvtap: entered promiscuous mode [ 73.699627][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.713263][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.726546][ T5869] veth1_macvtap: entered promiscuous mode [ 73.762162][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.815093][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.837764][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.941827][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.957581][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.973251][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.982438][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.996173][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.013035][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.021926][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035885][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.076134][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.086437][ T5992] loop3: detected capacity change from 0 to 512 [ 74.088797][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.102026][ T5992] ======================================================= [ 74.102026][ T5992] WARNING: The mand mount option has been deprecated and [ 74.102026][ T5992] and is ignored by this kernel. Remove the mand [ 74.102026][ T5992] option from the mount to silence this warning. [ 74.102026][ T5992] ======================================================= [ 74.158633][ T5992] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.175921][ T5992] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.214838][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.259353][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.292180][ T5996] overlayfs: failed to resolve './bus': -2 [ 74.350424][ T5992] EXT4-fs (loop3): 1 truncate cleaned up [ 74.365611][ T5992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.425735][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.550498][ T6001] netlink: 'syz.1.12': attribute type 12 has an invalid length. [ 74.628945][ T6001] netlink: 'syz.1.12': attribute type 29 has an invalid length. [ 74.648874][ T6001] netlink: 148 bytes leftover after parsing attributes in process `syz.1.12'. [ 74.661251][ T6001] netlink: 39 bytes leftover after parsing attributes in process `syz.1.12'. [ 74.924994][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.926806][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.994638][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.011745][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.070596][ T5867] Bluetooth: hci2: command tx timeout [ 75.150026][ T5867] Bluetooth: hci1: command tx timeout [ 75.155479][ T5867] Bluetooth: hci0: command tx timeout [ 75.161431][ T5866] Bluetooth: hci3: command tx timeout [ 75.166955][ T5866] Bluetooth: hci4: command tx timeout [ 75.175898][ T6012] netlink: 'syz.2.15': attribute type 12 has an invalid length. [ 75.193095][ T6012] netlink: 'syz.2.15': attribute type 29 has an invalid length. [ 75.201458][ T6012] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15'. [ 75.211916][ T6012] netlink: 31 bytes leftover after parsing attributes in process `syz.2.15'. [ 75.222385][ T6012] netlink: 'syz.2.15': attribute type 12 has an invalid length. [ 75.231514][ T6012] netlink: 'syz.2.15': attribute type 29 has an invalid length. [ 75.243847][ T6012] netlink: 148 bytes leftover after parsing attributes in process `syz.2.15'. [ 75.256484][ T5867] Bluetooth: hci2: unexpected event 0x09 length: 4 > 3 [ 75.420869][ T6026] syz_tun: entered promiscuous mode [ 75.437613][ T6026] macvtap1: entered promiscuous mode [ 75.445546][ T6026] macvtap1: entered allmulticast mode [ 75.451931][ T6026] syz_tun: entered allmulticast mode [ 75.581485][ T6038] mmap: syz.1.27 (6038) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.659542][ T6037] loop3: detected capacity change from 0 to 4096 [ 75.713218][ T6037] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 75.759364][ T6037] ntfs3(loop3): volume is dirty and "force" flag is not set! [ 75.827054][ T6045] loop2: detected capacity change from 0 to 4096 [ 75.834866][ T6047] syz.3.26 uses obsolete (PF_INET,SOCK_PACKET) [ 75.843383][ T6037] can: request_module (can-proto-0) failed. [ 75.853297][ T6045] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 76.435458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.219452][ T5867] Bluetooth: hci2: command tx timeout [ 77.247195][ T30] audit: type=1800 audit(1755662114.900:4): pid=6053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.30" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 77.333311][ T5867] Bluetooth: hci0: command tx timeout [ 77.338816][ T5867] Bluetooth: hci3: command tx timeout [ 77.339417][ T5866] Bluetooth: hci4: command tx timeout [ 77.344286][ T5867] Bluetooth: hci1: command tx timeout [ 78.212083][ T6088] loop4: detected capacity change from 0 to 2048 [ 78.230922][ T6088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.050515][ T5924] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 79.061079][ T6097] loop0: detected capacity change from 0 to 4096 [ 79.078813][ T6097] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 79.145906][ T6101] loop4: detected capacity change from 0 to 2048 [ 79.230758][ T6102] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.250071][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.272041][ T6101] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0 [ 79.297980][ T5924] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 79.299701][ T6101] Remounting filesystem read-only [ 79.533823][ T5924] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 79.546376][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.631854][ T6101] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0 [ 79.800990][ T6101] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0 [ 79.817902][ T6101] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0 [ 79.847522][ T5924] usb 3-1: config 0 descriptor?? [ 79.849140][ T6101] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0 [ 79.878342][ T5924] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 79.911819][ T5924] dvb-usb: bulk message failed: -22 (3/0) [ 79.965992][ T5924] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 80.005242][ T5924] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 80.046142][ T5924] usb 3-1: media controller created [ 80.091438][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.132582][ T6110] validate_nla: 5 callbacks suppressed [ 80.132600][ T6110] netlink: 'syz.4.51': attribute type 12 has an invalid length. [ 80.147833][ T6110] netlink: 'syz.4.51': attribute type 29 has an invalid length. [ 80.161064][ T6110] __nla_validate_parse: 9 callbacks suppressed [ 80.161235][ T6110] netlink: 148 bytes leftover after parsing attributes in process `syz.4.51'. [ 80.183894][ T6110] netlink: 39 bytes leftover after parsing attributes in process `syz.4.51'. [ 80.218199][ T5924] dvb-usb: bulk message failed: -22 (6/0) [ 80.239384][ T5924] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 80.291471][ T5924] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 80.369717][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.369731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.370956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.541988][ T6116] loop4: detected capacity change from 0 to 64 [ 80.544184][ T5924] dvb-usb: schedule remote query interval to 150 msecs. [ 80.566958][ T5924] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 80.582250][ T5924] usb 3-1: USB disconnect, device number 2 [ 80.634043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.736544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.868711][ T5924] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 81.074705][ T6130] loop2: detected capacity change from 0 to 512 [ 81.266151][ T6138] loop3: detected capacity change from 0 to 2048 [ 81.383897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.555519][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.658011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.866056][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.66'. [ 81.876397][ T6138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.928874][ T6141] loop2: detected capacity change from 0 to 4096 [ 81.935450][ T6149] vxlan0: entered promiscuous mode [ 81.989039][ T6141] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 82.024778][ T6149] vxlan0: entered allmulticast mode [ 82.076453][ T2993] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.113476][ T2993] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.165369][ T2993] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.238434][ T2993] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.828724][ T69] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 82.863270][ T69] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 36 with error 28 [ 83.000645][ T69] EXT4-fs (loop3): This should not happen!! Data will be lost [ 83.000645][ T69] [ 83.024339][ T69] EXT4-fs (loop3): Total free blocks count 0 [ 83.030552][ T69] EXT4-fs (loop3): Free/Dirty block details [ 83.193733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.713861][ T69] EXT4-fs (loop3): free_blocks=2415919504 [ 83.726716][ T69] EXT4-fs (loop3): dirty_blocks=48 [ 83.734065][ T69] EXT4-fs (loop3): Block reservation details [ 83.875881][ T69] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 83.997548][ T5865] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.811250][ T6178] tipc: Started in network mode [ 84.836972][ T6178] tipc: Node identity cef728f0c6f3, cluster identity 4711 [ 84.850341][ T6178] tipc: Enabled bearer , priority 0 [ 84.894261][ T6184] bridge_slave_0: left allmulticast mode [ 84.903004][ T6184] bridge_slave_0: left promiscuous mode [ 84.928557][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.971205][ T6184] bridge_slave_1: left allmulticast mode [ 84.976921][ T6184] bridge_slave_1: left promiscuous mode [ 84.982917][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.990966][ T5867] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 84.999630][ T5867] Bluetooth: hci3: Injecting HCI hardware error event [ 85.006667][ T5867] Bluetooth: hci3: hardware error 0x00 [ 85.030498][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 85.044341][ T6184] bond0: (slave bond_slave_0): Releasing backup interface [ 85.062450][ T6184] bond0: (slave bond_slave_1): Releasing backup interface [ 85.083294][ T6184] team0: Port device team_slave_0 removed [ 85.102620][ T6184] team0: Port device team_slave_1 removed [ 85.114117][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.131152][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.143544][ T6184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.151283][ T6184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.184675][ T6178] syzkaller0: entered promiscuous mode [ 85.192326][ T6178] syzkaller0: entered allmulticast mode [ 85.218461][ T6186] team0: Mode changed to "loadbalance" [ 85.407834][ T6177] tipc: Resetting bearer [ 85.457379][ T6177] tipc: Disabling bearer [ 86.616695][ T6217] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.242142][ T5867] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 87.270227][ T93] cfg80211: failed to load regulatory.db [ 87.296823][ T6226] netlink: 'syz.1.84': attribute type 12 has an invalid length. [ 87.314606][ T6226] netlink: 'syz.1.84': attribute type 29 has an invalid length. [ 87.342331][ T6226] netlink: 148 bytes leftover after parsing attributes in process `syz.1.84'. [ 87.357936][ T6226] netlink: 39 bytes leftover after parsing attributes in process `syz.1.84'. [ 87.512157][ T6230] binder: BINDER_SET_CONTEXT_MGR already set [ 87.518229][ T6230] binder: 6229:6230 ioctl 4018620d 200000004a80 returned -16 [ 87.574264][ T6234] netlink: 136 bytes leftover after parsing attributes in process `syz.0.88'. [ 87.929570][ T5973] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.094643][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.119680][ T5973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.131980][ T5973] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 88.143205][ T5973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.163963][ T5973] usb 2-1: config 0 descriptor?? [ 88.881763][ T5973] usb 2-1: language id specifier not provided by device, defaulting to English [ 88.929917][ T6261] netlink: 'syz.2.98': attribute type 15 has an invalid length. [ 88.937880][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.98'. [ 88.950644][ T6261] bond0: option resend_igmp: invalid value (65535) [ 88.960332][ T6261] bond0: option resend_igmp: allowed values 0 - 255 [ 89.101206][ T49] ------------[ cut here ]------------ [ 89.106785][ T49] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 89.315861][ T49] WARNING: ./include/net/netdev_lock.h:72 at __linkwatch_sync_dev+0x303/0x350, CPU#1: kworker/u8:3/49 [ 89.327564][ T49] Modules linked in: [ 89.331577][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 89.341484][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.352098][ T49] Workqueue: bond0 bond_mii_monitor [ 89.357347][ T49] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 89.363404][ T49] Code: 7c fe ff ff e8 2e 87 50 f8 c6 05 77 a9 3e 06 01 90 48 c7 c7 60 b4 b4 8c 48 c7 c6 96 14 c0 8d ba 48 00 00 00 e8 8e 2a 14 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 89.383482][ T49] RSP: 0018:ffffc90000b97670 EFLAGS: 00010246 [ 89.389766][ T49] RAX: 45dc39af60093900 RBX: ffff888058d56000 RCX: ffff8880226d9e00 [ 89.398109][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 89.406254][ T49] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 89.414775][ T49] R10: dffffc0000000000 R11: fffffbfff1c3a1ec R12: 1ffff1100b1aac5d [ 89.422995][ T49] R13: dffffc0000000000 R14: ffffffff8c3cd348 R15: 0000000000000000 [ 89.431061][ T49] FS: 0000000000000000(0000) GS:ffff888125b08000(0000) knlGS:0000000000000000 [ 89.440640][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.447261][ T49] CR2: 0000001b3301dff8 CR3: 000000007ce40000 CR4: 00000000003526f0 [ 89.456029][ T49] Call Trace: [ 89.459383][ T49] [ 89.462385][ T49] ? ethtool_op_get_link+0xd/0x70 [ 89.467446][ T49] ethtool_op_get_link+0x15/0x70 [ 89.472511][ T49] bond_check_dev_link+0x444/0x6c0 [ 89.477662][ T49] ? finish_task_switch+0x266/0x950 [ 89.482949][ T49] ? __pfx_bond_check_dev_link+0x10/0x10 [ 89.488719][ T49] ? rcu_is_watching+0x15/0xb0 [ 89.493577][ T49] ? lock_acquire+0x5f/0x360 [ 89.498203][ T49] ? rcu_read_lock_held+0xa/0x50 [ 89.503243][ T49] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 89.509818][ T49] bond_mii_monitor+0x428/0x2e00 [ 89.514787][ T49] ? psi_group_change+0xab8/0x1050 [ 89.519984][ T49] ? bond_mii_monitor+0x153/0x2e00 [ 89.525126][ T49] ? __pfx___schedule+0x10/0x10 [ 89.530072][ T49] ? rcu_is_watching+0x15/0xb0 [ 89.534955][ T49] ? __pfx_bond_mii_monitor+0x10/0x10 [ 89.540391][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 89.546120][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 89.552644][ T49] ? preempt_schedule+0xae/0xc0 [ 89.557538][ T49] ? preempt_schedule_common+0x83/0xd0 [ 89.563072][ T49] ? preempt_schedule+0xae/0xc0 [ 89.567945][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 89.573892][ T49] ? rcu_is_watching+0x15/0xb0 [ 89.578694][ T49] ? lock_acquire+0x5f/0x360 [ 89.583380][ T49] ? preempt_schedule_thunk+0x16/0x30 [ 89.588775][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 89.594679][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 89.600703][ T49] process_scheduled_works+0xae1/0x17b0 [ 89.606535][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 89.612713][ T49] worker_thread+0x8a0/0xda0 [ 89.617347][ T49] kthread+0x70e/0x8a0 [ 89.621482][ T49] ? __pfx_worker_thread+0x10/0x10 [ 89.626612][ T49] ? __pfx_kthread+0x10/0x10 [ 89.631278][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 89.636603][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.641914][ T49] ? __pfx_kthread+0x10/0x10 [ 89.646987][ T49] ret_from_fork+0x3f9/0x770 [ 89.652088][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 89.657259][ T49] ? __switch_to_asm+0x39/0x70 [ 89.662066][ T49] ? __switch_to_asm+0x33/0x70 [ 89.666848][ T49] ? __pfx_kthread+0x10/0x10 [ 89.671494][ T49] ret_from_fork_asm+0x1a/0x30 [ 89.676315][ T49] [ 89.679403][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.686706][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 89.696025][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 89.706075][ T49] Workqueue: bond0 bond_mii_monitor [ 89.711310][ T49] Call Trace: [ 89.714606][ T49] [ 89.717542][ T49] dump_stack_lvl+0x99/0x250 [ 89.722149][ T49] ? __asan_memcpy+0x40/0x70 [ 89.726736][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.732027][ T49] ? __pfx__printk+0x10/0x10 [ 89.736619][ T49] vpanic+0x281/0x750 [ 89.740609][ T49] ? __pfx__printk+0x10/0x10 [ 89.745308][ T49] ? __pfx_vpanic+0x10/0x10 [ 89.749821][ T49] ? is_bpf_text_address+0x292/0x2b0 [ 89.755109][ T49] ? is_bpf_text_address+0x26/0x2b0 [ 89.760341][ T49] panic+0xb9/0xc0 [ 89.764089][ T49] ? __pfx_panic+0x10/0x10 [ 89.768622][ T49] __warn+0x334/0x4c0 [ 89.772601][ T49] ? __linkwatch_sync_dev+0x303/0x350 [ 89.777979][ T49] ? __linkwatch_sync_dev+0x303/0x350 [ 89.783350][ T49] report_bug+0x2be/0x4f0 [ 89.787680][ T49] ? __linkwatch_sync_dev+0x303/0x350 [ 89.793140][ T49] ? __linkwatch_sync_dev+0x303/0x350 [ 89.798523][ T49] ? __linkwatch_sync_dev+0x305/0x350 [ 89.803904][ T49] handle_bug+0x84/0x160 [ 89.808153][ T49] exc_invalid_op+0x1a/0x50 [ 89.812664][ T49] asm_exc_invalid_op+0x1a/0x20 [ 89.817516][ T49] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 89.823500][ T49] Code: 7c fe ff ff e8 2e 87 50 f8 c6 05 77 a9 3e 06 01 90 48 c7 c7 60 b4 b4 8c 48 c7 c6 96 14 c0 8d ba 48 00 00 00 e8 8e 2a 14 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 89.843105][ T49] RSP: 0018:ffffc90000b97670 EFLAGS: 00010246 [ 89.849184][ T49] RAX: 45dc39af60093900 RBX: ffff888058d56000 RCX: ffff8880226d9e00 [ 89.857157][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 89.865134][ T49] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 89.873284][ T49] R10: dffffc0000000000 R11: fffffbfff1c3a1ec R12: 1ffff1100b1aac5d [ 89.881262][ T49] R13: dffffc0000000000 R14: ffffffff8c3cd348 R15: 0000000000000000 [ 89.889252][ T49] ? ethtool_op_get_link+0xd/0x70 [ 89.894329][ T49] ethtool_op_get_link+0x15/0x70 [ 89.899307][ T49] bond_check_dev_link+0x444/0x6c0 [ 89.904451][ T49] ? finish_task_switch+0x266/0x950 [ 89.909660][ T49] ? __pfx_bond_check_dev_link+0x10/0x10 [ 89.915297][ T49] ? rcu_is_watching+0x15/0xb0 [ 89.920060][ T49] ? lock_acquire+0x5f/0x360 [ 89.924676][ T49] ? rcu_read_lock_held+0xa/0x50 [ 89.929784][ T49] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 89.936203][ T49] bond_mii_monitor+0x428/0x2e00 [ 89.941138][ T49] ? psi_group_change+0xab8/0x1050 [ 89.946249][ T49] ? bond_mii_monitor+0x153/0x2e00 [ 89.951365][ T49] ? __pfx___schedule+0x10/0x10 [ 89.956226][ T49] ? rcu_is_watching+0x15/0xb0 [ 89.960995][ T49] ? __pfx_bond_mii_monitor+0x10/0x10 [ 89.966433][ T49] ? do_raw_spin_unlock+0x122/0x240 [ 89.971640][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 89.977649][ T49] ? preempt_schedule+0xae/0xc0 [ 89.982501][ T49] ? preempt_schedule_common+0x83/0xd0 [ 89.987962][ T49] ? preempt_schedule+0xae/0xc0 [ 89.992817][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 89.998536][ T49] ? rcu_is_watching+0x15/0xb0 [ 90.003297][ T49] ? lock_acquire+0x5f/0x360 [ 90.007895][ T49] ? preempt_schedule_thunk+0x16/0x30 [ 90.013351][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 90.019075][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 90.024795][ T49] process_scheduled_works+0xae1/0x17b0 [ 90.030351][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 90.036357][ T49] worker_thread+0x8a0/0xda0 [ 90.040965][ T49] kthread+0x70e/0x8a0 [ 90.045129][ T49] ? __pfx_worker_thread+0x10/0x10 [ 90.050330][ T49] ? __pfx_kthread+0x10/0x10 [ 90.055015][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.060218][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 90.065423][ T49] ? __pfx_kthread+0x10/0x10 [ 90.070036][ T49] ret_from_fork+0x3f9/0x770 [ 90.074630][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 90.079746][ T49] ? __switch_to_asm+0x39/0x70 [ 90.084515][ T49] ? __switch_to_asm+0x33/0x70 [ 90.089289][ T49] ? __pfx_kthread+0x10/0x10 [ 90.093894][ T49] ret_from_fork_asm+0x1a/0x30 [ 90.098755][ T49] [ 90.101919][ T49] Kernel Offset: disabled [ 90.106242][ T49] Rebooting in 86400 seconds..