last executing test programs: 15.316702952s ago: executing program 0 (id=63): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(r0, r0) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 11.981211922s ago: executing program 0 (id=67): gettid() syz_open_dev$evdev(0x0, 0xd, 0x10b100) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x4000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_open_dev$usbfs(0x0, 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) 10.494846579s ago: executing program 0 (id=74): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, 0x0, 0x40242, 0x31) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x800, 0x0, 0x0, 0x10}}, 0x50) io_setup(0x202, &(0x7f0000000200)) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ca5000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x10800000000}, {0x0, 0x0, 0x6}], 0x2, 0xbff, 0x38, 0x0, 0x0, 0x40}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000002c0)={0x2c, &(0x7f0000000840)=ANY=[@ANYBLOB="20fc83"], 0x0, 0x0, 0x0, 0x0}, 0x0) 9.00573579s ago: executing program 1 (id=77): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(r0, r0) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 8.513849805s ago: executing program 4 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) ptrace$peeksig(0x4209, r0, 0x0, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000000)=0x1000000010) ioctl$BLKRRPART(r4, 0x125f, 0x0) r5 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x2, 0x2, 0xb, 0x8, 0x100}, 0x20) 8.458190528s ago: executing program 2 (id=81): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000004100)=""/4102, 0x1006}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xbf}], 0x1}}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000000100)}, {&(0x7f00000001c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000000300)=""/248, 0xf8}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x5, &(0x7f00000024c0)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000002980)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000002600)=""/181, 0xb5}, {&(0x7f00000026c0)=""/19, 0x13}, {&(0x7f0000002700)=""/31, 0x1f}, {&(0x7f00000027c0)=""/204, 0xcc}], 0x5, &(0x7f0000002b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002a00)=@abs, 0x6e, &(0x7f0000002740)=[{&(0x7f0000005140)=""/4096, 0x1000}], 0x1, &(0x7f0000002c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x6, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 7.439140683s ago: executing program 4 (id=82): r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(r2, 0x0, 0x222e00, 0x100) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lc\x00', 0x1, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 7.309249336s ago: executing program 3 (id=83): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 6.850672402s ago: executing program 4 (id=84): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x3, r2, 0x0, 0x0, 0x3, &(0x7f0000000300)="132e8f"}) 6.776539976s ago: executing program 3 (id=85): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ptrace$poke(0x4, 0x0, &(0x7f0000000380), 0x917) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYBLOB="55cbd9b2e3f0439be1997e28ea026636f926dd7fbed15dbe745dbad6510dac43146562a1fa93b40d9834cc8c45d1ac5824906c741336e912670ced7eef303449bd7707ee527bc710f4a0c85dc79fd571ab865feb772cc4e0e2504fb8173ef4d6ed46d6d6b8ed2394504fe4cb4b", @ANYRESHEX, @ANYRESOCT=0x0], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) capget(0x0, 0x0) request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000340)='-\xd6\xb7', 0xffffffffffffffff) 6.765612831s ago: executing program 0 (id=86): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x16f}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 5.948934478s ago: executing program 0 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sysfs$3(0x3) 4.744236322s ago: executing program 0 (id=88): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080), 0x7f03) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.743922326s ago: executing program 4 (id=89): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de135771"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.742187884s ago: executing program 2 (id=90): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB="93d9f7255baba7970886c06b31d58b288066", @ANYRES64=0x0], 0x20) 3.742122083s ago: executing program 4 (id=91): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x104, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x1, 0x201, 0x6dc6, 0x7651, 0x5, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r1}, 0x10) lgetxattr(&(0x7f0000000bc0)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00', 0x0, 0xffffffffffffffa4) 3.474930823s ago: executing program 2 (id=92): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f00000006c0)=""/192, &(0x7f0000000140)=""/92, 0x80e3001}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) setitimer(0x1, 0x0, 0x0) getitimer(0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x1, &(0x7f0000000100)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x809, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000180)=[{0x1, 0x3, 0x5, 0x3}], 0x10, 0x18d}, 0x94) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) 3.437229447s ago: executing program 1 (id=93): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r1}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2) 3.153139297s ago: executing program 1 (id=94): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x0, r2, 0x800000, 0x9, 0x80000003, 0x0, 0x2, 0x1, 0xe, 0xd, 0x31e}) 2.045715319s ago: executing program 3 (id=95): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) 1.949279245s ago: executing program 1 (id=96): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r0 = socket$netlink(0x10, 0x3, 0xb) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/230, 0xe6}, {&(0x7f0000000300)=""/212, 0xd4}, {&(0x7f0000000100)=""/51, 0x33}, {&(0x7f0000000140)=""/49, 0x31}, {&(0x7f0000000400)=""/233, 0xe9}, {&(0x7f0000000500)=""/152, 0x98}], 0x6, &(0x7f0000000600)=""/30, 0x1e}, 0x40000140) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000000)={0x8000000, 0xffff7fff}) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000004000100080c10000000000000000000", 0x58}], 0x1) r3 = io_uring_setup(0x4053, 0x0) io_uring_register$IORING_REGISTER_FILES2(r3, 0xd, &(0x7f0000000d40)={0x33, 0x1, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffff00]}, 0x20) r4 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0xd3fc6000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f00000fa000/0x3000)=nil, 0x3000, 0x300001b, 0x4000010, r3, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f00001a7000/0x4000)=nil, 0x4000, 0x3000008, 0x2010, r3, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000680)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x20, 0x4000, @fd=r2, 0x6, 0x0, 0x0, 0x1551b8ee6c503ed7, 0x0, {0x1}}) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000240)={0x8000001, 0x2, 0x4}) r8 = syz_open_dev$vim2m(0x0, 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, 0x0) r9 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r9, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000002000/0x2000)=nil], 0x0, 0x0, 0x2) 1.934699986s ago: executing program 4 (id=97): socket$igmp6(0xa, 0x3, 0x2) r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf32(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x7fffffff, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}]}, 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001240)={0x6a8, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r6}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x94, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x17b}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x4}}, {{0x8, 0x1, r6}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000811) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0) 1.830710576s ago: executing program 2 (id=98): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="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", 0x227}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b", 0x15}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.623553897s ago: executing program 3 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.491491616s ago: executing program 1 (id=100): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 1.327574452s ago: executing program 2 (id=101): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de135771"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.093888904s ago: executing program 3 (id=102): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) socket$netlink(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB=',\x00'/12, @ANYRES32, @ANYBLOB="93d9f7255baba7970886c06b31d58b288066", @ANYRES64=0x0], 0x20) 1.0414587s ago: executing program 1 (id=103): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(r0, r0) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 314.062708ms ago: executing program 2 (id=104): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000040)='./bus/../file0\x00', &(0x7f0000000080), 0x30000, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 0s ago: executing program 3 (id=105): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x4, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x3, 0x1, 0x1, 0x1001, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x4, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xeffffffffffffffe, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0x20000d13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, 0xfffffffffffffffd) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmodat(r3, &(0x7f0000000180)='./file0\x00', 0x22) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000280)={r5, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 79.328082][ T5827] cgroup: Unknown subsys name 'net' [ 79.444508][ T5827] cgroup: Unknown subsys name 'cpuset' [ 79.454244][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.180671][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.677868][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.690318][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.709783][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.718581][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.726970][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.737050][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.747699][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.755323][ T5856] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.762610][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.767938][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.774135][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.782848][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.791092][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.799315][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.807177][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.817974][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.819772][ T5856] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.832631][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.840737][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.850170][ T5160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.858524][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.868271][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.868950][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.889464][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.907349][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.606109][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 84.627107][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 84.883369][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 84.931893][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 85.028837][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 85.057343][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.064822][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.072319][ T5841] bridge_slave_0: entered allmulticast mode [ 85.081850][ T5841] bridge_slave_0: entered promiscuous mode [ 85.129484][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.136861][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.144293][ T5842] bridge_slave_0: entered allmulticast mode [ 85.152239][ T5842] bridge_slave_0: entered promiscuous mode [ 85.162523][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.169973][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.177643][ T5842] bridge_slave_1: entered allmulticast mode [ 85.185836][ T5842] bridge_slave_1: entered promiscuous mode [ 85.195252][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.202640][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.210009][ T5841] bridge_slave_1: entered allmulticast mode [ 85.218225][ T5841] bridge_slave_1: entered promiscuous mode [ 85.410466][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.426300][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.449411][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.457064][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.464711][ T5839] bridge_slave_0: entered allmulticast mode [ 85.472768][ T5839] bridge_slave_0: entered promiscuous mode [ 85.497498][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.511366][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.537498][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.545379][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.553650][ T5852] bridge_slave_0: entered allmulticast mode [ 85.561838][ T5852] bridge_slave_0: entered promiscuous mode [ 85.570823][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.578216][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.585781][ T5839] bridge_slave_1: entered allmulticast mode [ 85.593814][ T5839] bridge_slave_1: entered promiscuous mode [ 85.669346][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.676861][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.684519][ T5852] bridge_slave_1: entered allmulticast mode [ 85.692721][ T5852] bridge_slave_1: entered promiscuous mode [ 85.752161][ T5841] team0: Port device team_slave_0 added [ 85.777484][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.787108][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.794857][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.802247][ T5840] bridge_slave_0: entered allmulticast mode [ 85.810174][ T5840] bridge_slave_0: entered promiscuous mode [ 85.821423][ T5842] team0: Port device team_slave_0 added [ 85.830906][ T5841] team0: Port device team_slave_1 added [ 85.854489][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.864627][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.872580][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.879975][ T5840] bridge_slave_1: entered allmulticast mode [ 85.888766][ T5840] bridge_slave_1: entered promiscuous mode [ 85.894893][ T5844] Bluetooth: hci0: command tx timeout [ 85.920961][ T5842] team0: Port device team_slave_1 added [ 85.946959][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.961679][ T5850] Bluetooth: hci4: command tx timeout [ 85.968079][ T5854] Bluetooth: hci2: command tx timeout [ 85.974562][ T5850] Bluetooth: hci3: command tx timeout [ 85.980908][ T5844] Bluetooth: hci1: command tx timeout [ 86.055437][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.068012][ T5839] team0: Port device team_slave_0 added [ 86.079359][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.104990][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.112190][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.138311][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.153312][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.160393][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.186385][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.214110][ T5839] team0: Port device team_slave_1 added [ 86.225760][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.236684][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.243866][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.270171][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.337859][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.344923][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.371089][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.388741][ T5852] team0: Port device team_slave_0 added [ 86.447218][ T5852] team0: Port device team_slave_1 added [ 86.454874][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.461948][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.488101][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.502736][ T5840] team0: Port device team_slave_0 added [ 86.513621][ T5840] team0: Port device team_slave_1 added [ 86.548668][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.555733][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.581986][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.632489][ T5841] hsr_slave_0: entered promiscuous mode [ 86.639907][ T5841] hsr_slave_1: entered promiscuous mode [ 86.709005][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.716226][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.742416][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.755557][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.762592][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.788644][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.806773][ T5842] hsr_slave_0: entered promiscuous mode [ 86.814117][ T5842] hsr_slave_1: entered promiscuous mode [ 86.821198][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 86.827034][ T5842] Cannot create hsr debugfs directory [ 86.838697][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.845758][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.872287][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.885328][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.892522][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.918851][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.112384][ T5839] hsr_slave_0: entered promiscuous mode [ 87.120006][ T5839] hsr_slave_1: entered promiscuous mode [ 87.132671][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 87.138470][ T5839] Cannot create hsr debugfs directory [ 87.266417][ T5840] hsr_slave_0: entered promiscuous mode [ 87.274345][ T5840] hsr_slave_1: entered promiscuous mode [ 87.281779][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 87.287572][ T5840] Cannot create hsr debugfs directory [ 87.372553][ T5852] hsr_slave_0: entered promiscuous mode [ 87.380883][ T5852] hsr_slave_1: entered promiscuous mode [ 87.388376][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 87.394259][ T5852] Cannot create hsr debugfs directory [ 87.966315][ T5844] Bluetooth: hci0: command tx timeout [ 88.040674][ T5844] Bluetooth: hci2: command tx timeout [ 88.046753][ T5850] Bluetooth: hci4: command tx timeout [ 88.052451][ T5850] Bluetooth: hci1: command tx timeout [ 88.053326][ T5854] Bluetooth: hci3: command tx timeout [ 88.081985][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.109104][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.122995][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.151888][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.235232][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.253568][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.275035][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.289334][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.404327][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.434900][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.448237][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.466701][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.603484][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.634099][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.647096][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.665983][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.798814][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.821205][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.834009][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.858296][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.888970][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.927719][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.957828][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.001837][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.009771][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.046328][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.053684][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.098331][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.150505][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.157767][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.181281][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.216941][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.224143][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.296646][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.383573][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.390820][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.427872][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.435278][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.542386][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.698030][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.712565][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.767354][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.774592][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.823583][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.830912][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.912823][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.932584][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.997974][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.005284][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.053964][ T5854] Bluetooth: hci0: command tx timeout [ 90.087658][ T1346] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.095054][ T1346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.122446][ T5854] Bluetooth: hci3: command tx timeout [ 90.136727][ T5854] Bluetooth: hci1: command tx timeout [ 90.136963][ T5857] Bluetooth: hci2: command tx timeout [ 90.142335][ T5850] Bluetooth: hci4: command tx timeout [ 90.246526][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.323628][ T5842] veth0_vlan: entered promiscuous mode [ 90.388431][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.416938][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.529138][ T5842] veth1_vlan: entered promiscuous mode [ 90.817717][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.842163][ T5839] veth0_vlan: entered promiscuous mode [ 90.885756][ T5842] veth0_macvtap: entered promiscuous mode [ 90.905152][ T5842] veth1_macvtap: entered promiscuous mode [ 90.949013][ T5839] veth1_vlan: entered promiscuous mode [ 91.042452][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.054243][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.091009][ T5840] veth0_vlan: entered promiscuous mode [ 91.108643][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.149488][ T5841] veth0_vlan: entered promiscuous mode [ 91.161773][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.173877][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.197911][ T5839] veth0_macvtap: entered promiscuous mode [ 91.206054][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.216479][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.254474][ T5839] veth1_macvtap: entered promiscuous mode [ 91.268677][ T5841] veth1_vlan: entered promiscuous mode [ 91.277768][ T5840] veth1_vlan: entered promiscuous mode [ 91.408634][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.452579][ T5852] veth0_vlan: entered promiscuous mode [ 91.464550][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.488230][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.495247][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.572725][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.583598][ T5841] veth0_macvtap: entered promiscuous mode [ 91.599225][ T5852] veth1_vlan: entered promiscuous mode [ 91.607024][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.617280][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.633006][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.642196][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.656757][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692744][ T5841] veth1_macvtap: entered promiscuous mode [ 91.726875][ T5840] veth0_macvtap: entered promiscuous mode [ 91.769102][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.807535][ T5840] veth1_macvtap: entered promiscuous mode [ 91.865252][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.121453][ T5857] Bluetooth: hci0: command tx timeout [ 92.200962][ T5857] Bluetooth: hci1: command tx timeout [ 92.201527][ T5854] Bluetooth: hci4: command tx timeout [ 92.212366][ T5857] Bluetooth: hci3: command tx timeout [ 92.212432][ T5857] Bluetooth: hci2: command tx timeout [ 92.374780][ T3197] cfg80211: failed to load regulatory.db [ 92.540885][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.582850][ T5852] veth0_macvtap: entered promiscuous mode [ 92.622459][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.635936][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.650383][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.696505][ T1346] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724496][ T1346] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.754345][ T5852] veth1_macvtap: entered promiscuous mode [ 92.779850][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.801775][ T1346] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.811965][ T1346] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.835414][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.866564][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.874975][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.898645][ T34] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919959][ T34] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.949210][ T34] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.962172][ T5965] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 92.972273][ T5965] kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 92.995450][ T34] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.004261][ T5965] kvm: requested 181028 ns i8254 timer period limited to 200000 ns [ 93.004656][ T5965] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 93.023006][ T5965] kvm: requested 56152 ns i8254 timer period limited to 200000 ns [ 93.037426][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.047391][ T5965] kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 93.060781][ T5965] kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 93.069211][ T5965] kvm: requested 67047 ns i8254 timer period limited to 200000 ns [ 93.097734][ T5965] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 93.105929][ T5965] kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 93.126886][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.222660][ T81] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.241537][ T81] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.309144][ T81] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.339921][ T81] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.392690][ T5927] IPVS: starting estimator thread 0... [ 93.445026][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.471853][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.490279][ T5971] IPVS: using max 35 ests per chain, 84000 per kthread [ 93.758695][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.848172][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.867628][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.968408][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.388050][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.396858][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.139719][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.176962][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.190033][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.223524][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.894932][ T55] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 97.134550][ T55] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 97.167163][ T55] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 97.180834][ T55] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 97.191492][ T55] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 97.225363][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 97.258101][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 97.301605][ T55] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 97.337998][ T55] usb 4-1: string descriptor 0 read error: -22 [ 97.345726][ T55] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 97.356802][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.394988][ T55] usb 4-1: config 0 descriptor?? [ 97.476759][ T55] hub 4-1:0.0: bad descriptor, ignoring hub [ 97.527332][ T55] hub 4-1:0.0: probe with driver hub failed with error -5 [ 97.578602][ T55] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 97.779709][ T55] usb 4-1: USB disconnect, device number 2 [ 97.923830][ T6012] binder: 6011:6012 unknown command 0 [ 97.947814][ T6012] binder: 6011:6012 ioctl c0306201 200000004a40 returned -22 [ 98.470980][ T6026] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20'. [ 98.495305][ T6026] netlink: 68 bytes leftover after parsing attributes in process `syz.3.20'. [ 98.732674][ T6028] mmap: syz.4.18 (6028) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.523113][ T6052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.28'. [ 102.658395][ T6052] Zero length message leads to an empty skb [ 108.646317][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 109.791372][ T6144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.55'. [ 109.821217][ T6140] loop6: detected capacity change from 0 to 7 [ 109.849353][ T6144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.55'. [ 110.776268][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.785828][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.813987][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.823252][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.837306][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.846688][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.855094][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.864335][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.873232][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.882452][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.896606][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.905856][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.916830][ T6140] ldm_validate_partition_table(): Disk read failed. [ 110.919222][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.933256][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.947581][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.956854][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.006545][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.015822][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.028411][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 111.037694][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 111.058274][ T6140] Dev loop6: unable to read RDB block 0 [ 111.091143][ T6140] loop6: unable to read partition table [ 111.116454][ T6140] loop6: partition table beyond EOD, truncated [ 111.169979][ T6140] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 113.517988][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.527313][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.901493][ T5854] Bluetooth: hci0: Unknown advertising packet type: 0x73 [ 113.901711][ T5854] Bluetooth: hci0: Malformed LE Event: 0x0d [ 114.837406][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.943166][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.480014][ T5980] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.518767][ T5980] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.579509][ T5980] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.620032][ T5980] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.692067][ T6195] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.70'. [ 117.730386][ T6197] netlink: 24 bytes leftover after parsing attributes in process `syz.4.69'. [ 117.773093][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.69'. [ 117.972642][ T6201] loop6: detected capacity change from 0 to 7 [ 118.005912][ C0] blk_print_req_error: 10 callbacks suppressed [ 118.005930][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.021390][ C0] buffer_io_error: 10 callbacks suppressed [ 118.021405][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.043140][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.052445][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.090785][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.100426][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.127480][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.136991][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.156542][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.166137][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.176597][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.185930][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.205362][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.215053][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.223275][ T6201] ldm_validate_partition_table(): Disk read failed. [ 118.233715][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.243334][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.252885][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.262175][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.278444][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 118.287715][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 118.297320][ T6201] Dev loop6: unable to read RDB block 0 [ 118.315567][ T6201] loop6: unable to read partition table [ 118.322253][ T6201] loop6: partition table beyond EOD, truncated [ 118.379637][ T6201] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 119.725096][ T5854] Bluetooth: hci3: Unknown advertising packet type: 0x73 [ 119.726961][ T5854] Bluetooth: hci3: Malformed LE Event: 0x0d [ 121.438024][ T55] IPVS: starting estimator thread 0... [ 121.561379][ T6237] IPVS: using max 36 ests per chain, 86400 per kthread [ 122.188298][ T6244] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 124.394592][ T5854] Bluetooth: hci4: Unknown advertising packet type: 0x73 [ 124.394653][ T5854] Bluetooth: hci4: Malformed LE Event: 0x0d [ 125.685131][ T6279] syz.2.92 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.715768][ T6279] ubi31: attaching mtd0 [ 125.740496][ T6279] ubi31: scanning is finished [ 125.745376][ T6279] ubi31: empty MTD device detected [ 126.558803][ T6279] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 127.226391][ T6296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.100'. [ 127.279714][ T6295] netlink: 16 bytes leftover after parsing attributes in process `syz.1.100'. [ 127.881006][ T5854] Bluetooth: hci1: Unknown advertising packet type: 0x73 [ 127.881074][ T5854] Bluetooth: hci1: Malformed LE Event: 0x0d [ 129.153523][ T6314] loop6: detected capacity change from 0 to 7 [ 129.210241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 129.230035][ C0] blk_print_req_error: 10 callbacks suppressed [ 129.236940][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.248076][ C0] buffer_io_error: 10 callbacks suppressed [ 129.248095][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.273584][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.105'. [ 129.474863][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.485885][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.555763][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.565270][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.614109][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.623427][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.655046][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.665506][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.681579][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.690942][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.744784][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.754455][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.762613][ T6314] ldm_validate_partition_table(): Disk read failed. [ 129.779967][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.789264][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.839117][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.848531][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.864037][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 129.874358][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 129.897164][ T6314] Dev loop6: unable to read RDB block 0 [ 129.912917][ T6314] loop6: unable to read partition table [ 129.921271][ T6314] loop6: partition table beyond EOD, truncated [ 129.928909][ T6314] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 129.960519][ T6290] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 129.972664][ T6290] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 129.981266][ T6290] CPU: 0 UID: 0 PID: 6290 Comm: syz.4.97 Not tainted syzkaller #0 PREEMPT(full) [ 129.990417][ T6290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 130.000543][ T6290] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 130.006256][ T6290] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 130.026450][ T6290] RSP: 0018:ffffc90005a2f9a0 EFLAGS: 00010006 [ 130.032580][ T6290] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 130.041027][ T6290] RDX: 1ffff92000b45f40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 130.049126][ T6290] RBP: ffffc90005a2faa0 R08: 0000000000000003 R09: 0000000000000004 [ 130.057144][ T6290] R10: dffffc0000000000 R11: fffff52000b45f50 R12: 0000000000000000 [ 130.065171][ T6290] R13: ffff88801b094150 R14: 0000000000000018 R15: ffffc90005a2fc20 [ 130.073277][ T6290] FS: 000055555ef51500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 130.082265][ T6290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.088902][ T6290] CR2: 000020000000e038 CR3: 0000000078016000 CR4: 00000000003526f0 [ 130.097111][ T6290] Call Trace: [ 130.100460][ T6290] [ 130.103442][ T6290] ? __lock_acquire+0x6b5/0x2cf0 [ 130.108725][ T6290] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 130.114076][ T6290] ? do_raw_spin_lock+0x12b/0x2f0 [ 130.119186][ T6290] rwsem_del_wake_waiter+0x25d/0x2e0 [ 130.124560][ T6290] rwsem_down_write_slowpath+0xa6f/0x1080 [ 130.130351][ T6290] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 130.136334][ T6290] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 130.142562][ T6290] ? futex_wake+0x4ac/0x580 [ 130.147119][ T6290] ? __pfx_futex_wait+0x10/0x10 [ 130.152028][ T6290] ? vm_mmap_pgoff+0x234/0x4f0 [ 130.156846][ T6290] down_write_killable+0x1eb/0x240 [ 130.162014][ T6290] ? __pfx_down_write_killable+0x10/0x10 [ 130.167701][ T6290] ? apparmor_mmap_file+0x197/0x3e0 [ 130.172958][ T6290] ? security_mmap_file+0x4df/0xa20 [ 130.178214][ T6290] vm_mmap_pgoff+0x234/0x4f0 [ 130.182862][ T6290] ? __se_sys_futex+0x3a8/0x450 [ 130.187752][ T6290] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 130.192905][ T6290] ? __pfx___se_sys_futex+0x10/0x10 [ 130.198151][ T6290] ? rcu_is_watching+0x15/0xb0 [ 130.202959][ T6290] ? ksys_mmap_pgoff+0xf3/0x760 [ 130.207856][ T6290] ? __x64_sys_mmap+0x7f/0x140 [ 130.212683][ T6290] do_syscall_64+0x14d/0xf80 [ 130.217324][ T6290] ? trace_irq_disable+0x3b/0x150 [ 130.222497][ T6290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.228624][ T6290] ? clear_bhb_loop+0x40/0x90 [ 130.233361][ T6290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.239403][ T6290] RIP: 0033:0x7fb597d9c502 [ 130.243888][ T6290] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 130.264031][ T6290] RSP: 002b:00007ffc6f6b4fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 130.272502][ T6290] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb597d9c502 [ 130.280672][ T6290] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 130.288797][ T6290] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 130.298820][ T6290] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc6f6b5140 [ 130.306837][ T6290] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 130.314872][ T6290] [ 130.318034][ T6290] Modules linked in: [ 130.322079][ T6290] ---[ end trace 0000000000000000 ]--- [ 130.327616][ T6290] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 130.333340][ T6290] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 130.353788][ T6290] RSP: 0018:ffffc90005a2f9a0 EFLAGS: 00010006 [ 130.360262][ T6290] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 130.368368][ T6290] RDX: 1ffff92000b45f40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 130.376569][ T6290] RBP: ffffc90005a2faa0 R08: 0000000000000003 R09: 0000000000000004 [ 130.384776][ T6290] R10: dffffc0000000000 R11: fffff52000b45f50 R12: 0000000000000000 [ 130.392887][ T6290] R13: ffff88801b094150 R14: 0000000000000018 R15: ffffc90005a2fc20 [ 130.400989][ T6290] FS: 000055555ef51500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 130.410226][ T6290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.416866][ T6290] CR2: 000020000000e038 CR3: 0000000078016000 CR4: 00000000003526f0 [ 130.424906][ T6290] Kernel panic - not syncing: Fatal exception [ 130.431931][ T6290] Kernel Offset: disabled [ 130.436533][ T6290] Rebooting in 86400 seconds..