last executing test programs: 2m51.362949545s ago: executing program 3 (id=9): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/c1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000001c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/c1/comms/1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000300)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/c1/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)="020000007f00000100"/128, 0x80) 2m50.210388093s ago: executing program 0 (id=11): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000980)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r4 = syz_io_uring_setup(0x800f00, &(0x7f0000000140)={0x0, 0x3, 0x810, 0x0, 0x40055}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x10000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r5, 0xc008644e, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x8277ba97fbbb0af0, &(0x7f0000000040), 0x0) 2m47.872002209s ago: executing program 3 (id=13): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x92eda4082f935ab3}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6164696e6963622c6e6f7374726963742c6d6f64653d30300030303030303030303030b7a130303068303030342c7569643d666f726754742c6e6f6164696e69d4fe2c756d61736b3d30bc3030060000000000000030303034303030323030302c6c617374726c6f636b3d30303030303030303030303030303030303031332c756eb77b6c6574652c70619c746974696f6e3d303030303830303030303030303030303030303505eba6ae15bfbe90e5f5d5d90aea08280068a228214313c7db8efb74a8c7a30e8bc291d6e93e0d40c1272acda59360ccde27abe29c73ed7312b5f838eb8bff0f84bc3c89a8a79e39a8c520544b8a4174c69b98849c74ee0471e33a2648814f53577e6d0437705a40ce8e033f78747cf5e858aec11bb7240a97de01d88a207b4520a7289db7e3cf3170c67cc1af0200000000000000000000006d95d7bea12a20216dfa4d781d77706b0ea701ec4eddc03768663dea20f4a919d93ef79423ec6962eccc48c759cbfd87245403469c72255c2617c320036aa3f6f669e11226503d7707fd3789789fa1a92ab639014cbc78ee03fdb0e0208b2f40e2b90f1627", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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") creat(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000001540)='2', 0xfdef, 0xe7c) 2m46.549513251s ago: executing program 3 (id=15): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x109681, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000080)="72f70b67bbb8fbb6f9ff486627d6c331ed4b9e08a95e4c15bc5db5609412b7bdc661a9f9c37a7dad8ff53f53ddac96745521ba9eb7e8486990fbc948b0a86eb372365a45dfa3f5c5111e7a522627f110f16c597e85012adfde2db9c63775747719c78946a3faf1eb7921774442aad78f", 0x70}, {&(0x7f0000000740)="0c7547ed166791f0df96a20a193e89ffe4dda942", 0x14}], 0x2) 2m44.995104419s ago: executing program 3 (id=16): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x92eda4082f935ab3}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r4, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$eJzs3V1sXOlZB/DnnWOvHW9pvd0220K3jFTURi6J8tXEVVDldF1DpTRb1XFhr+rxR9LROnZkOzRboDKggsRNxd4gbpBFWYHUC65YLnHpIrVCSKjqRblAskS72gsufFEJAdpOdc68Y48dJ/Em64/s/n4r7//MmeeM34/xmWMpr08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGf/dzl02fSYbcCADhIV8e/dPpcinAJAADvHtf8/g8AAAAAAAAAAAAAAEddiiKOR4qBVzfSZGwtA+y/0py/fWdidGz3w46lSFGLoqovv/rPnD13/lMXLg538v7Hv90+HM+PX7tcf27h5q3F2aWl2Zn6xHxzemFmds+v8KjH7zRUDUD95ou3Z65fX6qfPXVu29N3Bl/ve/L44KWLJy8Md2onRsfGxrtqenof+rvf5V4rPJ6IIhqR4s3BN1IjImrx6GPxgPfOfjtWdWKo6sTE6FjVkblmY365fDLVclUtot510EhnjA5gLh7JSMRK2fyywUNl98ZvNRYbU3Oz9S82Fpeby82F+VRrt7bsTz1qMZwiViNive/ul+uNIj4aKV4+vZGmIqLojMMnq4XBD25PbR/6uAdlO+u9Eau1x2DOjrC+KOJqpPjZaydiuhyz/BUfj/hCma9GvFLmZyJS+cY4H/HTXd5HPJ56ooh/ixQLaSPNVOeDznnlypfrn5+/vtBV2zmvPPafDwfpiJ+b+qOIqeqMv5Ee/mIHAAAAAAAAAAAAAAAAgLfbsSji25Hij5/93WpdcVTr0t93afg9L/xm95rxZx7wOmXtqYhYqe1tTW5vXjqcauV/D938337oI6n0RxHfyOv//vCwGwMAAAAAAAAAAAAAAAAAAPCuVsQLkeIrJ0+k1ei+p3hz/kb9WmNqrn1X2M69fzv3TG+1Wq16audIzsmcKzlXc67lXM8ZtXx8zpGckzlXcq7mXMu5njOKfHzOkZyTOVdyruZcy7meM3ry8TlHck7mXMm5mnMt53rOOCL37gUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeCepRRE/jxTf+tpGihQRIxGT0c61vsNuHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ6k9FnIoUay/0V49XaxHXIuLnrVar+vrfVqsVsVFuP6rD7isAAAAAAAAAAAAAAAAAAAAcWamIj0WKp/9vI9Uj4s7g631PHh+8dPHkheEiikhlSXf98+PXLtefW7h5a3F2aWl2pj4x35xemJnd67frv9Kcv31nYnRsXzrzQMf2uf3H+p9buPXSYvPGV5d3fX6g//LU0vJiY3r3p+NY1CImu/cMVQ2eGB2rGj3XbMxXh6baPRpYixjZa2cAAAAAAAAAAAAAAAAAAAA4MgZSEZ+LFD/5z/Ops268p73m/5faj4rN2ld+f+tvAcztyI7uvx+wl+2014YOVQvv6xOjY2PjXbt7eu8uLduUUhHPRIpPvPyhaj18ioFd18aXde8t626ez3WDv1LWrWyr6h+aGB2rX12YP3l5bm5hurHcmJqbrY/fakzv+Q8HAAAAAAAAAAAAAAAAAAAAwH0MpCJ+FCn+++/+PXXuO5/X//e0H3Wt//+Nagl9pT9tz03V2v73Vmv729vvuzQ88NFn77V/P9b/l21KqYhvRopzP/pQdT/9zvr/yR21Zd2fRoo3nv1Irqs9UdY1Ot1pv+L15tzs6bL2ryLFr77ZqY2q9kaufXqr9kxZeyxS/MXG9tqv5toPbNWeLWtPRIrv/dfutR/cqj1X1v4kUvzj39Y7tQNl7e/l2uNbtaemF+ZmHjSs5fx/J1L8zdXfSp0+33P+u/7+w8qO3HTXnN9/++2a/8GufSt5Xv8kz3/jAfN/IVJ8p/8jua499lP5+aeq/2/N/ycixX/86/ba67n2/Vu1Z/barcNWzv+3I8V3//LHm33O859HdmuGuuf/l3u25+a75JDm/6mufYO5XdNvcSzejZZe+vqLjbm52UUb99nIb/I4Ku2xYWO/Nw75xMSBKD///yxS/P/xInWuY/Ln/3vaj7au//7nG1uf/5d25KZD+vx/f9e+S/mqpbcnon/55q3eZyL6l176+snmzcaN2Ruz82fPnP70py+cOX3mQu8TnYu7ra09j907QTn/P4gUP/z7H27+HrP9+m/36/+BHbnpkOb/6e4+bbuu2fNQvCuV8//XkeKpz/548/fN+13/d37/P/Gx7bn583dI8/+Brn2DuV3NtzgWAAAAAAAAAAAAj5OBVMSfR4rf+aNfT501RHv5938zO3LTIf37r+Nd+2YOaF3DngcZAOAIKa//Phgp/qn1/c213Nuv/+LXOrXd13/3chTu/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+7FEX8QaQYeHUjrfWVj9v6rzTnb9+ZGB3b/bBjKVLUoqjqy6/+M2fPnf/UhYvDnbzSd5Dd+HA8P37tcv25hZu3FmeXlmZn6hPzzemFmdk9v8KjHr/TUDWA9Zsv3p65fn2pfvbUufb+VjvuDL7e9+TxwUsXT14Y7tROjI6NjXe9RE/vQ3/3u6R77H8iivh+pHhz8I303b6IWjz6WDzgvbPfjlWdGKo6MTE6VnVkrtmYXy6fTLVcVYuodx000hmjA5iLRzISsVI2v2zwUNm98VuNxcbU3Gz9i43F5eZyc2E+1dqtLftTj1oMp4jViFjf5UeyN4r4ZqR4+fRG+ue+iKIzDp+8Ov6l0+ce3J7aPvRxD8p21nsjVmuPwZwdYX1RxD9Eip+9diK+1xfRE+2v+HjEF8p8NeKVMj8Tkco3xvmInx7oqZ391BNFnI8UC2kjvdZXng8655UrX65/fv76Qldt57zy2H8+HKQjfm7qjyJ+UJ3xN9K/7Pi5Lg6rUQAAAAAAAAAAAAAAAABUq7xWI8VXTp5I1frgzTXFzfkb9WuNqbn2sr7O2r/OmulWq9Wqp3aO5JzMuZJzNedazvWcUcvH5xzJOZlzJedqzrWc6zmjyMfnHMk5mXMl52rOtZzrOaMnH59zJOdkzpWcqznXcq7njCOydg8AAAAAAAAAAAAAAAAAAHhnqUVR3cX9W1/bSK2+9v2lJ6Oda+7z+473iwAAAP//u01xPQ==") creat(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000001540)='2', 0xfdef, 0xe7c) 2m44.894415161s ago: executing program 0 (id=17): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 2m43.781815338s ago: executing program 0 (id=18): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = memfd_create(&(0x7f0000000500)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000700), 0xfdef) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) splice(r4, 0x0, r3, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2200002, &(0x7f00000007c0)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000e40)='./bus\x00', 0x0, 0x8, &(0x7f0000000ec0)) chdir(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x842, 0x40) fallocate(r6, 0x0, 0x8e14, 0x8ffff) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb) symlink(0x0, 0x0) socket(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="18080000000000000000000000000000851008000600000018000000", @ANYRES32, @ANYBLOB="b843df62e8286ebc28992cd8af7bcee78d692fbb27bce9ada6cc8646d6b066b0462e1c57551ab792fb225f111cad6d27ffde272a019fe3530d5cced0940333d63ab8021c9d022d669d939ec951cdd6c4b8607ffdb6f91a083fb45a76ab84c1f47c68f2641af6b9cb2e2e8bfd3af4c7f7dc6611b1d7c980046f733f06eeb9c48e66b10c145d8d174b2dbe5383db327e39838e4c4b5b4107b1cd581237d8b7c5ae338463f3eadbd7ac35dd50376b64e4fff600f33ee198b5c2110ac176c60a4149307624aaceb97246ceca577979507f1e54dd972b219494f51a98ffcda0124e23aa25b2ce93f51afc38ae3872bacb7edfe0b2dac8e1ffc87778"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdf, &(0x7f0000000340)=""/223}, 0x94) 2m40.517223676s ago: executing program 3 (id=20): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000032680)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbmon(&(0x7f0000032800), 0x6, 0x200) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000032940)={0x0, 0x0, &(0x7f0000032980)={&(0x7f00000329c0)=ANY=[], 0x74}}, 0x0) bind$inet(r4, 0x0, 0x0) 2m38.600915443s ago: executing program 3 (id=23): syz_open_procfs$namespace(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x90, &(0x7f0000000400)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xda9, &(0x7f0000000880)="$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") syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001640)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000001680)={{0x0, 0x0, 0x40, 0x5, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0x6b}, {&(0x7f0000001700)=[0x20], 0x1, 0x8, 0x1, 0x20004}, {0x0, 0x0, 0x28, 0x0, 0xfffffffffffffff7}, {&(0x7f0000001740)=[0xd], 0x1, 0x8, 0x98f, 0xa4}}) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m38.514882735s ago: executing program 0 (id=24): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x109681, 0x0) writev(r0, &(0x7f0000000900)=[{&(0x7f0000000080)="72f70b67bbb8fbb6f9ff486627d6c331ed4b9e08a95e4c15bc5db5609412b7bdc661a9f9c37a7dad8ff53f53ddac96745521ba9eb7e8486990fbc948b0a86eb372365a45dfa3f5c5111e7a522627f110f16c597e85012adfde2db9c63775747719c78946a3faf1eb7921774442aad78ff78ad43063c1f373", 0x78}, {&(0x7f0000000740)="0c7547ed166791f0df96a20a193e89ffe4dda942", 0x14}], 0x2) 2m37.094226559s ago: executing program 0 (id=27): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x92eda4082f935ab3}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r3, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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") creat(0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000001540)='2', 0xfdef, 0xe7c) 2m35.40865706s ago: executing program 0 (id=29): syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x2e1c11, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f0000000340), 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') pread64(r3, &(0x7f0000000500)=""/92, 0x5c, 0x4000000000000f3) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40c0) timer_settime(0x0, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) acct(&(0x7f00000006c0)='./file0\x00') 2m21.976814784s ago: executing program 32 (id=23): syz_open_procfs$namespace(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000280)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000000c0)='1', 0x1) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x90, &(0x7f0000000400)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xda9, &(0x7f0000000880)="$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") syz_open_dev$loop(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001640)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000001680)={{0x0, 0x0, 0x40, 0x5, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0x6b}, {&(0x7f0000001700)=[0x20], 0x1, 0x8, 0x1, 0x20004}, {0x0, 0x0, 0x28, 0x0, 0xfffffffffffffff7}, {&(0x7f0000001740)=[0xd], 0x1, 0x8, 0x98f, 0xa4}}) fchdir(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m19.978833522s ago: executing program 33 (id=29): syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0x2e1c11, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) syz_io_uring_setup(0x31c5, 0x0, &(0x7f0000000340), 0x0, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x3c5f, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip_vs\x00') pread64(r3, &(0x7f0000000500)=""/92, 0x5c, 0x4000000000000f3) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40c0) timer_settime(0x0, 0x1, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) acct(&(0x7f00000006c0)='./file0\x00') 24.100936178s ago: executing program 5 (id=178): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000980)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r4 = syz_io_uring_setup(0x800f00, &(0x7f0000000140)={0x0, 0x3, 0x810, 0x0, 0x40055}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x10000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r5, 0xc008644e, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x8277ba97fbbb0af0, &(0x7f0000000040)="0bbb268dd6ffa80800030000000000000000210d000061052ddaecaaa8fa017242ba9380d4c2454c40fe000000d5679a6bd254b00dc1b23d6d80865774d79c8fa82cf4bc6f9c807bb7fc1bc84aec5eedf8d59a7380c844e21be7de57a337f978f62bb1b4bc0ef501aa1b598e", 0x6c) 22.203043904s ago: executing program 5 (id=176): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000032680)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbmon(&(0x7f0000032800), 0x6, 0x200) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000032940)={0x0, 0x0, &(0x7f0000032980)={&(0x7f00000329c0)=ANY=[], 0x74}}, 0x0) bind$inet(r4, 0x0, 0x0) 16.112126791s ago: executing program 2 (id=182): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) 15.113543355s ago: executing program 5 (id=185): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000980)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r4 = syz_io_uring_setup(0x800f00, &(0x7f0000000140)={0x0, 0x3, 0x810, 0x0, 0x40055}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x10000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r5, 0xc008644e, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x8277ba97fbbb0af0, &(0x7f0000000040)="0bbb268dd6ffa80800030000000000000000210d000061052ddaecaaa8fa017242ba9380d4c2454c40fe000000d5679a6bd254b00dc1b23d6d80865774d79c8fa82cf4bc6f9c807bb7fc1bc84aec5eedf8d59a7380c844e21be7de57a337f978f62bb1b4bc0ef501aa1b598e", 0x6c) 14.948663089s ago: executing program 2 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='environ\x00') mount(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000300)='ecryptfs\x00', 0x0, &(0x7f0000000340)='ecryptfs_sig=0123456789abcdef,ecryptfs_cipher=aes,ecryptfs_key_bytes=16,ecryptfs_passthrough\x00') 14.938693379s ago: executing program 1 (id=188): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 14.517297619s ago: executing program 4 (id=189): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = memfd_create(&(0x7f0000000500)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000700), 0xfdef) splice(r4, 0x0, r3, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2200002, &(0x7f00000007c0)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000e40)='./bus\x00', 0x0, 0x8, &(0x7f0000000ec0)) chdir(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x842, 0x40) fallocate(r6, 0x0, 0x8e14, 0x8ffff) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb) syz_mount_image$vfat(&(0x7f0000000f80), &(0x7f0000000fc0)='./file1\x00', 0x3194444, 0x0, 0x1, 0x0, &(0x7f0000001000)) symlink(0x0, 0x0) socket(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="18080000000000000000000000000000851008000600000018000000", @ANYRES32, @ANYBLOB="b843df62e8286ebc28992cd8af7bcee78d692fbb27bce9ada6cc8646d6b066b0462e1c57551ab792fb225f111cad6d27ffde272a019fe3530d5cced0940333d63ab8021c9d022d669d939ec951cdd6c4b8607ffdb6f91a083fb45a76ab84c1f47c68f2641af6b9cb2e2e8bfd3af4c7f7dc6611b1d7c980046f733f06eeb9c48e66b10c145d8d174b2dbe5383db327e39838e4c4b5b4107b1cd581237d8b7c5ae338463f3eadbd7ac35dd50376b64e4fff600f33ee198b5c2110ac176c60a4149307624aaceb97246ceca577979507f1e54dd972b219494f51a98ffcda0124e23aa25b2ce93f51afc38ae3872bacb7edfe0b2dac8e1ffc87778"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdf, &(0x7f0000000340)=""/223}, 0x94) 11.853785024s ago: executing program 4 (id=190): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = memfd_create(&(0x7f0000000500)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000700), 0xfdef) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) splice(r4, 0x0, r3, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2200002, &(0x7f00000007c0)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x180) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x842, 0x40) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb) syz_mount_image$vfat(&(0x7f0000000f80), &(0x7f0000000fc0)='./file1\x00', 0x3194444, 0x0, 0x1, 0x0, &(0x7f0000001000)) symlink(0x0, 0x0) socket(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="18080000000000000000000000000000851008000600000018000000", @ANYRES32, @ANYBLOB="b843df62e8286ebc28992cd8af7bcee78d692fbb27bce9ada6cc8646d6b066b0462e1c57551ab792fb225f111cad6d27ffde272a019fe3530d5cced0940333d63ab8021c9d022d669d939ec951cdd6c4b8607ffdb6f91a083fb45a76ab84c1f47c68f2641af6b9cb2e2e8bfd3af4c7f7dc6611b1d7c980046f733f06eeb9c48e66b10c145d8d174b2dbe5383db327e39838e4c4b5b4107b1cd581237d8b7c5ae338463f3eadbd7ac35dd50376b64e4fff600f33ee198b5c2110ac176c60a4149307624aaceb97246ceca577979507f1e54dd972b219494f51a98ffcda0124e23aa25b2ce93f51afc38ae3872bacb7edfe0b2dac8e1ffc87778"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdf, &(0x7f0000000340)=""/223}, 0x94) 10.020940878s ago: executing program 2 (id=191): mkdirat(0xffffffffffffff9c, 0x0, 0x120) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000012c0)={0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 8.913948974s ago: executing program 4 (id=192): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000500)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000800)=@filename='./dev/sda1\x00', &(0x7f0000000880)='./mnt\x00', &(0x7f00000008c0)='ext4\x00', 0x8410, 0x0) setxattr$system_posix_acl(&(0x7f0000000900)='./mnt\x00', &(0x7f0000000940)='system.posix_acl_default\x00', &(0x7f0000000980)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x4}, {0x20, 0x5}}, 0x24, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x0, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) sendmmsg$inet(r2, &(0x7f0000019080)=[{{&(0x7f0000019100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x8014) connect$unix(r0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xc, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r4, 0x5, 0xe, 0x0, &(0x7f0000000600)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r5, &(0x7f00000194c0)=""/102367, 0x18fdf, 0x200) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x3, @local}, 0x10) 8.804340697s ago: executing program 2 (id=193): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000032680)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbmon(&(0x7f0000032800), 0x6, 0x200) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000032940)={0x0, 0x0, &(0x7f0000032980)={&(0x7f00000329c0)=ANY=[], 0x74}}, 0x0) bind$inet(r4, 0x0, 0x0) 8.801957047s ago: executing program 1 (id=194): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) r5 = socket$inet_udp(0x2, 0x2, 0x0) getrlimit(0xd, 0x0) sendto$inet(r5, &(0x7f0000000500)="1234", 0x4, 0x0, &(0x7f0000000580)={0x2, 0x1234, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00004ad000/0x1000)=nil, 0x1000, 0xa, 0x2010, r2, 0xbe9f9000) 7.644868715s ago: executing program 1 (id=195): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x28}, 0x1, 0x0, 0x0, 0x92eda4082f935ab3}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000440)={0x81, 0x1178}) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) syz_open_procfs$namespace(0x0, &(0x7f00000004c0)='ns/cgroup\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000540), 0x2, 0x141102) writev(r0, &(0x7f0000000580)=[{&(0x7f00000005c0)="94", 0xf000}, {0x0}], 0x2) sched_setscheduler(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) bind$inet6(r3, &(0x7f0000001b00)={0xa, 0xe22, 0x3, @empty, 0xffffffff}, 0x1c) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) shutdown(r4, 0x0) syz_mount_image$udf(&(0x7f0000000680), &(0x7f00000006c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESHEX], 0x47, 0xc2b, &(0x7f00000008c0)="$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") creat(0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./file1\x00', 0x101042, 0x15) pwrite64(r5, &(0x7f0000001540)='2', 0xfdef, 0xe7c) 7.643047165s ago: executing program 5 (id=203): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000900)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0xa}, {0xf}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000980)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r4 = syz_io_uring_setup(0x800f00, &(0x7f0000000140)={0x0, 0x3, 0x810, 0x0, 0x40055}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x10000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_SET_USER_MMIO_OFFSET(r5, 0xc008644e, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000380)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x8277ba97fbbb0af0, &(0x7f0000000040)="0bbb268dd6ffa80800030000000000000000210d000061052ddaecaaa8fa017242ba9380d4c2454c40fe000000d5679a6bd254b00dc1b23d6d80865774d79c8fa82cf4bc6f9c807bb7fc1bc84aec5eedf8d59a7380c844e21be7de57a337f978f62bb1b4bc0ef501aa1b598ec3756dcf", 0x70) 5.450648178s ago: executing program 2 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000340)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x14000, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) fchmodat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x17f) syz_mount_image$fuse(&(0x7f0000000b00), &(0x7f0000000b40)='./file0\x00', 0xa0, &(0x7f0000000b80)=ANY=[], 0x1, 0x0, 0x0) mkdir(&(0x7f0000000c40)='./cgroup/../file0\x00', 0x1fc) 5.406235019s ago: executing program 4 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4000000000001a2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x4a51, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 4.803205864s ago: executing program 4 (id=198): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) 4.613226388s ago: executing program 1 (id=199): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = memfd_create(&(0x7f0000000500)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000700), 0xfdef) splice(r4, 0x0, r3, 0x0, 0x4010d00, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x2200002, &(0x7f00000007c0)={[{@discard}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@noauto_da_alloc}]}, 0x1, 0x572, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x180) mount$overlay(0x0, &(0x7f0000000e40)='./bus\x00', 0x0, 0x8, &(0x7f0000000ec0)) chdir(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x842, 0x40) fallocate(r6, 0x0, 0x8e14, 0x8ffff) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb) syz_mount_image$vfat(&(0x7f0000000f80), &(0x7f0000000fc0)='./file1\x00', 0x3194444, 0x0, 0x1, 0x0, &(0x7f0000001000)) symlink(0x0, 0x0) socket(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="18080000000000000000000000000000851008000600000018000000", @ANYRES32, @ANYBLOB="b843df62e8286ebc28992cd8af7bcee78d692fbb27bce9ada6cc8646d6b066b0462e1c57551ab792fb225f111cad6d27ffde272a019fe3530d5cced0940333d63ab8021c9d022d669d939ec951cdd6c4b8607ffdb6f91a083fb45a76ab84c1f47c68f2641af6b9cb2e2e8bfd3af4c7f7dc6611b1d7c980046f733f06eeb9c48e66b10c145d8d174b2dbe5383db327e39838e4c4b5b4107b1cd581237d8b7c5ae338463f3eadbd7ac35dd50376b64e4fff600f33ee198b5c2110ac176c60a4149307624aaceb97246ceca577979507f1e54dd972b219494f51a98ffcda0124e23aa25b2ce93f51afc38ae3872bacb7edfe0b2dac8e1ffc87778"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdf, &(0x7f0000000340)=""/223}, 0x94) 2.085686989s ago: executing program 5 (id=200): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) unshare(0x4000400) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000005c0)) syz_open_dev$vim2m(&(0x7f0000000600), 0x800, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x800, 0x2) r2 = syz_open_dev$video(&(0x7f00000006c0), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000700)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000740)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 2.085280529s ago: executing program 2 (id=201): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x80002c1, 0x2, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil) r3 = memfd_create(&(0x7f0000000500)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000700), 0xfdef) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x86, 0x4) splice(r4, 0x0, r3, 0x0, 0x4010d00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./proc\x00', 0x180) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file1\x00', 0x842, 0x40) openat(0xffffffffffffff9c, 0x0, 0x42042, 0x1cb) syz_mount_image$vfat(&(0x7f0000000f80), &(0x7f0000000fc0)='./file1\x00', 0x3194444, 0x0, 0x1, 0x0, &(0x7f0000001000)) symlink(0x0, 0x0) socket(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000001000)=ANY=[@ANYBLOB="18080000000000000000000000000000851008000600000018000000", @ANYRES32, @ANYBLOB="b843df62e8286ebc28992cd8af7bcee78d692fbb27bce9ada6cc8646d6b066b0462e1c57551ab792fb225f111cad6d27ffde272a019fe3530d5cced0940333d63ab8021c9d022d669d939ec951cdd6c4b8607ffdb6f91a083fb45a76ab84c1f47c68f2641af6b9cb2e2e8bfd3af4c7f7dc6611b1d7c980046f733f06eeb9c48e66b10c145d8d174b2dbe5383db327e39838e4c4b5b4107b1cd581237d8b7c5ae338463f3eadbd7ac35dd50376b64e4fff600f33ee198b5c2110ac176c60a4149307624aaceb97246ceca577979507f1e54dd972b219494f51a98ffcda0124e23aa25b2ce93f51afc38ae3872bacb7edfe0b2dac8e1ffc87778"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdf, &(0x7f0000000340)=""/223}, 0x94) 2.085007869s ago: executing program 4 (id=202): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 2.008318681s ago: executing program 1 (id=204): mkdirat(0xffffffffffffff9c, 0x0, 0x120) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000012c0)={0x0, 0x0, 0x0}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000240)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 1.734580467s ago: executing program 5 (id=205): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000032680)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbmon(&(0x7f0000032800), 0x6, 0x200) landlock_restrict_self(0xffffffffffffffff, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000032940)={0x0, 0x0, &(0x7f0000032980)={&(0x7f00000329c0)=ANY=[], 0x74}}, 0x0) bind$inet(r4, 0x0, 0x0) 0s ago: executing program 1 (id=206): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x20, 0x0, 0x7, 0x401, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2f0, 0xffffffff, 0xa8, 0xa8, 0x0, 0xffffffff, 0xffffffff, 0x258, 0x258, 0x258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @empty, 0xffffff00, 0xff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {}, 0x1, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x3}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'team_slave_0\x00', 'team0\x00', {0xff}, {}, 0x62, 0x3, 0xc}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz0\x00', 0x3}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x3, 0x2, 0x0, 0x4], 0x1, 0x3}, {0x0, [0x6, 0x5, 0x6, 0x0, 0x5], 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x350) r5 = socket$inet_udp(0x2, 0x2, 0x0) getrlimit(0xd, 0x0) sendto$inet(r5, &(0x7f0000000500)="1234", 0x4, 0x0, &(0x7f0000000580)={0x2, 0x1234, @loopback}, 0x10) mmap(&(0x7f00004ad000/0x1000)=nil, 0x1000, 0xa, 0x2010, r2, 0xbe9f9000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.6' (ED25519) to the list of known hosts. syzkaller login: [ 82.098542][ T5761] cgroup: Unknown subsys name 'net' [ 82.240880][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.922717][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.549735][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.558570][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.571910][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.580182][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.592457][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.599870][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.652510][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.660928][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.669795][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.678075][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.686281][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.702217][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.771334][ T5773] (null): rxe_set_mtu: Set mtu to 1024 [ 85.790068][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.791576][ T5776] (null): rxe_set_mtu: Set mtu to 1024 [ 85.803462][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.811394][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.823121][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.831129][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.836853][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.842671][ T5776] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 85.851386][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.858856][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.867685][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.875219][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.884093][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.884340][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.892688][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.906854][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.914618][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.006153][ T5782] (null): rxe_set_mtu: Set mtu to 1024 [ 86.031402][ T5778] (null): rxe_set_mtu: Set mtu to 1024 [ 86.037592][ T5782] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.047019][ T5778] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 86.267115][ T5773] infiniband rxe0: set active [ 86.274056][ T5773] infiniband rxe0: added rxe_eth0 [ 86.293527][ T5763] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.342508][ T5773] RDS/IB: rxe0: added [ 86.351583][ T5773] smc: adding ib device rxe0 with port count 1 [ 86.359605][ T5773] smc: ib device rxe0 port 1 has pnetid [ 86.380894][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.388619][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.608892][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 86.676405][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 86.743400][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 86.789820][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.220505][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.232360][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.239940][ T5776] bridge_slave_0: entered allmulticast mode [ 87.273820][ T5776] bridge_slave_0: entered promiscuous mode [ 87.293660][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.300869][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.332134][ T5776] bridge_slave_1: entered allmulticast mode [ 87.339722][ T5776] bridge_slave_1: entered promiscuous mode [ 87.367646][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.396685][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.412165][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.419442][ T5782] bridge_slave_0: entered allmulticast mode [ 87.443404][ T5782] bridge_slave_0: entered promiscuous mode [ 87.525014][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.542021][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.549311][ T5782] bridge_slave_1: entered allmulticast mode [ 87.573883][ T5782] bridge_slave_1: entered promiscuous mode [ 87.581458][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.589273][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.612377][ T5778] bridge_slave_0: entered allmulticast mode [ 87.620462][ T5778] bridge_slave_0: entered promiscuous mode [ 87.643415][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.650625][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.672026][ T5778] bridge_slave_1: entered allmulticast mode [ 87.679600][ T5778] bridge_slave_1: entered promiscuous mode [ 87.706185][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.716712][ T5085] Bluetooth: hci0: command tx timeout [ 87.792009][ T5085] Bluetooth: hci1: command tx timeout [ 87.798114][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.947815][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.957174][ T5085] Bluetooth: hci3: command tx timeout [ 87.963344][ T51] Bluetooth: hci2: command tx timeout [ 87.990801][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.015425][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.046422][ T5776] team0: Port device team_slave_0 added [ 88.085863][ T5773] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.097316][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.151691][ T5776] team0: Port device team_slave_1 added [ 88.172790][ T5778] team0: Port device team_slave_0 added [ 88.233639][ T5782] team0: Port device team_slave_0 added [ 88.314064][ T5778] team0: Port device team_slave_1 added [ 88.321525][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.348787][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.388863][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.413485][ T5782] team0: Port device team_slave_1 added [ 88.478461][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.491322][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.521207][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.561132][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.568249][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.597321][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.635158][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.642957][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.670411][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.698918][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.709586][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.739556][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.776116][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.783775][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.810010][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.843652][ T5763] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.988860][ T5776] hsr_slave_0: entered promiscuous mode [ 88.997331][ T5776] hsr_slave_1: entered promiscuous mode [ 89.039607][ T5782] hsr_slave_0: entered promiscuous mode [ 89.051103][ T5782] hsr_slave_1: entered promiscuous mode [ 89.059242][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.070330][ T5782] Cannot create hsr debugfs directory [ 89.087342][ T5778] hsr_slave_0: entered promiscuous mode [ 89.095633][ T5778] hsr_slave_1: entered promiscuous mode [ 89.105130][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.114028][ T5778] Cannot create hsr debugfs directory [ 89.458532][ T5434] infiniband rxe0: set active [ 89.517352][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.528674][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 89.789271][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.796678][ T51] Bluetooth: hci0: command tx timeout [ 89.808820][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.831171][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.847093][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.856641][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.864229][ T5773] bridge_slave_0: entered allmulticast mode [ 89.871725][ T5773] bridge_slave_0: entered promiscuous mode [ 89.878018][ T51] Bluetooth: hci1: command tx timeout [ 89.889342][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.899786][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.909050][ T5773] bridge_slave_1: entered allmulticast mode [ 89.917297][ T5773] bridge_slave_1: entered promiscuous mode [ 89.924725][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.978530][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.018705][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.043558][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.048574][ T5085] Bluetooth: hci3: command tx timeout [ 90.056477][ T51] Bluetooth: hci2: command tx timeout [ 90.102804][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.131350][ T5773] team0: Port device team_slave_0 added [ 90.144163][ T5773] team0: Port device team_slave_1 added [ 90.151134][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.165510][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.237995][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.245551][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.274981][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.288150][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.295381][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.321745][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.401037][ T5773] hsr_slave_0: entered promiscuous mode [ 90.408320][ T5773] hsr_slave_1: entered promiscuous mode [ 90.415352][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.423078][ T5773] Cannot create hsr debugfs directory [ 90.429025][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.439934][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.459574][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.479709][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.703530][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.749001][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.787528][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.818479][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.825893][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.877688][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.884955][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.951507][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.966518][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.979820][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.993942][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.011142][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.018381][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.035420][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.067454][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.074683][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.146118][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.224750][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.325745][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.333428][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.346505][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.353761][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.506654][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.568159][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.596008][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.603383][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.638538][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.645801][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.680253][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.845017][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.872307][ T51] Bluetooth: hci0: command tx timeout [ 91.953610][ T51] Bluetooth: hci1: command tx timeout [ 92.060451][ T5776] veth0_vlan: entered promiscuous mode [ 92.099410][ T5776] veth1_vlan: entered promiscuous mode [ 92.112519][ T5085] Bluetooth: hci3: command tx timeout [ 92.118049][ T51] Bluetooth: hci2: command tx timeout [ 92.125423][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.169017][ T5778] veth0_vlan: entered promiscuous mode [ 92.230470][ T5778] veth1_vlan: entered promiscuous mode [ 92.315394][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.325730][ T5776] veth0_macvtap: entered promiscuous mode [ 92.361213][ T5776] veth1_macvtap: entered promiscuous mode [ 92.370659][ T5778] veth0_macvtap: entered promiscuous mode [ 92.401738][ T5778] veth1_macvtap: entered promiscuous mode [ 92.420825][ T5782] veth0_vlan: entered promiscuous mode [ 92.467170][ T5782] veth1_vlan: entered promiscuous mode [ 92.479974][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.502943][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.518835][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.531409][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.543797][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.569934][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.582083][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.594530][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.609837][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.620123][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.631936][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.640717][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.664876][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.675063][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.683939][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.693522][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.721643][ T5773] veth0_vlan: entered promiscuous mode [ 92.749838][ T5782] veth0_macvtap: entered promiscuous mode [ 92.764702][ T5773] veth1_vlan: entered promiscuous mode [ 92.781419][ T5782] veth1_macvtap: entered promiscuous mode [ 92.889448][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.901201][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.911272][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.924532][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.936224][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.951405][ T5773] veth0_macvtap: entered promiscuous mode [ 92.994308][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.006047][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.018603][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.029180][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.040806][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.055208][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.066053][ T5773] veth1_macvtap: entered promiscuous mode [ 93.075252][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.132642][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.141415][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154870][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.163944][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.188637][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.215059][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.225850][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.242774][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.253181][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.264411][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.274829][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.285369][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.296952][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.335842][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.348797][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.358846][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.369557][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.379615][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.390496][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.402666][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.455759][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.473285][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.488391][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.488601][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.505877][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.515376][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.549330][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.562627][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.652467][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.660373][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.775573][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.786398][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.889082][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.929164][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.963445][ T51] Bluetooth: hci0: command tx timeout [ 94.033689][ T51] Bluetooth: hci1: command tx timeout [ 94.205769][ T51] Bluetooth: hci2: command tx timeout [ 94.205830][ T5085] Bluetooth: hci3: command tx timeout [ 94.839744][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.933287][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.523366][ T5903] syz.1.2[5903]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.645304][ T5903] loop1: detected capacity change from 0 to 2048 [ 96.281837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 97.405758][ T5904] loop2: detected capacity change from 0 to 2048 [ 97.621221][ T8] cfg80211: failed to load regulatory.db [ 100.371161][ T5904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.420000][ T5903] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.699476][ T5857] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.593637][ T5930] loop3: detected capacity change from 0 to 1024 [ 102.875141][ T5928] sched: RT throttling activated [ 103.551858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.496044][ T5930] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 105.680772][ T5926] loop0: detected capacity change from 0 to 2048 [ 105.819988][ T5926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 106.024784][ T5940] loop1: detected capacity change from 0 to 256 [ 106.053011][ T28] audit: type=1326 audit(1792301654.497:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 107.852319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 108.261969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 108.724202][ T28] audit: type=1326 audit(1792301654.497:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 108.791879][ T28] audit: type=1326 audit(1792301654.497:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 108.872696][ T28] audit: type=1326 audit(1792301654.497:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 108.897555][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.000546][ T28] audit: type=1326 audit(1792301654.497:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 109.091932][ T28] audit: type=1326 audit(1792301654.507:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 109.159109][ T28] audit: type=1326 audit(1792301654.507:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 109.299917][ T28] audit: type=1326 audit(1792301654.507:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 109.421351][ T5955] loop3: detected capacity change from 0 to 2048 [ 109.533073][ T5955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.640269][ T28] audit: type=1326 audit(1792301654.507:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 110.103806][ T28] audit: type=1326 audit(1792301654.507:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5933 comm="syz.1.7" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 110.609640][ T5961] loop1: detected capacity change from 0 to 256 [ 111.062745][ T28] kauditd_printk_skb: 150 callbacks suppressed [ 111.062789][ T28] audit: type=1326 audit(1792301659.577:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 111.472104][ T28] audit: type=1326 audit(1792301659.607:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 111.647501][ T28] audit: type=1326 audit(1792301659.607:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 111.792824][ T28] audit: type=1326 audit(1792301659.607:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 111.816686][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.034297][ T28] audit: type=1326 audit(1792301659.607:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 112.101929][ T28] audit: type=1326 audit(1792301659.607:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 112.162424][ T28] audit: type=1326 audit(1792301659.607:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 112.414017][ T28] audit: type=1326 audit(1792301659.607:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 113.317143][ T5977] loop3: detected capacity change from 0 to 2048 [ 113.419811][ T28] audit: type=1326 audit(1792301659.617:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 113.537369][ T5977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.837679][ T28] audit: type=1326 audit(1792301659.617:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.1.14" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fba7555ed8e code=0x7ffc0000 [ 113.861629][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.392584][ T5980] loop0: detected capacity change from 0 to 1024 [ 114.485270][ T5980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.092388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 118.533046][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.761937][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.713403][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.806549][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.914292][ T6026] loop0: detected capacity change from 0 to 2048 [ 120.934084][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 121.046345][ T6026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.294781][ T27] usb 2-1: string descriptor 0 read error: -22 [ 121.373550][ T27] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 121.485096][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.789675][ T27] usb 2-1: can't set config #1, error -71 [ 123.212313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 123.621896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 123.793238][ T27] usb 2-1: USB disconnect, device number 2 [ 124.495656][ T6052] loop2: detected capacity change from 0 to 1024 [ 125.009264][ T6052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.771959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 126.370050][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.515293][ T6056] loop3: detected capacity change from 0 to 4096 [ 126.557409][ T6056] NILFS (loop3): invalid segment: Checksum error in segment payload [ 126.566016][ T6056] NILFS (loop3): trying rollback from an earlier position [ 126.815946][ T6056] NILFS (loop3): recovery complete [ 127.073655][ T6059] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 127.416545][ T6056] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 127.437199][ T6056] NILFS (loop3): nilfs_sufile_do_free: segment 13 is already clean [ 129.694320][ T6065] loop2: detected capacity change from 0 to 1024 [ 131.301867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 131.711776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 134.253217][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.259867][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.321908][ T6065] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 136.044468][ T5776] syz-executor (5776) used greatest stack depth: 20872 bytes left [ 136.078300][ T3499] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0                                                                                  syzkaller syzkaller login: [ 138.521926][ T6090] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.917118][ T6104] loop2: detected capacity change from 0 to 2048 [ 139.152013][ T5085] Bluetooth: hci1: command tx timeout [ 139.461384][ T6104] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.191851][ T5085] Bluetooth: hci0: command tx timeout [ 140.707214][ T6081] chnl_net:caif_netlink_parms(): no params data found [ 141.048302][ T6118] loop1: detected capacity change from 0 to 2048 [ 141.167443][ T6118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.231936][ T5085] Bluetooth: hci1: command tx timeout         [ 144.351848][ T5085] Bluetooth: hci0: command tx timeout syzkaller syzkaller login: [ 144.614778][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.622389][ T6081] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.629689][ T6081] bridge_slave_0: entered allmulticast mode [ 144.639717][ T6081] bridge_slave_0: entered promiscuous mode [ 144.651542][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.658870][ T6081] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.666322][ T6081] bridge_slave_1: entered allmulticast mode [ 144.675554][ T6081] bridge_slave_1: entered promiscuous mode [ 144.954407][ T6081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.085282][ T6081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.148474][ T6090] chnl_net:caif_netlink_parms(): no params data found [ 145.368960][ T6081] team0: Port device team_slave_0 added [ 145.391877][ T5085] Bluetooth: hci1: command tx timeout [ 145.439506][ T6081] team0: Port device team_slave_1 added [ 145.943397][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.950848][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.018809][ T6081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.045805][ T6090] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.059173][ T6090] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.070112][ T6090] bridge_slave_0: entered allmulticast mode [ 146.104308][ T6090] bridge_slave_0: entered promiscuous mode [ 146.151235][ T6090] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.182140][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.189388][ T6090] bridge_slave_1: entered allmulticast mode [ 146.238378][ T6090] bridge_slave_1: entered promiscuous mode [ 146.281377][ T6081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.307143][ T6081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.                                                                            syzkaller syzkaller login: [ 148.795393][ T3499] veth1_macvtap: left promiscuous mode [ 148.801287][ T3499] veth0_macvtap: left promiscuous mode [ 148.868243][ T3499] veth1_vlan: left promiscuous mode [ 148.874029][ T3499] veth0_vlan: left promiscuous mode [ 150.467841][ T6186] Zero length message leads to an empty skb [ 151.201170][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 151.264384][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 151.342557][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.405535][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.995630][ T3499] bond0 (unregistering): Released all slaves [ 152.246724][ T6090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.290475][ T6090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.349176][ T6081] hsr_slave_0: entered promiscuous mode [ 152.364446][ T6081] hsr_slave_1: entered promiscuous mode [ 152.490590][ T6090] team0: Port device team_slave_0 added [ 152.519219][ T6090] team0: Port device team_slave_1 added [ 152.633169][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.640170][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.681850][ T6090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.770249][ T6090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.788454][ T6090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.888298][ T6090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.127111][ T6090] hsr_slave_0: entered promiscuous mode [ 153.139803][ T6090] hsr_slave_1: entered promiscuous mode [ 153.147301][ T6090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.160430][ T6090] Cannot create hsr debugfs directory [ 153.572248][ T6081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 153.616733][ T6081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 153.646868][ T6081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 153.762050][ T6081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 153.955870][ T3499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.216700][ T3499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.394883][ T3499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.583052][ T3499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.674673][ T6090] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 154.732222][ T6090] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 154.776794][ T6090] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 154.795210][ T6189] syz.2.53 (6189): drop_caches: 2 [ 154.858768][ T6090] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.079830][ T6188] syz.2.53 (6188): drop_caches: 2 [ 155.150832][ T6081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.271406][ T6081] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.446086][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.453313][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.518313][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.525561][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.246078][ T6090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.315941][ T6090] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.453214][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.460414][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.480478][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.487738][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.701567][ T6090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.758589][ T6090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.935869][ T6081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.721545][ T3499] hsr_slave_0: left promiscuous mode [ 157.762419][ T3499] hsr_slave_1: left promiscuous mode [ 157.802703][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.810237][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.843204][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.850690][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.897747][ T3499] bridge_slave_1: left allmulticast mode [ 157.922029][ T3499] bridge_slave_1: left promiscuous mode [ 157.928088][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.982740][ T3499] bridge_slave_0: left allmulticast mode [ 157.988449][ T3499] bridge_slave_0: left promiscuous mode [ 158.002126][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.052973][ T3499] veth1_macvtap: left promiscuous mode [ 158.058586][ T3499] veth0_macvtap: left promiscuous mode [ 158.087973][ T3499] veth1_vlan: left promiscuous mode [ 158.124653][ T3499] veth0_vlan: left promiscuous mode [ 159.508433][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 159.541058][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 159.580067][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.618484][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.877707][ T3499] bond0 (unregistering): Released all slaves [ 159.964251][ T6090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.049056][ T6081] veth0_vlan: entered promiscuous mode [ 160.069012][ T6081] veth1_vlan: entered promiscuous mode [ 160.158329][ T6081] veth0_macvtap: entered promiscuous mode [ 160.186295][ T6081] veth1_macvtap: entered promiscuous mode [ 160.228793][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.247606][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.258055][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.272183][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.287983][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.314288][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.357903][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.368095][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.403427][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.419591][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.458367][ T6081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.491071][ T6081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.500156][ T6081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.516606][ T6081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.705166][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.737493][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.790518][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.820542][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.888159][ T6090] veth0_vlan: entered promiscuous mode [ 160.913600][ T6090] veth1_vlan: entered promiscuous mode [ 160.974592][ T6090] veth0_macvtap: entered promiscuous mode [ 161.003857][ T6090] veth1_macvtap: entered promiscuous mode [ 161.271577][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.283232][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.293638][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.305755][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.320672][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.422015][ T6287] loop4: detected capacity change from 0 to 256 [ 161.434928][ T6287] exfat: Deprecated parameter 'namecase' [ 161.440879][ T6287] exfat: Deprecated parameter 'namecase' [ 161.570283][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.846958][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.055607][ T6286] syz.1.63 (6286): drop_caches: 2 [ 162.109381][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.119999][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.140937][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.159295][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.179044][ T6090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.199885][ T6090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.214311][ T6090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.241040][ T6090] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.250098][ T6090] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.282392][ T6090] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.291442][ T6090] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.426180][ T6284] syz.1.63 (6284): drop_caches: 2 [ 162.448238][ T3442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.461205][ T6287] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 162.478124][ T3442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.513506][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.522187][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.284450][ T6304] loop1: detected capacity change from 0 to 256 [ 163.297230][ T6304] exfat: Deprecated parameter 'namecase' [ 163.303397][ T6304] exfat: Deprecated parameter 'namecase' [ 163.981873][ T6304] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 164.063936][ T6303] loop5: detected capacity change from 0 to 2048 [ 164.253513][ T6303] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)                                                            [ 168.266656][ T28] audit: type=1326 audit(1792301715.367:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 168.979787][ T6336] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 168.980096][ T28] audit: type=1326 audit(1792301715.367:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 169.014904][ T28] audit: type=1326 audit(1792301715.367:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 169.039235][ T28] audit: type=1326 audit(1792301715.367:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 169.063893][ T28] audit: type=1326 audit(1792301715.367:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 169.088540][ T28] audit: type=1326 audit(1792301715.367:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 [ 169.112539][ T28] audit: type=1326 audit(1792301715.377:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.1.62" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7559e559 code=0x7ffc0000 syzkaller syzkaller login: [ 169.656382][ T6346] loop5: detected capacity change from 0 to 1024 [ 172.335019][ T6346] EXT4-fs: error -4 creating inode table initialization thread [ 172.343520][ T6346] EXT4-fs (loop5): mount failed [ 173.061598][ T6345] loop4: detected capacity change from 0 to 4096 [ 173.122829][ T6345] NILFS (loop4): invalid segment: Checksum error in segment payload [ 173.131384][ T6345] NILFS (loop4): trying rollback from an earlier position [ 173.347859][ T6345] NILFS (loop4): recovery complete [ 173.636478][ T6356] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.884559][ T6355] loop2: detected capacity change from 0 to 256 [ 173.891624][ T6355] exfat: Deprecated parameter 'namecase' [ 173.897366][ T6355] exfat: Deprecated parameter 'namecase' [ 173.924737][ T6355] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 174.192235][ T6345] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 174.203730][ T6345] NILFS (loop4): nilfs_sufile_do_free: segment 13 is already clean [ 179.672809][ T6391] loop2: detected capacity change from 0 to 256 [ 179.685302][ T6391] exfat: Deprecated parameter 'namecase' [ 179.691255][ T6391] exfat: Deprecated parameter 'namecase' [ 179.779275][ T6391] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 183.179187][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 186.003820][ T6421] loop5: detected capacity change from 0 to 2048 [ 186.036548][ T6421] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.102218][ T6438] Cannot find add_set index 0 as target [ 187.883371][ T6441] loop1: detected capacity change from 0 to 2048 [ 188.005750][ T6444] loop4: detected capacity change from 0 to 256 [ 188.714140][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 188.714154][ T28] audit: type=1326 audit(1792301736.487:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 189.010411][ T6441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 189.337565][ T28] audit: type=1326 audit(1792301736.487:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.000538][ T28] audit: type=1326 audit(1792301736.487:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.024587][ T28] audit: type=1326 audit(1792301736.487:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.071815][ T28] audit: type=1326 audit(1792301736.487:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.142721][ T28] audit: type=1326 audit(1792301736.487:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.183060][ T28] audit: type=1326 audit(1792301736.487:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.282132][ T28] audit: type=1326 audit(1792301736.487:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.357838][ T28] audit: type=1326 audit(1792301736.497:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.414262][ T28] audit: type=1326 audit(1792301736.497:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.4.89" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3bbf9e559 code=0x7ffc0000 [ 190.874850][ T6463] loop1: detected capacity change from 0 to 1024 [ 191.171527][ T6463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.339171][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.468997][ T6479] loop2: detected capacity change from 0 to 2048 [ 193.559228][ T6479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.721201][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.081455][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.438829][ T6491] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 197.163755][ T6488] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 197.582295][ T6499] loop4: detected capacity change from 0 to 2048 [ 197.654428][ T6499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.678890][ T6518] loop5: detected capacity change from 0 to 2048 [ 199.899560][ T6518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.636238][ T6538] loop5: detected capacity change from 0 to 1024 [ 201.875922][ T6538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.012559][ T6552] syz.4.109 (6552): drop_caches: 2 [ 203.020753][ T6552] syz.4.109 (6552): drop_caches: 2 [ 203.068108][ T6553] syz.4.109 (6553): drop_caches: 2 [ 203.674113][ T6090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.128305][ T6574] loop5: detected capacity change from 0 to 2048 [ 207.593552][ T6580] loop4: detected capacity change from 0 to 2048 [ 207.985165][ T6574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 208.110064][ T6580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.795203][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 209.795217][ T28] audit: type=1800 audit(1792301758.297:369): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.115" name="file1" dev="loop4" ino=1415 res=0 errno=0 [ 210.395469][ T6591] syzkaller0: entered promiscuous mode [ 210.401033][ T6591] syzkaller0: entered allmulticast mode [ 210.674982][ T6598] Cannot find add_set index 0 as target [ 211.058734][ T6599] loop1: detected capacity change from 0 to 256 [ 211.066524][ T6599] exfat: Deprecated parameter 'namecase' [ 211.073278][ T6599] exfat: Deprecated parameter 'namecase' [ 211.292718][ T6591] tipc: Started in network mode [ 211.297833][ T6591] tipc: Node identity eefdf99f8cce, cluster identity 4711 [ 211.325265][ T6599] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 211.362998][ T6591] tipc: Enabled bearer , priority 0 [ 211.479295][ T6591] tipc: Resetting bearer [ 211.606861][ T6586] tipc: Resetting bearer [ 211.753008][ T6586] tipc: Disabling bearer [ 211.961963][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 211.968197][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 212.442395][ T6616] loop2: detected capacity change from 0 to 256 [ 212.456182][ T6616] exfat: Deprecated parameter 'namecase' [ 212.462351][ T6616] exfat: Deprecated parameter 'namecase' [ 212.640630][ T6616] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 213.643418][ T6630] loop5: detected capacity change from 0 to 1024 [ 216.806457][ T6630] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5. [ 217.071248][ T6636] loop1: detected capacity change from 0 to 2048 [ 217.199284][ T6636] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.400219][ T6657] Cannot find add_set index 0 as target [ 220.266214][ T6668] loop1: detected capacity change from 0 to 2048 [ 221.420274][ T6670] loop4: detected capacity change from 0 to 4096 [ 223.695312][ T6670] NILFS (loop4): invalid segment: Checksum error in segment payload [ 223.703676][ T6670] NILFS (loop4): trying rollback from an earlier position [ 223.750681][ T6668] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.035480][ T6670] NILFS (loop4): recovery complete [ 224.169179][ T6673] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 224.923604][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 225.865345][ T6687] loop1: detected capacity change from 0 to 2048 [ 226.200026][ T6689] loop5: detected capacity change from 0 to 1024 [ 229.777407][ T6689] EXT4-fs warning (device loop5): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop5. [ 229.841422][ T6687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 230.467182][ T6424] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 231.517547][ T6704] loop5: detected capacity change from 0 to 2048 [ 231.626890][ T6704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.731494][ T6714] Cannot find add_set index 0 as target [ 233.813857][ T6723] loop4: detected capacity change from 0 to 256 [ 233.826820][ T6723] exfat: Deprecated parameter 'namecase' [ 233.832986][ T6723] exfat: Deprecated parameter 'namecase' [ 233.955735][ T6723] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 236.666454][ T6745] loop1: detected capacity change from 0 to 1024 [ 238.241672][ T6747] loop2: detected capacity change from 0 to 1024 [ 240.069084][ T6747] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 240.094058][ T6745] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 243.152952][ T6764] Cannot find add_set index 0 as target [ 243.696324][ T6776] loop5: detected capacity change from 0 to 2048 [ 244.996724][ T6776] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 245.674177][ T6787] loop2: detected capacity change from 0 to 1024 [ 247.094604][ T6787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.203671][ T6795] syzkaller0: entered promiscuous mode [ 247.210855][ T6795] syzkaller0: entered allmulticast mode [ 248.191660][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.224690][ T6795] tipc: Started in network mode [ 248.229994][ T6795] tipc: Node identity 26233a599d68, cluster identity 4711 [ 248.322197][ T6795] tipc: Enabled bearer , priority 0 [ 248.412432][ T6795] tipc: Resetting bearer [ 248.525368][ T6794] tipc: Resetting bearer [ 248.627275][ T6794] tipc: Disabling bearer [ 248.857820][ T6809] loop2: detected capacity change from 0 to 1024 [ 249.118176][ T6809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.800148][ T6824] Cannot find add_set index 0 as target [ 251.635031][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.743043][ T6863] loop2: detected capacity change from 0 to 1024 [ 254.873039][ T6863] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.987715][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.994232][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.712509][ T6877] loop1: detected capacity change from 0 to 1024 [ 257.017355][ T6877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.019463][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.842085][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.171317][ T6895] Cannot find add_set index 0 as target [ 262.477802][ T6913] Device name cannot be null; rc = [-22] [ 263.048435][ T6924] loop4: detected capacity change from 0 to 1024 [ 263.181734][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 263.188231][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 263.362229][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.140412][ T6081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.760055][ T6947] loop4: detected capacity change from 0 to 1024 [ 266.171911][ T6947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.096266][ T6081] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.646014][ T6975] Cannot find add_set index 0 as target [ 271.569561][ T6984] loop1: detected capacity change from 0 to 2048 [ 271.697475][ T6984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 272.906953][ T7006] loop1: detected capacity change from 0 to 1024 [ 273.098854][ T7006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.033716][ T5782] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.529488][ C1] ------------[ cut here ]------------ [ 277.535442][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5057 __ieee80211_beacon_get+0x1141/0x1520 [ 277.545328][ C1] Modules linked in: [ 277.549293][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 277.556396][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.566566][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 277.572981][ C1] Code: f7 4c 89 ef e8 00 24 b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 4b df 76 f7 0f 0b e9 61 f8 ff ff e8 3f df 76 f7 <0f> 0b e9 85 fb ff ff e8 33 df 76 f7 48 c7 c7 40 92 45 8f 4c 89 e6 [ 277.592676][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 277.598804][ C1] RAX: ffffffff8a10b171 RBX: dffffc0000000000 RCX: ffff88801c24bc00 [ 277.606875][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.614939][ C1] RBP: 0000000000000000 R08: ffff88801c24bc00 R09: 0000000000000003 [ 277.622998][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e7b2440 [ 277.631024][ C1] R13: ffff88805ef84024 R14: ffff88805e7b2930 R15: ffff88805ef84000 [ 277.639080][ C1] FS: 0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 277.648104][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.654771][ C1] CR2: 0000200001000000 CR3: 000000000dd32000 CR4: 00000000003506e0 [ 277.662862][ C1] Call Trace: [ 277.666202][ C1] [ 277.669092][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 277.674741][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 277.680273][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 277.687129][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 277.692774][ C1] __iterate_interfaces+0x225/0x4c0 [ 277.698040][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 277.704373][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 277.711643][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 277.717979][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 277.725119][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 277.730378][ C1] ? hw_scan_work+0xf10/0xf10 [ 277.735143][ C1] __hrtimer_run_queues+0x525/0xc10 [ 277.740427][ C1] ? hrtimer_interrupt+0x980/0x980 [ 277.745618][ C1] ? read_tsc+0x9/0x20 [ 277.749749][ C1] hrtimer_run_softirq+0x177/0x290 [ 277.754951][ C1] handle_softirqs+0x27d/0x820 [ 277.759771][ C1] ? read_tsc+0x9/0x20 [ 277.763941][ C1] ? ktime_get+0x24b/0x280 [ 277.768436][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 277.773281][ C1] ? do_softirq+0x1a0/0x1a0 [ 277.777846][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 277.783160][ C1] __irq_exit_rcu+0xd3/0x190 [ 277.787805][ C1] ? irq_exit_rcu+0x20/0x20 [ 277.792403][ C1] irq_exit_rcu+0x9/0x20 [ 277.796694][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 277.802409][ C1] [ 277.805381][ C1] [ 277.808356][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 277.814453][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 277.820151][ C1] Code: 99 17 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d d3 38 35 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 277.839858][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 277.846020][ C1] RAX: 36c5e624e60a0800 RBX: ffffffff81631e31 RCX: 36c5e624e60a0800 [ 277.854103][ C1] RDX: 0000000000000001 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160 [ 277.862159][ C1] RBP: ffffc90000187f20 R08: ffff8880b8d36b6b R09: 1ffff110171a6d6d [ 277.870214][ C1] R10: dffffc0000000000 R11: ffffed10171a6d6e R12: 1ffff92000030fc8 [ 277.878299][ C1] R13: dffffc0000000000 R14: 1ffff11003849780 R15: 0000000000000000 [ 277.886363][ C1] ? do_idle+0x221/0x5c0 [ 277.890678][ C1] default_idle+0x13/0x20 [ 277.895093][ C1] default_idle_call+0x6c/0xa0 [ 277.899926][ C1] do_idle+0x221/0x5c0 [ 277.904113][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 277.909370][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 277.914660][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 277.920453][ C1] cpu_startup_entry+0x43/0x60 [ 277.925318][ C1] start_secondary+0xee/0xf0 [ 277.929966][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 277.936154][ C1] [ 277.939226][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.946561][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 277.953641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 277.963749][ C1] Call Trace: [ 277.967065][ C1] [ 277.969968][ C1] dump_stack_lvl+0x18c/0x250 [ 277.974705][ C1] ? show_regs_print_info+0x20/0x20 [ 277.979978][ C1] ? load_image+0x420/0x420 [ 277.984548][ C1] panic+0x2ca/0x720 [ 277.988513][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 277.993080][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 277.999383][ C1] __warn+0x2e0/0x470 [ 278.003426][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 278.009234][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 278.015033][ C1] report_bug+0x2be/0x4f0 [ 278.019454][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 278.025227][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 278.031014][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 278.036790][ C1] handle_bug+0xcf/0x120 [ 278.041130][ C1] exc_invalid_op+0x1a/0x50 [ 278.045723][ C1] asm_exc_invalid_op+0x1a/0x20 [ 278.050631][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 278.057048][ C1] Code: f7 4c 89 ef e8 00 24 b5 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 4b df 76 f7 0f 0b e9 61 f8 ff ff e8 3f df 76 f7 <0f> 0b e9 85 fb ff ff e8 33 df 76 f7 48 c7 c7 40 92 45 8f 4c 89 e6 [ 278.076717][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 278.082854][ C1] RAX: ffffffff8a10b171 RBX: dffffc0000000000 RCX: ffff88801c24bc00 [ 278.090890][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.098962][ C1] RBP: 0000000000000000 R08: ffff88801c24bc00 R09: 0000000000000003 [ 278.106993][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805e7b2440 [ 278.115028][ C1] R13: ffff88805ef84024 R14: ffff88805e7b2930 R15: ffff88805ef84000 [ 278.123082][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 278.128886][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 278.134679][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 278.140308][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 278.145841][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 278.152670][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 278.158295][ C1] __iterate_interfaces+0x225/0x4c0 [ 278.163561][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 278.169857][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 278.177114][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 278.183423][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 278.190528][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 278.195804][ C1] ? hw_scan_work+0xf10/0xf10 [ 278.200563][ C1] __hrtimer_run_queues+0x525/0xc10 [ 278.205851][ C1] ? hrtimer_interrupt+0x980/0x980 [ 278.211027][ C1] ? read_tsc+0x9/0x20 [ 278.215174][ C1] hrtimer_run_softirq+0x177/0x290 [ 278.220419][ C1] handle_softirqs+0x27d/0x820 [ 278.225249][ C1] ? read_tsc+0x9/0x20 [ 278.229385][ C1] ? ktime_get+0x24b/0x280 [ 278.233882][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 278.238728][ C1] ? do_softirq+0x1a0/0x1a0 [ 278.243301][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 278.248576][ C1] __irq_exit_rcu+0xd3/0x190 [ 278.253244][ C1] ? irq_exit_rcu+0x20/0x20 [ 278.257820][ C1] irq_exit_rcu+0x9/0x20 [ 278.262119][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 278.267820][ C1] [ 278.270798][ C1] [ 278.273785][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 278.279828][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 278.285546][ C1] Code: 99 17 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d d3 38 35 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 278.305236][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 278.311370][ C1] RAX: 36c5e624e60a0800 RBX: ffffffff81631e31 RCX: 36c5e624e60a0800 [ 278.319405][ C1] RDX: 0000000000000001 RSI: ffffffff8acacfe0 RDI: ffffffff8b1d5160 [ 278.327437][ C1] RBP: ffffc90000187f20 R08: ffff8880b8d36b6b R09: 1ffff110171a6d6d [ 278.335488][ C1] R10: dffffc0000000000 R11: ffffed10171a6d6e R12: 1ffff92000030fc8 [ 278.343521][ C1] R13: dffffc0000000000 R14: 1ffff11003849780 R15: 0000000000000000 [ 278.351598][ C1] ? do_idle+0x221/0x5c0 [ 278.355923][ C1] default_idle+0x13/0x20 [ 278.360323][ C1] default_idle_call+0x6c/0xa0 [ 278.365152][ C1] do_idle+0x221/0x5c0 [ 278.369303][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 278.374557][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 278.379817][ C1] ? asm_sysvec_error_interrupt+0x11/0x20 [ 278.385623][ C1] cpu_startup_entry+0x43/0x60 [ 278.390451][ C1] start_secondary+0xee/0xf0 [ 278.395114][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 278.401306][ C1] [ 278.404995][ C1] Kernel Offset: disabled [ 278.409388][ C1] Rebooting in 86400 seconds..