last executing test programs: 4.224555224s ago: executing program 3 (id=375): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x200004}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x4}, {0x0, 0x3, 0x1, 0x7437ec78, 0x2, 0x53f9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0xffc, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0xb, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x7, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x7ffc, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0xe}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x80000009}, {0x9, 0x0, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x8}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x7fd, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x1000, 0x9, 0x9, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x8}, {0x7ff, 0x9, 0x9, 0x6, 0x9, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x4}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 3.882617433s ago: executing program 1 (id=378): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r2, 0x0, 0x0, 0x4, 0x0, 0x1, r2}]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7bfffd}}, {{0xa, 0x4e08, 0x4a3, @loopback, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 3.61990486s ago: executing program 3 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={&(0x7f0000001300), 0x10, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r4}}}]}}]}, 0x60}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000e00)={&(0x7f0000000f00), 0xc, &(0x7f0000001000)={0x0}}, 0x0) 3.443246754s ago: executing program 3 (id=382): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) 3.162829511s ago: executing program 3 (id=386): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x23fd, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 2.988100895s ago: executing program 2 (id=388): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x200004}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x4}, {0x0, 0x3, 0x1, 0x7437ec78, 0x2, 0x53f9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0xffc, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0xb, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x7, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x7ffc, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0xe}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x80000009}, {0x9, 0x0, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x8}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x7fd, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x1000, 0x9, 0x9, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x8}, {0x7ff, 0x9, 0x9, 0x6, 0x9, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x4}, {}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r8, 0x109}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 2.721571352s ago: executing program 3 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) unshare(0x10010400) 2.610884205s ago: executing program 1 (id=392): openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x10001, 0x0) write(r0, &(0x7f0000000d00)='1\x00', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wwnn=0x1111111111111111,wwpn=0x22222222222222', 0x2d) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444\x00', 0x2f) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x22222222222222', 0x6a) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/fcloop/ctl/set_cmd_drop\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='101:0:1\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e49371800", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r4, @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000807b5af8ff00000000bfa200000000000007020000f8ffffffb70300850000001e0000009500"/72], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write(r5, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discover', 0x9f) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f0000000e00)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="000000185500f40f0000000000000000000000b50000000000000000000000004c382362c262e1c2731e1de26d5f38c2a44c9ba6a139f347ddfb1c702435bbbc00f695c388693759d89e3f6c63a2591f17ec3d0f5d06de99e0d3d87f171253d2c31e52faaf51fcd212ef8c91a4d93e2931b9c4d16720d1f28fdaf7ca0f2cc3fcce2135472108bf5d6c8a1beca7a65eceffc7256778773536ad20a0700b9cb06ef7accf"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x8, 0x8001, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3, r3, r4, r0, r3, r2, r4, r5], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r7, 0x0, 0x16, 0x8d, &(0x7f0000000540)="64178b234f02331923ee6ea8bf04705c09d343289dc7", &(0x7f0000000740)=""/141, 0x800, 0x0, 0x84, 0x0, &(0x7f0000000840)="b32d559ecceaf671be599cc5b7534ee68562e24fa1083f81f1947288a4e60ed5b6f20c19c6f3b5f01b82171bc811500face0111299f31f1458c1f16c301b588917ebe6f1d2009ac21d75a88140568b64efc2651df10cb7e4271aa5fa5b17de81b4b085dd215ad14e36736307b526952ebe35af7274b764d6727993b2252e0234581e5004", &(0x7f0000000ac0), 0x1, 0x0, 0x5}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r6, 0x0) mount$9p_rdma(&(0x7f0000000180), 0x0, &(0x7f0000001440), 0x1008840, &(0x7f00000001c0)=ANY=[@ANYBLOB="2c706f7274373078303430303030303030303030346532342c74696d656f75743d3078303030303030303030303030303030302c0096c8ef61a7d0e12e74cf322b8d5245092afef8b6f2968e062da99da4b2d1c0e03771e755eaf5a05f0f24e2fd9ac9920b4b0847e6304498c0253735ecf5e3734b11e69d0901bb4474a7fb8bad58922b267f046c1d7baeae3ab4192fb14ed846856edf861d5e3e1e5f801ddc64f4ef50"]) dup(0xffffffffffffffff) 2.289983483s ago: executing program 0 (id=393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={0x0}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 2.141912776s ago: executing program 2 (id=394): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff0000"], 0x78) 2.110394997s ago: executing program 1 (id=395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.01373803s ago: executing program 0 (id=396): socket(0x40000000015, 0x5, 0x0) socket$inet6(0xa, 0x805, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.901914922s ago: executing program 1 (id=397): syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x43}}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'dummy0\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xd988641bb428c673}, 0x8000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={0x14, r6, 0xba87317d461c07c9, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x20000804) 1.869553673s ago: executing program 0 (id=398): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x23fd, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1.857680253s ago: executing program 2 (id=399): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002800000000400600000a0000010a000002005000500000000100000001501003e800000000", 0x2a}], 0x1, 0x0, 0x0) 1.721156877s ago: executing program 3 (id=400): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = eventfd2(0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], 0x0, 0x0) io_submit(r3, 0x2, &(0x7f0000000440)=[0x0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x200, r2, 0x0, 0x0, 0x4, 0x0, 0x1, r2}]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7bfffd}}, {{0xa, 0x4e08, 0x4a3, @loopback, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) 1.697662967s ago: executing program 1 (id=401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x20, {0x4b564d02, 0x1009}}], 0x20}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1009}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000580)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1009}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000600)={0x1, 0x0, [{0x4b564d02}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.410041634s ago: executing program 0 (id=402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004001}, 0x104) 1.364477635s ago: executing program 2 (id=403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd70000000000010000000180001801400020076657468315f746f5f626f6e640000000500"], 0x34}, 0x1, 0x0, 0x0, 0x20040804}, 0x4044890) 1.249622049s ago: executing program 2 (id=404): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x17, &(0x7f0000000340)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@setlink={0x20, 0x13, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x6, 0x146}}, 0x20}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) 1.225547279s ago: executing program 0 (id=405): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53e}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) getpeername$tipc(r0, 0x0, &(0x7f0000000280)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.111604762s ago: executing program 1 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x21c, 0x3}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000440), 0xfffffffe, r4}, 0x38) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f00000001c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004001, 0x8, 0x0, 0x0}}, 0x10) unshare(0x10010400) 1.041943864s ago: executing program 2 (id=407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 0 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='acpi-fan\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/acpi-fan/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr', 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 82.899921][ T5763] cgroup: Unknown subsys name 'net' [ 83.011075][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.697086][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.456151][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.473720][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.492790][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.503509][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.505770][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.519362][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.524143][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.528553][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.541677][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.550061][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.551325][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.558198][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.570216][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.587387][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.595350][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.603784][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.612305][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.620292][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.627903][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.636291][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.643707][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.655621][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.664886][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.672331][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.071048][ T5799] modprobe (5799) used greatest stack depth: 20848 bytes left [ 87.169821][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.411160][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.427065][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.447413][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.457567][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.465401][ T5775] bridge_slave_0: entered allmulticast mode [ 87.474875][ T5775] bridge_slave_0: entered promiscuous mode [ 87.494722][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 87.529952][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.538984][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.549342][ T5775] bridge_slave_1: entered allmulticast mode [ 87.558331][ T5775] bridge_slave_1: entered promiscuous mode [ 87.708931][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.751202][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.831581][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.839014][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.846348][ T5776] bridge_slave_0: entered allmulticast mode [ 87.854078][ T5776] bridge_slave_0: entered promiscuous mode [ 87.863284][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.870438][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.877917][ T5776] bridge_slave_1: entered allmulticast mode [ 87.885519][ T5776] bridge_slave_1: entered promiscuous mode [ 87.905571][ T5775] team0: Port device team_slave_0 added [ 87.911852][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.919699][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.927601][ T5777] bridge_slave_0: entered allmulticast mode [ 87.935529][ T5777] bridge_slave_0: entered promiscuous mode [ 87.943242][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.950407][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.960811][ T5774] bridge_slave_0: entered allmulticast mode [ 87.968123][ T5774] bridge_slave_0: entered promiscuous mode [ 87.986580][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.994214][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.001454][ T5774] bridge_slave_1: entered allmulticast mode [ 88.009442][ T5774] bridge_slave_1: entered promiscuous mode [ 88.018064][ T5775] team0: Port device team_slave_1 added [ 88.035472][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.043246][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.050505][ T5777] bridge_slave_1: entered allmulticast mode [ 88.061068][ T5777] bridge_slave_1: entered promiscuous mode [ 88.127810][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.140593][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.161952][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.169192][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.198413][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.217124][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.238194][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.251621][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.258696][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.284927][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.298267][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.343067][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.375025][ T5776] team0: Port device team_slave_0 added [ 88.398103][ T5777] team0: Port device team_slave_0 added [ 88.428163][ T5776] team0: Port device team_slave_1 added [ 88.448045][ T5777] team0: Port device team_slave_1 added [ 88.468363][ T5774] team0: Port device team_slave_0 added [ 88.483699][ T5775] hsr_slave_0: entered promiscuous mode [ 88.490518][ T5775] hsr_slave_1: entered promiscuous mode [ 88.521918][ T5774] team0: Port device team_slave_1 added [ 88.540534][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.547609][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.574371][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.587115][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.594619][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.621762][ T5786] Bluetooth: hci2: command tx timeout [ 88.627621][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.667798][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.675402][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.692663][ T5786] Bluetooth: hci0: command tx timeout [ 88.706965][ T5790] Bluetooth: hci1: command tx timeout [ 88.714113][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.726075][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.733234][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.761463][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.772543][ T5790] Bluetooth: hci3: command tx timeout [ 88.791123][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.798533][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.825042][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.861639][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.868965][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.895461][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.959171][ T5777] hsr_slave_0: entered promiscuous mode [ 88.965850][ T5777] hsr_slave_1: entered promiscuous mode [ 88.972432][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.980882][ T5777] Cannot create hsr debugfs directory [ 89.012677][ T5776] hsr_slave_0: entered promiscuous mode [ 89.019228][ T5776] hsr_slave_1: entered promiscuous mode [ 89.028427][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.036129][ T5776] Cannot create hsr debugfs directory [ 89.104543][ T5774] hsr_slave_0: entered promiscuous mode [ 89.111234][ T5774] hsr_slave_1: entered promiscuous mode [ 89.118501][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.126223][ T5774] Cannot create hsr debugfs directory [ 89.451346][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.465414][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.503497][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.514357][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.688283][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.706885][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.718853][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.729852][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.809630][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.819979][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.840481][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.851348][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.930030][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.977849][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.001234][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.015439][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.027814][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.074502][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.114832][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.122428][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.134641][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.141841][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.237072][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.270963][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.320299][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.344400][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.351608][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.389546][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.421716][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.429079][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.452845][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.460072][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.479193][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.486481][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.569977][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.637186][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.659132][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.666375][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.693349][ T5790] Bluetooth: hci2: command tx timeout [ 90.733173][ T4822] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.740400][ T4822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.772467][ T5790] Bluetooth: hci0: command tx timeout [ 90.775826][ T5786] Bluetooth: hci1: command tx timeout [ 90.854234][ T5786] Bluetooth: hci3: command tx timeout [ 91.020560][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.180089][ T5775] veth0_vlan: entered promiscuous mode [ 91.236332][ T5775] veth1_vlan: entered promiscuous mode [ 91.269654][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.313960][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.346864][ T5775] veth0_macvtap: entered promiscuous mode [ 91.380418][ T5775] veth1_macvtap: entered promiscuous mode [ 91.424048][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.456382][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.465699][ T5776] veth0_vlan: entered promiscuous mode [ 91.501042][ T5776] veth1_vlan: entered promiscuous mode [ 91.509126][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.520627][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.529483][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.538453][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.639938][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.658536][ T5774] veth0_vlan: entered promiscuous mode [ 91.695892][ T5774] veth1_vlan: entered promiscuous mode [ 91.711163][ T5776] veth0_macvtap: entered promiscuous mode [ 91.756898][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.772809][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.811336][ T5776] veth1_macvtap: entered promiscuous mode [ 91.861638][ T4822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.869732][ T4822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.896104][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.907519][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.919826][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.954797][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.965404][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.978460][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.993737][ T5777] veth0_vlan: entered promiscuous mode [ 92.022833][ T5774] veth0_macvtap: entered promiscuous mode [ 92.036036][ T5777] veth1_vlan: entered promiscuous mode [ 92.054108][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.082439][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.091231][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.107853][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.146162][ T5774] veth1_macvtap: entered promiscuous mode [ 92.155748][ T9] cfg80211: failed to load regulatory.db [ 92.176200][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.306586][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.317733][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.327940][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.338627][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.351135][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.380872][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.394468][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.405581][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.420073][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.430202][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.441366][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.454585][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.496305][ T5777] veth0_macvtap: entered promiscuous mode [ 92.511154][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.521066][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.530509][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.540587][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.567640][ T4822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.577691][ T4822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.595161][ T5777] veth1_macvtap: entered promiscuous mode [ 92.641059][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.669007][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.679165][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.690024][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.702267][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.713670][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.726429][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.770109][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.781009][ T5786] Bluetooth: hci2: command tx timeout [ 92.806018][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.836225][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.847312][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.855886][ T5786] Bluetooth: hci1: command tx timeout [ 92.859157][ T5790] Bluetooth: hci0: command tx timeout [ 92.870445][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.886657][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.900910][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.932234][ T5786] Bluetooth: hci3: command tx timeout [ 92.949083][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.962892][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.000838][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.019942][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.047235][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.081520][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.173863][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.199616][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.393050][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.400955][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.567898][ T2937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.601686][ T2937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.860332][ T5786] Bluetooth: hci2: command tx timeout [ 94.938024][ T5786] Bluetooth: hci1: command tx timeout [ 94.943709][ T5790] Bluetooth: hci0: command tx timeout [ 95.016400][ T5786] Bluetooth: hci3: command tx timeout [ 95.109956][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 95.319838][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 95.331716][ T5897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.444651][ T5897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.880924][ T5915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.27'. [ 95.961286][ T4822] bond0: (slave bond_slave_0): interface is now down [ 95.981524][ T4822] bond0: (slave bond_slave_1): interface is now down [ 96.001459][ T4822] bond0: now running without any active interface! [ 96.327176][ T5925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 96.336497][ T5925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.406381][ T5925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.018822][ T5934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 97.892109][ T5878] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.134723][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 98.164181][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 98.468919][ T5962] syzkaller0: entered promiscuous mode [ 98.492357][ T5962] syzkaller0: entered allmulticast mode [ 99.141788][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 99.546516][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 99.753861][ T5993] syzkaller0: entered promiscuous mode [ 99.759425][ T5993] syzkaller0: entered allmulticast mode [ 100.390634][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.72'. [ 100.777691][ T6026] syzkaller0: entered promiscuous mode [ 100.792556][ T6026] syzkaller0: entered allmulticast mode [ 101.013424][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.81'. [ 101.032608][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.235239][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.475797][ T6052] fuse: Bad value for 'fd' [ 101.641895][ T6058] syz.3.89 uses obsolete (PF_INET,SOCK_PACKET) [ 103.338423][ T6081] Zero length message leads to an empty skb [ 103.984865][ T6107] fuse: Bad value for 'fd' [ 105.738626][ T5786] Bluetooth: hci3: hardware error 0x00 [ 105.992580][ T6144] syz.0.115[6144]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 106.359164][ T6150] syzkaller0: entered promiscuous mode [ 106.367810][ T6150] syzkaller0: entered allmulticast mode [ 106.400659][ T6154] syzkaller0: entered promiscuous mode [ 106.408701][ T6154] syzkaller0: entered allmulticast mode [ 106.554436][ T6159] fuse: Bad value for 'fd' [ 107.392493][ T6144] loop0: detected capacity change from 0 to 65536 [ 107.539028][ T6144] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 107.688295][ T6144] XFS (loop0): Ending clean mount [ 107.809664][ T6144] XFS (loop0): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 107.820603][ T5786] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 107.915034][ T5776] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.033668][ T6202] syzkaller0: entered promiscuous mode [ 109.039232][ T6202] syzkaller0: entered allmulticast mode [ 110.681054][ T6234] fuse: Bad value for 'fd' [ 110.844278][ T6232] syzkaller0: entered promiscuous mode [ 110.850285][ T6232] syzkaller0: entered allmulticast mode [ 113.762459][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.050284][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.906332][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.986190][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.013311][ T9] usb 2-1: Product: syz [ 115.017569][ T9] usb 2-1: Manufacturer: syz [ 115.045723][ T9] usb 2-1: SerialNumber: syz [ 115.442845][ T6291] syzkaller0: entered promiscuous mode [ 115.448443][ T6291] syzkaller0: entered allmulticast mode [ 115.478883][ T6293] fuse: Bad value for 'fd' [ 116.206804][ T6308] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 116.240329][ T6308] CIFS: Attempting to mount //127.0.0.1/share [ 116.254302][ T9] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 116.263807][ T9] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 116.271345][ T9] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 116.298042][ T6308] CIFS: VFS: cifs_mount failed w/return code = -112 [ 116.464519][ T9] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 116.465251][ T28] audit: type=1800 audit(1787002395.588:2): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="idProduct" dev="configfs" ino=8160 res=0 errno=0 [ 116.503375][ T28] audit: type=1800 audit(1787002395.628:3): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.164" name="configuration" dev="configfs" ino=8164 res=0 errno=0 [ 118.387442][ T9] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 118.469373][ T9] usb 2-1: USB disconnect, device number 2 [ 119.398563][ T9] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 119.844240][ T28] audit: type=1800 audit(1787002398.968:4): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="idProduct" dev="configfs" ino=8801 res=0 errno=0 [ 119.888798][ T28] audit: type=1800 audit(1787002398.998:5): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.173" name="configuration" dev="configfs" ino=8802 res=0 errno=0 [ 120.273147][ T6366] fuse: Bad value for 'fd' [ 121.910659][ T6378] loop0: detected capacity change from 0 to 512 [ 121.926356][ T6378] ======================================================= [ 121.926356][ T6378] WARNING: The mand mount option has been deprecated and [ 121.926356][ T6378] and is ignored by this kernel. Remove the mand [ 121.926356][ T6378] option from the mount to silence this warning. [ 121.926356][ T6378] ======================================================= [ 122.347686][ T28] audit: type=1800 audit(1787002401.468:6): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="idProduct" dev="configfs" ino=8849 res=0 errno=0 [ 122.414974][ T28] audit: type=1800 audit(1787002401.468:7): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.182" name="configuration" dev="configfs" ino=8850 res=0 errno=0 [ 123.095767][ T6397] syzkaller0: entered promiscuous mode [ 123.119813][ T6397] syzkaller0: entered allmulticast mode [ 124.168003][ T6413] fuse: Bad value for 'fd' [ 126.017488][ T28] audit: type=1800 audit(1787002405.138:8): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.191" name="idProduct" dev="configfs" ino=8897 res=0 errno=0 [ 126.091151][ T28] audit: type=1800 audit(1787002405.158:9): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.191" name="configuration" dev="configfs" ino=8898 res=0 errno=0 [ 126.380809][ T6435] misc userio: Invalid payload size [ 126.489544][ T6440] fuse: Bad value for 'fd' [ 126.617081][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 126.668553][ T28] audit: type=1800 audit(1787002405.788:10): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.201" name="idProduct" dev="configfs" ino=9378 res=0 errno=0 [ 126.727384][ T28] audit: type=1800 audit(1787002405.788:11): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.201" name="configuration" dev="configfs" ino=9379 res=0 errno=0 [ 126.957321][ T6455] ubi0: attaching mtd0 [ 126.975609][ T6455] ubi0: scanning is finished [ 126.990598][ T6455] ubi0: empty MTD device detected [ 127.059742][ T6455] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 127.096734][ T6455] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 127.122806][ T6455] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 127.154978][ T6455] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 127.180722][ T6455] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 127.208453][ T6455] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 127.244759][ T6455] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3907196198 [ 127.278745][ T6455] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 127.352315][ T6459] ubi0: background thread "ubi_bgt0d" started, PID 6459 [ 127.487579][ T28] audit: type=1800 audit(1787002406.608:12): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.211" name="idProduct" dev="configfs" ino=9000 res=0 errno=0 [ 127.572124][ T28] audit: type=1800 audit(1787002406.628:13): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.211" name="configuration" dev="configfs" ino=9001 res=0 errno=0 [ 127.610416][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 128.104854][ T6479] loop0: detected capacity change from 0 to 4096 [ 128.211002][ T6479] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 128.786858][ T6497] fuse: Bad value for 'fd' [ 129.749458][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 129.853438][ T28] audit: type=1800 audit(1787002408.978:14): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="idProduct" dev="configfs" ino=9445 res=0 errno=0 [ 129.914475][ T28] audit: type=1800 audit(1787002408.998:15): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.221" name="configuration" dev="configfs" ino=9446 res=0 errno=0 [ 130.050381][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 130.926829][ T28] audit: type=1800 audit(1787002410.048:16): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.232" name="idProduct" dev="configfs" ino=9496 res=0 errno=0 [ 130.944209][ T6521] loop2: detected capacity change from 0 to 32768 [ 130.982989][ T28] audit: type=1800 audit(1787002410.098:17): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.232" name="configuration" dev="configfs" ino=9501 res=0 errno=0 [ 131.027026][ T6521] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.226 (6521) [ 131.170091][ T6521] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 131.228129][ T6521] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 131.269401][ T6521] BTRFS info (device loop2): using free space tree [ 131.277238][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 131.443418][ T6521] BTRFS info (device loop2): enabling ssd optimizations [ 131.460009][ T6521] BTRFS info (device loop2): auto enabling async discard [ 132.230188][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 132.342352][ T28] audit: type=1800 audit(1787002411.468:18): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.242" name="idProduct" dev="configfs" ino=9577 res=0 errno=0 [ 132.392836][ T28] audit: type=1800 audit(1787002411.488:19): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.242" name="configuration" dev="configfs" ino=9578 res=0 errno=0 [ 132.474855][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 132.551132][ T6529] loop0: detected capacity change from 0 to 65536 [ 132.702317][ T6529] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 132.913042][ T6529] XFS (loop0): Ending clean mount [ 133.101695][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.109093][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.136251][ T5776] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 133.661197][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 133.889619][ T28] audit: type=1800 audit(1787002412.998:20): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.252" name="idProduct" dev="configfs" ino=9200 res=0 errno=0 [ 133.951004][ T28] audit: type=1800 audit(1787002413.018:21): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.252" name="configuration" dev="configfs" ino=9201 res=0 errno=0 [ 134.126912][ T6628] misc userio: Invalid payload size [ 135.122920][ T6653] fuse: Bad value for 'fd' [ 135.228126][ T28] audit: type=1800 audit(1787002414.348:22): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.263" name="idProduct" dev="configfs" ino=9665 res=0 errno=0 [ 135.270225][ T28] audit: type=1800 audit(1787002414.368:23): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.263" name="configuration" dev="configfs" ino=9666 res=0 errno=0 [ 135.578725][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 135.599759][ T6666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 136.337423][ T28] audit: type=1800 audit(1787002415.458:24): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="idProduct" dev="configfs" ino=10323 res=0 errno=0 [ 136.412392][ T28] audit: type=1800 audit(1787002415.468:25): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.272" name="configuration" dev="configfs" ino=10331 res=0 errno=0 [ 136.487732][ T6691] netlink: 10 bytes leftover after parsing attributes in process `syz.1.273'. [ 136.527977][ T6693] misc userio: Invalid payload size [ 136.629395][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 136.871005][ T6704] fuse: Bad value for 'fd' [ 136.924901][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 137.226831][ T28] audit: type=1800 audit(1787002416.338:26): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.283" name="idProduct" dev="configfs" ino=10396 res=0 errno=0 [ 137.326500][ T28] audit: type=1800 audit(1787002416.388:27): pid=6717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.283" name="configuration" dev="configfs" ino=10397 res=0 errno=0 [ 137.710636][ T6724] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 137.985452][ T6733] misc userio: Invalid payload size [ 138.219653][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 138.241021][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.265499][ T28] audit: type=1800 audit(1787002417.388:28): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.292" name="idProduct" dev="configfs" ino=10452 res=0 errno=0 [ 138.313591][ T28] audit: type=1800 audit(1787002417.408:29): pid=6746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.292" name="configuration" dev="configfs" ino=10453 res=0 errno=0 [ 138.427200][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.810200][ T6757] fuse: Bad value for 'fd' [ 139.526710][ T28] audit: type=1800 audit(1787002418.648:30): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.302" name="idProduct" dev="configfs" ino=9902 res=0 errno=0 [ 139.571102][ T28] audit: type=1800 audit(1787002418.688:31): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.302" name="configuration" dev="configfs" ino=10512 res=0 errno=0 [ 139.719115][ T6782] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 140.289907][ T28] audit: type=1800 audit(1787002419.408:32): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.314" name="idProduct" dev="configfs" ino=10554 res=0 errno=0 [ 140.353204][ T28] audit: type=1800 audit(1787002419.428:33): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.314" name="configuration" dev="configfs" ino=10555 res=0 errno=0 [ 140.631781][ T6813] fuse: Bad value for 'fd' [ 141.378718][ T28] audit: type=1800 audit(1787002420.498:34): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.323" name="idProduct" dev="configfs" ino=9998 res=0 errno=0 [ 141.422193][ T28] audit: type=1800 audit(1787002420.528:35): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.323" name="configuration" dev="configfs" ino=9999 res=0 errno=0 [ 142.032363][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 142.260195][ T23] usb 1-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 142.285712][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.303671][ T23] usb 1-1: Product: syz [ 142.312617][ T23] usb 1-1: Manufacturer: syz [ 142.322959][ T23] usb 1-1: SerialNumber: syz [ 142.323164][ C0] FAULT_INJECTION: forcing a failure. [ 142.323164][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 142.327658][ C1] FAULT_INJECTION: forcing a failure. [ 142.327658][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 142.340710][ C0] CPU: 0 PID: 69 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 142.360903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.370999][ C0] Workqueue: bat_events batadv_nc_worker [ 142.376713][ C0] Call Trace: [ 142.380031][ C0] [ 142.382927][ C0] dump_stack_lvl+0x18c/0x250 [ 142.387734][ C0] ? show_regs_print_info+0x20/0x20 [ 142.392977][ C0] ? load_image+0x420/0x420 [ 142.397534][ C0] ? verify_lock_unused+0x140/0x140 [ 142.402771][ C0] ? mark_lock+0x94/0x320 [ 142.407154][ C0] should_fail_ex+0x394/0x4c0 [ 142.411883][ C0] should_failslab+0x9/0x20 [ 142.416444][ C0] slab_pre_alloc_hook+0x59/0x300 [ 142.421520][ C0] ? __lock_acquire+0x1262/0x7d80 [ 142.426586][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 142.431843][ C0] ? __alloc_skb+0x103/0x2c0 [ 142.436477][ C0] __alloc_skb+0x103/0x2c0 [ 142.440935][ C0] __netdev_alloc_skb+0x10c/0x500 [ 142.446004][ C0] ? kmalloc_reserve+0x240/0x240 [ 142.450984][ C0] __ieee80211_beacon_get+0xd5d/0x1520 [ 142.456495][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 142.462115][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 142.467627][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 142.474448][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 142.480066][ C0] __iterate_interfaces+0x225/0x4c0 [ 142.485416][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 142.491743][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 142.499006][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 142.505384][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 142.512451][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 142.517690][ C0] ? hw_scan_work+0xf10/0xf10 [ 142.522404][ C0] __hrtimer_run_queues+0x525/0xc10 [ 142.527656][ C0] ? hrtimer_interrupt+0x980/0x980 [ 142.532811][ C0] ? read_tsc+0x9/0x20 [ 142.536930][ C0] hrtimer_run_softirq+0x177/0x290 [ 142.542087][ C0] handle_softirqs+0x27d/0x820 [ 142.546894][ C0] ? read_tsc+0x9/0x20 [ 142.551091][ C0] ? ktime_get+0x24b/0x280 [ 142.555558][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 142.560365][ C0] ? do_softirq+0x1a0/0x1a0 [ 142.564925][ C0] __irq_exit_rcu+0xd3/0x190 [ 142.569554][ C0] ? irq_exit_rcu+0x20/0x20 [ 142.574104][ C0] irq_exit_rcu+0x9/0x20 [ 142.578389][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 142.584065][ C0] [ 142.587025][ C0] [ 142.589994][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 142.596030][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 142.601359][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 142.621093][ C0] RSP: 0000:ffffc900020afa40 EFLAGS: 00000206 [ 142.627212][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: d63fc25b37c29200 [ 142.635325][ C0] RDX: 0000000000000000 RSI: ffffffff8acadd60 RDI: ffffffff8b1d32e0 [ 142.643329][ C0] RBP: ffffc900020afb48 R08: dffffc0000000000 R09: 1ffffffff223daa0 [ 142.651334][ C0] R10: dffffc0000000000 R11: fffffbfff223daa1 R12: 1ffff92000415f54 [ 142.659339][ C0] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 142.667373][ C0] ? batadv_nc_worker+0xd2/0x600 [ 142.672354][ C0] ? read_lock_is_recursive+0x20/0x20 [ 142.677776][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 142.683024][ C0] ? batadv_nc_worker+0xd2/0x600 [ 142.688005][ C0] ? batadv_nc_worker+0xd2/0x600 [ 142.693003][ C0] batadv_nc_worker+0xef/0x600 [ 142.697807][ C0] ? batadv_nc_worker+0xd2/0x600 [ 142.702820][ C0] ? process_scheduled_works+0x975/0x1600 [ 142.708592][ C0] process_scheduled_works+0xa60/0x1600 [ 142.714208][ C0] ? worker_attach_to_pool+0x370/0x370 [ 142.719712][ C0] ? assign_work+0x3cc/0x5d0 [ 142.724350][ C0] worker_thread+0xa5e/0xfe0 [ 142.728997][ C0] ? _raw_spin_unlock+0x40/0x40 [ 142.733890][ C0] ? __kthread_parkme+0x71/0x1c0 [ 142.738877][ C0] kthread+0x2fa/0x390 [ 142.742982][ C0] ? pr_cont_work+0x550/0x550 [ 142.747702][ C0] ? kthread_blkcg+0xd0/0xd0 [ 142.752331][ C0] ret_from_fork+0x48/0x80 [ 142.756805][ C0] ? kthread_blkcg+0xd0/0xd0 [ 142.761435][ C0] ret_from_fork_asm+0x11/0x20 [ 142.766263][ C0] [ 142.769313][ C1] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted syzkaller #0 [ 142.776667][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.786773][ C1] Workqueue: usb_hub_wq hub_event [ 142.791849][ C1] Call Trace: [ 142.795162][ C1] [ 142.798050][ C1] dump_stack_lvl+0x18c/0x250 [ 142.802775][ C1] ? show_regs_print_info+0x20/0x20 [ 142.808098][ C1] ? load_image+0x420/0x420 [ 142.812645][ C1] ? verify_lock_unused+0x140/0x140 [ 142.817878][ C1] ? mark_lock+0x94/0x320 [ 142.822246][ C1] should_fail_ex+0x394/0x4c0 [ 142.826973][ C1] should_failslab+0x9/0x20 [ 142.831516][ C1] slab_pre_alloc_hook+0x59/0x300 [ 142.836594][ C1] ? __lock_acquire+0x1262/0x7d80 [ 142.841672][ C1] kmem_cache_alloc_node+0x5e/0x310 [ 142.846916][ C1] ? __alloc_skb+0x103/0x2c0 [ 142.851548][ C1] __alloc_skb+0x103/0x2c0 [ 142.856020][ C1] __netdev_alloc_skb+0x10c/0x500 [ 142.861098][ C1] ? kmalloc_reserve+0x240/0x240 [ 142.866079][ C1] __ieee80211_beacon_get+0xd5d/0x1520 [ 142.871599][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 142.877213][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 142.882777][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 142.889584][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 142.895173][ C1] __iterate_interfaces+0x225/0x4c0 [ 142.900428][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 142.906709][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 142.913941][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 142.920209][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 142.927266][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 142.932493][ C1] ? hw_scan_work+0xf10/0xf10 [ 142.937193][ C1] __hrtimer_run_queues+0x525/0xc10 [ 142.942480][ C1] ? hrtimer_interrupt+0x980/0x980 [ 142.947638][ C1] ? read_tsc+0x9/0x20 [ 142.951750][ C1] hrtimer_run_softirq+0x177/0x290 [ 142.956898][ C1] handle_softirqs+0x27d/0x820 [ 142.961687][ C1] ? read_tsc+0x9/0x20 [ 142.965786][ C1] ? ktime_get+0x24b/0x280 [ 142.970231][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 142.975023][ C1] ? do_softirq+0x1a0/0x1a0 [ 142.979551][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 142.984883][ C1] __irq_exit_rcu+0xd3/0x190 [ 142.989530][ C1] ? irq_exit_rcu+0x20/0x20 [ 142.994075][ C1] irq_exit_rcu+0x9/0x20 [ 142.998345][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 143.004007][ C1] [ 143.006961][ C1] [ 143.009914][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.015919][ C1] RIP: 0010:console_flush_all+0x883/0xcf0 [ 143.021682][ C1] Code: ed 01 00 00 e8 fe 7e 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 ef 7e 1b 00 eb 06 e8 e8 7e 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 143.041323][ C1] RSP: 0018:ffffc900001d7160 EFLAGS: 00000287 [ 143.047452][ C1] RAX: ffffffff816bf338 RBX: ffffc900001d72df RCX: 0000000000100000 [ 143.055468][ C1] RDX: ffffc90017cda000 RSI: 00000000000124ab RDI: 00000000000124ac [ 143.063468][ C1] RBP: ffffc900001d72b0 R08: ffffffff911ed577 R09: 1ffffffff223daae [ 143.071467][ C1] R10: dffffc0000000000 R11: fffffbfff223daaf R12: ffffffff8d8cd680 [ 143.079467][ C1] R13: 1ffffffff19f96d8 R14: ffffffff8d8cd6d8 R15: dffffc0000000000 [ 143.087472][ C1] ? console_flush_all+0x878/0xcf0 [ 143.092630][ C1] ? console_flush_all+0x10b/0xcf0 [ 143.097776][ C1] ? is_console_locked+0x20/0x20 [ 143.102742][ C1] ? lock_chain_count+0x20/0x20 [ 143.107631][ C1] ? __down_trylock_console_sem+0xf6/0x1f0 [ 143.113470][ C1] console_unlock+0xad/0x350 [ 143.118090][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 143.123148][ C1] vprintk_emit+0x497/0x610 [ 143.127684][ C1] ? printk_sprint+0x460/0x460 [ 143.132483][ C1] ? vscnprintf+0x80/0x80 [ 143.136982][ C1] ? stack_trace_save+0xaa/0x100 [ 143.142491][ C1] dev_vprintk_emit+0x339/0x3f0 [ 143.147388][ C1] ? _dev_info+0x170/0x170 [ 143.151847][ C1] dev_printk_emit+0xef/0x140 [ 143.156565][ C1] ? dev_vprintk_emit+0x3f0/0x3f0 [ 143.161741][ C1] ? mark_lock+0x94/0x320 [ 143.166130][ C1] ? dev_vprintk_emit+0x3f0/0x3f0 [ 143.171199][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 143.177220][ C1] ? __dev_printk+0x131/0x190 [ 143.181931][ C1] ? __dev_printk+0x131/0x190 [ 143.186642][ C1] _dev_info+0x11f/0x170 [ 143.190916][ C1] ? parport_read+0x20/0x20 [ 143.195451][ C1] ? parport_read+0x20/0x20 [ 143.199986][ C1] ? usb_detect_static_quirks+0x42e/0x470 [ 143.205744][ C1] usb_new_device+0x4a6/0x1550 [ 143.210534][ C1] ? lock_chain_count+0x20/0x20 [ 143.215412][ C1] ? usb_disconnect+0x8a0/0x8a0 [ 143.220291][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.225518][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 143.230756][ C1] hub_event+0x29d5/0x4a80 [ 143.235242][ C1] ? hub_post_resume+0x120/0x120 [ 143.240209][ C1] ? read_lock_is_recursive+0x20/0x20 [ 143.245623][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 143.250861][ C1] ? process_scheduled_works+0x975/0x1600 [ 143.256612][ C1] ? process_scheduled_works+0x975/0x1600 [ 143.262394][ C1] process_scheduled_works+0xa60/0x1600 [ 143.267992][ C1] ? worker_attach_to_pool+0x370/0x370 [ 143.273504][ C1] ? assign_work+0x3cc/0x5d0 [ 143.278137][ C1] worker_thread+0xa5e/0xfe0 [ 143.282778][ C1] kthread+0x2fa/0x390 [ 143.286872][ C1] ? pr_cont_work+0x550/0x550 [ 143.291574][ C1] ? kthread_blkcg+0xd0/0xd0 [ 143.296210][ C1] ret_from_fork+0x48/0x80 [ 143.300658][ C1] ? kthread_blkcg+0xd0/0xd0 [ 143.305290][ C1] ret_from_fork_asm+0x11/0x20 [ 143.310094][ C1] [ 143.512791][ T28] audit: type=1800 audit(1787002422.638:36): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.334" name="idProduct" dev="configfs" ino=10688 res=0 errno=0 [ 143.538724][ T28] audit: type=1800 audit(1787002422.658:37): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.334" name="configuration" dev="configfs" ino=10040 res=0 errno=0 [ 143.632179][ T23] kaweth 1-1:1.0: Downloading firmware... [ 143.722675][ T6860] fuse: Bad value for 'fd' [ 143.728535][ T23] usb 1-1: Direct firmware load for kaweth/new_code.bin failed with error -2 [ 143.746056][ T23] usb 1-1: Falling back to sysfs fallback for: kaweth/new_code.bin [ 144.864770][ T23] kaweth 1-1:1.0: Firmware request failed [ 144.887425][ T23] kaweth 1-1:1.0: Error downloading firmware (-110) [ 144.895588][ T23] kaweth: probe of 1-1:1.0 failed with error -5 [ 145.966384][ T6915] fuse: Bad value for 'fd' [ 146.378569][ T5780] usb 1-1: USB disconnect, device number 2 [ 146.947367][ T6942] fuse: Bad value for 'fd' [ 149.869074][ T6995] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 149.883939][ T6996] fuse: Bad value for 'fd' [ 150.010841][ T6995] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 151.252842][ T7037] nvme_fcloop: fcloop_set_cmd_drop: DROP: Starting at instance 0 of fabric opcode x1 drop +0 instances [ 151.337091][ T7037] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 151.944953][ T7061] fuse: Bad value for 'fd' [ 152.531803][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 153.721455][ T7096] general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN [ 153.733261][ T7096] KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f] [ 153.741758][ T7096] CPU: 0 PID: 7096 Comm: syz.0.408 Not tainted syzkaller #0 [ 153.749090][ T7096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.759213][ T7096] RIP: 0010:acpi_fan_probe+0x116/0xef0 [ 153.764841][ T7096] Code: 00 4c 89 ff ba c0 0d 00 00 e8 b6 99 c1 00 48 85 c0 0f 84 3e 04 00 00 4c 89 7c 24 68 4c 8d bb 58 02 00 00 4d 89 fe 49 c1 ee 03 <43> 80 3c 2e 00 48 89 44 24 18 74 0d 4c 89 ff e8 86 f7 4f fd 48 8b [ 153.784501][ T7096] RSP: 0018:ffffc900035b7940 EFLAGS: 00010206 [ 153.790700][ T7096] RAX: ffff88802685cf28 RBX: 0000000000000000 RCX: 0000000000000000 [ 153.798748][ T7096] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 00000000ffffffff [ 153.806748][ T7096] RBP: ffffc900035b7b40 R08: ffffffff911ed5b7 R09: 1ffffffff223dab6 [ 153.814748][ T7096] R10: dffffc0000000000 R11: fffffbfff223dab7 R12: ffff8881412f3000 [ 153.822752][ T7096] R13: dffffc0000000000 R14: 000000000000004b R15: 0000000000000258 [ 153.830765][ T7096] FS: 00007ffb2a11f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 153.839723][ T7096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.846333][ T7096] CR2: 000000110c32ef33 CR3: 000000002f10c000 CR4: 00000000003506f0 [ 153.854336][ T7096] Call Trace: [ 153.857636][ T7096] [ 153.860591][ T7096] ? kernfs_add_one+0x149/0x6b0 [ 153.865473][ T7096] ? of_clk_set_defaults+0x2b0/0x6d0 [ 153.870787][ T7096] ? __lock_acquire+0x7d80/0x7d80 [ 153.875832][ T7096] ? down_write+0x16e/0x200 [ 153.880451][ T7096] ? down_read_killable+0x340/0x340 [ 153.885680][ T7096] ? acpi_fan_get_fst+0x3a0/0x3a0 [ 153.890726][ T7096] ? up_write+0x1be/0x410 [ 153.895086][ T7096] ? kernfs_add_one+0x149/0x6b0 [ 153.899976][ T7096] ? kernfs_put+0x309/0x360 [ 153.904512][ T7096] ? is_acpi_device_node+0x26/0x60 [ 153.909739][ T7096] ? acpi_dev_pm_attach+0xeb/0x290 [ 153.914897][ T7096] platform_probe+0x13b/0x1c0 [ 153.919603][ T7096] ? platform_uevent+0xb0/0xb0 [ 153.924484][ T7096] really_probe+0x247/0xae0 [ 153.929016][ T7096] ? pm_runtime_barrier+0x14b/0x1c0 [ 153.934255][ T7096] __driver_probe_device+0x1f5/0x390 [ 153.939585][ T7096] device_driver_attach+0xe0/0x1d0 [ 153.944771][ T7096] bind_store+0x1cc/0x210 [ 153.950126][ T7096] ? sysfs_kf_read+0x360/0x360 [ 153.954913][ T7096] kernfs_fop_write_iter+0x3a4/0x520 [ 153.960231][ T7096] vfs_write+0x474/0x9a0 [ 153.964519][ T7096] ? file_end_write+0x250/0x250 [ 153.969405][ T7096] ? __fget_files+0x3fc/0x460 [ 153.974131][ T7096] ? __fdget_pos+0x2a3/0x330 [ 153.978795][ T7096] ? ksys_write+0x74/0x260 [ 153.983243][ T7096] ksys_write+0x151/0x260 [ 153.987603][ T7096] ? __ia32_sys_read+0x90/0x90 [ 153.992391][ T7096] ? lockdep_hardirqs_on+0x98/0x150 [ 153.997625][ T7096] do_syscall_64+0x55/0xb0 [ 154.002071][ T7096] ? clear_bhb_loop+0x40/0x90 [ 154.006788][ T7096] ? clear_bhb_loop+0x40/0x90 [ 154.011491][ T7096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.017406][ T7096] RIP: 0033:0x7ffb2919e0d9 [ 154.021855][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.041487][ T7096] RSP: 002b:00007ffb2a11f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 154.049928][ T7096] RAX: ffffffffffffffda RBX: 00007ffb29425fa0 RCX: 00007ffb2919e0d9 [ 154.057927][ T7096] RDX: 0000000000000006 RSI: 0000200000000400 RDI: 0000000000000004 [ 154.065945][ T7096] RBP: 00007ffb29235024 R08: 0000000000000000 R09: 0000000000000000 [ 154.073932][ T7096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.081926][ T7096] R13: 00007ffb29426038 R14: 00007ffb29425fa0 R15: 00007ffe30fc6888 [ 154.089928][ T7096] [ 154.092975][ T7096] Modules linked in: [ 154.134770][ T7096] ---[ end trace 0000000000000000 ]--- [ 154.140330][ T7096] RIP: 0010:acpi_fan_probe+0x116/0xef0 [ 154.148439][ T7096] Code: 00 4c 89 ff ba c0 0d 00 00 e8 b6 99 c1 00 48 85 c0 0f 84 3e 04 00 00 4c 89 7c 24 68 4c 8d bb 58 02 00 00 4d 89 fe 49 c1 ee 03 <43> 80 3c 2e 00 48 89 44 24 18 74 0d 4c 89 ff e8 86 f7 4f fd 48 8b [ 154.171750][ T7096] RSP: 0018:ffffc900035b7940 EFLAGS: 00010206 [ 154.178193][ T7096] RAX: ffff88802685cf28 RBX: 0000000000000000 RCX: 0000000000000000 [ 154.208253][ T7096] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 00000000ffffffff [ 154.220828][ T7096] RBP: ffffc900035b7b40 R08: ffffffff911ed5b7 R09: 1ffffffff223dab6 [ 154.233303][ T7096] R10: dffffc0000000000 R11: fffffbfff223dab7 R12: ffff8881412f3000 [ 154.241450][ T7096] R13: dffffc0000000000 R14: 000000000000004b R15: 0000000000000258 [ 154.250089][ T7096] FS: 00007ffb2a11f6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 154.259424][ T7096] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.267048][ T7096] CR2: 0000555588134a78 CR3: 000000002f10c000 CR4: 00000000003506e0 [ 154.275415][ T7096] Kernel panic - not syncing: Fatal exception [ 154.282082][ T7096] Kernel Offset: disabled [ 154.286416][ T7096] Rebooting in 86400 seconds..