last executing test programs: 8.755155423s ago: executing program 2 (id=944): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 7.350324974s ago: executing program 2 (id=949): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r3, &(0x7f0000000100)=""/107, 0x6b) write$nci(r3, &(0x7f0000000100)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x4b, 0x4, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @broadcast, {[@end]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffe18b, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xd, 0xb, 0xf, 0x3, 0x16, "43db4c9554938a92b052134851317440023bd9"}) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000740)=0x1004af) socket$inet6(0xa, 0x3, 0xfa) 5.526379448s ago: executing program 0 (id=964): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8b93, 0x7, 0x5}, 'syz0\x00', 0x53}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="400000000214010028bd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB="0800010002080070db9b160000000000080001000000000005f619a48959b9d4e600000000000000010000000800010000000000135e0c8a01c2c32c1d20f09bda155c090f7a4b787b51885f24d47cd63e93eef2a15c798e09a8375cf7f13de7e8aa79da8c20082cd907e056f52788d067c8c791c64f4e40c79f9e9bf0148cc38ec6"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 4.588053995s ago: executing program 0 (id=969): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x7fffffd, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 4.518045213s ago: executing program 1 (id=970): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x8, 0x6, 0x80, 0x2, 0x1, {0x1}}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xf, 0x6, 0x4, 0x0, @mcast1, @private1, 0x7, 0x7800, 0x9, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000600)={0x3, 0x4efb, 0x10, 0xfffc}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x8000) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000840), 0x143082, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000008c0)={'nicvf0\x00'}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000900)=0x1, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000bc0)={{r0}, 0x0, 0x10, @unused=[0x1, 0x8, 0x4, 0x1], @name="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"}) 4.402414261s ago: executing program 3 (id=971): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 4.282729909s ago: executing program 1 (id=972): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x24, r4, 0x48334cf00147764d, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044880}, 0x20000000) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x43, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.814173343s ago: executing program 0 (id=973): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) mkdirat(r2, 0x0, 0x2) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) 3.79688963s ago: executing program 3 (id=974): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x7fffffd, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x7ffffffffff) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3.774734775s ago: executing program 1 (id=975): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4c21, @empty}, 0x10) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x200, 0x9, 0x8602, 0x7, 0x0, 0x5, 0x2}, &(0x7f0000000280)=0x20) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) r6 = socket(0x1a, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000100)) syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16=r5, @ANYRES8=r6, @ANYBLOB="05000000010000000300"/25, @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESDEC], 0x50) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="05"], 0x10) 3.371605941s ago: executing program 3 (id=976): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 3.336083445s ago: executing program 1 (id=977): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0x0, 0x8b93, 0x7, 0x5}, 'syz0\x00', 0x53}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_clone3(&(0x7f0000000240)={0x100202000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x9}, &(0x7f0000000340)=""/233, 0xe9, &(0x7f0000000140)=""/73, &(0x7f0000000200)=[0x0]}, 0x58) sched_setaffinity(r6, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002240)=ANY=[@ANYBLOB="400000000214010028bd7000fcdbdf2508004400", @ANYRES32, @ANYBLOB="0800010002080070db9b160000000000080001000000000005f619a48959b9d4e600000000000000010000000800010000000000135e0c8a01c2c32c1d20f09bda155c090f7a4b787b51885f24d47cd63e93eef2a15c798e09a8375cf7f13de7e8aa79da8c20082cd907e056f52788d067c8c791c64f4e40c79f9e9bf0148cc38ec6"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x40) read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x16a2) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 3.242740737s ago: executing program 2 (id=978): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 3.191786708s ago: executing program 3 (id=979): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, 0x0, &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 3.152195441s ago: executing program 0 (id=980): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x6000, @fd, 0x8, 0x6, 0x80, 0x2, 0x1, {0x1}}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x4, 0xf, 0x6, 0x4, 0x0, @mcast1, @private1, 0x7, 0x7800, 0x9, 0x8}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000600)={0x3, 0x4efb, 0x10, 0xfffc}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={0x0}}, 0x8000) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x143082, 0x0) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000008c0)={'nicvf0\x00'}) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000900)=0x1, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000ac0), 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000bc0)={{r0}, 0x0, 0x10, @unused=[0x1, 0x8, 0x4, 0x1], @name="63eb27a90758e78b4d758b8ea2a2cbd028e0a8aa3cfa77f99b8bb8accefc4f8d4a41047be7458aba1363432b3490b9dba51b7920f3a102e12a178189cc57df6008d8b8cbb081b862e28699d6701bc9b6a1d3e9a9c98f7f1b4f6fe927fad2c6aacfe84a7540fa8e02d8dd15a630636cd186693668c0905cd3743f8c5a976edc40ea3c9054fa7218202498905c868df74c628993d0c67cbcb86ebbdc9cc893c28f5d7595068cd48eec7b7f9a290d95491fef7b63ebbf5d2c9047105c3f3b13c7f6fd9b9599fe51c4a8532a64136dd3ecdd265cf02e1bbbf54ce42e101f95b5162189246751a73c75de8f3c01b93af0e969ad50ef9c8af3190aaa26bd3429094aabf430039d23fe9977bce9822b76a1cce23230e666773a9ab5ade2833a1bd982ac89a7e7c78a035032fadea245d9c0f30a374e544314de485a6e923a6673883af83f710c287884a4afc3ed86a3ad116c7d80dea77c37d730b47db5d9dd98dfd802065c33d15f3723dc272e4583b0c1e83a288e88ff31be9c00ce40616802ab50f8fcbb289d4a4d1b3d4648d42a2e7ab4e55e5ee4eb7d82aebd557e93cc5866201cb387bd8372a3d8432f4dfa646067b1ab5ec4835976b14045e6148f9e71e8af74676569cbb860aa23352485f8597c88ac89bd5314bfe844d58c99fdbdc3bb36506c2229e35bec827f28c0ec9d246631d1e85ff09e37db725c1f230cf091cd2c100feb1a391061cefee0be1ad2b603497ba7c3b7ab9690eb5465a324774e0f38b565fc469afdc15b1e1097c0593c8f9e4043411bd35b743f9568028c8b89fc0d16d16ecc56f16a13f401be8a7b97f7d8c64fdb878a65a8e86ad5466daad02eb3cf68a788afd51f627e2a09447c7f64b000e2af066fcbd731be68dfdb147f004f327c2d0a6f44bb79b064116b96f9bc87f51375db1c3f4c2f4654c7d1a0810ddabdbd1629946d36e49044ee5503e8221dc2ef9d318613f2bf27b21875f43727128193a839c35404b31823fcbbbf01deb936de9ecd295c15341e62c27f1c6635bd73e919114d86d708696d1df5834bba0899d900f2f06017a5f13b055cb531e7f58f467e667c72c5c7eedcba4d1985daed1c8b73d6d9973cf2160f3dfd55e67efa46163d5db6fd5b383f7fcab7924b3bec5e11552a6155f30e404d20b6550e53b12865ab93c30fd052cfd16abcc67b7366ba66c00b564a0b75be1abef2b484e1a2cdf75379aa88fe20a5545772e34b9d10e6004e0effea70d41060ad446055021039a8ca7691731c0a2c9c0a25b4d4730a8681d0701e4d8c16e8439f77df1f33b4c6661f9d53a1e3fcf233da6b7fb2ee8b5b9b6593616b9deb62461dcceee3c024231e226e91bd36cee656f79b26b61f613b101ba76a82f10582598465bd6b51d7b5f1073c187777527a6737ecae961a1b1bd2cd058fd034945ee801e94ee96bd7bb2197836594385ad43f3569bd1ce2925453c9d8dc2eb30bae026c58bf01354f5581f53e8f3a4260273b943557d26f2b830469511c9e4131c4d97c877a4d828b59813b39864ed87336003abddbbc40249a87554aca9e822c72f2de5a4d94a78376a680fa1cb7180a557d3491a9b7cd5c4a91affe103b7453854878cfc0f2845275e247e80cc0468fe4a7200681f0f443547bc39dd105b3b1732e2995aeb1e189dbf54e276289618017a6ce1a0fd6f7fa04a2eda903fc8a4dd239a0853bad66bef30224156880ce1c156c8b9a4b5293c006d224923968eef536c5310c1a260552dd681a8bec26fca26993c51a5e79f247ea2bcd237b65a6bda64238d86ebb70d7d831fc6172c6b4c5d94d3d04d270062ec659521e965753600decb52aa0e42f6426fc8d8c2de0e2cc2eaabd2b599ebb6b2df34f1e9ba46e61c3e9bbb09c8d8fe2149d16b7d8f3a7aa9ee2cf00d335551b655a742b9a9df3c9af3b5defeec2b2cf6a18edd2bc906670092c40f7e02882c40ee97c5a9258aa2e19937a8a7728b2147387ee65fb6c73b4d34fff0a1afbdfe264cb0ca93effce86dd055e7615d4a11ca8000e86ada2588283ddeaf01022189bf09c00a4716dfe209bd598829ff179c5f2581b9832021c2fa129ab84d0d9bd4cbe421123ffd955df7cc2b1ebef4e63cc68d049b60656731a9240ebe6e08e318bd4aed839d9793ce4e5080ba539922eb9ad0ac821c55f6199f181aeb78b5c46cc733ec55dcd10b1170bf7192ce892942a4ce9c7e3dccd2639b60588dbe0bf466a7441a4f80f1ee66525b30f7b97ab75705c3430689612f6e9c8fbd66947b7a8abb4e1a2a6870d880593a0cc1dea3e0c113cfdddd9bfd2f8c809e4a41a0cd154062334f1ca016f9c15727584fff91677d74503280c94d4b9d16aaec9d25de6533519ddd90b043d9d388d50d77a579c8739649f0593f71672058617c2393355f83ba4fe4ad9252fcfca7561383884b8a58e4271961c5c8a77549dd067423a6d4ec357a2562bd3a756a2781af96c77542b332e062a1de445683a869dc932dbe391b8482c6e1bbbb907e649bbd69997c2170d8022d63ac33afa538ab3231a7c318d335b9bb4cc1d50ad33d29106e965f11a3ace97532ede9c2cc6849691657e7b529bfc717b014ccbc25dffe711a302e51124d28ecd901e0bc14ff8ebcd6ef58af2609b2a58abcd3dcf9c2c01d44425b88f81ddb043156c3cd26153d1a49e8ef16cd36a8e1b7431133206b5be0f44ff3c357b03b0c11eabe43ccabf30a1de9eb481a4cb9522c3b103367cbb255e655fedc967d22f94b2feabe83c1a5c50aab0adb8ec93d8cb9f30ebe02140e407b1fbe525635492d106698c9fd8f6b5591960067cb378becb297506b991e8185ade6aec81c14a45075298475b29f278241467563790fe3baf691cb3cc453fe414de077cff3ab856b31bbd133b8bc434abe6bbaf5e08a981c648a8c15b95292335c20cf5f77f8b7734e7ce3a804f5d7e15d7c2223dd97cdfbb5307337ba988358180b3e248bb6c46278157bfe6549debcdf1313370e6d3aac8a6095befa658039007002343a06b644b1d0b2fd7c11edab85fa06c8402bfa20e11261d53de586cfd8d30231bb9bc3272f742584de90b3d9aef0446a6a9bca7a8d03d9149627dcfab398a1325ded8fbfdb9d6a7edfe77918ea61d07987e4975d51cbf87b17bdce67a3ae9bcbff4e971b28b7229b3e906e5fe148350ec4898465cd37605a1124e7bb5532fd7dec2b7a0cb60fe2fd7233fb1eab7c5be219b9f24510c8f357fe979caf27cb0ef909c3003cea7808fb8525d021e4734ffb8a439022fd84a8cdeb0edfc6c309e613ea079409e22d22016f8659065702f5ab94e21e1a3088e25dcf86957ea8d2cee566bdfa7fc9f996f6e024752685d63459a90e7da61e33b5fa52f10748565b34941f108a9e58be103af79597c1e0d388d579f3b1f30696db863a95224c31e50bba6529a13d0ecad53e3d875e9d17c0883be182a3833bec205b54dd01ce19cd5166a79388938c7dbfee1424d4b3ea1c37d74c10830a6caf6a64419ff4bd5b35eac88752f8d8a415892e8044c8185092b568f2a8305e6e39ea52f68a7152afe50b8cbeff9596508b8b2d06143ef5a5308b17ba957d9647c6434ab92489e1749a48e25f4ca34d650b877719a46ca74a22a68db2374fba3ff9260b1f93765b31a2d59630c360b099965ea65d4664716cc361a15b65f456914288bb1fe10c06fd05cb11b039429343b4fe94ece708d6b52e3647e54a78f10195265b5ade75b306fd9637f52e79af51ff676ea6963bb5a41141251eb72cff18d4d3c99d99d8f3e2a032f0de2177007ffa3ed07c02868fc86418d9422325666d72028fc6c0df769845e513f2a5e52ba8a7da85a52389d0e12d046fc3d2400304223cba53946de523ec5071ddf25544eb1f9cd6762f3b8aa761fe2af48173d9eb05eac714071490eb52c46104c5cf5fc283bec8e3ba641052e44f7628897a22aa29902144e31ee29e4662d8f54a454933a2351322324d64434513d0c6f69a05095d769f34e81c0045e5fe95dc594268715294549b8de357a366b19a2fb5293de809f07fdb3501b9a46a414dccc562aa5684300aef1b0fa78348e7e4dba28e536c370ced3c898630a1c417400ae58763690a90bb812af05a3656f9207b95516733facd527d866d0ebf8a252b2ca2b11f1c4ad6434ff6902ff6e84bc7d2fc4ba78952480e6711812f5297597f974c92ff5ff478e2b44be7654cdc9f9e22605c035f5e923d86ac7bd02c25c113705e7098c1146d244ffb564eb8bcc1ca659ff56bdbb6a5c77b987b7d6fb32c5344a5be82a4c044284e62a42c51739eb5f3a8490b3bf2df0395e5787deda45ae709b12cf6905a17a4462996f90ec61dbee98844b1f89e0686a326ff98aa2e0dab23bfdf4e2a828bf6e3fcf06ca30b5ef14e1ca7a0a26bb59aef1ce0933cbef37099b55b79b97336f6940a3ab6ea3f720be34a6bba6099cef93f790c7441dc2b47317effe35ee3be26919920d0634851d9775aafb75c8f15b04ef78621fd0bfd29e3dc45fb0d92a11aa8d1f7d9d2213b708111095251a4f5f6244bfd9d25c20a0c01158f8f5c77f734e57fe8364d98df4eba103da494865fc3b129fefe52e30494cc9c1fadf2c6bd48d3c2621fe17d4adfcaad4d997d94ddface28ff48feebad9febdc9065661a9711d9f22843e1789c6e866a0c2c04a7501ae92dd94c724687815bd8c3f1b3168884371fc659aae2041ec949c42128dd147b48a41ecae55f37fba14ecd2fd195747cb5eeb1a70a9848f22ca799ca541559900df89debcf677c53b71d6c7a3451249945433d43777c252bfa03e7f5a349948be9a2fcc8fd5d08674628839f5ca5bcf12b7ced5fb955acf24dcb83f940c582e31ead9976c661ee2e22c9b31119e0e3a14e325f2998ae961cef1d0a3df4fe027c5faa8bac34137ef845f3bb5fe681bfe51123f380d61db6d5be8f78fbc6696523ce7ba099fa64d8ea24417396bf2531d0feb17425454c03703a1df353a8b0193acf40c121aa16a867828bbc59d453d81df16e48f6314ab3809c278419c7be190e236b218adb3af823bb29695c108d9a0456d083161911d4b9f1a7ec134045540f20a2fff27f6c05847d39e2853586015466aef2d777b719ad8ba6baa8e6776ce015316c215a26fb9d97db3a3e8a983d97f2a224ef5f5e1d600c0018a86d1364ba8ebdc11ae7d2632edd270a785fcaedeaa570abfb9f1b0bf1ef9ada8c3d633c60281b15877db700d0b21d19ae8bcccc76e00f0a3c7225533c3ada7a557ccf7bd2ce2ec58bd89c1f2fd24a96b3b13be496868a5175dba61f5232a1be2bf9a57aef6e1da8455d0154e854ae62c7df749ff6bcef5c13e24c3e5034d408c025c4e570d884e371314275f75c8018f0e649dab20cc71a9352d59739788bee0e0eda4a0c69fefb7eb84b46b4a62ba6e081cee30e7e1b916f23aa79b243e8ddfdd270414b2e45cee5f91db691460155deea0d9e27d192c2d16fca3bd021bad3502a0380cf8d55e7f1c32557058a1c1c10b38d9946e24d754da9e695820794073ee5daa326c5dbee9735e6df7948cff1cbcee597abda45176c0cfbf12c78914823556446369ec44b914ad706bd40bccaac21a1dfe24ed9c2202fc6b92d785bd76db3d56cca7f7dead9a3fe791a49a754aeb6a168b125fb624d080db81933ba304a0d45b7ce4973535ec2d41d558ac6410ac1b6a6a66c4b6"}) 1.414459901s ago: executing program 2 (id=981): socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000000094060000000000000004000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 1.282847897s ago: executing program 3 (id=982): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) write$tun(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)="e57b2098eebbf00e85c066cd616ac4c7f7aad46ad25398631c11a50d045d08af9c20922a4d95b0e6f376a6acf9baffa30229d37793c31505429b9aeb02ebbce4a2", 0x41}], 0x1, &(0x7f0000000b40)=ANY=[], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 1.282371666s ago: executing program 2 (id=983): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) read$eventfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x7fffffd, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 1.271765175s ago: executing program 1 (id=984): r0 = socket$inet(0xa, 0x801, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000000)=[{0x3, 0x0, [0x2dd9, 0x0, 0x40, 0x5, 0xfffffff7, 0xf, 0xa, 0x6, 0x8, 0x1a82, 0x5, 0x1, 0x5, 0xbe, 0x6, 0x100]}, {0xf, 0x0, [0x6, 0x631d, 0x6f0, 0x6, 0x401, 0x7fff, 0x7, 0x1000, 0x3d492b6a, 0x4, 0x5, 0xa8d, 0x1, 0x100, 0x5, 0x416]}], r2, 0x1, 0x1, 0x90}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0xffffffffffffff1a, &(0x7f0000000580)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1a, 0x0, 0x0, 0x4}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.150413792s ago: executing program 0 (id=985): bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095"], 0x0}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000000c0)="8907040400", 0x5) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4c21, @empty}, 0x10) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x200, 0x9, 0x8602, 0x7, 0x0, 0x5, 0x2}, &(0x7f0000000280)=0x20) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) r6 = socket(0x1a, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, 0x0, &(0x7f0000000100)) syz_open_dev$MSR(&(0x7f0000000000), 0x7, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT, @ANYRES64, @ANYRES16=r5, @ANYRES8=r6, @ANYBLOB="05000000010000000300"/25, @ANYRESHEX=0x0, @ANYRES8=r1, @ANYRESDEC], 0x50) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="05"], 0x10) 108.23322ms ago: executing program 3 (id=986): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r3, &(0x7f0000000100)=""/107, 0x6b) write$nci(r3, &(0x7f0000000100)=ANY=[], 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x4b, 0x4, {{0x6, 0x4, 0x2, 0x10, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @loopback, @broadcast, {[@end]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffe18b, 0x10000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000180)=""/117, 0x75}], 0x1) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x0, "ff0000bb719b98fb73e53a0000000600"}) ioctl$TCSETS(r5, 0x5402, &(0x7f00000000c0)={0xd, 0xb, 0xf, 0x3, 0x16, "43db4c9554938a92b052134851317440023bd9"}) ioctl$BTRFS_IOC_QUOTA_CTL(r5, 0xc0109428, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000740)=0x1004af) socket$inet6(0xa, 0x3, 0xfa) 30.923686ms ago: executing program 1 (id=987): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) 7.963002ms ago: executing program 2 (id=988): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, &(0x7f00000001c0)) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1}) close(r2) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYRES16], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r4 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000900)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8d", 0xc0}, {&(0x7f0000000580)="1eba162ae4d66b52c84118b56f98df27687325686ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca760207dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc", 0xa3}, {&(0x7f0000000100)="2ed16bcb5f550dd798641dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c944762dfa163589f08fc8a8e", 0x34}, {&(0x7f0000000640)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d104c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}, {0x0}, {&(0x7f0000000480)="0ac5cb5b410458f4eef9408ad1ccf5f5bdd5b95f3381d31f8eb49e5bcbc635e6", 0x20}], 0x6) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r7, {0x1}}, './file0\x00'}) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0xef, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 0 (id=989): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a"], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r2, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$loop(0x0, 0xb8a, 0x18b80) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000340)) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x16) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000440)=[0x0], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000040), 0x0, 0x300}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.175' (ED25519) to the list of known hosts. [ 70.986339][ T5753] cgroup: Unknown subsys name 'net' [ 71.153162][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.759126][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.765797][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.851574][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.409268][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.418186][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.426997][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.434880][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.443999][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.452529][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.459834][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.460304][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.475811][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.479628][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.483581][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.497648][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.498404][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.508831][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.525647][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.533398][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.541097][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.546688][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.556554][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.564701][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.572237][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.580261][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.588622][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.596851][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.052589][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 75.071545][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 75.104516][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 75.169655][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 75.302854][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.310258][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.318164][ T5765] bridge_slave_0: entered allmulticast mode [ 75.325054][ T5765] bridge_slave_0: entered promiscuous mode [ 75.371331][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.379077][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.386957][ T5768] bridge_slave_0: entered allmulticast mode [ 75.393872][ T5768] bridge_slave_0: entered promiscuous mode [ 75.401557][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.409024][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.416930][ T5765] bridge_slave_1: entered allmulticast mode [ 75.424689][ T5765] bridge_slave_1: entered promiscuous mode [ 75.437423][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.444883][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.452522][ T5766] bridge_slave_0: entered allmulticast mode [ 75.459575][ T5766] bridge_slave_0: entered promiscuous mode [ 75.468719][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.476200][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.483345][ T5768] bridge_slave_1: entered allmulticast mode [ 75.490994][ T5768] bridge_slave_1: entered promiscuous mode [ 75.530148][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.537501][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.544755][ T5766] bridge_slave_1: entered allmulticast mode [ 75.552362][ T5766] bridge_slave_1: entered promiscuous mode [ 75.590532][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.609809][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.617150][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.624299][ T5767] bridge_slave_0: entered allmulticast mode [ 75.631506][ T5767] bridge_slave_0: entered promiscuous mode [ 75.653869][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.665279][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.683080][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.692860][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.700839][ T5767] bridge_slave_1: entered allmulticast mode [ 75.710233][ T5767] bridge_slave_1: entered promiscuous mode [ 75.719137][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.731566][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.774942][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.806590][ T5765] team0: Port device team_slave_0 added [ 75.834353][ T5768] team0: Port device team_slave_0 added [ 75.844168][ T5768] team0: Port device team_slave_1 added [ 75.851728][ T5765] team0: Port device team_slave_1 added [ 75.869124][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.888302][ T5766] team0: Port device team_slave_0 added [ 75.897112][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.927069][ T5766] team0: Port device team_slave_1 added [ 75.934551][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.941838][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.968248][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.008460][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.015592][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.041747][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.063478][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.070538][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.097269][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.129040][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.136492][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.163282][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.197352][ T5767] team0: Port device team_slave_0 added [ 76.203946][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.211049][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.237770][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.257549][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.264542][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.293253][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.335623][ T5767] team0: Port device team_slave_1 added [ 76.375339][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.384535][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.415875][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.432801][ T5765] hsr_slave_0: entered promiscuous mode [ 76.440015][ T5765] hsr_slave_1: entered promiscuous mode [ 76.461994][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.469287][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.496316][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.527561][ T5768] hsr_slave_0: entered promiscuous mode [ 76.534054][ T5768] hsr_slave_1: entered promiscuous mode [ 76.540874][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.549313][ T5768] Cannot create hsr debugfs directory [ 76.566366][ T51] Bluetooth: hci0: command tx timeout [ 76.619074][ T5766] hsr_slave_0: entered promiscuous mode [ 76.625587][ T5766] hsr_slave_1: entered promiscuous mode [ 76.632261][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.640607][ T51] Bluetooth: hci2: command tx timeout [ 76.645922][ T5771] Bluetooth: hci1: command tx timeout [ 76.646561][ T5775] Bluetooth: hci3: command tx timeout [ 76.658275][ T5766] Cannot create hsr debugfs directory [ 76.734509][ T5767] hsr_slave_0: entered promiscuous mode [ 76.741026][ T5767] hsr_slave_1: entered promiscuous mode [ 76.748016][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.755949][ T5767] Cannot create hsr debugfs directory [ 77.102821][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.124720][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.134672][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.160128][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.204131][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.222203][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.232862][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.243003][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.327047][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.343168][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.367341][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.378972][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.503587][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.524736][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.548360][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.560198][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.586801][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.608652][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.682874][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.694573][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.732496][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.739898][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.762947][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.770146][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.798709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.806091][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.819778][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.827311][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.852209][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.902951][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.942104][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.949354][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.981134][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.988328][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.011405][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.073865][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.140683][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.148026][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.159024][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.166516][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.511092][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.553519][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.637303][ T5775] Bluetooth: hci0: command tx timeout [ 78.699276][ T5768] veth0_vlan: entered promiscuous mode [ 78.716211][ T5775] Bluetooth: hci3: command tx timeout [ 78.721875][ T5775] Bluetooth: hci1: command tx timeout [ 78.723984][ T5768] veth1_vlan: entered promiscuous mode [ 78.727992][ T51] Bluetooth: hci2: command tx timeout [ 78.769202][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.810345][ T5765] veth0_vlan: entered promiscuous mode [ 78.843799][ T5765] veth1_vlan: entered promiscuous mode [ 78.889148][ T5768] veth0_macvtap: entered promiscuous mode [ 78.905434][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.927864][ T5765] veth0_macvtap: entered promiscuous mode [ 78.941769][ T5768] veth1_macvtap: entered promiscuous mode [ 78.953727][ T5765] veth1_macvtap: entered promiscuous mode [ 78.974522][ T5766] veth0_vlan: entered promiscuous mode [ 79.004348][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.032892][ T5766] veth1_vlan: entered promiscuous mode [ 79.059520][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.082638][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.092719][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.102154][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.112410][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.125158][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.136509][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.147778][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.180550][ T5765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.192291][ T5765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.206498][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.243359][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.252230][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.261645][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.271597][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.287347][ T5766] veth0_macvtap: entered promiscuous mode [ 79.308746][ T5767] veth0_vlan: entered promiscuous mode [ 79.322625][ T5766] veth1_macvtap: entered promiscuous mode [ 79.359269][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.374102][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.384916][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.395836][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.407915][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.437621][ T5767] veth1_vlan: entered promiscuous mode [ 79.456918][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.469730][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.480695][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.491363][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.505198][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.562685][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.581839][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.591226][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.600922][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.610895][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.619917][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.680655][ T5767] veth0_macvtap: entered promiscuous mode [ 79.692813][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.697536][ T5767] veth1_macvtap: entered promiscuous mode [ 79.713160][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.752029][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.764980][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.858409][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.878393][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.892247][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.904888][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.915779][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.927586][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.938510][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.949207][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.960940][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.989268][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.991293][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.022372][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.022401][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.033223][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.051230][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.061992][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.074136][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.113393][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.153787][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.174951][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.189363][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.198882][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.265248][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.296622][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.089188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.089345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.192157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.198585][ T5829] sctp: failed to load transform for md5: -2 [ 81.295037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.181786][ T5775] Bluetooth: hci0: command tx timeout [ 82.181921][ T51] Bluetooth: hci1: command tx timeout [ 82.188425][ T5771] Bluetooth: hci2: command tx timeout [ 82.193003][ T51] Bluetooth: hci3: command tx timeout [ 82.350723][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.427245][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.915815][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.924060][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.980801][ T5848] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.018128][ T5864] syz.2.8[5864]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.237076][ T51] Bluetooth: hci3: command tx timeout [ 84.243248][ T51] Bluetooth: hci2: command tx timeout [ 84.251656][ T51] Bluetooth: hci0: command tx timeout [ 84.257656][ T51] Bluetooth: hci1: command tx timeout [ 84.390019][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.716004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.724527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 84.734331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.743414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.107182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.072383][ T5878] sctp: failed to load transform for md5: -2 [ 87.267944][ T786] cfg80211: failed to load regulatory.db [ 88.242538][ T5895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 89.343755][ T5910] ntfs3: nbd2: try to read out of volume at offset 0x0 [ 90.844168][ T5917] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 91.276007][ T5925] input: syz0 as /devices/virtual/input/input6 [ 93.659982][ T5933] sctp: failed to load transform for md5: -2 [ 93.968262][ T5950] Zero length message leads to an empty skb [ 93.982278][ T5950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.434796][ T5963] input: syz0 as /devices/virtual/input/input7 [ 101.047232][ T5985] sctp: failed to load transform for md5: -2 [ 102.528166][ T6004] input: syz0 as /devices/virtual/input/input8 [ 102.702018][ T6007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.47'. [ 107.020179][ T6033] sctp: failed to load transform for md5: -2 [ 108.555450][ C0] sched: RT throttling activated [ 110.563445][ T6055] ntfs3: nbd3: try to read out of volume at offset 0x0 [ 111.246281][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 111.909671][ T6060] orangefs_mount: mount request failed with -4 [ 112.064113][ T6068] loop7: detected capacity change from 0 to 1 [ 112.146768][ T6068] loop7: detected capacity change from 1 to 0 [ 116.161389][ T6094] netlink: 32 bytes leftover after parsing attributes in process `syz.2.67'. [ 116.239715][ T6094] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.248946][ T6094] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.257979][ T6094] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.267054][ T6094] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.407356][ T6094] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.416713][ T6094] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.426937][ T6094] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.436111][ T6094] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.531493][ T6095] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.541318][ T6095] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.551304][ T6095] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.560226][ T6095] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.605013][ T6095] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.614448][ T6095] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.623633][ T6095] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 117.632724][ T6095] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.134668][ T6106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.71'. [ 118.682260][ T6111] loop7: detected capacity change from 0 to 1 [ 118.855659][ T6111] loop7: detected capacity change from 1 to 0 [ 119.404945][ T6105] orangefs_mount: mount request failed with -4 [ 119.578453][ T6115] input: syz0 as /devices/virtual/input/input9 [ 123.315611][ T6145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 123.722353][ T6149] loop7: detected capacity change from 0 to 1 [ 124.495791][ T6149] loop7: detected capacity change from 1 to 0 [ 125.797180][ T6155] input: syz0 as /devices/virtual/input/input10 [ 126.128790][ T6144] orangefs_mount: mount request failed with -4 [ 130.166732][ T6189] kernel profiling enabled (shift: 9) [ 131.115614][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.97'. [ 133.199911][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.285224][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.318241][ T6202] orangefs_mount: mount request failed with -4 [ 136.637863][ T6229] loop7: detected capacity change from 0 to 1 [ 137.175752][ T6229] loop7: detected capacity change from 1 to 0 [ 139.670014][ T6247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 140.116509][ T6246] orangefs_mount: mount request failed with -4 [ 140.531500][ T6255] input: syz0 as /devices/virtual/input/input11 [ 143.248251][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.3.120'. [ 144.425862][ T6275] orangefs_mount: mount request failed with -4 [ 150.401988][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 151.971675][ T6299] orangefs_mount: mount request failed with -4 [ 152.652337][ T6316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 154.306968][ T6315] orangefs_mount: mount request failed with -4 [ 158.327558][ T6346] loop7: detected capacity change from 0 to 1 [ 159.190281][ T6345] loop7: detected capacity change from 1 to 0 [ 162.233535][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.141'. [ 162.573525][ T6363] orangefs_mount: mount request failed with -4 [ 164.065307][ T6378] netlink: 'syz.3.146': attribute type 25 has an invalid length. [ 166.008850][ T6392] ntfs3: nbd0: try to read out of volume at offset 0x0 [ 167.583383][ T6397] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 167.590367][ T6397] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 167.785873][ T6405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.153'. [ 167.856141][ T6397] vhci_hcd vhci_hcd.0: Device attached [ 167.865951][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 168.192522][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.204465][ T27] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 168.219721][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 168.221522][ T6404] orangefs_mount: mount request failed with -4 [ 168.236305][ T23] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 168.236418][ T23] usb 4-1: Manufacturer: syz [ 168.313028][ T23] usb 4-1: config 0 descriptor?? [ 168.327652][ T23] smsusb:smsusb_probe: board id=9, interface number 0 [ 168.336514][ T23] smsusb:smsusb_probe: Device initialized with return code -19 [ 168.566947][ T6398] usb 39-1: recv xbuf, 0 [ 168.573014][ T40] vhci_hcd: stop threads [ 168.578203][ T40] vhci_hcd: release socket [ 168.598930][ T40] vhci_hcd: disconnect device [ 168.618018][ T23] usb 4-1: USB disconnect, device number 2 [ 168.655550][ T27] vhci_hcd: vhci_device speed not set [ 169.828684][ T6417] netlink: 80 bytes leftover after parsing attributes in process `syz.0.157'. [ 169.871813][ T6417] netlink: 80 bytes leftover after parsing attributes in process `syz.0.157'. [ 172.152680][ T6436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.162'. [ 172.609872][ T6443] netlink: 80 bytes leftover after parsing attributes in process `syz.3.166'. [ 172.663166][ T6435] orangefs_mount: mount request failed with -4 [ 172.675748][ T6443] netlink: 80 bytes leftover after parsing attributes in process `syz.3.166'. [ 174.897676][ T6459] input: syz0 as /devices/virtual/input/input16 [ 178.937240][ T6477] netlink: 80 bytes leftover after parsing attributes in process `syz.1.176'. [ 179.331345][ T6477] netlink: 80 bytes leftover after parsing attributes in process `syz.1.176'. [ 180.693994][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.3.177'. [ 181.498390][ T6493] orangefs_mount: mount request failed with -4 [ 182.315564][ T27] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 182.605899][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.646872][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.665644][ T27] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 182.678187][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.716567][ T27] usb 4-1: config 0 descriptor?? [ 186.884624][ T27] usbhid 4-1:0.0: can't add hid device: -71 [ 186.925865][ T27] usbhid: probe of 4-1:0.0 failed with error -71 [ 186.955845][ T27] usb 4-1: USB disconnect, device number 3 [ 187.712685][ T6536] input: syz0 as /devices/virtual/input/input17 [ 188.454030][ T6533] orangefs_mount: mount request failed with -4 [ 193.720902][ T6572] orangefs_mount: mount request failed with -4 [ 194.654276][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663980][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.732997][ T6587] netlink: 'syz.0.206': attribute type 25 has an invalid length. [ 196.543189][ T6597] comedi comedi1: no devices specified [ 196.725562][ T5081] Bluetooth: hci0: command 0x0406 tx timeout [ 196.729278][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 196.735696][ T5081] Bluetooth: hci1: command 0x0406 tx timeout [ 196.740232][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 197.535542][ T786] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 197.855945][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.885572][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.918391][ T786] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 197.951782][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.985037][ T786] usb 4-1: config 0 descriptor?? [ 199.172022][ T786] hid-led 0003:27B8:01ED.0001: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 199.283916][ T786] hid-led 0003:27B8:01ED.0001: ThingM blink(1) initialized [ 199.457379][ T6616] orangefs_mount: mount request failed with -4 [ 202.247311][ T27] usb 4-1: USB disconnect, device number 4 [ 204.511853][ T6658] syz_tun: entered allmulticast mode [ 204.672088][ T6662] netlink: 'syz.3.226': attribute type 25 has an invalid length. [ 204.842977][ T6657] orangefs_mount: mount request failed with -4 [ 204.851750][ T6666] netlink: 44 bytes leftover after parsing attributes in process `syz.3.228'. [ 204.876125][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.885794][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.929681][ T6664] input: syz0 as /devices/virtual/input/input19 [ 205.105526][ T6664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.227'. [ 207.009557][ T6680] input: syz0 as /devices/virtual/input/input20 [ 207.180304][ T6684] binder: 6681:6684 ioctl c0306201 0 returned -14 [ 209.737834][ T6695] orangefs_mount: mount request failed with -4 [ 211.019333][ T6710] input: syz0 as /devices/virtual/input/input21 [ 211.138301][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.2.240'. [ 211.812600][ T6715] bridge0: port 3(syz_tun) entered blocking state [ 211.821691][ T6715] bridge0: port 3(syz_tun) entered disabled state [ 211.835637][ T6715] syz_tun: entered allmulticast mode [ 211.899805][ T6715] syz_tun: entered promiscuous mode [ 211.909431][ T6715] bridge0: port 3(syz_tun) entered blocking state [ 211.917176][ T6715] bridge0: port 3(syz_tun) entered forwarding state [ 214.227769][ T6726] input: syz0 as /devices/virtual/input/input22 [ 215.029984][ T6733] netlink: 44 bytes leftover after parsing attributes in process `syz.3.248'. [ 215.750260][ T6734] orangefs_mount: mount request failed with -4 [ 216.474662][ T6759] input: syz0 as /devices/virtual/input/input23 [ 220.787419][ T6774] orangefs_mount: mount request failed with -4 [ 220.830234][ T6780] sctp: failed to load transform for md5: -2 [ 221.134995][ T6790] netlink: 'syz.0.263': attribute type 25 has an invalid length. [ 223.489011][ T6814] orangefs_mount: mount request failed with -4 [ 224.630130][ T6829] binder: 6828:6829 unknown command 1074553619 [ 224.635718][ T5776] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 224.695552][ T6829] binder: 6828:6829 ioctl c0306201 200000000040 returned -22 [ 224.696691][ T6830] binder: 6828:6830 ioctl c0306201 0 returned -14 [ 225.417554][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.278'. [ 226.021160][ T6838] orangefs_mount: mount request failed with -4 [ 227.640111][ T6850] orangefs_mount: mount request failed with -4 [ 231.124055][ T6883] input: syz0 as /devices/virtual/input/input24 [ 232.695957][ T6888] orangefs_mount: mount request failed with -4 [ 234.375766][ T6898] sctp: failed to load transform for md5: -2 [ 235.834876][ T6923] input: syz0 as /devices/virtual/input/input26 [ 237.495131][ T6933] orangefs_mount: mount request failed with -4 [ 239.873741][ T6957] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.888981][ T6961] input: syz0 as /devices/virtual/input/input28 [ 239.937922][ T6961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 241.604618][ T6966] orangefs_mount: mount request failed with -4 [ 241.928409][ T6984] block nbd2: shutting down sockets [ 242.871467][ T5824] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 243.106027][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.135940][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.209246][ T5824] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 243.249288][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.284359][ T5824] usb 1-1: config 0 descriptor?? [ 245.677786][ T5824] hid-led: probe of 0003:27B8:01ED.0002 failed with error -71 [ 245.757950][ T5824] usb 1-1: USB disconnect, device number 2 [ 247.418058][ T7012] orangefs_mount: mount request failed with -4 [ 249.050929][ T7027] input: syz0 as /devices/virtual/input/input31 [ 249.078221][ T7030] binder: 7029:7030 ioctl c0306201 2000000002c0 returned -14 [ 249.109906][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.0.335'. [ 249.394719][ T7036] netlink: 20 bytes leftover after parsing attributes in process `syz.2.341'. [ 249.693412][ T7037] input: syz0 as /devices/virtual/input/input32 [ 251.558597][ T7039] orangefs_mount: mount request failed with -4 [ 252.255528][ T5755] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 252.461759][ T5755] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 252.491970][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.532799][ T5755] usb 2-1: Product: syz [ 252.543374][ T5755] usb 2-1: Manufacturer: syz [ 252.565563][ T5755] usb 2-1: SerialNumber: syz [ 252.596772][ T5755] usb 2-1: config 0 descriptor?? [ 252.664211][ T5755] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 252.695846][ T7059] input: syz0 as /devices/virtual/input/input33 [ 252.707453][ T5755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.759362][ T5755] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 252.777173][ T7059] netlink: 32 bytes leftover after parsing attributes in process `syz.0.348'. [ 252.855091][ T5755] usb 2-1: media controller created [ 252.900599][ T5755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 254.189679][ T5755] DVB: Unable to find symbol mt352_attach() [ 254.352337][ T5755] DVB: Unable to find symbol nxt6000_attach() [ 254.387111][ T5755] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 254.424486][ T5755] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 254.910863][ T5755] dvb-usb: schedule remote query interval to 1000 msecs. [ 255.049647][ T5755] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 255.102303][ T5755] dvb-usb: bulk message failed: -22 (7/0) [ 255.131118][ T5755] dvb-usb: bulk message failed: -22 (7/0) [ 255.182620][ T5755] usb 2-1: USB disconnect, device number 2 [ 255.940346][ T5755] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 256.079450][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.086256][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.100815][ T7077] orangefs_mount: mount request failed with -4 [ 257.087311][ T7096] input: syz0 as /devices/virtual/input/input35 [ 257.263771][ T7096] netlink: 32 bytes leftover after parsing attributes in process `syz.2.358'. [ 259.101338][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.361'. [ 259.903551][ T7106] orangefs_mount: mount request failed with -4 [ 261.070402][ T7115] orangefs_mount: mount request failed with -4 [ 263.144209][ T7126] sctp: failed to load transform for md5: -2 [ 263.444134][ T7139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.367'. [ 266.978648][ T7151] orangefs_mount: mount request failed with -4 [ 268.522268][ T7162] fuse: Bad value for 'fd' [ 269.988197][ T7166] input: syz0 as /devices/virtual/input/input36 [ 270.782278][ T7172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.378'. [ 273.133562][ T7171] orangefs_mount: mount request failed with -4 [ 273.969605][ T7189] orangefs_mount: mount request failed with -4 [ 277.418899][ T7209] input: syz0 as /devices/virtual/input/input37 [ 277.561349][ T7210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.387'. [ 286.524627][ T7250] input: syz0 as /devices/virtual/input/input38 [ 286.620658][ T7251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.399'. [ 286.798523][ T7244] orangefs_mount: mount request failed with -4 [ 289.159113][ T7271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.396'. [ 289.605766][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.670447][ T7279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.807639][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.500328][ T7269] orangefs_mount: mount request failed with -4 [ 292.729962][ T7289] orangefs_mount: mount request failed with -4 [ 293.098641][ T7300] input: syz0 as /devices/virtual/input/input39 [ 293.293810][ T7302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.411'. [ 294.363806][ T5776] Bluetooth: hci0: unexpected event for opcode 0x0c38 [ 296.566553][ T7317] sctp: failed to load transform for md5: -2 [ 297.573071][ T7334] orangefs_mount: mount request failed with -4 [ 298.288968][ T7344] netlink: 24 bytes leftover after parsing attributes in process `syz.2.422'. [ 298.702110][ T7339] orangefs_mount: mount request failed with -4 [ 299.213639][ T5776] Bluetooth: hci1: unexpected event for opcode 0x0c38 [ 302.679125][ T7365] orangefs_mount: mount request failed with -4 [ 302.965985][ T5776] Bluetooth: hci3: unexpected event for opcode 0x0c38 [ 304.756728][ T7400] comedi comedi3: pcmmio: I/O port conflict (0x8005,32) [ 310.949419][ T7435] orangefs_mount: mount request failed with -4 [ 317.522315][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.529015][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.545783][ T7523] netlink: 32 bytes leftover after parsing attributes in process `syz.3.481'. [ 319.583632][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.481'. [ 319.606006][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.481'. [ 325.123407][ T7539] sctp: failed to load transform for md5: -2 [ 333.187174][ T7598] input: syz0 as /devices/virtual/input/input41 [ 334.512173][ T7606] loop7: detected capacity change from 0 to 1 [ 334.957573][ T7606] loop7: detected capacity change from 1 to 0 [ 335.760230][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 335.788535][ T7619] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.797559][ T7619] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.806620][ T7619] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.815689][ T7619] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 335.851837][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 339.685067][ T7640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.504'. [ 340.472328][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 340.502816][ T7650] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.511879][ T7650] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.521029][ T7650] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.530403][ T7650] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.564983][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 342.958085][ T7657] sctp: failed to load transform for md5: -2 [ 347.693350][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 347.705867][ T7702] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.714579][ T7702] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.723381][ T7702] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.737337][ T7702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 351.561682][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 352.254142][ T7726] orangefs_mount: mount request failed with -4 [ 353.901189][ T7746] netlink: 32 bytes leftover after parsing attributes in process `syz.1.543'. [ 353.974757][ T7747] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.983602][ T7747] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 353.993096][ T7747] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.002072][ T7747] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.740330][ T7747] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.749978][ T7747] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.759062][ T7747] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.768172][ T7747] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.934988][ T7748] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.944233][ T7748] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.953547][ T7748] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.962618][ T7748] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.172475][ T7748] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.182100][ T7748] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.191453][ T7748] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.200572][ T7748] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.216561][ T7797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.560'. [ 366.786238][ T7843] netlink: 32 bytes leftover after parsing attributes in process `syz.0.575'. [ 370.732893][ T7870] input: syz0 as /devices/virtual/input/input43 [ 370.965150][ T7875] netlink: 32 bytes leftover after parsing attributes in process `syz.1.584'. [ 378.979598][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.986120][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.116200][ T7959] sctp: failed to load transform for md5: -2 [ 388.946487][ T8003] sctp: failed to load transform for md5: -2 [ 393.357810][ T8042] netlink: 24 bytes leftover after parsing attributes in process `syz.1.629'. [ 393.869365][ T8044] orangefs_mount: mount request failed with -4 [ 399.346446][ T8094] orangefs_mount: mount request failed with -4 [ 407.717843][ T8158] input: syz0 as /devices/virtual/input/input46 [ 407.765279][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.665'. [ 407.853104][ T8161] netlink: 32 bytes leftover after parsing attributes in process `syz.1.667'. [ 408.676611][ T8157] orangefs_mount: mount request failed with -4 [ 409.152453][ T8171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.670'. [ 416.780012][ T8233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.681'. [ 419.397045][ T8248] input: syz0 as /devices/virtual/input/input47 [ 419.625450][ T8251] netlink: 32 bytes leftover after parsing attributes in process `syz.0.695'. [ 425.905601][ T8298] input: syz0 as /devices/virtual/input/input49 [ 426.196300][ T8300] netlink: 32 bytes leftover after parsing attributes in process `syz.0.712'. [ 432.781126][ T8332] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 433.419775][ T8338] netlink: 32 bytes leftover after parsing attributes in process `syz.1.725'. [ 437.178206][ T8378] loop7: detected capacity change from 0 to 1 [ 437.235518][ T8378] loop7: detected capacity change from 1 to 0 [ 439.391289][ T8384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.737'. [ 439.518442][ T8377] orangefs_mount: mount request failed with -4 [ 440.397677][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.404026][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.446811][ T8414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'. [ 444.088664][ T8412] orangefs_mount: mount request failed with -4 [ 449.822642][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 451.119872][ T8451] orangefs_mount: mount request failed with -4 [ 453.643043][ T8475] netlink: 32 bytes leftover after parsing attributes in process `syz.1.766'. [ 459.956782][ T8509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.777'. [ 460.352242][ T8517] loop7: detected capacity change from 0 to 1 [ 460.965823][ T8517] loop7: detected capacity change from 1 to 0 [ 467.463168][ T8552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.788'. [ 471.791463][ T8581] netlink: 32 bytes leftover after parsing attributes in process `syz.3.798'. [ 472.187983][ T8589] loop7: detected capacity change from 0 to 1 [ 473.055425][ T8589] loop7: detected capacity change from 1 to 0 [ 483.022353][ T8642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.805'. [ 488.794328][ T8672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.828'. [ 493.800240][ T8713] netlink: 40 bytes leftover after parsing attributes in process `syz.2.837'. [ 495.878998][ T8727] netlink: 32 bytes leftover after parsing attributes in process `syz.3.843'. [ 498.564430][ T8742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'. [ 500.439171][ T8755] netlink: 32 bytes leftover after parsing attributes in process `syz.3.852'. [ 501.838697][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.094897][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.903195][ T8787] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.912073][ T8787] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.920825][ T8787] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.929735][ T8787] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 505.950884][ T8787] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.960051][ T8787] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.969395][ T8787] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.978558][ T8787] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.243744][ T8791] loop7: detected capacity change from 0 to 1 [ 506.942816][ T8789] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.945513][ T8791] loop7: detected capacity change from 1 to 0 [ 506.952266][ T8789] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.967708][ T8789] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 506.976983][ T8789] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.938980][ T8789] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.948990][ T8789] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.958575][ T8789] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.968074][ T8789] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 511.464644][ T8827] loop7: detected capacity change from 0 to 1 [ 512.383424][ T8827] loop7: detected capacity change from 1 to 0 [ 515.752059][ T8866] loop7: detected capacity change from 0 to 1 [ 516.585427][ T8865] loop7: detected capacity change from 1 to 0 [ 519.039911][ T8898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.898'. [ 521.048238][ T8927] input: syz0 as /devices/virtual/input/input63 [ 521.192995][ T8931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.908'. [ 523.461618][ T8957] netlink: 32 bytes leftover after parsing attributes in process `syz.3.919'. [ 524.858698][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz.1.929'. [ 526.734161][ T8990] orangefs_mount: mount request failed with -4 [ 527.155645][ T9013] input: syz0 as /devices/virtual/input/input65 [ 527.557459][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz.0.940'. [ 529.799613][ T9045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.953'. [ 530.727945][ T9037] orangefs_mount: mount request failed with -4 [ 531.493484][ T9076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.964'. [ 534.335669][ T9110] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 535.307385][ T9103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.977'. [ 536.869610][ T9140] loop7: detected capacity change from 0 to 1 [ 537.609018][ T9131] orangefs_mount: mount request failed with -4 [ 537.872830][ T9146] ================================================================== [ 537.881149][ T9146] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 537.889287][ T9146] Read of size 8 at addr ffff8880268e9818 by task syz.0.989/9146 [ 537.897573][ T9146] [ 537.900100][ T9146] CPU: 0 PID: 9146 Comm: syz.0.989 Not tainted syzkaller #0 [ 537.907504][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.917856][ T9146] Call Trace: [ 537.921266][ T9146] [ 537.924306][ T9146] dump_stack_lvl+0x18c/0x250 [ 537.929028][ T9146] ? __lock_acquire+0x7d40/0x7d40 [ 537.934266][ T9146] ? show_regs_print_info+0x20/0x20 [ 537.940054][ T9146] ? load_image+0x400/0x400 [ 537.944600][ T9146] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 537.950202][ T9146] ? __virt_addr_valid+0x18c/0x540 [ 537.955355][ T9146] ? __virt_addr_valid+0x469/0x540 [ 537.960604][ T9146] print_report+0xa8/0x210 [ 537.965685][ T9146] ? dvb_device_open+0xca/0x370 [ 537.970679][ T9146] kasan_report+0x117/0x150 [ 537.975322][ T9146] ? chrdev_open+0x3e3/0x6a0 [ 537.979975][ T9146] ? dvb_device_open+0xca/0x370 [ 537.984962][ T9146] dvb_device_open+0xca/0x370 [ 537.989855][ T9146] ? do_raw_spin_unlock+0x121/0x230 [ 537.995207][ T9146] chrdev_open+0x5cc/0x6a0 [ 537.999750][ T9146] ? cd_forget+0x160/0x160 [ 538.004253][ T9146] ? fsnotify_perm+0x3ed/0x5e0 [ 538.009068][ T9146] ? cd_forget+0x160/0x160 [ 538.013699][ T9146] do_dentry_open+0x8c6/0x1500 [ 538.018507][ T9146] path_openat+0x27f1/0x3230 [ 538.023312][ T9146] ? do_sys_openat2+0xda/0x1d0 [ 538.028113][ T9146] ? verify_lock_unused+0x140/0x140 [ 538.033444][ T9146] ? do_filp_open+0x430/0x430 [ 538.038343][ T9146] ? __virt_addr_valid+0x18c/0x540 [ 538.043506][ T9146] do_filp_open+0x1f5/0x430 [ 538.048048][ T9146] ? vfs_tmpfile+0x490/0x490 [ 538.052859][ T9146] ? _raw_spin_unlock+0x28/0x40 [ 538.057749][ T9146] ? alloc_fd+0x58f/0x630 [ 538.062200][ T9146] do_sys_openat2+0x134/0x1d0 [ 538.066922][ T9146] ? do_sys_open+0xe0/0xe0 [ 538.071390][ T9146] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 538.077415][ T9146] ? lock_chain_count+0x20/0x20 [ 538.082743][ T9146] __x64_sys_openat+0x139/0x160 [ 538.087813][ T9146] do_syscall_64+0x55/0xa0 [ 538.092274][ T9146] ? clear_bhb_loop+0x40/0x90 [ 538.097080][ T9146] ? clear_bhb_loop+0x40/0x90 [ 538.101887][ T9146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.107836][ T9146] RIP: 0033:0x7f9185f5cfce [ 538.112377][ T9146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 538.132460][ T9146] RSP: 002b:00007f9186e63b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 538.141008][ T9146] RAX: ffffffffffffffda RBX: 00007f9186e646c0 RCX: 00007f9185f5cfce [ 538.149212][ T9146] RDX: 0000000000000e82 RSI: 00007f9186e63c00 RDI: ffffffffffffff9c [ 538.157310][ T9146] RBP: 00007f9186e63c00 R08: 0000000000000000 R09: 0000000000000000 [ 538.165321][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 538.173519][ T9146] R13: 00007f91862163f8 R14: 00007f9186216360 R15: 00007ffe491d7c88 [ 538.181730][ T9146] [ 538.184783][ T9146] [ 538.187131][ T9146] Allocated by task 1: [ 538.191232][ T9146] kasan_set_track+0x4e/0x70 [ 538.195966][ T9146] __kasan_kmalloc+0x8f/0xa0 [ 538.200857][ T9146] dvb_register_device+0x2fd/0x2210 [ 538.206099][ T9146] dvb_register_frontend+0x649/0x930 [ 538.211697][ T9146] vidtv_bridge_probe+0x9ab/0xf80 [ 538.216767][ T9146] platform_probe+0x13b/0x1c0 [ 538.221472][ T9146] really_probe+0x25b/0xb20 [ 538.226003][ T9146] __driver_probe_device+0x18c/0x330 [ 538.231317][ T9146] driver_probe_device+0x4f/0x420 [ 538.236457][ T9146] __driver_attach+0x44e/0x6e0 [ 538.241337][ T9146] bus_for_each_dev+0x235/0x2b0 [ 538.246224][ T9146] bus_add_driver+0x340/0x630 [ 538.250937][ T9146] driver_register+0x23a/0x310 [ 538.255739][ T9146] vidtv_bridge_init+0x3d/0x70 [ 538.260532][ T9146] do_one_initcall+0x242/0x790 [ 538.265331][ T9146] do_initcall_level+0x137/0x1f0 [ 538.270308][ T9146] do_initcalls+0x69/0xd0 [ 538.274679][ T9146] kernel_init_freeable+0x3ed/0x580 [ 538.279915][ T9146] kernel_init+0x1d/0x1c0 [ 538.284288][ T9146] ret_from_fork+0x48/0x80 [ 538.288744][ T9146] ret_from_fork_asm+0x11/0x20 [ 538.293624][ T9146] [ 538.296029][ T9146] Freed by task 9110: [ 538.300029][ T9146] kasan_set_track+0x4e/0x70 [ 538.304645][ T9146] kasan_save_free_info+0x2e/0x50 [ 538.309792][ T9146] ____kasan_slab_free+0x126/0x1e0 [ 538.314935][ T9146] slab_free_freelist_hook+0x130/0x1a0 [ 538.320450][ T9146] __kmem_cache_free+0xba/0x1e0 [ 538.325344][ T9146] dvb_device_open+0x2ee/0x370 [ 538.330133][ T9146] chrdev_open+0x5cc/0x6a0 [ 538.334680][ T9146] do_dentry_open+0x8c6/0x1500 [ 538.339578][ T9146] path_openat+0x27f1/0x3230 [ 538.344288][ T9146] do_filp_open+0x1f5/0x430 [ 538.349002][ T9146] do_sys_openat2+0x134/0x1d0 [ 538.353713][ T9146] __x64_sys_openat+0x139/0x160 [ 538.358607][ T9146] do_syscall_64+0x55/0xa0 [ 538.363338][ T9146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.369453][ T9146] [ 538.371886][ T9146] The buggy address belongs to the object at ffff8880268e9800 [ 538.371886][ T9146] which belongs to the cache kmalloc-256 of size 256 [ 538.386704][ T9146] The buggy address is located 24 bytes inside of [ 538.386704][ T9146] freed 256-byte region [ffff8880268e9800, ffff8880268e9900) [ 538.400905][ T9146] [ 538.403343][ T9146] The buggy address belongs to the physical page: [ 538.409819][ T9146] page:ffffea00009a3a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x268e8 [ 538.420114][ T9146] head:ffffea00009a3a00 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 538.429178][ T9146] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 538.437371][ T9146] page_type: 0xffffffff() [ 538.441738][ T9146] raw: 00fff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 538.450367][ T9146] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 538.459328][ T9146] page dumped because: kasan: bad access detected [ 538.465971][ T9146] page_owner tracks the page as allocated [ 538.471889][ T9146] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14194324194, free_ts 0 [ 538.491648][ T9146] post_alloc_hook+0x1c1/0x200 [ 538.496550][ T9146] get_page_from_freelist+0x1951/0x19e0 [ 538.502209][ T9146] __alloc_pages+0x1f0/0x460 [ 538.506902][ T9146] alloc_page_interleave+0x24/0x1e0 [ 538.512261][ T9146] alloc_slab_page+0x5d/0x160 [ 538.516977][ T9146] new_slab+0x87/0x2d0 [ 538.521097][ T9146] ___slab_alloc+0xc5d/0x12f0 [ 538.525907][ T9146] __kmem_cache_alloc_node+0x19e/0x250 [ 538.531581][ T9146] kmalloc_trace+0x2a/0xe0 [ 538.536036][ T9146] bus_add_driver+0x162/0x630 [ 538.540765][ T9146] driver_register+0x23a/0x310 [ 538.545649][ T9146] usb_register_driver+0x206/0x3d0 [ 538.550795][ T9146] do_one_initcall+0x242/0x790 [ 538.555599][ T9146] do_initcall_level+0x137/0x1f0 [ 538.560578][ T9146] do_initcalls+0x69/0xd0 [ 538.565049][ T9146] kernel_init_freeable+0x3ed/0x580 [ 538.570301][ T9146] page_owner free stack trace missing [ 538.575777][ T9146] [ 538.578172][ T9146] Memory state around the buggy address: [ 538.584028][ T9146] ffff8880268e9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.592215][ T9146] ffff8880268e9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.600309][ T9146] >ffff8880268e9800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.608445][ T9146] ^ [ 538.613412][ T9146] ffff8880268e9880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.621503][ T9146] ffff8880268e9900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.629652][ T9146] ================================================================== [ 538.638008][ C0] vkms_vblank_simulate: vblank timer overrun [ 538.650516][ T9146] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 538.657979][ T9146] CPU: 0 PID: 9146 Comm: syz.0.989 Not tainted syzkaller #0 [ 538.665322][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 538.675503][ T9146] Call Trace: [ 538.678904][ T9146] [ 538.681858][ T9146] dump_stack_lvl+0x18c/0x250 [ 538.686595][ T9146] ? show_regs_print_info+0x20/0x20 [ 538.691854][ T9146] ? load_image+0x400/0x400 [ 538.696414][ T9146] panic+0x2dc/0x730 [ 538.700345][ T9146] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 538.706713][ T9146] ? bpf_jit_dump+0xd0/0xd0 [ 538.711251][ T9146] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 538.717267][ T9146] ? _raw_spin_unlock+0x40/0x40 [ 538.722414][ T9146] ? dvb_device_open+0xca/0x370 [ 538.727314][ T9146] check_panic_on_warn+0x84/0xa0 [ 538.732465][ T9146] ? dvb_device_open+0xca/0x370 [ 538.737347][ T9146] end_report+0x6f/0x130 [ 538.741631][ T9146] kasan_report+0x128/0x150 [ 538.746256][ T9146] ? chrdev_open+0x3e3/0x6a0 [ 538.751062][ T9146] ? dvb_device_open+0xca/0x370 [ 538.756129][ T9146] dvb_device_open+0xca/0x370 [ 538.761008][ T9146] ? do_raw_spin_unlock+0x121/0x230 [ 538.766331][ T9146] chrdev_open+0x5cc/0x6a0 [ 538.770778][ T9146] ? cd_forget+0x160/0x160 [ 538.775401][ T9146] ? fsnotify_perm+0x3ed/0x5e0 [ 538.780209][ T9146] ? cd_forget+0x160/0x160 [ 538.784828][ T9146] do_dentry_open+0x8c6/0x1500 [ 538.789726][ T9146] path_openat+0x27f1/0x3230 [ 538.794528][ T9146] ? do_sys_openat2+0xda/0x1d0 [ 538.799340][ T9146] ? verify_lock_unused+0x140/0x140 [ 538.804657][ T9146] ? do_filp_open+0x430/0x430 [ 538.809371][ T9146] ? __virt_addr_valid+0x18c/0x540 [ 538.814525][ T9146] do_filp_open+0x1f5/0x430 [ 538.819063][ T9146] ? vfs_tmpfile+0x490/0x490 [ 538.823691][ T9146] ? _raw_spin_unlock+0x28/0x40 [ 538.828581][ T9146] ? alloc_fd+0x58f/0x630 [ 538.833046][ T9146] do_sys_openat2+0x134/0x1d0 [ 538.837936][ T9146] ? do_sys_open+0xe0/0xe0 [ 538.842476][ T9146] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 538.848497][ T9146] ? lock_chain_count+0x20/0x20 [ 538.853392][ T9146] __x64_sys_openat+0x139/0x160 [ 538.858470][ T9146] do_syscall_64+0x55/0xa0 [ 538.863030][ T9146] ? clear_bhb_loop+0x40/0x90 [ 538.867827][ T9146] ? clear_bhb_loop+0x40/0x90 [ 538.872719][ T9146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 538.878822][ T9146] RIP: 0033:0x7f9185f5cfce [ 538.883266][ T9146] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 538.903608][ T9146] RSP: 002b:00007f9186e63b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 538.912422][ T9146] RAX: ffffffffffffffda RBX: 00007f9186e646c0 RCX: 00007f9185f5cfce [ 538.920430][ T9146] RDX: 0000000000000e82 RSI: 00007f9186e63c00 RDI: ffffffffffffff9c [ 538.928647][ T9146] RBP: 00007f9186e63c00 R08: 0000000000000000 R09: 0000000000000000 [ 538.936663][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 538.944682][ T9146] R13: 00007f91862163f8 R14: 00007f9186216360 R15: 00007ffe491d7c88 [ 538.952880][ T9146] [ 538.956521][ T9146] Kernel Offset: disabled [ 538.960856][ T9146] Rebooting in 86400 seconds..