last executing test programs: 2m10.684115421s ago: executing program 1 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpriority(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) lseek(r0, 0x1e1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000001100)='0000:00:06.0', 0xc) 2m5.550671535s ago: executing program 1 (id=40): socket$packet(0x11, 0x2, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xffff1000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x1, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0x8, 0x5, 0x3, 0x8, 0x6, 0x0, 0x80, 0xee, 0xfc, 0x14}, {0x200000, 0x54000, 0xb, 0x6, 0xff, 0x3, 0x4, 0x5, 0xef, 0x27, 0xd5, 0x1}, {0x4, 0xeeee0000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x80a0000, 0x3, 0x6, 0x6, 0x1, 0x9, 0x2, 0x3, 0x13, 0x0, 0xe4}, {0x200000, 0xb000, 0x9, 0x0, 0x6, 0x71, 0xde, 0x9, 0xb, 0xdf, 0x4, 0x3}, {0x0, 0x6000, 0xe, 0x4, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x9, 0x6, 0xc2, 0x8, 0x7, 0x10, 0x0, 0x3, 0x80, 0x88}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x40000, 0x414440, 0x2, 0x8000, 0xeeef0000, [0x6, 0x5, 0x10001, 0xe]}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) 2m0.131811003s ago: executing program 1 (id=46): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m58.072775144s ago: executing program 1 (id=50): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="1a091500000015e794"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m56.387651397s ago: executing program 1 (id=55): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100, 0x112) truncate(&(0x7f0000000040)='./file2\x00', 0xf1f) getsockopt$sock_buf(r0, 0x1, 0x3, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1m43.345708731s ago: executing program 1 (id=73): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x1404, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) close(r2) close(r1) close(r0) 1m27.66455243s ago: executing program 32 (id=73): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x18, 0x1404, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) close(r2) close(r1) close(r0) 23.976043823s ago: executing program 4 (id=175): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000103c0)=[{&(0x7f0000000240)="04000000000203", 0x7}], 0x1) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000c00), 0x0, 0x40000) 21.681449892s ago: executing program 4 (id=179): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f00000013c0), 0xc0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000380)=0x90000) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x800000000000, 0x4, 0x40000000}, {}, 0x70bd25, 0x0, 0x2, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x148}}, 0x4810) 21.474572932s ago: executing program 0 (id=181): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000180)='UJ', 0x2}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff58}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0), 0x111280, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd9030a46c1"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x3, r3}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) write$smackfs_netlabel(r1, &(0x7f0000000240)=@l1={{0x0, 0x2e, 0xbc25, 0x2e, 0xa80000000000000, 0x2e, 0x1}, 0x20, 'NFQUEUE\x00'}, 0x5e) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r6, &(0x7f0000000000)={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) writev(r6, &(0x7f00000039c0)=[{&(0x7f0000000200)="fcff", 0x2}, {&(0x7f00000001c0)="5b5134f6e8ee9cca4972736f24a503dec54bd0abf659ad440b81292cfc72ebaf62", 0x21}, {&(0x7f0000002880)="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", 0x562}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x80000001, 0x7}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@userxattr}], [], 0x2c}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone3(&(0x7f0000001340)={0xb0000, &(0x7f00000000c0), &(0x7f0000001140)=0x0, &(0x7f0000001180), {0x13}, &(0x7f00000011c0)=""/82, 0x52, &(0x7f0000001240)=""/158, &(0x7f0000001300)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) sched_setaffinity(r8, 0x8, &(0x7f00000013c0)=0x2) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000000)="12d17b989af0faa2b014a8b94acc06274434fe06f2f178b6ec8f14f379adbc720cadf7939ec1146b3eeca749743bb9e668c7a4f022eb4786f860a51ce995315dda06a297fb28afb3d07a19e96e23dcdb8267623ad486d2c85ece9c3ad96867c02e22", 0x62}, {0x0}], 0x2) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xa4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x4022f4442ddecb9d, 0x3, 0x3, 0x28}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io(r9, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20212900000029017d611870cced50a61cc73e3524fe798e0c4bdc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5dfce6a784f0000c797451c3cc566641b09677ef17166ccaeff9326851b50d87e5e58f243c9e1d8691d5b8e54eece39a8056001ce001a92c9ba4597527e8dc51d177a1ec6"], 0x0, 0x0, 0x0, 0x0}, 0x0) 18.121892941s ago: executing program 3 (id=182): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r7 = signalfd4(r0, 0x0, 0x0, 0x180000) ioctl$MON_IOCX_MFETCH(r7, 0xc00c9207, &(0x7f0000000440)={0x0, 0x0, 0x4}) socket$packet(0x11, 0x2, 0x300) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r8) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x2}, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, r10, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) 17.568382162s ago: executing program 4 (id=183): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18}) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000100)={0x0, [{0x1, 0x8, 0x0, &(0x7f0000000200)="01"}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0}, {}, {}, {}, {0x0, 0x0, 0x28}, {}, {0x0, 0x0, 0x2}]}) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000000100)={0x0, [{0x1, 0x1, 0x0, &(0x7f0000000200)="01"}]}) r4 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="25daecdbdce723b7b21e8d5c32e71c33b09147ca", 0x14}], 0x1}, 0x40) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={&(0x7f0000001340)="c51756573c5094a071fc3408cfd91a417ef93cb9b68991d2fc3f4657f891a5473bb28acba79ce828d14fd6a3cddf0efd1ce675d2e4f8f105fc92e2577385529a1ca3f4706c000c4f95a0a700ff66e88e78aabaae99d6346f5322ec0c9c78db5f53117dcea319955df55020d938715d6220a8724b5b8d250ae39c5a60e8d4b7c0023b35ba51bedb70874297da554b80138eae8514837e93e19c22c22174520d8d34471a8d452641af921989a5bc63a4c2e14e037290018a70af1c7ab6f9d4435f312e166271b49c205530bc67dce77e0a34bf60f2e3674cee1fb4f222cb04f7b53172a745a3d271cd68368521889f033a538eb281fd9108e054622b619ddd09bddab3a12b640b01d8eeebc4e32c2410d21175d846def3bb4410cabe3830e37e6e0d9a152216beba14ca43995ceef85bffc0ee235b690760184b6fa8cd060e831ce272369cec03671d963f57e994fb5d09390a9d7a951cc8c17d3261448a980d0d3d2a72e9bb4ec71a6e32d72efc4cc1e7c17c06115c03c66a777f51a23c884ef9fe792cfd21ea25a3f427fa7de6ac1ee5dfebd97f0f9ebb7ea7f31ba667345d0ab6e76256c97e827285de5586207d8e332c4094f70c729da450ff676f204858a05743b6f035e7d47e93940e0ffc56b69b98dc4398d98c2b92e05a47608d0f61ad7fbcfe16dc049f5689b2ee3372e3759cf573af6a29903a3f1b4e7a936399afad79cc7bf2646f61c5802255b7ffe228d4ee2893caec3934bc2c8745458c1de6f99c4d0168c6fc8788c1472f19bb9d74c529f043e212ccaf6b455cb9943dcd4de921c1c9fc3c3d889713b0460d66db175652a95d1c16666f76144a6050f998c222208f61d9ca29bc39beb23a311da5da8b077ae429724c21c359b58ad0c0a194fd994b47aead452b97ba4d221f814a866bdf744c10f512ef2136d67e6e0338473b88d45c467f1ced501f4ef31a0d50c2d6b47096fb2dfeeed59471eaf1fefbdce145aa0e3711a2cf92f570d9a0e17dab7948ca8e127d5af2b81beef5f6e4b417b9d7cd979456b5fcb2d577349dac0d22f05b05d0819570e63b794cd362867f71aae40f00f4906a3fcc59a5f336f6075b91fb7d3e0bf4eedf10e2fbd84e8b43425903058a057e89598aece8ee222c0b271ab8fc3fe5d012eaa73db369fa1eb353a538d035e7b5839a17a2ca7d42334008a177d443c78e441eddfa3e12e4eb7099f10af4d5c228183f5d62d92d8d75096bd398f9d640cd866ecc047cea6b149b14e7261c9cfbe82d61eb07f31178c91ba155ebbda7b1b50e5d7706621a292e056768de161038145d3086618dc0136a60428145254ef26248de6b8280927eb31a5e00012759524af4185d086ca0e73ec0e29e5e4cbb6b3bd70d4712471216293076aaf375c7b0fda3fee7e0156cdba30399f7a5b14ca6331133a3a5f11e9cd10a18d8d8be5b9a0017e36b1aced3f4e014b39dea78070d672e0e8fccc114147f4fa7b3d4b26e74f3c96d72a5f00ad5a542dfda36479e6491a91c39e434497c318eb8a7d6b7131cea6f6974592be7dbde94504819e73a5e77efc3b5661c5de0dbe3ee816df2c7a736ef099fff4ff611c7144588199dbec1fb5cd56ce5a71eb9aa5c0308219a629c3c550f2f143496a60888613dd76affafc79799a647c1874e451705c216b4b9e3ef3ea570274d708105455bba123b33279f83d445d0c1debaac2c826310a7ff191c1f819c1dbcb1b0238da6657ae550cc9f6bb87212923d6088d2bd7ce9a6fa68b0676ec79435669460af9b561e3f85bdc3ecc435be5f846f14eb3e21cb01f8ccc3216252f2990c2cec94e0cd486fba8898eeed78dd05c0d1f0bdf6f847f8b018b037c00400a661f6912ac8ef7e63c5eccfe58288619ae7ef89bdfbb6a8cddcf5198d5cf1b118d1f689547e14aca738a98dd0abe2c02d8e6e5b4f3e34571adccbc9b7bc1c5a5a5354e73774e9ffacfebb951600ec9ad89e8154096e488ea3a23d4b54e7c155d4ca4bc4d276bc04607f32af27fc4ce27d2eb4595b2e990e0d51b43262af3b70c503ba8e4db87c96597b47270d1ca0af39315cf29e3665aee7fd5b40dee1361efd4f54c418001a5ce7e7cca08aec86190827c64c3774cd8217e038f90057bf66230a067c2a27a83a9157b0760dde752aaf5e959ac818796c2e77991bf37325c37e73eecf566c834719f35b14a18ce4d28517bf464a94e1f4a2c1057db14bf5e57eecfe92d35b54440363ecefbd7ed34b13bc8a2608d4bc644613c28fcdcd629dcd768bf222b4a067f5740f064d3101e3cfb4a200a12d56d2084139c0713cc5b193226e820eed28ad5e2743fad84789dd6f6ed2a38eeb489c6d20f1850289a5dca5ad44c433e3a4902c0734e7678dcbf59e50fcd97d794d73187d69a1199b5678ca590d49aaa34880496bc8a4f5171657cea5df9d7ccf266f5d00b23731ac1cefa54bf97037264f036ca9f8b8154ac7de3cb7f9b0c72021b5be842422afb900baafaf2f4fad754b3781c6a8d093a69f81ed72501e81ec3d5df37447ef1c7e05c39b3163daf6822ab49f56171def3943e7a2391f1b52b97d2b47330f7a963eaaa184353b4dedb00ec7446e617035245e8823df75d04f5045fa3f6c13535d851308b2a71d39c15ff2fbea03d6af54038bc1213c8a7630437fa260c13730699f249beffba137e16f75c58d91da28aeea1acb7165132b780735215e76d77abbdc472f3e6500fc6c7e69ac615aefd7078aea40c4943601c0ea8c726c2121c243583ee4c794da50579126f4acc10b3a4dfb5b840638b55c87defb625d15357f60127270aa228d161266ced26e1995c9371d47f48e279f02de80b4f2a6a9f44d9fd79f9ba8877ccc2783258234f1334b1efc9c7ee964098b7d4783588836f90a80ce176485a8009dd6fe8396d93b9b540bbc2d3ff5f82301105c3011b2fb96f6fe25584136f6fd381b6d16641314d399661d57b3c84a8273c1ba3226a87c6861c8f58a81932a5b9ff7f88ad652efe22131d3afc3664742e5513acc2173841eca2279c60934100be1e3b48b9995bbd6d9bd4d72a9b2af42ebcbc3631887920f8b74a4d098b76ff7e786cd4b38854a6695f98e285aebc88b09d128e3afc023e9bda46a28b7b64f8758b5605281e77b286ef3443c0e986a957c7dae642f36e5827c7712acefa774bbc34ab08c5a8aa10f0dc6eaefe2de7dc61b015b033cf25f9f9852dcfaeca2d2ebd3e68310e1fada905bda6bcd3eeca561f94675f73dff9e934ce6757567d7f6adb32fc6c8ccc451dbef229626e60964457d6dfc6ee1978c72cd0127acd38aee685b285f5f9dbbabb3ab40c50494f830a7c5583c22d5e83736835367d80762f89930e80df1b4ec504dfb08677777f4e348dd8c35557e4a99dfff9f37964bf5ca2138687cef6c778ba10e0465616842542b5e9b60e0d2cca5356d1767eef6dfeefc309cda8aa787e80345b0d22cf3772c3f4637cbc78ba4999dc31a0c96db0208024d68c424cdb397d33dc02f2c4af340c6b89c3502b2431fac910d18e02b0a39a176ebf374f2c0100e306791de1e54baa034ca7fd2ebd0621bcae90e192e47de7a329a6b076496e237a6233c1cbe80d9d4abbe72f67d021b9cd3b4194f94d3c6f5b98b6c69a3ff0bd9e04842f97b9f8c5335922a2825e1f9d13c019506d009967b58e43ccedcfb2d55aaea481c3bfa2af147dbdd520646aff85283e061ac1c74fcce487dbe57c61c835580f0e5c16c6c8417776b667aeae55bcdc91fcbfc20f5811edb10cc2fbae6eeeabccd778c4318cb3294998ea2670e819f345ca7975f408c46cbb1c5f3e7a03e9c8b6f1bb7416161beeace003224ef49cb3a3b54bf1dd3cc373fc2a11a7a87bacf97cad0fd2244ee548834e59852d261f5b78739615bff21a96d28ce986d19f869de80c192db4d256c394e0bfb84cf9c82d53729958d4ca1260116b8573536f71558126904f7d3e74b5b7d1bc7887f9fdb114bf4d20e0732890c10f3ddf82a899018f027e8fe68427367ef9b9f89818850f3f532a0f05a509de51f84b2c6f0069826f077e54ecfb27db3e778c13c9ac5a786e534be0ee6fed7cbebbe4de1d70bd3bd501f4d527d6e424340bbbef559696acaf557bdb81a1fb3dd3f382bcbc6d47e63ef05d4606672ee1b49f263bb2db3ef1269a0017aac73f491f436494d1abac16538f19fc70605e583ed87ae2b1d23920363767eb0da9249ccdc82ed8371eb5132b1b348a366b0596c9440ecb35a865a072e15c5c7447d57d077a15d23f3e0665b18ef7cb5865dbc0a4dfb9b3da2870fd1cd76a081d87dc247c4f692e388144c54012aa1c2cd93d9f2c9a15cf0d3fa1122efed6c0df920500f7f4bce5e5bbd600b3d96e813d4c0cebe0fc237fca5bc97a8f81c32229fdf2e67dbe25cb097b2efe2d113865b908e1b1db80a5514e2bbf0a63f1fbfc3c8024ce8bb4c0fa47341e8e4a3a4b597e292bc4ac269c0687eaabfed0de4f2134836f9afade4bbcacf39b2acc471f64a0b4fb1de066519259c02d6136ac00e6bdbbe572aea26ed9010d79e372ea49b2c6bf44fd1e4fa7cf8466d3da2c6e50d14c4d44e6342444ecbae72a482e825e2ea34f209b533566dd3df3fb571feaed33d24858c6938c4fbd2a14443287eba59de937611f05f1a086ca49315c202af4fbc42cd286ed041e23b7c3e137eec84b802e296689047f71b822c544f88a8c148758f04d29b94e31ce4aba292dcf2ec10b1fb4ea885f5189ea0c05174e7449ef1e7357e2df78da72f51f50e9b176a8bf77f470c187c73d6672c4c1987260c66a1d3fcb79031d50f3f8c0cf7130310431692ab145dca0382d48f444f5234d876b2bdc96b9fcd3ea061ebf20fc3b015f5e35b56bc9ee94b4d6d3c521f2da7de6462519aa835d063b92b0a2c3428c78a4f0fdd1d58713ea3ac628856b85e846cedb2812b43c03b9031dc54041a2b8dc114378b8207188e1e013aa734193c9ad9a5ddfd09e7d049ed5e2233a85da2a576d20e39b013a0d65c9c7f28869157acc88035065187080526a868232666f94db3a27755c2275116f67e6c005f0e4176f56b3593952c634413347b8c6d7e86013bf064ae25e87067dc8096766a06a9c0f2b7b4542e521f2026533b918126ac8cd7c1547845f2897af329e5d2d804e0688e0b0ccffc0a53dd7306baef41996e8951ad296e66d5a959d331ff13871e1a03f07c5110b3fb24dd16d1e1304ca45a8fcac089877d982aae8f759c07a789b8bccd4717833a84237acba8fd05ef4102febb65bff3dfb6c5eddbb8ce0ec51ddb67e64912d8e06a412d8ab250d5c93f9c022822859413e78e82a4519a5afec4073872b4277fc27cb7c572d9cb09e1e6c6010bd0efe84cbbc6d6ae0784bf367e710d66853eeaf7073e8afc492c900025c9855064aca1faa059ec00a3a1ae916308bf33c1b63c2a108a945a44491b7203912a9cd85569859fe1969b81075acc23ef84af0e2d8833b252a92bd75338bbad2e287b4b9547cb3f427e3a2fc0df2496e9af3c267e96456d6059bbd5646111eb83cded460eef66659a9bd48e89e7439121164a9a22b87239703d3cf015abb619fa0cef002d4c5e5b801af5b472a281c08c9f2ebba8be05aa90b856bfc6921642a12247c4c65f8f5301975132d44a1f76680e655c39bcaa70e89afd1a45da06d920ebabfcdcbeec3d3544af5f4294241c737578dbdf4e00b2b4cc22063d8d69c2751c2d550f7e3b60660213e0161d290e8ea5656e218a91828c", &(0x7f0000002340)}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0xfd8a, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x20000448) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000002, 0x12, r6, 0x1000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r7, 0x5607, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r9, 0x1, 0x70bd26, 0x24dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$VT_ACTIVATE(r7, 0x5606, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x5, 0x1, 0xa00000, 0x6, 0x1}, 0x14) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 17.451692767s ago: executing program 0 (id=184): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='file net/sctp/* +p\n\x00', 0x14) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000600)=0x2, 0x4) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8) setsockopt(r3, 0x84, 0x7d, &(0x7f0000000700)="0000000001000000", 0x8) bind(r2, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10) bind(r3, &(0x7f0000000900)=@in={0x2, 0x238a, @loopback}, 0x10) listen(r2, 0x5) connect(r3, &(0x7f0000000800)=@in={0x2, 0x2389, @loopback}, 0x10) sendto(r3, &(0x7f0000000a00)='hello world\x00', 0xb, 0x0, 0x0, 0x0) 15.72927124s ago: executing program 2 (id=185): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9880061ce618117c56f0979bd10b97163c953ab1abda4589e9cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346d2014006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172751151b633fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13ceec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000170022626165866c156a25148972700000b515a1000000000000000eb2e9c15b6c8f6198282d0000000000c2ccf3f69cfcf1e15ea7a9e57aee78e12a2caebaada42811754e19a7e9b531636794a718b4766d2c7c61c3dba128c7fcd1f97989ccf1d55de496eae46c590c2d0225f9cd07005ac7f76d9d560a08c9fd0caafd9d095cb9db0099014cd0d4df62af52b088b01adeadc4c5225a6cd8486b03f83805dffe90dbf7ad042012b7213a2b03e3b1634ddfc9d6f570c4990fbbc7306871d9a52a157fb1a10fa2868df06faf83a8420e9ce62567043ce7e56d1ebe81"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdd3}, 0x48) 14.124794501s ago: executing program 2 (id=186): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80cc85}, 0x94) 14.057536794s ago: executing program 3 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) pipe2$9p(0x0, 0x80080) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, 0x0, 0x0, 0x1) futex(&(0x7f0000000040)=0x1, 0x6, 0x0, &(0x7f00000000c0), 0x0, 0x1) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) 11.15305118s ago: executing program 2 (id=188): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa10000000000000701000000feffffb702000008000000b70300000100000085000000a400000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40f00}, 0x94) 10.860228785s ago: executing program 3 (id=189): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 9.291200174s ago: executing program 2 (id=190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000080)={0x4, @output={0x1000, 0x0, {0x9, 0x3}, 0x200000, 0xfffffffc}}) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007000000"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 9.149293949s ago: executing program 0 (id=191): rt_sigtimedwait(&(0x7f0000000080)={[0x1907e4f9]}, 0x0, &(0x7f0000000140), 0x8) 9.095086901s ago: executing program 4 (id=192): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000900000073119d000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.009534342s ago: executing program 0 (id=193): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x400000}, 0x20) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000004000)=@generic={0x0, r4}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={0x0, r5}, 0x18) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f", 0xc5}, {&(0x7f00000004c0)="f80ec2", 0x3}], 0x2, 0x0, 0x0, 0x2663}, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) stat(&(0x7f000000a380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f000000b380)) getegid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 5.94181642s ago: executing program 2 (id=194): io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0x14, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmctl$SHM_INFO(0x0, 0xe, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 5.913460661s ago: executing program 4 (id=195): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x14e}, 0x48) 4.012083457s ago: executing program 2 (id=196): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_mptcp(0xa, 0x1, 0x106) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) semctl$GETZCNT(0x0, 0x2, 0xf, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 2.908914585s ago: executing program 3 (id=197): bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0, 0x20}, 0x20) 2.767605824s ago: executing program 0 (id=198): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4c880) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.623159504s ago: executing program 4 (id=199): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x80002, 0x4) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x4000000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @none, 0x7}, 0xa) shutdown(r6, 0x1) 2.53193108s ago: executing program 3 (id=200): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, 0x0, 0x10b8}, 0x588) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 492.734362ms ago: executing program 0 (id=201): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000880)='\'{:}[{\x00') 0s ago: executing program 3 (id=202): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000800)={&(0x7f0000000740)=""/171, 0xab}) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) setpgid(0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711805000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r5, 0x1) ppoll(&(0x7f0000000500)=[{r5, 0x40b0}, {r4, 0x323c}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.19' (ED25519) to the list of known hosts. [ 87.048434][ T10] cfg80211: failed to load regulatory.db [ 89.450958][ T5587] cgroup: Unknown subsys name 'net' [ 89.692302][ T5587] cgroup: Unknown subsys name 'cpuset' [ 89.747211][ T5587] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.749859][ T5587] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.350688][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.351666][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.352513][ T5616] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.367577][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.375355][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.381397][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.382577][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.384307][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.391419][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.391677][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.392476][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.405544][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.413126][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.415610][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.457232][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.459172][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.460049][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.552796][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.571055][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.574178][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.609220][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.624646][ T4915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.627784][ T4915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.641211][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.646836][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.419072][ T59] Bluetooth: hci1: command tx timeout [ 97.496408][ T59] Bluetooth: hci3: command tx timeout [ 97.496574][ T59] Bluetooth: hci4: command tx timeout [ 97.656610][ T5626] Bluetooth: hci0: command tx timeout [ 97.737823][ T5626] Bluetooth: hci2: command tx timeout [ 98.281041][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.282182][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.282312][ T5610] bridge_slave_0: entered allmulticast mode [ 98.284042][ T5610] bridge_slave_0: entered promiscuous mode [ 98.290159][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.290282][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.290782][ T5609] bridge_slave_0: entered allmulticast mode [ 98.295869][ T5609] bridge_slave_0: entered promiscuous mode [ 98.304449][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.304574][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.304757][ T5608] bridge_slave_0: entered allmulticast mode [ 98.310840][ T5608] bridge_slave_0: entered promiscuous mode [ 98.371144][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.371256][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.371387][ T5610] bridge_slave_1: entered allmulticast mode [ 98.373011][ T5610] bridge_slave_1: entered promiscuous mode [ 98.374195][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.374328][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.374429][ T5609] bridge_slave_1: entered allmulticast mode [ 98.376014][ T5609] bridge_slave_1: entered promiscuous mode [ 98.431748][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.431875][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.431984][ T5608] bridge_slave_1: entered allmulticast mode [ 98.433611][ T5608] bridge_slave_1: entered promiscuous mode [ 98.515104][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.515226][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.515329][ T5607] bridge_slave_0: entered allmulticast mode [ 98.518226][ T5607] bridge_slave_0: entered promiscuous mode [ 98.531970][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.532102][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.532311][ T5606] bridge_slave_0: entered allmulticast mode [ 98.535092][ T5606] bridge_slave_0: entered promiscuous mode [ 98.596629][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.596750][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.596864][ T5607] bridge_slave_1: entered allmulticast mode [ 98.599020][ T5607] bridge_slave_1: entered promiscuous mode [ 98.600639][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.600750][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.600852][ T5606] bridge_slave_1: entered allmulticast mode [ 98.602439][ T5606] bridge_slave_1: entered promiscuous mode [ 98.618856][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.631900][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.641386][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.689835][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.692384][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.694657][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.778097][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.781328][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.832182][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.834377][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.836890][ T5610] team0: Port device team_slave_0 added [ 98.841099][ T5609] team0: Port device team_slave_0 added [ 98.844756][ T5608] team0: Port device team_slave_0 added [ 98.884179][ T5610] team0: Port device team_slave_1 added [ 98.886003][ T5609] team0: Port device team_slave_1 added [ 98.898617][ T5608] team0: Port device team_slave_1 added [ 98.970152][ T5607] team0: Port device team_slave_0 added [ 98.972905][ T5606] team0: Port device team_slave_0 added [ 99.020292][ T5607] team0: Port device team_slave_1 added [ 99.022094][ T5606] team0: Port device team_slave_1 added [ 99.023143][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.023152][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.023169][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.025474][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.025489][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.025515][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.031101][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.031116][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.031140][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.082696][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.082713][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.082737][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.084426][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.084438][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.084462][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.089752][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.089767][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.089791][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.182507][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.182526][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.182561][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.186105][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.186121][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.186144][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.202339][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.202357][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.202381][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.205367][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.205381][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.205404][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.421644][ T5609] hsr_slave_0: entered promiscuous mode [ 99.423218][ T5609] hsr_slave_1: entered promiscuous mode [ 99.461720][ T5610] hsr_slave_0: entered promiscuous mode [ 99.463049][ T5610] hsr_slave_1: entered promiscuous mode [ 99.465008][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 99.465115][ T5610] Cannot create hsr debugfs directory [ 99.496509][ T5626] Bluetooth: hci1: command tx timeout [ 99.502455][ T5608] hsr_slave_0: entered promiscuous mode [ 99.503849][ T5608] hsr_slave_1: entered promiscuous mode [ 99.504767][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 99.504789][ T5608] Cannot create hsr debugfs directory [ 99.571360][ T5607] hsr_slave_0: entered promiscuous mode [ 99.572910][ T5607] hsr_slave_1: entered promiscuous mode [ 99.574109][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 99.574135][ T5607] Cannot create hsr debugfs directory [ 99.577955][ T59] Bluetooth: hci3: command tx timeout [ 99.578107][ T5626] Bluetooth: hci4: command tx timeout [ 99.593726][ T5606] hsr_slave_0: entered promiscuous mode [ 99.595162][ T5606] hsr_slave_1: entered promiscuous mode [ 99.596202][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 99.597068][ T5606] Cannot create hsr debugfs directory [ 99.736414][ T5626] Bluetooth: hci0: command tx timeout [ 99.816385][ T5626] Bluetooth: hci2: command tx timeout [ 100.967565][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.009164][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.014315][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.041670][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.055820][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.081338][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.104773][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.141549][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.264780][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.291388][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.297140][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.340812][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.365573][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.393685][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.407237][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.431244][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.576854][ T5626] Bluetooth: hci1: command tx timeout [ 101.581207][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.632130][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.643562][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.656494][ T5626] Bluetooth: hci4: command tx timeout [ 101.656513][ T59] Bluetooth: hci3: command tx timeout [ 101.691351][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.705165][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.732719][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.778044][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.815433][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.816407][ T5626] Bluetooth: hci0: command tx timeout [ 101.908630][ T5626] Bluetooth: hci2: command tx timeout [ 101.940334][ T5606] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.969940][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.984250][ T5606] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.019607][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.025337][ T5606] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.064720][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.093403][ T5606] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.129594][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.319145][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.333375][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.382069][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.397429][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.439825][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.443519][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.462766][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.479097][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.519920][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.584568][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.595771][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.657593][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.657742][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.711406][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.711566][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.767349][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.826465][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.827029][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.868644][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.889666][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.889769][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.022694][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.074486][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.084980][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.085124][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.154624][ T3355] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.154814][ T3355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.301362][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.370295][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.377650][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.377863][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.434908][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.435063][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.588349][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.666372][ T5626] Bluetooth: hci1: command tx timeout [ 103.690065][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.690296][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.737319][ T5626] Bluetooth: hci4: command tx timeout [ 103.737331][ T59] Bluetooth: hci3: command tx timeout [ 103.781763][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.781904][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.896897][ T59] Bluetooth: hci0: command tx timeout [ 103.976498][ T59] Bluetooth: hci2: command tx timeout [ 104.377194][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.925818][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.443038][ T5610] veth0_vlan: entered promiscuous mode [ 105.528475][ T5610] veth1_vlan: entered promiscuous mode [ 105.611162][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.795513][ T5609] veth0_vlan: entered promiscuous mode [ 105.843561][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.863300][ T5610] veth0_macvtap: entered promiscuous mode [ 105.882899][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.901183][ T5609] veth1_vlan: entered promiscuous mode [ 105.904438][ T5610] veth1_macvtap: entered promiscuous mode [ 105.974389][ T5607] veth0_vlan: entered promiscuous mode [ 106.001664][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.041210][ T5607] veth1_vlan: entered promiscuous mode [ 106.044131][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.121316][ T995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.149610][ T995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.152304][ T5606] veth0_vlan: entered promiscuous mode [ 106.154054][ T5609] veth0_macvtap: entered promiscuous mode [ 106.179127][ T995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.195396][ T995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.216188][ T5609] veth1_macvtap: entered promiscuous mode [ 106.282438][ T5608] veth0_vlan: entered promiscuous mode [ 106.287027][ T5606] veth1_vlan: entered promiscuous mode [ 106.503061][ T5608] veth1_vlan: entered promiscuous mode [ 106.530889][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.535283][ T5607] veth0_macvtap: entered promiscuous mode [ 106.592553][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.593106][ T5607] veth1_macvtap: entered promiscuous mode [ 106.648903][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.652456][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.655367][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.694958][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.753204][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.753226][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.803903][ T5606] veth0_macvtap: entered promiscuous mode [ 106.809748][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.904268][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.906104][ T5606] veth1_macvtap: entered promiscuous mode [ 106.978680][ T5608] veth0_macvtap: entered promiscuous mode [ 107.089621][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.089707][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.089722][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.092045][ T5608] veth1_macvtap: entered promiscuous mode [ 107.141876][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.160186][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.168294][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.274662][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.337261][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.337283][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.432498][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.442919][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.622045][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.772196][ T995] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.788832][ T995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.795229][ T995] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.816070][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.816090][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.858151][ T995] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.863370][ T995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.866970][ T995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.088479][ T995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.150764][ T995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.237805][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.237827][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.004713][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.004736][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.374716][ T5623] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.495298][ T1180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.495319][ T1180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.631962][ T5623] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.691787][ T5623] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 109.707918][ T5623] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 109.707951][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.707972][ T5623] usb 5-1: Product: syz [ 109.707986][ T5623] usb 5-1: Manufacturer: syz [ 109.708001][ T5623] usb 5-1: SerialNumber: syz [ 109.737599][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.737623][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.101051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.101077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.311075][ T5808] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 110.898322][ T5813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6'. [ 110.929537][ T5810] Zero length message leads to an empty skb [ 111.059835][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.059858][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.380797][ T5623] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.463944][ T5623] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 111.463975][ T5623] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 111.463998][ T5623] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 111.464153][ T5623] usb 5-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 111.464175][ T5623] usb 5-1: found format II with max.bitrate = 4, frame size=7372 [ 111.464195][ T5623] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 111.670697][ T5623] usb 5-1: failed to enable PITCH for EP 0x82 [ 114.309689][ T37] audit: type=1107 audit(1785223715.330:2): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 114.806040][ T5623] usb 5-1: USB disconnect, device number 2 [ 117.469976][ T5845] ALSA: mixer_oss: invalid OSS volume '' [ 117.868853][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.946288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.966276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.976273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.036262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.541570][ T5809] udevd[5809]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.828711][ T5623] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.037151][ T5623] usb 5-1: config 24 has too many interfaces: 158, using maximum allowed: 32 [ 121.037185][ T5623] usb 5-1: config 24 has an invalid descriptor of length 171, skipping remainder of the config [ 121.037207][ T5623] usb 5-1: config 24 has 1 interface, different from the descriptor's value: 158 [ 121.059042][ T5623] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 121.059071][ T5623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.059089][ T5623] usb 5-1: Product: syz [ 121.059103][ T5623] usb 5-1: Manufacturer: syz [ 121.059116][ T5623] usb 5-1: SerialNumber: syz [ 121.468523][ T5623] usb 5-1: can't set config #24, error -71 [ 121.601021][ T5623] usb 5-1: USB disconnect, device number 3 [ 122.365538][ T5889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.23'. [ 123.056508][ T31] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.498785][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 124.507666][ T31] usb 5-1: config 0 has an invalid descriptor of length 56, skipping remainder of the config [ 124.507697][ T31] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.507737][ T31] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 124.507771][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.779304][ T31] usb 5-1: config 0 descriptor?? [ 125.046278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.066279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.076270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.422041][ T5623] usb 5-1: USB disconnect, device number 4 [ 128.816258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.876278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.896271][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.117355][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.117459][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.260083][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 138.447630][ T5968] syz.3.44 (5968) used greatest stack depth: 18864 bytes left [ 143.498354][ T6018] (syz.2.54,6018,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 143.498416][ T6018] (syz.2.54,6018,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 146.296499][ T5627] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.446382][ T5627] usb 1-1: Using ep0 maxpacket: 32 [ 146.475839][ T5627] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 146.475873][ T5627] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.518774][ T5627] usb 1-1: config 0 descriptor?? [ 146.595021][ T5627] as10x_usb: device has been detected [ 146.603020][ T5627] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 146.709335][ T5627] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 148.235873][ T5627] as10x_usb: error during firmware upload part1 [ 148.236356][ T5627] Registered device nBox DVB-T Dongle [ 148.881384][ T5627] usb 1-1: USB disconnect, device number 2 [ 151.759120][ T5627] Unregistered device nBox DVB-T Dongle [ 151.908568][ T5627] as10x_usb: device has been disconnected [ 152.402121][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 155.619330][ T6066] 9pnet_fd: p9_fd_create_tcp (6066): problem connecting socket to 127.0.0.1 [ 157.044772][ T6097] tipc: Started in network mode [ 157.044806][ T6097] tipc: Node identity ce8f2bb82a18, cluster identity 4711 [ 157.045201][ T6097] tipc: Enabled bearer , priority 0 [ 157.104621][ T6095] syzkaller0: entered promiscuous mode [ 157.104648][ T6095] syzkaller0: entered allmulticast mode [ 157.249526][ T6095] tipc: Resetting bearer [ 157.337828][ T6093] tipc: Resetting bearer [ 157.541363][ T6093] tipc: Disabling bearer [ 157.702335][ T6099] netlink: 20 bytes leftover after parsing attributes in process `syz.4.77'. [ 158.907914][ T6083] infiniband syz0: set active [ 158.907938][ T6083] infiniband syz0: added veth0 [ 159.005461][ T6083] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 159.092462][ T6083] infiniband syz0: Couldn't open port 1 [ 159.148784][ T6083] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 159.148826][ T6083] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 159.148868][ T6083] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 160.593320][ T6083] RDS/IB: syz0: added [ 161.239545][ T6083] smc: adding ib device syz0 with port count 1 [ 161.239875][ T6083] smc: ib device syz0 port 1 has no pnetid [ 169.653404][ T6163] syz.2.92 (6163) used greatest stack depth: 18408 bytes left [ 172.473347][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 173.500960][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 173.957458][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.032929][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.047125][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.607997][ T6203] hub 8-0:1.0: USB hub found [ 174.655299][ T6203] hub 8-0:1.0: 1 port detected [ 176.142625][ T59] Bluetooth: hci5: command tx timeout [ 179.487771][ T59] Bluetooth: hci5: command tx timeout [ 183.008574][ T5626] Bluetooth: hci5: command tx timeout [ 185.017985][ T5626] Bluetooth: hci5: command tx timeout [ 187.044122][ T6263] capability: warning: `syz.0.116' uses deprecated v2 capabilities in a way that may be insecure [ 187.046831][ T6263] program syz.0.116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.982836][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.982919][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.514058][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.535300][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.424564][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.551500][ T31] playstation 0003:054C:05C4.0001: hidraw0: USB HID v0.01 Device [syz1] on syz1 [ 200.554361][ T31] playstation 0003:054C:05C4.0001: Failed to retrieve feature with reportID 18: -5 [ 200.554390][ T31] playstation 0003:054C:05C4.0001: Failed to retrieve DualShock4 pairing info: -5 [ 200.554428][ T31] playstation 0003:054C:05C4.0001: Failed to get MAC address from DualShock4 [ 200.554443][ T31] playstation 0003:054C:05C4.0001: Failed to create dualshock4. [ 200.634277][ T31] playstation 0003:054C:05C4.0001: probe with driver playstation failed with error -5 [ 201.317492][ T6356] fido_id[6356]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.909140][ T5613] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.079046][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.109131][ T5613] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.109197][ T5613] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.109243][ T5613] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 203.109267][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.110392][ T5613] usb 5-1: config 0 descriptor?? [ 204.187685][ T5613] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 204.503628][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.503775][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.504010][ T6187] bridge_slave_0: entered allmulticast mode [ 204.537205][ T6187] bridge_slave_0: entered promiscuous mode [ 204.565286][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.565405][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.565639][ T6187] bridge_slave_1: entered allmulticast mode [ 204.593959][ T6187] bridge_slave_1: entered promiscuous mode [ 204.671331][ T6383] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 204.679953][ T6383] batman_adv: batadv0: Adding interface: gretap1 [ 204.679971][ T6383] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.680002][ T6383] batman_adv: batadv0: Interface activated: gretap1 [ 204.718799][ T6187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.728279][ T6385] syzkaller0: entered promiscuous mode [ 204.728304][ T6385] syzkaller0: entered allmulticast mode [ 204.776134][ T6187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.777003][ T6385] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 206.703606][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 207.015610][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.147'. [ 207.080829][ T6187] team0: Port device team_slave_0 added [ 207.116487][ T6187] team0: Port device team_slave_1 added [ 207.465415][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.465434][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.465567][ T6187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.337797][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.337816][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.337846][ T6187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.983489][ T5613] usb 5-1: USB disconnect, device number 5 [ 211.078961][ T6187] hsr_slave_0: entered promiscuous mode [ 211.143945][ T6187] hsr_slave_1: entered promiscuous mode [ 211.154796][ T6187] debugfs: 'hsr0' already exists in 'hsr' [ 211.154827][ T6187] Cannot create hsr debugfs directory [ 211.202389][ T6313] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 211.205761][ T6313] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 211.301370][ T6421] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 211.301390][ T6421] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 211.413811][ T6421] vhci_hcd vhci_hcd.0: Device attached [ 212.471822][ T6313] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 213.419445][ T71] bridge_slave_1: left allmulticast mode [ 213.419700][ T71] bridge_slave_1: left promiscuous mode [ 213.463479][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.796510][ T6424] vhci_hcd: connection reset by peer [ 214.417572][ T1196] vhci_hcd vhci_hcd.0: stop threads [ 214.428284][ T1196] vhci_hcd vhci_hcd.0: release socket [ 214.620551][ T1196] vhci_hcd vhci_hcd.0: disconnect device [ 215.442112][ T71] bridge_slave_0: left allmulticast mode [ 215.442141][ T71] bridge_slave_0: left promiscuous mode [ 215.442319][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.302913][ T6445] ceph: No mds server is up or the cluster is laggy [ 217.773327][ T5613] libceph: connect (1)[c::]:6789 error -101 [ 218.108041][ T5613] libceph: mon0 (1)[c::]:6789 connect error [ 218.380929][ T199] libceph: connect (1)[c::]:6789 error -101 [ 218.381804][ T199] libceph: mon0 (1)[c::]:6789 connect error [ 218.636435][ T6313] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 218.886776][ T5613] libceph: connect (1)[c::]:6789 error -101 [ 218.886959][ T5613] libceph: mon0 (1)[c::]:6789 connect error [ 220.000963][ T6462] evm: overlay not supported [ 221.642517][ T6473] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 222.296374][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 222.310858][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 222.310925][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 222.310951][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 222.535615][ T6479] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 224.120744][ T37] audit: type=1800 audit(1785223825.610:3): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.163" name="file1" dev="tmpfs" ino=172 res=0 errno=0 [ 224.335948][ T6488] syz.4.164 uses obsolete (PF_INET,SOCK_PACKET) [ 227.326739][ T5740] IPVS: starting estimator thread 0... [ 227.701097][ T6509] IPVS: using max 7 ests per chain, 16800 per kthread [ 229.677230][ T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.736980][ T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.762282][ T71] bond0 (unregistering): Released all slaves [ 229.853087][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 235.410540][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.465376][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.557356][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.140909][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.164630][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.462311][ T6540] uprobe: syz.3.173:6540 failed to unregister, leaking uprobe [ 239.182090][ T5626] Bluetooth: hci0: command tx timeout [ 239.305700][ T6577] capability: warning: `syz.0.181' uses 32-bit capabilities (legacy support in use) [ 239.410081][ T6577] overlayfs: upper fs does not support file handles, falling back to index=off. [ 239.410370][ T6577] overlayfs: failed to set uuid (39/file2, err=-1); falling back to uuid=null. [ 239.926379][ T199] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 240.149031][ T199] usb 1-1: Using ep0 maxpacket: 16 [ 240.263673][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.179'. [ 240.772950][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50077, setting to 1024 [ 240.772989][ T199] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 240.773032][ T199] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 240.773056][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.851120][ T199] usb 1-1: config 0 descriptor?? [ 241.256401][ T5626] Bluetooth: hci0: command tx timeout [ 241.559107][ T199] usb 1-1: can't set config #0, error -71 [ 241.591951][ T199] usb 1-1: USB disconnect, device number 3 [ 243.336377][ T5626] Bluetooth: hci0: command tx timeout [ 246.750070][ T5626] Bluetooth: hci0: command tx timeout [ 253.239014][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 255.985940][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.986017][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.771947][ T6666] siw: device registration error -23 [ 260.841263][ T6667] smc: removing ib device syz0 [ 260.981015][ T6667] smbdirect: ib_dev[syz0] removed [ 261.983444][ T5612] Bluetooth: hci0: command 0x0405 tx timeout [ 262.314592][ T6667] ------------[ cut here ]------------ [ 262.314604][ T6667] !xa_empty(&pool->xa) [ 262.314610][ T6667] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x4b/0x60, CPU#1: syz.4.199/6667 [ 262.314642][ T6667] Modules linked in: [ 262.314654][ T6667] CPU: 1 UID: 0 PID: 6667 Comm: syz.4.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.314669][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 262.314676][ T6667] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 262.314692][ T6667] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 8d 01 d0 f9 48 83 3b 00 75 0c e8 b2 8e 66 f9 5b c3 cc cc cc cc cc e8 a6 8e 66 f9 90 <0f> 0b 90 5b e9 0c 44 e8 02 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 262.314702][ T6667] RSP: 0018:ffffc90004537028 EFLAGS: 00010246 [ 262.314713][ T6667] RAX: ffffffff885f3c4a RBX: ffff88803b65d6b0 RCX: 0000000000080000 [ 262.314722][ T6667] RDX: ffffc90012fd2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 262.314731][ T6667] RBP: ffff88803b65d318 R08: 0000000000000000 R09: 0000000000000000 [ 262.314738][ T6667] R10: dffffc0000000000 R11: ffffffff885d7360 R12: ffff88803b65d318 [ 262.314747][ T6667] R13: 1ffff110076cba2d R14: ffffffff885d7360 R15: dffffc0000000000 [ 262.314757][ T6667] FS: 00007f1b6dcb16c0(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 262.314767][ T6667] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.314776][ T6667] CR2: 000000110c2424de CR3: 000000005fde2000 CR4: 00000000003526f0 [ 262.314788][ T6667] Call Trace: [ 262.314794][ T6667] [ 262.314800][ T6667] rxe_dealloc+0x25/0xc0 [ 262.314813][ T6667] ib_dealloc_device+0x54/0x200 [ 262.314832][ T6667] __ib_unregister_device+0x38f/0x400 [ 262.314854][ T6667] ib_unregister_device_and_put+0xb8/0xf0 [ 262.314872][ T6667] nldev_dellink+0x39e/0x430 [ 262.314888][ T6667] ? __pfx_nldev_dellink+0x10/0x10 [ 262.314954][ T6667] ? rcu_is_watching+0x15/0xb0 [ 262.314971][ T6667] ? cap_capable+0x123/0x460 [ 262.314984][ T6667] ? safesetid_security_capable+0xa9/0x1a0 [ 262.315000][ T6667] ? bpf_lsm_capable+0x9/0x20 [ 262.315013][ T6667] ? security_capable+0x7e/0x2c0 [ 262.315031][ T6667] ? __pfx_nldev_dellink+0x10/0x10 [ 262.315045][ T6667] rdma_nl_rcv+0x6f6/0xa40 [ 262.315067][ T6667] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 262.315093][ T6667] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.315109][ T6667] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.315128][ T6667] netlink_unicast+0x7f5/0x990 [ 262.315148][ T6667] netlink_sendmsg+0x813/0xb40 [ 262.315169][ T6667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.315186][ T6667] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 262.315209][ T6667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.315224][ T6667] sock_sendmsg_nosec+0x13a/0x180 [ 262.315245][ T6667] ____sys_sendmsg+0x565/0x870 [ 262.315260][ T6667] ? __might_fault+0xaf/0x130 [ 262.315278][ T6667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.315299][ T6667] ? import_iovec+0x73/0xa0 [ 262.315317][ T6667] ___sys_sendmsg+0x2a5/0x360 [ 262.315331][ T6667] ? __lock_acquire+0x683/0x2ce0 [ 262.315347][ T6667] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.315365][ T6667] ? futex_wait+0x2a2/0x390 [ 262.315400][ T6667] ? __fget_files+0x2a/0x420 [ 262.315413][ T6667] ? __fget_files+0x3a8/0x420 [ 262.315432][ T6667] __x64_sys_sendmsg+0x1b7/0x290 [ 262.315449][ T6667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.315475][ T6667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.315489][ T6667] do_syscall_64+0x174/0x580 [ 262.315504][ T6667] ? trace_irq_disable+0x3b/0x140 [ 262.315517][ T6667] ? clear_bhb_loop+0x40/0x90 [ 262.315533][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.315545][ T6667] RIP: 0033:0x7f1b6febde99 [ 262.315557][ T6667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.315567][ T6667] RSP: 002b:00007f1b6dcb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.315586][ T6667] RAX: ffffffffffffffda RBX: 00007f1b70146270 RCX: 00007f1b6febde99 [ 262.315595][ T6667] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 262.315602][ T6667] RBP: 00007f1b6ff53eaf R08: 0000000000000000 R09: 0000000000000000 [ 262.315610][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.315617][ T6667] R13: 00007f1b70146308 R14: 00007f1b70146270 R15: 00007fff99320958 [ 262.315635][ T6667] [ 262.315642][ T6667] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 262.315651][ T6667] CPU: 1 UID: 0 PID: 6667 Comm: syz.4.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 262.315665][ T6667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 262.315672][ T6667] Call Trace: [ 262.315677][ T6667] [ 262.315681][ T6667] vpanic+0x56c/0xa60 [ 262.315695][ T6667] ? __pfx__printk+0x10/0x10 [ 262.315710][ T6667] ? __pfx_vpanic+0x10/0x10 [ 262.315721][ T6667] ? is_bpf_text_address+0x292/0x2b0 [ 262.315736][ T6667] ? is_bpf_text_address+0x26/0x2b0 [ 262.315755][ T6667] panic+0xc5/0xd0 [ 262.315766][ T6667] ? __pfx_panic+0x10/0x10 [ 262.315787][ T6667] __warn+0x315/0x4c0 [ 262.315799][ T6667] ? rxe_pool_cleanup+0x4b/0x60 [ 262.315815][ T6667] ? rxe_pool_cleanup+0x4b/0x60 [ 262.315829][ T6667] __report_bug+0x276/0x570 [ 262.315845][ T6667] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 262.315861][ T6667] ? rxe_pool_cleanup+0x4b/0x60 [ 262.315877][ T6667] ? __pfx___report_bug+0x10/0x10 [ 262.315892][ T6667] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 262.315920][ T6667] ? rxe_pool_cleanup+0x4b/0x60 [ 262.315934][ T6667] report_bug+0x16a/0x220 [ 262.315949][ T6667] ? rxe_pool_cleanup+0x4b/0x60 [ 262.315962][ T6667] ? rxe_pool_cleanup+0x4d/0x60 [ 262.315976][ T6667] handle_bug+0x9c/0x200 [ 262.315994][ T6667] exc_invalid_op+0x1a/0x50 [ 262.316010][ T6667] asm_exc_invalid_op+0x1a/0x20 [ 262.316022][ T6667] RIP: 0010:rxe_pool_cleanup+0x4b/0x60 [ 262.316037][ T6667] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 8d 01 d0 f9 48 83 3b 00 75 0c e8 b2 8e 66 f9 5b c3 cc cc cc cc cc e8 a6 8e 66 f9 90 <0f> 0b 90 5b e9 0c 44 e8 02 cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 262.316046][ T6667] RSP: 0018:ffffc90004537028 EFLAGS: 00010246 [ 262.316056][ T6667] RAX: ffffffff885f3c4a RBX: ffff88803b65d6b0 RCX: 0000000000080000 [ 262.316065][ T6667] RDX: ffffc90012fd2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 262.316073][ T6667] RBP: ffff88803b65d318 R08: 0000000000000000 R09: 0000000000000000 [ 262.316081][ T6667] R10: dffffc0000000000 R11: ffffffff885d7360 R12: ffff88803b65d318 [ 262.316090][ T6667] R13: 1ffff110076cba2d R14: ffffffff885d7360 R15: dffffc0000000000 [ 262.316099][ T6667] ? __pfx_rxe_dealloc+0x10/0x10 [ 262.316113][ T6667] ? __pfx_rxe_dealloc+0x10/0x10 [ 262.316126][ T6667] ? rxe_pool_cleanup+0x4a/0x60 [ 262.316152][ T6667] ? rxe_pool_cleanup+0x4a/0x60 [ 262.316173][ T6667] rxe_dealloc+0x25/0xc0 [ 262.316192][ T6667] ib_dealloc_device+0x54/0x200 [ 262.316220][ T6667] __ib_unregister_device+0x38f/0x400 [ 262.316248][ T6667] ib_unregister_device_and_put+0xb8/0xf0 [ 262.316266][ T6667] nldev_dellink+0x39e/0x430 [ 262.316282][ T6667] ? __pfx_nldev_dellink+0x10/0x10 [ 262.316346][ T6667] ? rcu_is_watching+0x15/0xb0 [ 262.316362][ T6667] ? cap_capable+0x123/0x460 [ 262.316375][ T6667] ? safesetid_security_capable+0xa9/0x1a0 [ 262.316390][ T6667] ? bpf_lsm_capable+0x9/0x20 [ 262.316402][ T6667] ? security_capable+0x7e/0x2c0 [ 262.316421][ T6667] ? __pfx_nldev_dellink+0x10/0x10 [ 262.316435][ T6667] rdma_nl_rcv+0x6f6/0xa40 [ 262.316456][ T6667] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 262.316483][ T6667] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.316498][ T6667] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.316516][ T6667] netlink_unicast+0x7f5/0x990 [ 262.316536][ T6667] netlink_sendmsg+0x813/0xb40 [ 262.316557][ T6667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.316574][ T6667] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 262.316604][ T6667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.316619][ T6667] sock_sendmsg_nosec+0x13a/0x180 [ 262.316640][ T6667] ____sys_sendmsg+0x565/0x870 [ 262.316655][ T6667] ? __might_fault+0xaf/0x130 [ 262.316672][ T6667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.316693][ T6667] ? import_iovec+0x73/0xa0 [ 262.316710][ T6667] ___sys_sendmsg+0x2a5/0x360 [ 262.316725][ T6667] ? __lock_acquire+0x683/0x2ce0 [ 262.316740][ T6667] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.316758][ T6667] ? futex_wait+0x2a2/0x390 [ 262.316793][ T6667] ? __fget_files+0x2a/0x420 [ 262.316805][ T6667] ? __fget_files+0x3a8/0x420 [ 262.316824][ T6667] __x64_sys_sendmsg+0x1b7/0x290 [ 262.316841][ T6667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.316867][ T6667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.316880][ T6667] do_syscall_64+0x174/0x580 [ 262.316895][ T6667] ? trace_irq_disable+0x3b/0x140 [ 262.316907][ T6667] ? clear_bhb_loop+0x40/0x90 [ 262.316922][ T6667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.316934][ T6667] RIP: 0033:0x7f1b6febde99 [ 262.316945][ T6667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.316955][ T6667] RSP: 002b:00007f1b6dcb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.316968][ T6667] RAX: ffffffffffffffda RBX: 00007f1b70146270 RCX: 00007f1b6febde99 [ 262.316976][ T6667] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 262.316984][ T6667] RBP: 00007f1b6ff53eaf R08: 0000000000000000 R09: 0000000000000000 [ 262.316991][ T6667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.316999][ T6667] R13: 00007f1b70146308 R14: 00007f1b70146270 R15: 00007fff99320958 [ 262.317017][ T6667] [ 262.317179][ T6667] Kernel Offset: disabled