last executing test programs: 11.532607585s ago: executing program 0 (id=99): socket$inet6(0xa, 0x3, 0x6) r0 = openat$rtc(0xffffff9c, 0x0, 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f00001a6000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 10.351999741s ago: executing program 2 (id=101): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x100, 0xa, 0x0, 0x313, 0x3, 0x0}) 9.388444466s ago: executing program 0 (id=103): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x44}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x6f, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @random=0x3b, 0x4803, @val={0x0, 0xa, @random="d6da96dc44bb0f8c8d73"}, @val, @void, @void, @val={0x6, 0x2, 0x4}, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x7, 0x30, 0x44}}, @val={0x2d, 0x1a, {0x1, 0x2, 0x1, 0x0, {0x1, 0x4, 0x0, 0x5, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x4, 0x81}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0xb9, 0x19, 0x3}}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x1e, 0x24, [{0x9}, {0xc}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xc, 0x1}, {0x24, 0x1}, {0x18}, {0x4, 0x1}, {0x1b, 0x1}, {0x24}, {0x2b}, {0x60}, {0x60, 0x1}, {0x36, 0x1}, {0x60}, {0x6c}, {0x5, 0x1}, {0x9}, {0x18, 0x1}, {0x1b}, {0x36, 0x1}, {0x1a}, {0x6c}, {0x30}, {0x9}]}]}, 0x34}}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9.287989231s ago: executing program 1 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="010027bd7000fedbdf253800000008000300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x14058854) 8.173324333s ago: executing program 3 (id=106): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xa, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x8010) 8.160557764s ago: executing program 1 (id=107): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[], 0x1, 0x217, &(0x7f0000000340)="$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") prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) 7.972590023s ago: executing program 2 (id=108): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee00}}, './file0\x00'}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtaction={0x14, 0x1e, 0x109, 0x70bd26, 0x25dfdc01}, 0x14}, 0x1, 0x2b1e}, 0x8058) sendmsg$nl_route_sched(r0, 0x0, 0x0) 7.787154352s ago: executing program 3 (id=109): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, 0x0, 0x0, 0x20000011, 0x0, 0x0) 6.939547262s ago: executing program 0 (id=110): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 6.792615359s ago: executing program 2 (id=111): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x80) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x3}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 6.783054529s ago: executing program 3 (id=112): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 6.745244741s ago: executing program 1 (id=113): socket$inet6(0xa, 0x3, 0x6) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) 6.503043993s ago: executing program 0 (id=114): bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x40040}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1) setns(0xc9, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}, 0x90}, 0x1c) 5.643593763s ago: executing program 2 (id=115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) read$msr(r1, &(0x7f0000000780)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ptrace(0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r2, 0x40104d04, &(0x7f0000000900)) 5.243852752s ago: executing program 1 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="06000000040000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 5.243014122s ago: executing program 3 (id=117): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x9}}, 0x1c}}, 0x0) 4.686070409s ago: executing program 0 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0xdecb0e7b592b9954) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r2, 0x58, &(0x7f0000000200)}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r6, 0x49) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) sendmsg$nl_route(r0, 0x0, 0x0) r7 = shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$SHM_LOCK(r7, 0xb) 2.923493862s ago: executing program 1 (id=119): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) getsockname$unix(r0, &(0x7f0000019080)=@abs, &(0x7f0000019100)=0x6e) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x21}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001880)=@deltfilter={0xf7c, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xf44, 0x2, [@TCA_CGROUP_ACT={0xf40, 0x1, [@m_connmark={0xa0, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}]}, {0x35, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3852466b5f92790cc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x34, 0x14, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x3, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0xd}, {0x10001, 0x1, 0xe0cb, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0xfffffffe, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0x4000000f, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0x1d}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1fe, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146f, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x1}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x40, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0x10001, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0xfffffffc, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x9, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xf7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_read_part_table(0x107a, &(0x7f0000000000)="$eJzs0CFOxEAUx+F/l+0AhhVcCIFbB5a7gEFyARJuwYkQOBIkZvPIdDYNFwDM94lJ2/f6ExP+1baSOmmpqkoOrc6Pg7vTfo63jymVzLsxqWQ7J5vH3Y9Onc2ZxuNVL06HWrwtmYelf/+StB6devcym6TdXN/uM2f67Guv45/nizX7fmw+rV/acu6/xmr94tUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/5DgAA//9Qiy9Q") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010020000000"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000001400)={[{@resuid}, {@dioread_lock}, {@grpjquota}, {@dax_always}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") 2.922441592s ago: executing program 0 (id=120): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700), 0x0, 0x20000011, 0x0, 0x0) 2.892849923s ago: executing program 2 (id=121): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) pwritev2(r6, 0x0, 0x0, 0x5412, 0x0, 0x0) ioctl$BLKFLSBUF(r5, 0x1261, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) clock_gettime(0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0, 0x1104}, {0xffffffffffffffff, 0x400}, {0xffffffffffffffff, 0x110}, {r4, 0xc650}, {r1, 0x10}], 0x5, &(0x7f00000003c0), &(0x7f0000000400)={[0xff]}, 0x8) pipe2$9p(&(0x7f0000000040), 0x80000) ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) 2.882064714s ago: executing program 3 (id=122): syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000000000)) pipe(0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1/memory_backed\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 831.329021ms ago: executing program 1 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) symlinkat(&(0x7f0000000480)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0/virtual_scsi_port\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.1/tcm.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000680)='dummy_udc.0\n', 0xc) close(0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f000000000000000000000000010000", 0x0, 0x3e8, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000700), 0x0, 0x2) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000740)={0x53, 0xffffffffffffffff, 0xd, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000780)="8f00"/13, 0x0, 0x3e8, 0x0, 0x0, 0x0}) 320.644515ms ago: executing program 3 (id=124): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x3}, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000019380)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\v\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}]}, 0xe4) close(r3) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 0s ago: executing program 2 (id=125): socket$inet6(0xa, 0x3, 0x6) r0 = openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts. [ 78.184051][ T5761] cgroup: Unknown subsys name 'net' [ 78.324085][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.086797][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.110105][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.125890][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.133743][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.142388][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.155813][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.163254][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.238530][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.252507][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.260321][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.282839][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.306248][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.325649][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.333283][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.359068][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.366791][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.375705][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.382944][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.391685][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.399346][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.436236][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.437089][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.444506][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.453338][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.465786][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.943774][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 82.971836][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 83.009810][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 83.143291][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.151618][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.160542][ T5778] bridge_slave_0: entered allmulticast mode [ 83.167838][ T5778] bridge_slave_0: entered promiscuous mode [ 83.176600][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 83.188209][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.195373][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.205003][ T5778] bridge_slave_1: entered allmulticast mode [ 83.212818][ T5778] bridge_slave_1: entered promiscuous mode [ 83.333059][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.340438][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.347835][ T5773] bridge_slave_0: entered allmulticast mode [ 83.354848][ T5773] bridge_slave_0: entered promiscuous mode [ 83.368194][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.380562][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.407076][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.414315][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.421934][ T5773] bridge_slave_1: entered allmulticast mode [ 83.429819][ T5773] bridge_slave_1: entered promiscuous mode [ 83.457549][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.464717][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.474215][ T5779] bridge_slave_0: entered allmulticast mode [ 83.482383][ T5779] bridge_slave_0: entered promiscuous mode [ 83.525836][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.535158][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.546330][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.553727][ T5779] bridge_slave_1: entered allmulticast mode [ 83.563864][ T5779] bridge_slave_1: entered promiscuous mode [ 83.594556][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.607644][ T5778] team0: Port device team_slave_0 added [ 83.637924][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.645153][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.652443][ T5784] bridge_slave_0: entered allmulticast mode [ 83.660049][ T5784] bridge_slave_0: entered promiscuous mode [ 83.682329][ T5778] team0: Port device team_slave_1 added [ 83.691318][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.701100][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.711228][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.718749][ T5784] bridge_slave_1: entered allmulticast mode [ 83.725991][ T5784] bridge_slave_1: entered promiscuous mode [ 83.755690][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.778751][ T5773] team0: Port device team_slave_0 added [ 83.807657][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.814671][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.840740][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.866325][ T5773] team0: Port device team_slave_1 added [ 83.886998][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.904949][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.912212][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.938259][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.970181][ T5779] team0: Port device team_slave_0 added [ 83.981925][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.020389][ T5784] team0: Port device team_slave_0 added [ 84.039303][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.046551][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.072832][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.087008][ T5779] team0: Port device team_slave_1 added [ 84.095009][ T5784] team0: Port device team_slave_1 added [ 84.102917][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.110208][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.142562][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.196513][ T5783] Bluetooth: hci0: command tx timeout [ 84.209587][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.216673][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.243304][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.256569][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.263570][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.290076][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.330492][ T5778] hsr_slave_0: entered promiscuous mode [ 84.337460][ T5778] hsr_slave_1: entered promiscuous mode [ 84.364336][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.372321][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.398873][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.438457][ T5773] hsr_slave_0: entered promiscuous mode [ 84.444905][ T5773] hsr_slave_1: entered promiscuous mode [ 84.451381][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.459762][ T5773] Cannot create hsr debugfs directory [ 84.474876][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.484510][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.510937][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.516259][ T5783] Bluetooth: hci2: command tx timeout [ 84.527893][ T5787] Bluetooth: hci3: command tx timeout [ 84.527916][ T5776] Bluetooth: hci1: command tx timeout [ 84.629016][ T5779] hsr_slave_0: entered promiscuous mode [ 84.636387][ T5779] hsr_slave_1: entered promiscuous mode [ 84.642996][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.650844][ T5779] Cannot create hsr debugfs directory [ 84.697635][ T5784] hsr_slave_0: entered promiscuous mode [ 84.705137][ T5784] hsr_slave_1: entered promiscuous mode [ 84.712441][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.721005][ T5784] Cannot create hsr debugfs directory [ 85.117331][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.138643][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.149923][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.176719][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.229573][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.246868][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.259264][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.286723][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.389154][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.417616][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.430739][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.443094][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.533736][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.560197][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.577211][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.592333][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.603203][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.664064][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.711170][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.718551][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.730172][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.737391][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.841132][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.870022][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.915418][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.934708][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.965334][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.972556][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.008331][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.015464][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.044918][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.052134][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.072176][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.099531][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.106850][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.175294][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.238265][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.245445][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.272122][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.283682][ T5787] Bluetooth: hci0: command tx timeout [ 86.294336][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.301580][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.454634][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.574375][ T5778] veth0_vlan: entered promiscuous mode [ 86.595829][ T5787] Bluetooth: hci3: command tx timeout [ 86.601344][ T5787] Bluetooth: hci2: command tx timeout [ 86.608177][ T5783] Bluetooth: hci1: command tx timeout [ 86.631970][ T5778] veth1_vlan: entered promiscuous mode [ 86.762036][ T5778] veth0_macvtap: entered promiscuous mode [ 86.809197][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.829691][ T5778] veth1_macvtap: entered promiscuous mode [ 86.914843][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.941245][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.991599][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.015681][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.024466][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.045615][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.107490][ T5779] veth0_vlan: entered promiscuous mode [ 87.131133][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.185042][ T5779] veth1_vlan: entered promiscuous mode [ 87.218954][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.334759][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.346298][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.465253][ T5779] veth0_macvtap: entered promiscuous mode [ 87.471524][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.481067][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.527399][ T5784] veth0_vlan: entered promiscuous mode [ 87.537091][ T5773] veth0_vlan: entered promiscuous mode [ 87.550266][ T5779] veth1_macvtap: entered promiscuous mode [ 87.581823][ T5784] veth1_vlan: entered promiscuous mode [ 87.612016][ T5773] veth1_vlan: entered promiscuous mode [ 87.733741][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.765586][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.799019][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.819326][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.844018][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.856098][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.873311][ T5773] veth0_macvtap: entered promiscuous mode [ 87.883800][ T5833] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 87.894796][ T5833] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1'. [ 87.904614][ T5833] bond0: entered promiscuous mode [ 87.911072][ T5833] bond_slave_0: entered promiscuous mode [ 87.917487][ T5833] bond_slave_1: entered promiscuous mode [ 87.923778][ T5833] bridge0: port 3(bond0) entered blocking state [ 87.931055][ T5833] bridge0: port 3(bond0) entered disabled state [ 87.938989][ T5833] bond0: entered allmulticast mode [ 87.944286][ T5833] bond_slave_0: entered allmulticast mode [ 87.955766][ T5833] bond_slave_1: entered allmulticast mode [ 87.965000][ T5833] bridge0: port 3(bond0) entered blocking state [ 87.971701][ T5833] bridge0: port 3(bond0) entered forwarding state [ 87.995029][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.016277][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.035265][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.054495][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.113050][ T5773] veth1_macvtap: entered promiscuous mode [ 88.164147][ T5784] veth0_macvtap: entered promiscuous mode [ 88.183294][ T5784] veth1_macvtap: entered promiscuous mode [ 88.201671][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.213571][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.224217][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.235357][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.263649][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.303190][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.319624][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.331418][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.347224][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.357986][ T5787] Bluetooth: hci0: command tx timeout [ 88.371129][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.404593][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.438061][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.450490][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.489503][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.516019][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.527017][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.540849][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.551242][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.560536][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.573899][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.583030][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.662121][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.673532][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.683602][ T5787] Bluetooth: hci2: command tx timeout [ 88.689540][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.689562][ T5783] Bluetooth: hci1: command tx timeout [ 88.689576][ T5776] Bluetooth: hci3: command tx timeout [ 88.711859][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.728682][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.758411][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.775988][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.813379][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.827029][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.838652][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.853783][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.862690][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.872266][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.982768][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.993020][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.060763][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.107354][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.174046][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.199798][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.324322][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.348716][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.434562][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.476130][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.592864][ T5849] ======================================================= [ 89.592864][ T5849] WARNING: The mand mount option has been deprecated and [ 89.592864][ T5849] and is ignored by this kernel. Remove the mand [ 89.592864][ T5849] option from the mount to silence this warning. [ 89.592864][ T5849] ======================================================= [ 90.456195][ T5783] Bluetooth: hci0: command tx timeout [ 90.788473][ T5783] Bluetooth: hci1: command tx timeout [ 90.793963][ T5783] Bluetooth: hci3: command tx timeout [ 90.799838][ T5776] Bluetooth: hci2: command tx timeout [ 90.850065][ T5813] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.918300][ T5861] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 91.443597][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 91.454217][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.827448][ T5813] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.884515][ T5813] usb 3-1: New USB device found, idVendor=f924, idProduct=78ff, bcdDevice=27.0a [ 93.605998][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.854601][ T28] cfg80211: failed to load regulatory.db [ 93.869376][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.897634][ T5813] usb 3-1: Product: syz [ 93.901888][ T5813] usb 3-1: Manufacturer: syz [ 93.907282][ T5813] usb 3-1: SerialNumber: syz [ 93.974926][ T5813] usb 3-1: config 0 descriptor?? [ 94.295170][ T5813] usb 3-1: can't set config #0, error -71 [ 94.315816][ T5813] usb 3-1: USB disconnect, device number 2 [ 94.572972][ T5893] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.865537][ C0] sched: RT throttling activated [ 96.816415][ T5907] MTRR 1 not used [ 98.369578][ T5925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'. [ 98.707472][ T5930] netlink: 'syz.3.30': attribute type 10 has an invalid length. [ 98.732860][ T5930] netlink: 168 bytes leftover after parsing attributes in process `syz.3.30'. [ 98.746506][ T5813] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 99.055731][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 99.384897][ T5933] syz.1.29[5933]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.832452][ T5933] loop1: detected capacity change from 0 to 8192 [ 100.105638][ T5933] Dev loop1: RDB in block 1 has bad checksum [ 100.871289][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 100.879612][ T5813] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.155388][ T5945] capability: warning: `syz.0.34' uses deprecated v2 capabilities in a way that may be insecure [ 101.618591][ T5813] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 101.629734][ T5813] usb 3-1: string descriptor 0 read error: -71 [ 101.636176][ T5813] usb 3-1: New USB device found, idVendor=f924, idProduct=78ff, bcdDevice=27.0a [ 101.645260][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.680067][ T5813] usb 3-1: config 0 descriptor?? [ 101.696958][ T5813] usb 3-1: can't set config #0, error -71 [ 101.723690][ T5813] usb 3-1: USB disconnect, device number 3 [ 101.958386][ T5955] netlink: 'syz.1.38': attribute type 1 has an invalid length. [ 102.028092][ T5955] gretap1: entered promiscuous mode [ 102.253296][ T5959] MTRR 1 not used [ 102.802513][ T5969] netlink: 148 bytes leftover after parsing attributes in process `syz.3.43'. [ 102.829892][ T5969] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 103.396493][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'. [ 104.255530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 104.485973][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.655873][ T5989] netlink: 5 bytes leftover after parsing attributes in process `syz.3.52'. [ 104.675827][ T5989] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 104.696370][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 104.704804][ T5989] 0ªî{X¹¦: entered allmulticast mode [ 104.708407][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.721537][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 104.739307][ T5989] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 104.755312][ T9] usb 1-1: New USB device found, idVendor=f924, idProduct=78ff, bcdDevice=27.0a [ 104.755344][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.755374][ T9] usb 1-1: Product: syz [ 104.755390][ T9] usb 1-1: Manufacturer: syz [ 104.755405][ T9] usb 1-1: SerialNumber: syz [ 104.765481][ T9] usb 1-1: config 0 descriptor?? [ 104.979781][ T5991] all: renamed from bridge_slave_1 (while UP) [ 105.036822][ T9] usb 1-1: USB disconnect, device number 2 [ 105.349715][ T6000] MTRR 1 not used [ 106.236998][ T6011] netlink: 'syz.0.61': attribute type 72 has an invalid length. [ 106.255259][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 107.707720][ T27] audit: type=1326 audit(1790194517.062:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 107.799585][ T27] audit: type=1326 audit(1790194517.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 107.855633][ T27] audit: type=1326 audit(1790194517.092:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 107.928596][ T27] audit: type=1326 audit(1790194517.092:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 107.995200][ T27] audit: type=1326 audit(1790194517.102:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 108.159849][ T6033] netlink: 64 bytes leftover after parsing attributes in process `syz.2.63'. [ 108.196382][ T27] audit: type=1326 audit(1790194517.102:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 108.278440][ T27] audit: type=1326 audit(1790194517.102:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 108.366102][ T27] audit: type=1326 audit(1790194517.102:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 108.438981][ T27] audit: type=1326 audit(1790194517.102:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.3.68" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3cdf19e159 code=0x7ffc0000 [ 109.051719][ T6045] MTRR 1 not used [ 110.427289][ T6059] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 110.552970][ T6058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.78'. [ 111.818120][ T6073] MTRR 1 not used [ 112.290617][ T27] audit: type=1326 audit(1790194521.622:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.1.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c33f9e159 code=0x7ffc0000 [ 113.518469][ T6092] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 114.373484][ T6087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.430843][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 115.676484][ T6111] FAULT_INJECTION: forcing a failure. [ 115.676484][ T6111] name failslab, interval 1, probability 0, space 0, times 1 [ 115.730467][ T6111] CPU: 1 PID: 6111 Comm: syz.1.96 Not tainted syzkaller #0 [ 115.737764][ T6111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.747887][ T6111] Call Trace: [ 115.751214][ T6111] [ 115.754209][ T6111] dump_stack_lvl+0x18c/0x250 [ 115.758965][ T6111] ? show_regs_print_info+0x20/0x20 [ 115.764230][ T6111] ? load_image+0x420/0x420 [ 115.768793][ T6111] ? __lock_acquire+0x7d80/0x7d80 [ 115.773886][ T6111] should_fail_ex+0x394/0x4c0 [ 115.778647][ T6111] should_failslab+0x9/0x20 [ 115.783219][ T6111] slab_pre_alloc_hook+0x59/0x300 [ 115.788376][ T6111] ? alloc_pipe_info+0x1f9/0x4b0 [ 115.793381][ T6111] ? alloc_pipe_info+0x1f9/0x4b0 [ 115.798381][ T6111] __kmem_cache_alloc_node+0x53/0x250 [ 115.803827][ T6111] ? alloc_pipe_info+0x1f9/0x4b0 [ 115.808830][ T6111] __kmalloc+0xa7/0x240 [ 115.813053][ T6111] alloc_pipe_info+0x1f9/0x4b0 [ 115.817879][ T6111] create_pipe_files+0x87/0x700 [ 115.822769][ T6111] ? __ia32_sys_get_robust_list+0x110/0x110 [ 115.828696][ T6111] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 115.834800][ T6111] __do_pipe_flags+0x4c/0x2c0 [ 115.839516][ T6111] do_pipe2+0xab/0x190 [ 115.843659][ T6111] ? _compound_head+0x120/0x120 [ 115.848552][ T6111] ? lock_chain_count+0x20/0x20 [ 115.853459][ T6111] ? syscall_enter_from_user_mode+0x25/0x80 [ 115.859382][ T6111] __x64_sys_pipe+0x3a/0x40 [ 115.863922][ T6111] do_syscall_64+0x55/0xb0 [ 115.868372][ T6111] ? clear_bhb_loop+0x40/0x90 [ 115.873080][ T6111] ? clear_bhb_loop+0x40/0x90 [ 115.877789][ T6111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.883746][ T6111] RIP: 0033:0x7f6c33f9e159 [ 115.888216][ T6111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.907873][ T6111] RSP: 002b:00007f6c34db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 115.916329][ T6111] RAX: ffffffffffffffda RBX: 00007f6c34225fa0 RCX: 00007f6c33f9e159 [ 115.924323][ T6111] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.932325][ T6111] RBP: 00007f6c3403506b R08: 0000000000000000 R09: 0000000000000000 [ 115.940322][ T6111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.948329][ T6111] R13: 00007f6c34226038 R14: 00007f6c34225fa0 R15: 00007ffc08ae4ca8 [ 115.956359][ T6111] [ 118.412566][ T6135] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 119.406366][ T6138] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 119.414664][ T6138] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 123.014647][ T6182] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 123.986901][ T6189] MTRR 1 not used [ 126.885949][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 127.295783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 128.338549][ T6213] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 128.738138][ T6213] [ 128.740544][ T6213] ====================================================== [ 128.747625][ T6213] WARNING: possible circular locking dependency detected [ 128.754704][ T6213] syzkaller #0 Not tainted [ 128.759156][ T6213] ------------------------------------------------------ [ 128.766220][ T6213] syz.1.123/6213 is trying to acquire lock: [ 128.772159][ T6213] ffffffff8de55e88 (tpg_instances_lock){+.+.}-{3:3}, at: tcm_alloc+0x21/0x2d0 [ 128.781130][ T6213] [ 128.781130][ T6213] but task is already holding lock: [ 128.788551][ T6213] ffff88802ae30398 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x59/0x250 [ 128.797593][ T6213] [ 128.797593][ T6213] which lock already depends on the new lock. [ 128.797593][ T6213] [ 128.808059][ T6213] [ 128.808059][ T6213] the existing dependency chain (in reverse order) is: [ 128.817114][ T6213] [ 128.817114][ T6213] -> #2 (&gi->lock){+.+.}-{3:3}: [ 128.824301][ T6213] __mutex_lock+0x135/0xc80 [ 128.829378][ T6213] config_usb_cfg_link+0x59/0x250 [ 128.834979][ T6213] configfs_symlink+0x5a5/0xfe0 [ 128.840414][ T6213] vfs_symlink+0x138/0x2b0 [ 128.845404][ T6213] do_symlinkat+0x1ba/0x400 [ 128.850497][ T6213] __x64_sys_symlinkat+0x99/0xb0 [ 128.856020][ T6213] do_syscall_64+0x55/0xb0 [ 128.861022][ T6213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.867491][ T6213] [ 128.867491][ T6213] -> #1 (&sb->s_type->i_mutex_key#21){++++}-{3:3}: [ 128.876244][ T6213] down_write+0x97/0x200 [ 128.881055][ T6213] configfs_depend_item_unlocked+0x157/0x430 [ 128.887605][ T6213] usbg_make_tpg+0x1e1/0x550 [ 128.892776][ T6213] target_fabric_make_tpg+0xa4/0x6d0 [ 128.898639][ T6213] configfs_mkdir+0x515/0x9e0 [ 128.903884][ T6213] vfs_mkdir+0x2a5/0x470 [ 128.908692][ T6213] do_mkdirat+0x1dc/0x450 [ 128.913594][ T6213] __x64_sys_mkdirat+0x89/0xa0 [ 128.918927][ T6213] do_syscall_64+0x55/0xb0 [ 128.923916][ T6213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.930388][ T6213] [ 128.930388][ T6213] -> #0 (tpg_instances_lock){+.+.}-{3:3}: [ 128.938353][ T6213] __lock_acquire+0x37ef/0x7d80 [ 128.943772][ T6213] lock_acquire+0x19e/0x420 [ 128.948877][ T6213] __mutex_lock+0x135/0xc80 [ 128.953953][ T6213] tcm_alloc+0x21/0x2d0 [ 128.958673][ T6213] usb_get_function+0x5d/0xb0 [ 128.963914][ T6213] config_usb_cfg_link+0x148/0x250 [ 128.969609][ T6213] configfs_symlink+0x5a5/0xfe0 [ 128.975028][ T6213] vfs_symlink+0x138/0x2b0 [ 128.980012][ T6213] do_symlinkat+0x1ba/0x400 [ 128.985076][ T6213] __x64_sys_symlinkat+0x99/0xb0 [ 128.990585][ T6213] do_syscall_64+0x55/0xb0 [ 128.995659][ T6213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.002128][ T6213] [ 129.002128][ T6213] other info that might help us debug this: [ 129.002128][ T6213] [ 129.012403][ T6213] Chain exists of: [ 129.012403][ T6213] tpg_instances_lock --> &sb->s_type->i_mutex_key#21 --> &gi->lock [ 129.012403][ T6213] [ 129.026305][ T6213] Possible unsafe locking scenario: [ 129.026305][ T6213] [ 129.033792][ T6213] CPU0 CPU1 [ 129.039201][ T6213] ---- ---- [ 129.044605][ T6213] lock(&gi->lock); [ 129.048551][ T6213] lock(&sb->s_type->i_mutex_key#21); [ 129.056592][ T6213] lock(&gi->lock); [ 129.063055][ T6213] lock(tpg_instances_lock); [ 129.067777][ T6213] [ 129.067777][ T6213] *** DEADLOCK *** [ 129.067777][ T6213] [ 129.075959][ T6213] 3 locks held by syz.1.123/6213: [ 129.081021][ T6213] #0: ffff88814369a418 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 129.090342][ T6213] #1: ffff8880520af400 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: configfs_symlink+0x47a/0xfe0 [ 129.101211][ T6213] #2: ffff88802ae30398 (&gi->lock){+.+.}-{3:3}, at: config_usb_cfg_link+0x59/0x250 [ 129.110686][ T6213] [ 129.110686][ T6213] stack backtrace: [ 129.116619][ T6213] CPU: 1 PID: 6213 Comm: syz.1.123 Not tainted syzkaller #0 [ 129.123947][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.134060][ T6213] Call Trace: [ 129.137383][ T6213] [ 129.140351][ T6213] dump_stack_lvl+0x18c/0x250 [ 129.145086][ T6213] ? load_image+0x420/0x420 [ 129.149671][ T6213] ? show_regs_print_info+0x20/0x20 [ 129.154950][ T6213] ? print_circular_bug+0x12b/0x1a0 [ 129.160240][ T6213] check_noncircular+0x2fc/0x400 [ 129.165232][ T6213] ? print_deadlock_bug+0x5d0/0x5d0 [ 129.170486][ T6213] ? lockdep_lock+0xf5/0x230 [ 129.175130][ T6213] ? _find_first_zero_bit+0xd6/0x100 [ 129.180462][ T6213] __lock_acquire+0x37ef/0x7d80 [ 129.185379][ T6213] ? verify_lock_unused+0x140/0x140 [ 129.190627][ T6213] ? __lock_acquire+0x1336/0x7d80 [ 129.195729][ T6213] ? verify_lock_unused+0x140/0x140 [ 129.200998][ T6213] lock_acquire+0x19e/0x420 [ 129.205552][ T6213] ? tcm_alloc+0x21/0x2d0 [ 129.209934][ T6213] ? __might_sleep+0xe0/0xe0 [ 129.214586][ T6213] ? read_lock_is_recursive+0x20/0x20 [ 129.220015][ T6213] ? __mutex_trylock_common+0x160/0x270 [ 129.225615][ T6213] __mutex_lock+0x135/0xc80 [ 129.230170][ T6213] ? tcm_alloc+0x21/0x2d0 [ 129.234540][ T6213] ? trace_contention_end+0x39/0xe0 [ 129.239781][ T6213] ? __mutex_lock+0x30d/0xc80 [ 129.244516][ T6213] ? tcm_alloc+0x21/0x2d0 [ 129.248896][ T6213] ? mutex_lock_nested+0x20/0x20 [ 129.253880][ T6213] ? read_lock_is_recursive+0x20/0x20 [ 129.259300][ T6213] ? config_usb_cfg_link+0x59/0x250 [ 129.264554][ T6213] ? mutex_lock_nested+0x20/0x20 [ 129.269547][ T6213] ? configfs_symlink+0x469/0xfe0 [ 129.274623][ T6213] tcm_alloc+0x21/0x2d0 [ 129.278818][ T6213] usb_get_function+0x5d/0xb0 [ 129.283536][ T6213] config_usb_cfg_link+0x148/0x250 [ 129.288698][ T6213] configfs_symlink+0x5a5/0xfe0 [ 129.293609][ T6213] ? from_kgid+0x153/0x6a0 [ 129.298085][ T6213] ? generic_permission+0x1ed/0x590 [ 129.303331][ T6213] ? detach_groups+0x370/0x370 [ 129.308154][ T6213] ? inode_permission+0xf3/0x480 [ 129.313142][ T6213] ? bpf_lsm_inode_symlink+0x9/0x10 [ 129.318391][ T6213] ? security_inode_symlink+0xb6/0x100 [ 129.323913][ T6213] vfs_symlink+0x138/0x2b0 [ 129.328385][ T6213] do_symlinkat+0x1ba/0x400 [ 129.332938][ T6213] ? vfs_symlink+0x2b0/0x2b0 [ 129.337592][ T6213] __x64_sys_symlinkat+0x99/0xb0 [ 129.342586][ T6213] do_syscall_64+0x55/0xb0 [ 129.347059][ T6213] ? clear_bhb_loop+0x40/0x90 [ 129.351790][ T6213] ? clear_bhb_loop+0x40/0x90 [ 129.356523][ T6213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.362468][ T6213] RIP: 0033:0x7f6c33f9e159 [ 129.366938][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.386607][ T6213] RSP: 002b:00007f6c34db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 129.395072][ T6213] RAX: ffffffffffffffda RBX: 00007f6c34225fa0 RCX: 00007f6c33f9e159 [ 129.403096][ T6213] RDX: 0000200000000600 RSI: ffffffffffffff9c RDI: 00002000000005c0 [ 129.411119][ T6213] RBP: 00007f6c3403506b R08: 0000000000000000 R09: 0000000000000000 [ 129.419140][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.427197][ T6213] R13: 00007f6c34226038 R14: 00007f6c34225fa0 R15: 00007ffc08ae4ca8 [ 129.435231][ T6213] [ 133.078446][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.084784][ T1291] ieee802154 phy1 wpan1: encryption failed: -22