last executing test programs: 17.978346824s ago: executing program 0 (id=18): timer_settime(0x0, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x58, 0xc9, 0x6, 0xd5c2}}}, 0x9) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) modify_ldt$write2(0x11, &(0x7f0000000080)={0x1d30, 0x0, 0x4000, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 17.253156269s ago: executing program 0 (id=24): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001480)={0xd, 0x3, &(0x7f0000001540)=@framed, &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 16.55345839s ago: executing program 0 (id=27): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4008080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r3 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='source\x00', 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x4, 0x99, &(0x7f0000000400)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='\x00\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='e:my_read_msr1 msr/read_msr', 0x1b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$nfs4(0x0, 0x0, 0x0, 0x40000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000800)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) write(r5, &(0x7f0000000680)='e:my_read_msr2 msr/read_msr', 0x1b) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000780)='1', 0x1) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3f5, 0x800, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4810) 13.137954739s ago: executing program 0 (id=32): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000980), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000009c0)=0x3) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000000a00)={0x0, 0x0}) 9.638453396s ago: executing program 0 (id=37): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000021c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000002200)=0xd) r1 = open(&(0x7f0000002240)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201002) 7.599317174s ago: executing program 0 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0) landlock_create_ruleset(&(0x7f0000000540)={0x0, 0x3}, 0x10, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000580), 0x0) socket(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b4000000000000006114d400a600009500001c22f02400"/32], &(0x7f0000000a80)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000ac0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge0\x00'}) getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 5.420789286s ago: executing program 1 (id=52): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000800)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000840)={'pcl711\x00', [0x100, 0x80000000, 0x2, 0x10, 0xe, 0x5, 0x79, 0xfffffff8, 0x80008, 0x0, 0x7, 0x1, 0x7, 0x2, 0x0, 0xfd, 0xfffffffb, 0x9, 0x100003, 0x7fffffff, 0x489, 0x7, 0xfffffffd, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0x6, 0xffffffff, 0xfffffff8]}) 4.670811433s ago: executing program 1 (id=55): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x2008800, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002340)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f0000004340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004440)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffe, 0x24414809, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x8, 0x4}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x40042, 0x13) close(r0) openat(0xffffffffffffff9c, &(0x7f0000004500)='./file0\x00', 0x2c45, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2000000000000}, 0x0, &(0x7f0000000080)={0x1f, 0x3, 0x9117}, 0x0, 0x0) 4.202060201s ago: executing program 2 (id=56): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x812}, 0x10) 3.114312972s ago: executing program 1 (id=61): mount$9p_virtio(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x28, 0x40, 0x109, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x14, 0x0, 0x1, [@generic=')']}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000500)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r1, &(0x7f0000000540)="1800000016005f0214fffffffffffff80700000001000000", 0x18) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) r7 = socket(0x40000000015, 0x805, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r9, &(0x7f0000000580)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000005c0)={r9, r9, 0x7, 0x0, 0x0, 0xe, 0x9c, 0x8, 0x9, 0x3, 0x2, 0x9, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000000680)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getsockopt(r7, 0x114, 0x271f, &(0x7f0000000a80)=""/102400, &(0x7f0000019a80)=0x19000) 3.046906859s ago: executing program 3 (id=62): syz_open_dev$dvb_frontend(0x0, 0x0, 0x40402) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000580)={0x0, 0x800, 0x5, 0xd000, 0xe, "0062ba7d8200000016001b000200f705096604"}) syz_open_pts(r2, 0x4a0200) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x3c}}, 0x200088c4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f0000000740), 0x4000000000000d2, 0x8048848) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000005400000082ffffebbf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000000000010b7000000000000009500000000000000"], &(0x7f0000000940)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000000)=@newchain={0x84, 0x64, 0x800, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x4}, {0xffe0, 0x5}, {0x6, 0xfff1}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0xb}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0x10}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x88880) sendmsg$nl_route_sched(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./sys/class/net/bridge0/bridge/group_addr\x00', 0x80003, 0x80) 2.323693433s ago: executing program 3 (id=63): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4008080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r3 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='source\x00', 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x4, 0x99, &(0x7f0000000400)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='\x00\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='e:my_read_msr1 msr/read_msr', 0x1b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$nfs4(0x0, 0x0, 0x0, 0x40000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000800)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) write(r5, &(0x7f0000000680)='e:my_read_msr2 msr/read_msr', 0x1b) r6 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000700)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r7, &(0x7f0000000780)='1', 0x1) 1.905171065s ago: executing program 1 (id=64): r0 = syz_open_dev$ndb(&(0x7f0000000340), 0x0, 0x20000) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000380)) 1.806524486s ago: executing program 2 (id=65): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x6ff0dff8c31100b5, 0x0) 1.669966579s ago: executing program 1 (id=66): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000100)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000240)=""/168, &(0x7f0000000400)=0xa8) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x141441, 0x0) write(r1, &(0x7f0000000200)='atkbd', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x5, 0x8081, 0xffffffffffffffff, 0x0}]) write(r2, &(0x7f0000000100)='slave-24c02 0x1022', 0x12) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000050000000100000007000000646c0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r3], 0x50) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r5, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', r4, 0x4000, r3}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000180)='tcpci 0x2', 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x200, {0x0, 0x0, 0x12, 0x0, {0xc, 0xd}, {0xffff, 0x3}, {0x2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4000853, 0x1ff, 0x43ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x18, 0x13, 0xa, 0x0, 0x0, {0x0, 0x2521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2000000) socket$netlink(0x10, 0x3, 0xc) r7 = epoll_create1(0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) r9 = fanotify_init(0x20, 0x0) fanotify_mark(r9, 0x445, 0x1003, r8, 0x0) write$P9_RFSYNC(r8, &(0x7f0000000040)={0x7, 0x33, 0x1}, 0x7) r10 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r10, 0xc0285700, &(0x7f0000000440)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0x40103e05, &(0x7f0000000480)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56"}) 1.641655912s ago: executing program 2 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 1.464133361s ago: executing program 2 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x63d, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000640), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000800)=0x5) r3 = accept4$unix(0xffffffffffffffff, &(0x7f0000000840), &(0x7f00000009c0)=0x6e, 0x80000) recvmsg$unix(r3, &(0x7f0000000a00)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000b00)=""/6, 0x6}, {&(0x7f0000000b40)=""/30, 0x1e}, {&(0x7f0000000b80)=""/151, 0x97}], 0x3, &(0x7f0000000c40)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x3c}, 0x200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000cc0)=0x2) readlink(&(0x7f0000000d00)='./config/usb_gadget/g1/UDC\x00', &(0x7f0000000d40)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000e00), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mount(0x0, &(0x7f0000000e40)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000e80)='configfs\x00', 0x2208800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000f00)='./my_configfs\x00', &(0x7f0000000f40)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000fc0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001040)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001080)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001100)='dummy_udc.0', 0xb) 1.216217486s ago: executing program 2 (id=69): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x140, 0x82) io_uring_setup(0x136a, &(0x7f00000003c0)={0x0, 0x1f8a, 0x40, 0x1, 0x100028c}) io_setup(0x93, &(0x7f0000000440)=0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) io_submit(r1, 0x3fffffed, &(0x7f0000000500)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000580)="ca04", 0x2, 0x10000, 0x0, 0x2}]) close_range(r0, 0xffffffffffffffff, 0x0) 1.097220248s ago: executing program 3 (id=70): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x4c, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac04}]}]}, 0x4c}}, 0x0) 835.077534ms ago: executing program 3 (id=71): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r1, 0xc4fc9e906872338b, 0x0, 0xf10003, {{0x5}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0xe}}}}}, 0x28}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0x15, [@remote]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) 595.055339ms ago: executing program 3 (id=72): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @loopback}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4008080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) r3 = fsopen(&(0x7f0000000200)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000240)='source\x00', 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r4, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x4, 0x99, &(0x7f0000000400)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='retrans\x00', &(0x7f0000000500)='\x00\x00\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./tracing\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='e:my_read_msr1 msr/read_msr', 0x1b) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x201, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount$nfs4(0x0, 0x0, 0x0, 0x40000, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000800)={0x1f, 0x2, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, 0x0, 0x0) write(r5, &(0x7f0000000680)='e:my_read_msr2 msr/read_msr', 0x1b) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='1', 0x1) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000001}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3f5, 0x800, 0x70bd28, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x4810) 592.792639ms ago: executing program 1 (id=73): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103a42, 0x32) sigaltstack(0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0xffff, @broadcast}, 0x10) ioctl$KVM_RUN(r1, 0xae80, 0x0) connect$inet(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x6002, &(0x7f0000000100)=0xa, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./nfsd\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./nfsd/portlist\x00', 0x2, 0x0) write(r4, &(0x7f0000000800)='tcp 2', 0x5) 480.110541ms ago: executing program 2 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0xc, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x40, 0x48001, 0x1005, 0xc, 0x5, 0x2, 0xfffffdfffffffffa], 0xd000, 0x20301}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0x2, 0x0, '\x00', 0xa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=75): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000004340)=""/4096, 0x1000}], 0x1, 0x1, 0x1) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 53.653384][ T5448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.674438][ T5448] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.84' (ED25519) to the list of known hosts. syzkaller login: [ 74.730198][ T5773] cgroup: Unknown subsys name 'net' [ 74.874222][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.573600][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.244044][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.252707][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.261200][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.269654][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.276949][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.284820][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.291101][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.293807][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.299970][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.308124][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.316313][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.329105][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.336968][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.344526][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.357818][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.360242][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.365908][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.379838][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.388787][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.409476][ T5100] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.416736][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.424541][ T5100] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.432176][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.439617][ T5100] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.461486][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 78.469183][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.506678][ T5788] (null): rxe_set_mtu: Set mtu to 1024 [ 78.507623][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.512764][ T5788] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.540815][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.574525][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 78.581848][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.639791][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 78.645574][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 78.808345][ T5787] infiniband rxe0: set active [ 78.821323][ T5787] infiniband rxe0: added rxe_eth0 [ 78.835520][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.871406][ T5787] RDS/IB: rxe0: added [ 78.876018][ T5787] smc: adding ib device rxe0 with port count 1 [ 78.882387][ T5787] smc: ib device rxe0 port 1 has pnetid [ 78.890219][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.901919][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.179761][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.186186][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 79.308308][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 79.354370][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 79.537126][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.619644][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.627617][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.634997][ T5788] bridge_slave_0: entered allmulticast mode [ 79.662567][ T5788] bridge_slave_0: entered promiscuous mode [ 79.766322][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.787412][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.794617][ T5788] bridge_slave_1: entered allmulticast mode [ 79.808712][ T5788] bridge_slave_1: entered promiscuous mode [ 79.876046][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.901119][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.925740][ T5785] bridge_slave_0: entered allmulticast mode [ 79.937942][ T5785] bridge_slave_0: entered promiscuous mode [ 79.946365][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.958077][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.965237][ T5786] bridge_slave_0: entered allmulticast mode [ 79.978345][ T5786] bridge_slave_0: entered promiscuous mode [ 80.007625][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.014802][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.029573][ T5785] bridge_slave_1: entered allmulticast mode [ 80.041432][ T5785] bridge_slave_1: entered promiscuous mode [ 80.063238][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.070795][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.082156][ T5786] bridge_slave_1: entered allmulticast mode [ 80.089975][ T5786] bridge_slave_1: entered promiscuous mode [ 80.100083][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.114206][ T5787] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.222193][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.282334][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.314157][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.343747][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.355418][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.370122][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.399220][ T5788] team0: Port device team_slave_0 added [ 80.409113][ T5788] team0: Port device team_slave_1 added [ 80.438109][ T5791] Bluetooth: hci1: command tx timeout [ 80.438511][ T52] Bluetooth: hci3: command tx timeout [ 80.465782][ T5448] infiniband rxe0: set active [ 80.503510][ T5785] team0: Port device team_slave_0 added [ 80.513426][ T5786] team0: Port device team_slave_0 added [ 80.519585][ T52] Bluetooth: hci0: command tx timeout [ 80.530931][ T52] Bluetooth: hci2: command tx timeout [ 80.538161][ T5786] team0: Port device team_slave_1 added [ 80.553424][ T5795] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.572992][ T5785] team0: Port device team_slave_1 added [ 80.590959][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.598017][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.624054][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.640535][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.647806][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.673846][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.709875][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.716854][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.742791][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.776569][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.783780][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.809842][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.821730][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.829301][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.855499][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.903304][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.910618][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.936636][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.964102][ T5788] hsr_slave_0: entered promiscuous mode [ 80.970709][ T5788] hsr_slave_1: entered promiscuous mode [ 81.031898][ T5786] hsr_slave_0: entered promiscuous mode [ 81.038743][ T5786] hsr_slave_1: entered promiscuous mode [ 81.044844][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.052714][ T5786] Cannot create hsr debugfs directory [ 81.123379][ T5785] hsr_slave_0: entered promiscuous mode [ 81.131043][ T5785] hsr_slave_1: entered promiscuous mode [ 81.137978][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.145533][ T5785] Cannot create hsr debugfs directory [ 81.407658][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 81.575814][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.583595][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.590873][ T5787] bridge_slave_0: entered allmulticast mode [ 81.598632][ T5787] bridge_slave_0: entered promiscuous mode [ 81.612429][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.619786][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.626904][ T5787] bridge_slave_1: entered allmulticast mode [ 81.634074][ T5787] bridge_slave_1: entered promiscuous mode [ 81.679500][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.694363][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.706051][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.718673][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.746371][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.756631][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.770549][ T5787] team0: Port device team_slave_0 added [ 81.794648][ T5787] team0: Port device team_slave_1 added [ 81.857268][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.864268][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.892008][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.905067][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.912518][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.938697][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.952848][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.964450][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.010588][ T5787] hsr_slave_0: entered promiscuous mode [ 82.016832][ T5787] hsr_slave_1: entered promiscuous mode [ 82.024235][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.031941][ T5787] Cannot create hsr debugfs directory [ 82.051107][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.074253][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.179422][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.190428][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.221741][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.232652][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.398787][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.424666][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.445862][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.470743][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.482425][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.501652][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.517761][ T5791] Bluetooth: hci3: command tx timeout [ 82.523271][ T52] Bluetooth: hci1: command tx timeout [ 82.559272][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.566553][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.581117][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.588311][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.599650][ T5791] Bluetooth: hci0: command tx timeout [ 82.605426][ T52] Bluetooth: hci2: command tx timeout [ 82.634132][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.712054][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.751712][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.761513][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.768730][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.813337][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.820708][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.853310][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.894453][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.954526][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.966965][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.974238][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.993670][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.000885][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.026796][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.062312][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.069549][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.114619][ T4849] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.121843][ T4849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.211284][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.345394][ T5786] veth0_vlan: entered promiscuous mode [ 83.389865][ T5786] veth1_vlan: entered promiscuous mode [ 83.460606][ T5786] veth0_macvtap: entered promiscuous mode [ 83.476865][ T5786] veth1_macvtap: entered promiscuous mode [ 83.549379][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.576805][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.604665][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.623387][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.638422][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.652222][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.662566][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.770785][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.861185][ T5788] veth0_vlan: entered promiscuous mode [ 83.898396][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.921132][ T4849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.942598][ T4849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.944797][ T5788] veth1_vlan: entered promiscuous mode [ 84.017042][ T5785] veth0_vlan: entered promiscuous mode [ 84.060359][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.062928][ T5788] veth0_macvtap: entered promiscuous mode [ 84.074147][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.094338][ T5785] veth1_vlan: entered promiscuous mode [ 84.113616][ T5788] veth1_macvtap: entered promiscuous mode [ 84.142094][ T5787] veth0_vlan: entered promiscuous mode [ 84.188765][ T5787] veth1_vlan: entered promiscuous mode [ 84.213807][ T5786] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.219893][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.247100][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.259179][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.295874][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.309434][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.331514][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.352826][ T5785] veth0_macvtap: entered promiscuous mode [ 84.378902][ T5787] veth0_macvtap: entered promiscuous mode [ 84.394068][ T5785] veth1_macvtap: entered promiscuous mode [ 84.405414][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.420277][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.431924][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.433455][ T5887] FAULT_INJECTION: forcing a failure. [ 84.433455][ T5887] name failslab, interval 1, probability 0, space 0, times 1 [ 84.452163][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.454420][ T5887] CPU: 1 PID: 5887 Comm: syz.3.4 Not tainted syzkaller #0 [ 84.469661][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 84.479746][ T5887] Call Trace: [ 84.483028][ T5887] [ 84.485974][ T5887] dump_stack_lvl+0x18c/0x250 [ 84.490660][ T5887] ? show_regs_print_info+0x20/0x20 [ 84.495859][ T5887] ? load_image+0x420/0x420 [ 84.500374][ T5887] ? __might_sleep+0xe0/0xe0 [ 84.504970][ T5887] ? __lock_acquire+0x7eb0/0x7eb0 [ 84.510012][ T5887] should_fail_ex+0x394/0x4c0 [ 84.514712][ T5887] should_failslab+0x9/0x20 [ 84.519231][ T5887] slab_pre_alloc_hook+0x59/0x300 [ 84.524272][ T5887] ? lockdep_hardirqs_on+0x98/0x150 [ 84.529486][ T5887] ? rfkill_alloc+0xb1/0x2d0 [ 84.534094][ T5887] ? rfkill_alloc+0xb1/0x2d0 [ 84.538700][ T5887] __kmem_cache_alloc_node+0x53/0x260 [ 84.544081][ T5887] ? _raw_spin_unlock+0x40/0x40 [ 84.548947][ T5887] ? rfkill_alloc+0xb1/0x2d0 [ 84.553551][ T5887] __kmalloc+0xa7/0x240 [ 84.557730][ T5887] rfkill_alloc+0xb1/0x2d0 [ 84.562175][ T5887] hci_register_dev+0x3dd/0x8b0 [ 84.567050][ T5887] hci_uart_tty_ioctl+0x81d/0xa20 [ 84.572103][ T5887] ? hci_uart_tty_write+0x10/0x10 [ 84.577143][ T5887] tty_ioctl+0x9b5/0xdc0 [ 84.581401][ T5887] ? tty_get_icount+0xb0/0xb0 [ 84.586088][ T5887] __se_sys_ioctl+0xfd/0x170 [ 84.590697][ T5887] do_syscall_64+0x55/0xb0 [ 84.595128][ T5887] ? clear_bhb_loop+0x40/0x90 [ 84.599822][ T5887] ? clear_bhb_loop+0x40/0x90 [ 84.604519][ T5887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.610540][ T5887] RIP: 0033:0x7f037839fb19 [ 84.614971][ T5887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.634593][ T5887] RSP: 002b:00007f03765f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.643024][ T5887] RAX: ffffffffffffffda RBX: 00007f0378625fa0 RCX: 00007f037839fb19 [ 84.651009][ T5887] RDX: 0000000400000009 RSI: 00000000400455c8 RDI: 0000000000000004 [ 84.658993][ T5887] RBP: 00007f0378437b70 R08: 0000000000000000 R09: 0000000000000000 [ 84.666973][ T5887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.674956][ T5887] R13: 00007f0378626038 R14: 00007f0378625fa0 R15: 00007ffda741e1d8 [ 84.682966][ T5887] [ 84.700540][ T5787] veth1_macvtap: entered promiscuous mode [ 84.707564][ T52] Bluetooth: hci1: command tx timeout [ 84.710680][ T5100] Bluetooth: hci2: command tx timeout [ 84.712981][ T52] Bluetooth: hci0: command tx timeout [ 84.718897][ T5791] Bluetooth: hci3: command tx timeout [ 84.753161][ T4849] Bluetooth: hci4: Frame reassembly failed (-84) [ 84.775745][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.795560][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.806908][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.819264][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.831366][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.921009][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.933430][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.943390][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.954321][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.966472][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.976807][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.988147][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.000565][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.011065][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.021092][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.032108][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.049143][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.059717][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.084407][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.095157][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.104377][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.113691][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.122588][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.133540][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.144586][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.154589][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.165244][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.175102][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.185960][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.197713][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.230347][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.240505][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.250439][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.264931][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.275944][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.284093][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.442025][ T992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.454531][ T992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.531162][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.539298][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.596203][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.619978][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.653964][ T2938] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.663005][ T2938] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.302438][ T5902] pim6reg: entered allmulticast mode [ 86.374499][ T5902] pim6reg: left allmulticast mode [ 86.757344][ T5100] Bluetooth: hci4: command 0xfc11 tx timeout [ 86.763756][ T5100] Bluetooth: hci3: command tx timeout [ 86.770139][ T5791] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 86.779340][ T5100] Bluetooth: hci2: command tx timeout [ 86.784874][ T5100] Bluetooth: hci1: command tx timeout [ 86.824020][ T5100] Bluetooth: hci0: command tx timeout [ 87.373548][ T5915] FAULT_INJECTION: forcing a failure. [ 87.373548][ T5915] name failslab, interval 1, probability 0, space 0, times 0 [ 87.399803][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 87.408728][ T5915] CPU: 1 PID: 5915 Comm: syz.0.8 Not tainted syzkaller #0 [ 87.415887][ T5915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.425988][ T5915] Call Trace: [ 87.429305][ T5915] [ 87.432275][ T5915] dump_stack_lvl+0x18c/0x250 [ 87.437006][ T5915] ? show_regs_print_info+0x20/0x20 [ 87.442241][ T5915] ? load_image+0x420/0x420 [ 87.446753][ T5915] ? __might_sleep+0xe0/0xe0 [ 87.451360][ T5915] ? __lock_acquire+0x7eb0/0x7eb0 [ 87.456402][ T5915] should_fail_ex+0x394/0x4c0 [ 87.461085][ T5915] should_failslab+0x9/0x20 [ 87.465587][ T5915] slab_pre_alloc_hook+0x59/0x300 [ 87.470627][ T5915] ? snd_pcm_oss_change_params_locked+0x1ac/0x3be0 [ 87.477179][ T5915] __kmem_cache_alloc_node+0x53/0x260 [ 87.482591][ T5915] ? snd_pcm_oss_change_params_locked+0x1ac/0x3be0 [ 87.489104][ T5915] kmalloc_trace+0x2a/0xe0 [ 87.493548][ T5915] snd_pcm_oss_change_params_locked+0x1ac/0x3be0 [ 87.499887][ T5915] ? __mutex_trylock_common+0x160/0x270 [ 87.505452][ T5915] ? trace_raw_output_contention_end+0xd0/0xd0 [ 87.511622][ T5915] ? locks_remove_file+0x388/0xeb0 [ 87.516761][ T5915] ? rcu_is_watching+0x15/0xb0 [ 87.521538][ T5915] ? __mutex_lock+0x30d/0xce0 [ 87.526216][ T5915] ? locks_remove_posix+0x630/0x630 [ 87.531446][ T5915] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 87.536608][ T5915] ? ima_file_free+0x16b/0x4b0 [ 87.541734][ T5915] ? snd_pcm_oss_sync+0x2b5/0xa40 [ 87.546770][ T5915] ? mutex_lock_nested+0x20/0x20 [ 87.551734][ T5915] ? __fsnotify_parent+0x6d8/0x7c0 [ 87.556862][ T5915] snd_pcm_oss_sync+0x370/0xa40 [ 87.561735][ T5915] snd_pcm_oss_release+0x102/0x240 [ 87.566863][ T5915] ? snd_pcm_oss_open+0x1c50/0x1c50 [ 87.572067][ T5915] __fput+0x221/0x940 [ 87.576063][ T5915] __se_sys_close+0x15c/0x1e0 [ 87.580764][ T5915] do_syscall_64+0x55/0xb0 [ 87.585204][ T5915] ? clear_bhb_loop+0x40/0x90 [ 87.589906][ T5915] ? clear_bhb_loop+0x40/0x90 [ 87.594604][ T5915] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.600501][ T5915] RIP: 0033:0x7f8fd439fb19 [ 87.604923][ T5915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.624881][ T5915] RSP: 002b:00007f8fd52ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 87.633318][ T5915] RAX: ffffffffffffffda RBX: 00007f8fd4625fa0 RCX: 00007f8fd439fb19 [ 87.641290][ T5915] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 87.649262][ T5915] RBP: 00007f8fd4437b70 R08: 0000000000000000 R09: 0000000000000000 [ 87.657269][ T5915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.665256][ T5915] R13: 00007f8fd4626038 R14: 00007f8fd4625fa0 R15: 00007ffd9b80a0f8 [ 87.673248][ T5915] [ 87.705826][ T5920] random: crng reseeded on system resumption [ 88.579883][ T5934] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 89.424075][ T5941] bond0: entered promiscuous mode [ 89.429497][ T5941] bond_slave_0: entered promiscuous mode [ 89.438074][ T5941] bond_slave_1: entered promiscuous mode [ 89.502434][ T5941] batadv0: entered promiscuous mode [ 89.548918][ T5941] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 89.603450][ T5941] bond0: left promiscuous mode [ 89.610706][ T5941] bond_slave_0: left promiscuous mode [ 89.638127][ T5941] bond_slave_1: left promiscuous mode [ 89.674213][ T5941] batadv0: left promiscuous mode [ 90.136707][ T5951] pim6reg: entered allmulticast mode [ 90.185809][ T5951] pim6reg: left allmulticast mode [ 90.991659][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15'. [ 91.227599][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.442963][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 91.453733][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.464504][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.486486][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.509195][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.527131][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.544198][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.553247][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.575286][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.587304][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.595843][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.606981][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.624999][ T5795] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.627113][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.658723][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.688254][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.711303][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.731332][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.747223][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.763664][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.774279][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.803873][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.835719][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.846352][ T5795] usb 1-1: Dual-Role OTG device on HNP port [ 91.868073][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 91.870575][ T5795] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 91.907316][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 91.917129][ T5795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.935975][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 91.955960][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 91.989031][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 92.005965][ T8] usb 2-1: Product: syz [ 92.006340][ T5795] gspca_main: spca501-2.14.0 probing 0000:0000 [ 92.010649][ T8] usb 2-1: Manufacturer: syz [ 92.041573][ T5972] netlink: 'syz.0.24': attribute type 1 has an invalid length. [ 92.043480][ T5795] gspca_spca501: reg write: error -32 [ 92.049971][ T8] usb 2-1: SerialNumber: syz [ 92.068169][ T28] cfg80211: failed to load regulatory.db [ 92.091971][ T5795] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 92.093943][ T8] usb 2-1: config 0 descriptor?? [ 92.117574][ T5795] spca501: probe of 1-1:1.0 failed with error -22 [ 92.192685][ T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 92.329386][ T5977] syz.0.24 (5977) used greatest stack depth: 20840 bytes left [ 93.689337][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.747097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.831758][ T5795] usb 2-1: USB disconnect, device number 2 [ 95.880124][ T5795] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 96.207997][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.216666][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.264281][ T6024] FAULT_INJECTION: forcing a failure. [ 96.264281][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 96.278376][ T6024] CPU: 1 PID: 6024 Comm: syz.3.34 Not tainted syzkaller #0 [ 96.285629][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 96.295728][ T6024] Call Trace: [ 96.299012][ T6024] [ 96.301942][ T6024] dump_stack_lvl+0x18c/0x250 [ 96.306631][ T6024] ? show_regs_print_info+0x20/0x20 [ 96.311844][ T6024] ? load_image+0x420/0x420 [ 96.316358][ T6024] ? __lock_acquire+0x7eb0/0x7eb0 [ 96.321388][ T6024] ? verify_lock_unused+0x140/0x140 [ 96.326586][ T6024] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 96.332570][ T6024] should_fail_ex+0x394/0x4c0 [ 96.337280][ T6024] should_failslab+0x9/0x20 [ 96.341813][ T6024] slab_pre_alloc_hook+0x59/0x300 [ 96.346859][ T6024] kmem_cache_alloc_lru+0x4d/0x2c0 [ 96.351996][ T6024] ? __d_alloc+0x31/0x710 [ 96.356354][ T6024] __d_alloc+0x31/0x710 [ 96.360535][ T6024] d_alloc_parallel+0xe0/0x1590 [ 96.365406][ T6024] ? __d_lookup+0x8f/0x7c0 [ 96.369839][ T6024] ? __lock_acquire+0x7eb0/0x7eb0 [ 96.374884][ T6024] ? lock_chain_count+0x20/0x20 [ 96.379754][ T6024] ? lockdep_softirqs_off+0x440/0x440 [ 96.385157][ T6024] ? lockdep_softirqs_off+0x440/0x440 [ 96.390551][ T6024] ? d_hash_and_lookup+0x1b0/0x1b0 [ 96.395687][ T6024] ? __init_waitqueue_head+0xa8/0x140 [ 96.401079][ T6024] proc_fill_cache+0x15c/0x430 [ 96.405866][ T6024] ? proc_pident_readdir+0x4b0/0x4b0 [ 96.411171][ T6024] ? pid_revalidate+0x260/0x260 [ 96.416046][ T6024] ? filldir64+0x421/0x6a0 [ 96.420489][ T6024] proc_pident_readdir+0x366/0x4b0 [ 96.425625][ T6024] iterate_dir+0x1bd/0x590 [ 96.430067][ T6024] __se_sys_getdents64+0xf6/0x270 [ 96.435114][ T6024] ? __x64_sys_getdents64+0x80/0x80 [ 96.440335][ T6024] ? filldir+0x6b0/0x6b0 [ 96.444600][ T6024] ? lockdep_hardirqs_on+0x98/0x150 [ 96.449822][ T6024] do_syscall_64+0x55/0xb0 [ 96.454254][ T6024] ? clear_bhb_loop+0x40/0x90 [ 96.458946][ T6024] ? clear_bhb_loop+0x40/0x90 [ 96.463639][ T6024] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.469546][ T6024] RIP: 0033:0x7f037839fb19 [ 96.473975][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.493590][ T6024] RSP: 002b:00007f03765f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 96.502017][ T6024] RAX: ffffffffffffffda RBX: 00007f0378625fa0 RCX: 00007f037839fb19 [ 96.509998][ T6024] RDX: 0000000000001000 RSI: 0000200000003900 RDI: 0000000000000004 [ 96.517993][ T6024] RBP: 00007f0378437b70 R08: 0000000000000000 R09: 0000000000000000 [ 96.525988][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.533973][ T6024] R13: 00007f0378626038 R14: 00007f0378625fa0 R15: 00007ffda741e1d8 [ 96.541973][ T6024] [ 97.253005][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.323636][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.591780][ T5950] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.600804][ T5950] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.610435][ T5950] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.619791][ T5950] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.008599][ T6007] pim6reg: entered allmulticast mode [ 99.014137][ T6006] pim6reg: left allmulticast mode [ 99.098108][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.29'. [ 99.306451][ T173] rxe_eth0 speed is unknown, defaulting to 1000 [ 101.654029][ T6059] md: serialize_policy is only effective for raid1 [ 101.727196][ T6059] md: serialize_policy is only effective for raid1 [ 102.680434][ T6083] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 104.200906][ T6098] block device autoloading is deprecated and will be removed. [ 106.222724][ T6120] Zero length message leads to an empty skb [ 106.267805][ T6123] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 107.765797][ T6142] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 107.791690][ T6142] i2c-slave-eeprom: probe of 0-1022 failed with error -95 [ 107.821392][ T6142] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 107.851443][ T6144] tcpci: probe of 0-0002 failed with error -5 [ 107.895201][ T6144] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 108.013904][ T6140] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 108.967381][ T6159] syz.2.74[6159]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 109.021876][ T6159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2322020415 (4644040830 ns) > initial count (3947366936 ns). Using initial count to start timer. [ 109.048465][ T6163] ------------[ cut here ]------------ [ 109.054251][ T6163] SVC: permsocks remain for nfsd [ 109.104006][ T6163] WARNING: CPU: 0 PID: 6163 at net/sunrpc/svc.c:645 svc_destroy+0x2ed/0x390 [ 109.113009][ T6163] Modules linked in: [ 109.116960][ T6163] CPU: 0 PID: 6163 Comm: syz.1.73 Not tainted syzkaller #0 [ 109.124270][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.134414][ T6163] RIP: 0010:svc_destroy+0x2ed/0x390 [ 109.139734][ T6163] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 22 c3 2c f8 49 8b 37 48 c7 c7 20 12 fa 8b e8 13 5f 9d f7 <0f> 0b e9 78 fd ff ff e8 57 ba d3 f7 c6 05 7f 23 c4 05 01 4c 89 e0 [ 109.159654][ T6163] RSP: 0018:ffffc900052afae0 EFLAGS: 00010246 [ 109.165758][ T6163] RAX: 3b6b8a2114be2900 RBX: ffff88805d68b450 RCX: 0000000000080000 [ 109.173210][ T6159] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 109.174458][ T6163] RDX: ffffc9000e3bf000 RSI: 000000000002dca9 RDI: 000000000002dcaa [ 109.190763][ T6163] RBP: ffffc900052afcb8 R08: ffffc900052af6e7 R09: 1ffff92000a55edc [ 109.199379][ T6163] R10: dffffc0000000000 R11: fffff52000a55edd R12: ffff88805d68b400 [ 109.207535][ T6163] R13: dffffc0000000000 R14: ffff88805d68b450 R15: ffffffff8e3e1d40 [ 109.215708][ T6163] FS: 00007f2a060eb6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 109.225007][ T6163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.231754][ T6163] CR2: 000055558d26fa78 CR3: 000000002afc7000 CR4: 00000000003526f0 [ 109.239907][ T6163] Call Trace: [ 109.243225][ T6163] [ 109.246200][ T6163] write_ports+0xb99/0xfa0 [ 109.250720][ T6163] ? write_versions+0xe00/0xe00 [ 109.255630][ T6163] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.260770][ T6163] ? __virt_addr_valid+0x10c/0x380 [ 109.265931][ T6163] ? __virt_addr_valid+0x10c/0x380 [ 109.271140][ T6163] ? __might_fault+0xaa/0x120 [ 109.275865][ T6163] ? __might_fault+0xc6/0x120 [ 109.280729][ T6163] ? __might_fault+0xaa/0x120 [ 109.285453][ T6163] ? simple_transaction_get+0x11d/0x140 [ 109.291124][ T6163] nfsctl_transaction_write+0x10c/0x150 [ 109.296718][ T6163] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 109.303070][ T6163] vfs_write+0x299/0x9a0 [ 109.307593][ T6163] ? file_end_write+0x250/0x250 [ 109.312514][ T6163] ? __fget_files+0x28/0x460 [ 109.317519][ T6163] ? __fget_files+0x3fc/0x460 [ 109.322263][ T6163] ? __fdget_pos+0x2a3/0x330 [ 109.326909][ T6163] ? ksys_write+0x74/0x260 [ 109.331613][ T6163] ksys_write+0x151/0x260 [ 109.336004][ T6163] ? __ia32_sys_read+0x90/0x90 [ 109.340922][ T6163] ? lockdep_hardirqs_on+0x98/0x150 [ 109.346170][ T6163] do_syscall_64+0x55/0xb0 [ 109.350675][ T6163] ? clear_bhb_loop+0x40/0x90 [ 109.355399][ T6163] ? clear_bhb_loop+0x40/0x90 [ 109.360188][ T6163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.366129][ T6163] RIP: 0033:0x7f2a0519fb19 [ 109.370649][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.390399][ T6163] RSP: 002b:00007f2a060eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.399105][ T6163] RAX: ffffffffffffffda RBX: 00007f2a05426090 RCX: 00007f2a0519fb19 [ 109.407741][ T6163] RDX: 0000000000000005 RSI: 0000200000000800 RDI: 0000000000000007 [ 109.415763][ T6163] RBP: 00007f2a05237b70 R08: 0000000000000000 R09: 0000000000000000 [ 109.423960][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.432127][ T6163] R13: 00007f2a05426128 R14: 00007f2a05426090 R15: 00007ffc87d62de8 [ 109.440220][ T6163] [ 109.443277][ T6163] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.450580][ T6163] CPU: 0 PID: 6163 Comm: syz.1.73 Not tainted syzkaller #0 [ 109.457806][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 109.467887][ T6163] Call Trace: [ 109.471240][ T6163] [ 109.474213][ T6163] dump_stack_lvl+0x18c/0x250 [ 109.478937][ T6163] ? show_regs_print_info+0x20/0x20 [ 109.484176][ T6163] ? load_image+0x420/0x420 [ 109.488739][ T6163] panic+0x2ca/0x720 [ 109.492669][ T6163] ? bpf_jit_dump+0xd0/0xd0 [ 109.497226][ T6163] __warn+0x2e0/0x470 [ 109.501240][ T6163] ? svc_destroy+0x2ed/0x390 [ 109.505870][ T6163] ? svc_destroy+0x2ed/0x390 [ 109.510484][ T6163] report_bug+0x2be/0x4f0 [ 109.515015][ T6163] ? svc_destroy+0x2ed/0x390 [ 109.519638][ T6163] ? svc_destroy+0x2ed/0x390 [ 109.524231][ T6163] ? svc_destroy+0x2ef/0x390 [ 109.528845][ T6163] handle_bug+0xcf/0x120 [ 109.533099][ T6163] exc_invalid_op+0x1a/0x50 [ 109.537644][ T6163] asm_exc_invalid_op+0x1a/0x20 [ 109.542536][ T6163] RIP: 0010:svc_destroy+0x2ed/0x390 [ 109.547768][ T6163] Code: 24 49 83 c7 20 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 22 c3 2c f8 49 8b 37 48 c7 c7 20 12 fa 8b e8 13 5f 9d f7 <0f> 0b e9 78 fd ff ff e8 57 ba d3 f7 c6 05 7f 23 c4 05 01 4c 89 e0 [ 109.568198][ T6163] RSP: 0018:ffffc900052afae0 EFLAGS: 00010246 [ 109.574298][ T6163] RAX: 3b6b8a2114be2900 RBX: ffff88805d68b450 RCX: 0000000000080000 [ 109.582302][ T6163] RDX: ffffc9000e3bf000 RSI: 000000000002dca9 RDI: 000000000002dcaa [ 109.590289][ T6163] RBP: ffffc900052afcb8 R08: ffffc900052af6e7 R09: 1ffff92000a55edc [ 109.598283][ T6163] R10: dffffc0000000000 R11: fffff52000a55edd R12: ffff88805d68b400 [ 109.606285][ T6163] R13: dffffc0000000000 R14: ffff88805d68b450 R15: ffffffff8e3e1d40 [ 109.614298][ T6163] write_ports+0xb99/0xfa0 [ 109.618745][ T6163] ? write_versions+0xe00/0xe00 [ 109.623619][ T6163] ? __lock_acquire+0x7eb0/0x7eb0 [ 109.628658][ T6163] ? __virt_addr_valid+0x10c/0x380 [ 109.633806][ T6163] ? __virt_addr_valid+0x10c/0x380 [ 109.638956][ T6163] ? __might_fault+0xaa/0x120 [ 109.643654][ T6163] ? __might_fault+0xc6/0x120 [ 109.648362][ T6163] ? __might_fault+0xaa/0x120 [ 109.653088][ T6163] ? simple_transaction_get+0x11d/0x140 [ 109.658649][ T6163] nfsctl_transaction_write+0x10c/0x150 [ 109.664250][ T6163] ? nfsctl_transaction_read+0x1b0/0x1b0 [ 109.669915][ T6163] vfs_write+0x299/0x9a0 [ 109.674205][ T6163] ? file_end_write+0x250/0x250 [ 109.679089][ T6163] ? __fget_files+0x28/0x460 [ 109.683706][ T6163] ? __fget_files+0x3fc/0x460 [ 109.688399][ T6163] ? __fdget_pos+0x2a3/0x330 [ 109.693022][ T6163] ? ksys_write+0x74/0x260 [ 109.697475][ T6163] ksys_write+0x151/0x260 [ 109.701844][ T6163] ? __ia32_sys_read+0x90/0x90 [ 109.706645][ T6163] ? lockdep_hardirqs_on+0x98/0x150 [ 109.711884][ T6163] do_syscall_64+0x55/0xb0 [ 109.716333][ T6163] ? clear_bhb_loop+0x40/0x90 [ 109.721024][ T6163] ? clear_bhb_loop+0x40/0x90 [ 109.725744][ T6163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 109.731641][ T6163] RIP: 0033:0x7f2a0519fb19 [ 109.736070][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.755698][ T6163] RSP: 002b:00007f2a060eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.764130][ T6163] RAX: ffffffffffffffda RBX: 00007f2a05426090 RCX: 00007f2a0519fb19 [ 109.772116][ T6163] RDX: 0000000000000005 RSI: 0000200000000800 RDI: 0000000000000007 [ 109.780096][ T6163] RBP: 00007f2a05237b70 R08: 0000000000000000 R09: 0000000000000000 [ 109.788095][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.796081][ T6163] R13: 00007f2a05426128 R14: 00007f2a05426090 R15: 00007ffc87d62de8 [ 109.804103][ T6163] [ 109.807799][ T6163] Kernel Offset: disabled [ 109.812180][ T6163] Rebooting in 86400 seconds..