last executing test programs: 17.279794666s ago: executing program 1 (id=214): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 15.851277862s ago: executing program 1 (id=216): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.516432045s ago: executing program 0 (id=220): openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 14.382664668s ago: executing program 2 (id=221): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044890}, 0x200480b8) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_usb_connect(0x2, 0xa1, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 12.616333893s ago: executing program 2 (id=224): connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) 12.474808196s ago: executing program 2 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000280)={0x1, "5660359c32450000000000000000fa00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7}) close_range(r4, r6, 0x0) 12.387000349s ago: executing program 0 (id=226): r0 = memfd_secret(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x98c02a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) get_mempolicy(0x0, 0xfffffffffffffffe, 0x57e, &(0x7f0000ff3000/0x2000)=nil, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x6, 0x45f, &(0x7f00000006c0)="$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") 11.5386101s ago: executing program 2 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) fcntl$dupfd(r4, 0x406, r4) 11.506373841s ago: executing program 1 (id=228): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket(0x1e, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, r1, 0x25, 0x2, @val=@netfilter={0x0, 0x3, 0x2018}}, 0x20) syz_emit_ethernet(0x6c, &(0x7f00000002c0)=ANY=[], 0x0) 10.714975201s ago: executing program 1 (id=229): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./bus\x00', 0x410800, &(0x7f0000001040)={[{@nomblk_io_submit}, {@data_err_ignore}, {@discard}], [{@obj_role={'obj_role', 0x3d, ']}'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@flag='ro'}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x64, 0x61, 0x34, 0x61, 0x38, 0x63, 0x36], 0x2d, [0x35, 0x61, 0x37, 0x35], 0x2d, [0x38, 0x61, 0x34, 0x66], 0x2d, [0x39, 0x30, 0x31, 0x38], 0x2d, [0x31, 0x38, 0x64, 0x65, 0x39, 0x38, 0x62, 0x63]}}}]}, 0x1, 0x515, &(0x7f0000001600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'veth1\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x190, 0x0, 0xffffffff, 0x238, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0xffb2) 10.523971916s ago: executing program 0 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8007}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_open_dev$vim2m(0x0, 0x47b, 0x2) 9.068247212s ago: executing program 0 (id=231): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_open_dev$sndctrl(0x0, 0x2, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd700003dcdf25040000001400060000000000000000000000000000000001140005000000000000000000000000000000000008000400030030450800"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 5.667113868s ago: executing program 3 (id=233): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) listen(r0, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 5.666745528s ago: executing program 2 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002940)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffffc, {0x0, 0x0, 0x0, r9, {0x9}, {0x10}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x100, 0x2, 0xc91, 0x5, 0x400, 0x1000, 0x42, 0x5, 0x3ff, 0x2, 0x200, 0x7, 0x2, 0x6, 0xdb6, 0x401, 0x6, 0xf, 0xfc, 0x3, 0xb, 0x5, 0x77dedf80, 0x100, 0x7, 0x2, 0x4, 0x1, 0x5, 0x5, 0x5, 0x4, 0x7, 0x6, 0x6, 0x4, 0x0, 0x0, 0x3, 0x5, 0x2, 0x10, 0x101, 0x8, 0xd6, 0x8, 0x800, 0x3, 0x4, 0x10001, 0x66a, 0x7, 0x7, 0x6c, 0xa6d, 0x4, 0x20006, 0x3, 0x8, 0x2, 0x3d, 0x4, 0x80000000, 0xc, 0x2, 0x40, 0x7, 0x2, 0x542a73c, 0xffffffff, 0x2, 0x4, 0xb0, 0xea, 0x8, 0x8001, 0x7, 0xb, 0x1ff, 0x3, 0x2, 0x6, 0x1, 0x5, 0x10001, 0x3, 0x4, 0xffffffff, 0x5, 0x4, 0x7, 0x9, 0x3, 0x8, 0x4, 0x0, 0x374, 0x2, 0x4, 0x7, 0x81, 0x8, 0x7f, 0x9, 0x0, 0x4, 0x6, 0x2, 0xa08d, 0x100, 0x5, 0xffff248d, 0x5, 0x7, 0xa, 0x0, 0x671, 0x3, 0x10000, 0x8c, 0x2e7, 0xd6, 0x79, 0x9, 0x9, 0xc, 0xccf, 0x2, 0xb, 0x5, 0x100, 0x158, 0x4, 0x2, 0x7, 0x1, 0x401, 0x6, 0x5, 0xfffffffb, 0xe, 0x6, 0x80000001, 0x5, 0x7, 0x5, 0xab7, 0x6f18f07b, 0x80000001, 0x0, 0x9, 0xc1, 0x5, 0x4, 0x8, 0x7, 0x3, 0x8, 0x3ff, 0x0, 0x9, 0x203a, 0x3, 0x0, 0x8, 0x2, 0x7, 0x7, 0x8, 0x0, 0x4, 0x7ff, 0x7fff, 0x7, 0x2, 0x5, 0x8000, 0x200, 0x3, 0x1, 0xfffffff6, 0x0, 0x7b, 0xfd, 0x5b653309, 0xe5, 0x14f, 0x6, 0x10001, 0x1, 0x7, 0x2, 0xffffffff, 0xb6, 0x40100, 0x197, 0x3ff, 0x9, 0x4, 0x200, 0xcbf, 0x1ff, 0x80, 0x9, 0x2f74, 0x4, 0x1, 0x9, 0x0, 0x4, 0x8, 0x8000, 0x5, 0x8, 0xf, 0x9, 0x6057, 0x101, 0x8001, 0xad, 0x4, 0x7, 0x7, 0x2, 0x80000001, 0x8c6b, 0xd87, 0x82, 0x100, 0xfffffffe, 0x80000000, 0x400, 0x9a, 0x9, 0xfc3, 0x89, 0xa, 0x80000001, 0x2, 0x1, 0xffffffff, 0x4, 0x8000, 0x2, 0x3, 0x10000, 0x8486, 0x3, 0x8, 0x6, 0x0, 0x1, 0x3, 0x2, 0x9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 5.144194681s ago: executing program 1 (id=235): socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x81000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0x4b68, 0x0) 4.707459642s ago: executing program 0 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80000000000002, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x0, 0xc48f}, 0x7) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r6, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r7}) 4.487100838s ago: executing program 3 (id=237): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb1852065108000000bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3023e88bd4ef6abe8b7c2dad0d8fca7f3537f26e0509eda971fbb8ae41502420d0a6e"], 0x1, 0x29b, &(0x7f0000000340)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000600000002000000ffff000005"], 0x48) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r4, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000070c0)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x24, 0x0, 0x62c21a4ade68aba1, 0xf0bd1f, 0xfffffffe, {{0x32}, {@void, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000c810) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x13, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @global=@item_012={0x1, 0x1, 0x9, "10"}, @main=@item_012={0x2, 0x0, 0xc, "4002"}, @main=@item_4={0x3, 0x0, 0xc, "dc2df10b"}, @global=@item_012={0x1, 0x1, 0x9, "01"}]}}, 0x0}, 0x0) 2.332548611s ago: executing program 3 (id=238): socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x80003, 0x102) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000002140)=0x20) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r4, &(0x7f0000000300)={0x2020}, 0x2020) 2.324581322s ago: executing program 0 (id=239): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r6}) 1.043018314s ago: executing program 1 (id=240): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)={0x14, 0x0, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 451.166219ms ago: executing program 2 (id=241): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = getpid() syz_pidfd_open(r1, 0x0) setns(r0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0x0, 0x4e22, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffc, 0xffffffffffffffff, 0xfff, 0x10001, 0x5, 0x5, 0x5, 0xfffffffffffffffd}, {0x58b6c42b, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x40, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x6c}, 0x2, @in=@broadcast, 0x3502, 0x4, 0x3, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}, 0x1c) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) pivot_root(0x0, 0x0) 284.559703ms ago: executing program 3 (id=242): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 95.093128ms ago: executing program 3 (id=243): openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7fffffff}}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 3 (id=244): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005dc0)={@ifindex, 0x11, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@var={0xa, 0x0, 0x0, 0x11, 0x4}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x4}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, 0x0, 0x54}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.42' (ED25519) to the list of known hosts. [ 62.929537][ T5757] cgroup: Unknown subsys name 'net' [ 63.069760][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.375474][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.845860][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.854061][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.862697][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.884184][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.891736][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.893047][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.906894][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.914721][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.915163][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.921818][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.931661][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.936974][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.943419][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.951008][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.957817][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.964392][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.971430][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.977870][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.984875][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.998948][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.998980][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.015308][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.027335][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.041003][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.431775][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 66.441543][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 66.549724][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 66.614755][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 66.663561][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.671162][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.678616][ T5770] bridge_slave_0: entered allmulticast mode [ 66.686130][ T5770] bridge_slave_0: entered promiscuous mode [ 66.695107][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.702217][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.709399][ T5770] bridge_slave_1: entered allmulticast mode [ 66.716541][ T5770] bridge_slave_1: entered promiscuous mode [ 66.739190][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.746477][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.753674][ T5772] bridge_slave_0: entered allmulticast mode [ 66.760723][ T5772] bridge_slave_0: entered promiscuous mode [ 66.796192][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.803315][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.810644][ T5772] bridge_slave_1: entered allmulticast mode [ 66.819744][ T5772] bridge_slave_1: entered promiscuous mode [ 66.871730][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.884498][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.897193][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.912156][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.924417][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.931519][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.939487][ T5771] bridge_slave_0: entered allmulticast mode [ 66.946298][ T5771] bridge_slave_0: entered promiscuous mode [ 66.987629][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.994879][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.002118][ T5771] bridge_slave_1: entered allmulticast mode [ 67.009030][ T5771] bridge_slave_1: entered promiscuous mode [ 67.018287][ T5770] team0: Port device team_slave_0 added [ 67.050085][ T5770] team0: Port device team_slave_1 added [ 67.076777][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.084039][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.091266][ T5769] bridge_slave_0: entered allmulticast mode [ 67.098310][ T5769] bridge_slave_0: entered promiscuous mode [ 67.108007][ T5772] team0: Port device team_slave_0 added [ 67.117625][ T5772] team0: Port device team_slave_1 added [ 67.148465][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.155751][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.162865][ T5769] bridge_slave_1: entered allmulticast mode [ 67.170014][ T5769] bridge_slave_1: entered promiscuous mode [ 67.178939][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.190898][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.211280][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.218369][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.244550][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.267093][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.274091][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.300117][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.318705][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.325743][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.351674][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.382027][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.401862][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.409002][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.434993][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.456263][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.478639][ T5771] team0: Port device team_slave_0 added [ 67.492264][ T5771] team0: Port device team_slave_1 added [ 67.543977][ T5770] hsr_slave_0: entered promiscuous mode [ 67.551133][ T5770] hsr_slave_1: entered promiscuous mode [ 67.561152][ T5769] team0: Port device team_slave_0 added [ 67.570339][ T5769] team0: Port device team_slave_1 added [ 67.626331][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.633310][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.659294][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.675067][ T5772] hsr_slave_0: entered promiscuous mode [ 67.682339][ T5772] hsr_slave_1: entered promiscuous mode [ 67.688724][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.696689][ T5772] Cannot create hsr debugfs directory [ 67.727425][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.734513][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.760576][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.784865][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.791826][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.820219][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.846746][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.853794][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.880492][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.965066][ T5771] hsr_slave_0: entered promiscuous mode [ 67.971191][ T5771] hsr_slave_1: entered promiscuous mode [ 67.978183][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.986102][ T5771] Cannot create hsr debugfs directory [ 68.038989][ T5769] hsr_slave_0: entered promiscuous mode [ 68.045376][ T5769] hsr_slave_1: entered promiscuous mode [ 68.051578][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.059655][ T5769] Cannot create hsr debugfs directory [ 68.084202][ T5781] Bluetooth: hci1: command tx timeout [ 68.084215][ T51] Bluetooth: hci3: command tx timeout [ 68.084391][ T51] Bluetooth: hci0: command tx timeout [ 68.089829][ T5781] Bluetooth: hci2: command tx timeout [ 68.370214][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.381386][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.392062][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.401812][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.469782][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.482649][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.504467][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.514641][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.605015][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.631253][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.665611][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.676668][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.715137][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.740579][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.750218][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.766430][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.780034][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.816796][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.830960][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.860160][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.867454][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.880928][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.888090][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.911652][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.957417][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.964602][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.978212][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.985325][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.122562][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.153110][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.202075][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.233122][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.251516][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.259182][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.286604][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.293798][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.310104][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.317301][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.360351][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.367564][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.484789][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.570152][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.640649][ T5770] veth0_vlan: entered promiscuous mode [ 69.672044][ T5770] veth1_vlan: entered promiscuous mode [ 69.698564][ T5772] veth0_vlan: entered promiscuous mode [ 69.761108][ T5772] veth1_vlan: entered promiscuous mode [ 69.796312][ T5770] veth0_macvtap: entered promiscuous mode [ 69.829658][ T5770] veth1_macvtap: entered promiscuous mode [ 69.871434][ T5772] veth0_macvtap: entered promiscuous mode [ 69.899373][ T5772] veth1_macvtap: entered promiscuous mode [ 69.912530][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.930829][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.952850][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.963028][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.972078][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.981300][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.008470][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.021569][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.036948][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.048187][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.068469][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.088874][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.101452][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.113052][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.159611][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.168563][ T5777] Bluetooth: hci1: command tx timeout [ 70.168604][ T5777] Bluetooth: hci3: command tx timeout [ 70.168722][ T5781] Bluetooth: hci0: command tx timeout [ 70.175048][ T5781] Bluetooth: hci2: command tx timeout [ 70.180875][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.199404][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.208346][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.277527][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.286028][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.328360][ T1006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.342167][ T1006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.349764][ T5771] veth0_vlan: entered promiscuous mode [ 70.382924][ T5769] veth0_vlan: entered promiscuous mode [ 70.420642][ T5771] veth1_vlan: entered promiscuous mode [ 70.450350][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.452670][ T5769] veth1_vlan: entered promiscuous mode [ 70.471138][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.589743][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.607705][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.665630][ T5771] veth0_macvtap: entered promiscuous mode [ 70.679090][ T5769] veth0_macvtap: entered promiscuous mode [ 70.690264][ T5769] veth1_macvtap: entered promiscuous mode [ 70.701936][ T5830] syzkaller0: entered promiscuous mode [ 70.708161][ T5830] syzkaller0: entered allmulticast mode [ 70.781426][ T5771] veth1_macvtap: entered promiscuous mode [ 70.819968][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.832576][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.859701][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.884055][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.896232][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.914346][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.934121][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.945914][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.958968][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.969626][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.981698][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.051418][ T5838] Bluetooth: ISO socket layer initialized [ 71.106126][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.316731][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.450835][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.461994][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.518271][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.614092][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.731414][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.787684][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.827012][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.849170][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.876133][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.917374][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.941422][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.965854][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.997158][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.036894][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.046053][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.054868][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.063806][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.254424][ T5781] Bluetooth: hci2: command tx timeout [ 72.262010][ T5781] Bluetooth: hci0: command tx timeout [ 72.268752][ T5777] Bluetooth: hci1: command tx timeout [ 72.274839][ T51] Bluetooth: hci3: command tx timeout [ 72.388999][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.480206][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.577076][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.679394][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.952537][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.979376][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.025214][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.043290][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.072246][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.100631][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.228060][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.258131][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.292692][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 74.334123][ T5779] Bluetooth: hci0: command tx timeout [ 74.339669][ T5781] Bluetooth: hci3: command tx timeout [ 74.345395][ T51] Bluetooth: hci1: command tx timeout [ 74.351752][ T5777] Bluetooth: hci2: command tx timeout [ 74.527068][ T5871] syzkaller0: entered promiscuous mode [ 74.532605][ T5871] syzkaller0: entered allmulticast mode [ 74.542040][ T5873] syz.3.13[5873]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 74.559869][ T5873] loop3: detected capacity change from 0 to 164 [ 74.575114][ T5873] ======================================================= [ 74.575114][ T5873] WARNING: The mand mount option has been deprecated and [ 74.575114][ T5873] and is ignored by this kernel. Remove the mand [ 74.575114][ T5873] option from the mount to silence this warning. [ 74.575114][ T5873] ======================================================= [ 75.273573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 76.668660][ T5884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.636021][ T5892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 81.563253][ T5934] loop3: detected capacity change from 0 to 2048 [ 81.627941][ T5934] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 81.692102][ T5934] NILFS (loop3): mounting unchecked fs [ 81.711840][ T973] cfg80211: failed to load regulatory.db [ 81.784695][ T5760] udevd[5760]: incorrect nilfs2 checksum on /dev/loop3 [ 81.814202][ T5934] NILFS (loop3): recovery complete [ 81.877919][ T5935] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 81.983450][ C0] sched: RT throttling activated [ 82.310352][ T5939] autofs4:pid:5939:autofs_fill_super: called with bogus options [ 82.465901][ T5934] loop3: detected capacity change from 2048 to 0 [ 82.803041][ T5934] syz.3.29: attempt to access beyond end of device [ 82.803041][ T5934] loop3: rw=395265, sector=2040, nr_sectors = 2 limit=0 [ 82.841687][ T5934] Buffer I/O error on dev loop3, logical block 1020, lost sync page write [ 82.870264][ T5934] NILFS (loop3): unable to write superblock: err=-5 [ 82.899957][ T5934] syz.3.29: attempt to access beyond end of device [ 82.899957][ T5934] loop3: rw=395265, sector=2, nr_sectors = 2 limit=0 [ 82.940907][ T5934] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 82.985210][ T5934] NILFS (loop3): unable to write superblock: err=-5 [ 83.009971][ T5934] syz.3.29: attempt to access beyond end of device [ 83.009971][ T5934] loop3: rw=395265, sector=2, nr_sectors = 2 limit=0 [ 83.023212][ T5934] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 83.031757][ T5934] NILFS (loop3): unable to write superblock: err=-5 [ 83.203757][ T5953] syzkaller0: entered promiscuous mode [ 83.209295][ T5953] syzkaller0: entered allmulticast mode [ 83.338672][ T5959] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 83.468968][ T5964] input: syz1 as /devices/virtual/input/input5 [ 83.534678][ T973] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 83.748794][ T973] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.765353][ T973] usb 1-1: config 0 has no interface number 0 [ 83.786511][ T973] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 83.795910][ T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.804859][ T973] usb 1-1: Product: syz [ 83.814791][ T973] usb 1-1: Manufacturer: syz [ 83.825095][ T973] usb 1-1: SerialNumber: syz [ 83.853842][ T973] usb 1-1: config 0 descriptor?? [ 83.884965][ T973] usb 1-1: selecting invalid altsetting 1 [ 83.911214][ T973] dvb_ttusb_budget: ttusb_init_controller: error [ 83.934999][ T973] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 84.015243][ T973] DVB: Unable to find symbol stv0299_attach() [ 84.085450][ T973] DVB: Unable to find symbol tda8083_attach() [ 84.094709][ T973] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 85.103506][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 85.468197][ T5985] process 'syz.2.43' launched './file0' with NULL argv: empty string added [ 85.880102][ T5994] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.913379][ T5846] usb 1-1: USB disconnect, device number 2 [ 87.253852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 87.803665][ T9] IPVS: starting estimator thread 0... [ 87.846605][ T6006] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'. [ 87.883893][ T6006] netlink: 17 bytes leftover after parsing attributes in process `syz.0.54'. [ 87.892716][ T6006] tipc: Invalid UDP bearer configuration [ 87.892771][ T6006] tipc: Enabling of bearer rejected, failed to enable media [ 87.898542][ T6007] IPVS: using max 24 ests per chain, 57600 per kthread [ 87.940197][ T6009] loop1: detected capacity change from 0 to 512 [ 88.056117][ T6009] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 88.100937][ T6009] System zones: 1-12 [ 88.156617][ T6009] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.55: missing EA_INODE flag [ 88.215612][ T6009] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.55: error while reading EA inode 12 err=-117 [ 89.467476][ T6009] EXT4-fs (loop1): 1 orphan inode deleted [ 89.487880][ T6009] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.851498][ T6018] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 89.863610][ T6018] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 90.428862][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.081380][ T6032] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 93.355431][ T6061] syz.0.63 uses obsolete (PF_INET,SOCK_PACKET) [ 95.150268][ T6071] loop2: detected capacity change from 0 to 512 [ 95.242991][ T6071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.295311][ T6071] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 95.683534][ T5810] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 95.895925][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.917956][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.950888][ T5810] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 96.008296][ T5810] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 96.037234][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.091843][ T5810] usb 2-1: config 0 descriptor?? [ 96.502032][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.662502][ T9] IPVS: starting estimator thread 0... [ 96.688986][ T5810] usbhid 2-1:0.0: can't add hid device: -71 [ 96.723769][ T5810] usbhid: probe of 2-1:0.0 failed with error -71 [ 96.736303][ T6081] syzkaller0: entered promiscuous mode [ 96.751298][ T5810] usb 2-1: USB disconnect, device number 2 [ 96.753021][ T6081] syzkaller0: entered allmulticast mode [ 96.806787][ T6082] IPVS: using max 18 ests per chain, 43200 per kthread [ 98.256356][ T6096] event trace: Could not enable event p [ 99.136015][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 99.301294][ T6114] loop1: detected capacity change from 0 to 1764 [ 99.465344][ T6114] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 100.463467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.130655][ T6126] loop0: detected capacity change from 0 to 32768 [ 101.238690][ T6126] JBD2: Ignoring recovery information on journal [ 101.318524][ T6126] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 102.080779][ T6147] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 104.204088][ T5771] ocfs2: Unmounting device (7,0) on (node local) [ 104.896844][ T6174] syzkaller0: entered promiscuous mode [ 104.934295][ T6174] syzkaller0: entered allmulticast mode [ 105.000904][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 105.072848][ T6173] tipc: Started in network mode [ 105.113723][ T6173] tipc: Node identity 6eaa5e3ccdde, cluster identity 4711 [ 105.164415][ T6173] tipc: Enabled bearer , priority 0 [ 105.200547][ T6171] tipc: Resetting bearer [ 105.294245][ T6171] tipc: Disabling bearer [ 108.942639][ T6204] tipc: Enabling of bearer rejected, failed to enable media [ 113.700605][ T6240] fuse: Bad value for 'fd' [ 113.884669][ T6242] syzkaller0: entered promiscuous mode [ 113.890196][ T6242] syzkaller0: entered allmulticast mode [ 115.419724][ T6267] tipc: Started in network mode [ 115.443619][ T6267] tipc: Node identity 32b74b924653, cluster identity 4711 [ 115.450974][ T6267] tipc: Enabled bearer , priority 0 [ 115.506881][ T6269] syzkaller0: entered promiscuous mode [ 115.539318][ T6269] syzkaller0: entered allmulticast mode [ 115.715689][ T6267] tipc: Resetting bearer [ 115.963817][ T6266] tipc: Resetting bearer [ 116.604942][ T6266] tipc: Disabling bearer [ 116.655913][ T27] audit: type=1804 audit(1787963273.620:2): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.121" name="bus" dev="ramfs" ino=8469 res=1 errno=0 [ 116.703953][ T27] audit: type=1804 audit(1787963273.620:3): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.121" name="bus" dev="ramfs" ino=8469 res=1 errno=0 [ 116.744078][ T973] tipc: Node number set to 1961118610 [ 117.973661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.390005][ T6293] tipc: Started in network mode [ 118.490530][ T6293] tipc: Node identity 8a66fa73fa4c, cluster identity 4711 [ 118.824005][ T6293] tipc: Enabled bearer , priority 0 [ 118.899677][ T6298] syzkaller0: entered promiscuous mode [ 118.917199][ T6298] syzkaller0: entered allmulticast mode [ 119.066505][ T6293] tipc: Resetting bearer [ 119.184862][ T6292] tipc: Resetting bearer [ 119.296472][ T6292] tipc: Disabling bearer [ 119.554085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.179573][ T6323] netlink: 'syz.0.128': attribute type 4 has an invalid length. [ 120.575873][ T6323] syz.0.128 (6323) used greatest stack depth: 19688 bytes left [ 120.694678][ T6335] tipc: Enabled bearer , priority 0 [ 121.930015][ T6339] syzkaller0: entered promiscuous mode [ 121.953529][ T6339] syzkaller0: entered allmulticast mode [ 121.976213][ T5759] tipc: Node number set to 2742312508 [ 121.994406][ T6335] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 122.076167][ T6335] tipc: Resetting bearer [ 122.115034][ T6329] tipc: Resetting bearer [ 122.162056][ T6329] tipc: Disabling bearer [ 126.050468][ T6373] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 126.736628][ T6376] loop2: detected capacity change from 0 to 1024 [ 126.815932][ T6376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.213706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.847847][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.976371][ T6392] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.773559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 133.333583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 133.582006][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.594665][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.184707][ T6450] syzkaller0: entered promiscuous mode [ 138.190257][ T6450] syzkaller0: entered allmulticast mode [ 138.977281][ T6438] loop2: detected capacity change from 0 to 40427 [ 139.035279][ T6438] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 139.077586][ T6438] F2FS-fs (loop2): Image doesn't support compression [ 139.103539][ T6438] F2FS-fs (loop2): Image doesn't support compression [ 139.132808][ T6438] F2FS-fs (loop2): invalid crc value [ 139.201277][ T6461] kvm: kvm [6460]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x98 [ 139.213489][ T6438] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.258821][ T6461] kvm: kvm [6460]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000ff36 [ 139.346633][ T6461] kvm: kvm [6460]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86 [ 139.388284][ T6438] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 139.468963][ T27] audit: type=1800 audit(1787963296.440:4): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.149" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 140.352249][ T6438] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x406/0x440 [ 140.496564][ T6438] F2FS-fs (loop2): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fe/0x5c0 [ 140.610353][ T6478] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x139/0x910 [ 140.697467][ T6482] loop1: detected capacity change from 0 to 164 [ 140.715021][ T5770] syz-executor: attempt to access beyond end of device [ 140.715021][ T5770] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 140.759941][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.788626][ T5770] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 145.441552][ T6498] kvm: kvm [6497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x93e8 [ 145.496195][ T6498] kvm: kvm [6497]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x5b8 [ 145.514162][ T6498] kvm: kvm [6497]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 152.603221][ T6568] syzkaller0: entered promiscuous mode [ 152.615950][ T6568] syzkaller0: entered allmulticast mode [ 152.626565][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 156.473008][ T6601] syzkaller0: entered promiscuous mode [ 156.486392][ T6601] syzkaller0: entered allmulticast mode [ 158.012393][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.044610][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.061247][ T6610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.071076][ T6610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.531043][ T6653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.202'. [ 165.230896][ T6670] autofs4:pid:6670:autofs_fill_super: called with bogus options [ 166.613533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 167.579750][ T6681] overlayfs: overlapping lowerdir path [ 167.602956][ T6681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 169.477042][ T6690] syzkaller0: entered promiscuous mode [ 169.503627][ T6690] syzkaller0: entered allmulticast mode [ 178.090731][ T6764] loop1: detected capacity change from 0 to 512 [ 178.117812][ T6764] EXT4-fs: Ignoring removed nomblk_io_submit option [ 178.153600][ T6764] ext2: Unknown parameter 'obj_role' [ 179.674886][ T6770] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 182.096793][ T6786] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 182.965490][ T6790] Cannot find add_set index 2 as target [ 184.988664][ T6806] syzkaller0: entered promiscuous mode [ 187.576493][ T6806] syzkaller0: entered allmulticast mode [ 187.694710][ T6806] tipc: Enabled bearer , priority 0 [ 187.716183][ T6804] tipc: Resetting bearer [ 187.794749][ T6804] tipc: Disabling bearer [ 189.246283][ T5779] ------------[ cut here ]------------ [ 189.252082][ T5779] WARNING: CPU: 0 PID: 5779 at net/bluetooth/hci_conn.c:569 hci_conn_timeout+0xf9/0x290 [ 189.262027][ T5779] Modules linked in: [ 189.266009][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 189.273607][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.283894][ T5779] Workqueue: hci0 hci_conn_timeout [ 189.289057][ T5779] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 189.294681][ T5779] Code: f7 48 89 df e8 08 ee 08 00 eb 07 e8 11 b4 f8 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 8c e3 fe ff e8 f7 b3 f8 f7 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 189.314371][ T5779] RSP: 0018:ffffc9000458fb90 EFLAGS: 00010293 [ 189.320455][ T5779] RAX: ffffffff898ebe79 RBX: ffff88802f248000 RCX: ffff88807d8a5a00 [ 189.328466][ T5779] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.336518][ T5779] RBP: 00000000ffffffff R08: ffff88802f248013 R09: 1ffff11005e49002 [ 189.344542][ T5779] R10: dffffc0000000000 R11: ffffed1005e49003 R12: dffffc0000000000 [ 189.353061][ T5779] R13: 0000000000000000 R14: ffff88802f248350 R15: ffff88802f248010 [ 189.361188][ T5779] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 189.370209][ T5779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.376974][ T5779] CR2: 00007fda4ebeb840 CR3: 0000000078132000 CR4: 00000000003526f0 [ 189.385015][ T5779] Call Trace: [ 189.388332][ T5779] [ 189.391272][ T5779] ? process_scheduled_works+0x975/0x1600 [ 189.397064][ T5779] process_scheduled_works+0xa60/0x1600 [ 189.402657][ T5779] ? worker_attach_to_pool+0x370/0x370 [ 189.408236][ T5779] ? assign_work+0x3cc/0x5d0 [ 189.412846][ T5779] worker_thread+0xa5e/0xfe0 [ 189.417528][ T5779] kthread+0x2fa/0x390 [ 189.421607][ T5779] ? pr_cont_work+0x550/0x550 [ 189.426367][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 189.430988][ T5779] ret_from_fork+0x48/0x80 [ 189.435552][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 189.440158][ T5779] ret_from_fork_asm+0x11/0x20 [ 189.445002][ T5779] [ 189.448032][ T5779] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.455325][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 189.462878][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.472936][ T5779] Workqueue: hci0 hci_conn_timeout [ 189.478065][ T5779] Call Trace: [ 189.481345][ T5779] [ 189.484290][ T5779] dump_stack_lvl+0x18c/0x250 [ 189.488983][ T5779] ? show_regs_print_info+0x20/0x20 [ 189.494187][ T5779] ? load_image+0x420/0x420 [ 189.498708][ T5779] panic+0x2ca/0x720 [ 189.502617][ T5779] ? bpf_jit_dump+0xd0/0xd0 [ 189.507136][ T5779] ? ret_from_fork_asm+0x11/0x20 [ 189.512091][ T5779] __warn+0x2e0/0x470 [ 189.516079][ T5779] ? hci_conn_timeout+0xf9/0x290 [ 189.521026][ T5779] ? hci_conn_timeout+0xf9/0x290 [ 189.525966][ T5779] report_bug+0x2be/0x4f0 [ 189.530302][ T5779] ? hci_conn_timeout+0xf9/0x290 [ 189.535255][ T5779] ? hci_conn_timeout+0xf9/0x290 [ 189.540211][ T5779] ? hci_conn_timeout+0xfb/0x290 [ 189.545174][ T5779] handle_bug+0xcf/0x120 [ 189.549440][ T5779] exc_invalid_op+0x1a/0x50 [ 189.553962][ T5779] asm_exc_invalid_op+0x1a/0x20 [ 189.558837][ T5779] RIP: 0010:hci_conn_timeout+0xf9/0x290 [ 189.564399][ T5779] Code: f7 48 89 df e8 08 ee 08 00 eb 07 e8 11 b4 f8 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 8c e3 fe ff e8 f7 b3 f8 f7 <0f> 0b eb 8e 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 38 ff ff ff 4c [ 189.584019][ T5779] RSP: 0018:ffffc9000458fb90 EFLAGS: 00010293 [ 189.590102][ T5779] RAX: ffffffff898ebe79 RBX: ffff88802f248000 RCX: ffff88807d8a5a00 [ 189.598089][ T5779] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 189.606074][ T5779] RBP: 00000000ffffffff R08: ffff88802f248013 R09: 1ffff11005e49002 [ 189.614058][ T5779] R10: dffffc0000000000 R11: ffffed1005e49003 R12: dffffc0000000000 [ 189.622040][ T5779] R13: 0000000000000000 R14: ffff88802f248350 R15: ffff88802f248010 [ 189.630036][ T5779] ? hci_conn_timeout+0xf9/0x290 [ 189.635003][ T5779] ? process_scheduled_works+0x975/0x1600 [ 189.640740][ T5779] process_scheduled_works+0xa60/0x1600 [ 189.646341][ T5779] ? worker_attach_to_pool+0x370/0x370 [ 189.651821][ T5779] ? assign_work+0x3cc/0x5d0 [ 189.656432][ T5779] worker_thread+0xa5e/0xfe0 [ 189.661062][ T5779] kthread+0x2fa/0x390 [ 189.665145][ T5779] ? pr_cont_work+0x550/0x550 [ 189.669875][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 189.674488][ T5779] ret_from_fork+0x48/0x80 [ 189.678927][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 189.683533][ T5779] ret_from_fork_asm+0x11/0x20 [ 189.688336][ T5779] [ 189.691621][ T5779] Kernel Offset: disabled [ 189.695991][ T5779] Rebooting in 86400 seconds..