last executing test programs: 15.774510475s ago: executing program 2 (id=9): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x9]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={0x0, 0xfff8, 0x30, 0x2, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000021c0)={[{@grpquota}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x400}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid}, {@debug}]}, 0x1, 0x507, &(0x7f0000002780)="$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") syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f0000000c00)=ANY=[], 0x5, 0x6fc, &(0x7f00000005c0)="$eJzs3c9vHGcdB+DPrNeuN1TFoQmNUBAmkQoiInFipRAuGIRQDhWqyqFnK3EaK5ukSlyUVghcQHBC4tA/oCD5xgEhcQ8KFy7l1quPlZC4RByiXhbN7Ky9u147a8c/ovI80Xjed9533vnOO+/MeNZZTYD/W1fPpfkwRa6ee/1BmV9fm2+vr82/UBe3k5TpRtLszlLcSYpHyUJZXvRN6Ztv8eHylTc/ebz+aTfXrKeq/sRO643QX7fYzKyWP2br9mZHrjk57iZW6/DyYpJr9XzQ1LhtDVQsO+1sPYcj1xnUSGd1N6vv5rwFnjO9u1PRvW9uMZMcSzJd/x6Q+urQOLwI99XXe4ldXeUAAADgyI39QfSAj+/ueyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwuVe9/7+1kW10FyWzKXrv/5/qLdvzSwcP3MLYNR8eaBwAAAAAAAAAcDi+9iRP8iAv9fKdovqb/5kqcyKfdZIv5N3cz1Lu5XweZDErWcm9XEwy09fQ1IPFlZV7FzfWLI1e89LINS/teRe+tec1AQAAAAAAAODz41dpbf79HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngdFMtGdVdOJep6k0cxmWVaTfyWZOuJwd6MYtfDh4ccBAAAAz2R6D+t88Ume5EFe6uU7RfXM/+XqeXk67+ZOVrKclbSzlOv1M3T51N9YX5tvr6/N3y6nMj/Y7g/+s6swqhazWj+ij9ryqapGKzeyXC05n2tV7etpdLd9NjnVi6cvrj4flDEV36+NGVmz7tZyY3/Y7lOEfTH4UURjh5qtzeCSjR6Zq2Mr1zze7YGi+qAmGe6J4aOzZWPNgdxMVWVyY0sX09j45OfEAfT5sXpe7s9vD7TPx9HfFxs90UjVE5d6o688Z3buieQbf/vzWzfbd27dvHH/3NHu0i5MbLN8eEzM9/XEK9v1RK/Cc90TzV3Wn6t27ORG/mp+nJ/mXGbzRu5lOT/LYlaylE5dvliP5/LnzM5jZmEg98bTIpmqj0v3mI0T02x+VKUWc6Za96Usp8jdXM9SXqv+XcrFfCeXczlX+o7wyW3jrvatOusbw2d970j/fWTwZ79ZJ8qr2+82r3ILO+3xdqNzv3Sv/WW/Hu/r1+6of7xR63jfeTDX10tf6vXO5MjG93JtbH6lTpTb+PVT7hOHa6buifIE6t0letG93O2JZnUv2jrO/9gp10v7Tqdzc/GdbdpfHcq/Ws/LYbX21afV7hl9KPZTb0xO11eSwdFRjqWXN64yfWWdzbHcLRu845brnazKiqJ3pv4kd6sBsPVMnap/h9va0qWq7JWhstP1NbwsO9VXNvD7Vo6lnesH3n8A7M0/39pIzuTYVOvfrY9bH7V+07rZen36hy9894XTU5n8x+T3mnMTrzZOF3/NR/nF5vM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwd/ffe//WYru9dG90ojG6qJFkYEkrw3We1vJQoqhf6DOqzq36LQW7avCIE9NJBpZU7zk69DBaw2FsSXR+OXQoDyPRe4ng6Dq/LxPNsQ73wsCSv2xt8IOnxzORoXE4xnlxgIlGDnejE8Pncp04qisScFgurNx+58L9997/9vLtxbeX3l66M3n58pW5K5dfm79wY7m9NNf9edRRAgdh86Z/1JEAAAAAAAAAAAAA4xr1xYAzL/a+NFKM+5WVRpLh73j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAvrh6Ls2HKXJx7vxcmV9fm2+XUy+9WbOZpNFIip8nxaNkId0pM33NFfnTo3RGbOfD5StvfvJ4/dPNtprd+kmjnm9v59Ikq/WU2SQT9fwZDLR37ZnbK/7b24eywz7rdDoLzxYf7I//BQAA//96nOpx") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4a, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2c00) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 12.847921616s ago: executing program 2 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000000c0)="42ec6c47ba0e0db8912dde8ff2d341c9ca619478532a41944e024588ab567f8770fbd9", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="6f4103ee43407488cb97bcaba7689648ccce2599c20d5954437fe8", 0x1b}], 0x1}}], 0x2, 0x48045) 12.540716806s ago: executing program 2 (id=15): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, 0x0) 10.929707135s ago: executing program 2 (id=18): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FE_SET_VOLTAGE(r0, 0x6f43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.441190915s ago: executing program 3 (id=19): socket$can_raw(0x1d, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FE_SET_VOLTAGE(r0, 0x6f43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x8020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.136570353s ago: executing program 2 (id=22): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2e}, 0x28) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 7.084568015s ago: executing program 1 (id=24): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000100)="c5", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x13}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) 5.608643438s ago: executing program 3 (id=25): openat$kvm(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x420000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYBLOB="000000009002010014001a80100002800c00018008001d000600000008001b0000000000526e906c2ffd30dd026191c21aab496bd5d10e01ac6f9d2a"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) chdir(&(0x7f0000000540)='./cgroup\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0xfffffffe, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e1f, @rand_addr=0x64010102}], 0x4c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x7, 0x2) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './control/file0', [{}, {0x20, '#! '}, {0x20, 'ns\x00'}, {0x20, '\xa1]C?\x01w\nZ\x1e'}, {0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec'}], 0xa, "503e6295d2c9c0b3d00d1dc733bf7769b31afc4feb7cc2fa0e452fb8a0b8f822678c54cedb3ad1dee71c5e7e238ef19c1f01a1dbb8feaebeaf8af2afc2e9b81c1c771ec83952966089d30dcb7d08e6aa37621fc21c445e2c4d6d9198e70b0a5400a0ddb70f4c07b4753227785119f55372c61de82fd623808d797af657ccbb385e44bfaa67a7aff304ca95025bd1b5d91e58f55b0b66857d7617c38b5648d85574a3fb81fc734874264777af4a0e99198973aabfbf7b462a9264376efd4e"}, 0x16e) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) lgetxattr(0x0, 0x0, &(0x7f00000002c0)=""/203, 0xcb) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000140042801400018006000600800a000006810000800a000004000280d30a94a471a9350708818bec9fe6b3151117ade66ac6930a10bc2d77d5ee732d7760b0c0a84014b651c3e65fc3972f240b86c1a14f8b0869555f9045fdc10b441bdbee33abec4bc1309d3c4f71b73c904ea448"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.59674416s ago: executing program 4 (id=26): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast1, 0x8}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023", @ANYRESOCT=0x0], 0x0) 4.400777019s ago: executing program 0 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x51a00}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x1de, 0x30000000}}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 4.295929562s ago: executing program 1 (id=28): r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x1, 0x140b00) ioctl$I2C_RETRIES(r0, 0x701, 0xfffffffffffffffe) 4.12996536s ago: executing program 1 (id=29): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073797a31000000ffff000000000000000000000000000000000000000000000000000000000000000001000000000000800000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a070089b4c45a1000e2ffffff0000070000000000ff000000000000000000000000ffff0000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x3d83, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x5295, 0x7721, 0x3c, 0x0, 0x0) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x40000020) 4.035939564s ago: executing program 4 (id=30): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x28283) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x40002008}) epoll_pwait(0xffffffffffffffff, &(0x7f00000024c0)=[{}], 0x1, 0x81, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc891}, 0x20000000) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) 3.960428207s ago: executing program 0 (id=31): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x700, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x65, 0xffff, 0x0, 0x4, 0x0, @remote, @empty}}}}) 3.650325167s ago: executing program 1 (id=32): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000ec0)='\n', 0x1, 0x40000, &(0x7f0000000300)={0xa, 0x100, 0x2, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000200)=0x8) 3.450680006s ago: executing program 0 (id=33): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7fff0000}, {0xef, 0x9b, 0x80, 0x7ff}]}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000073500002bbde46070000000000005000500"/38], 0x38}}, 0x0) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000140)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000280)={0x1, r5, 0x1, 0x1, 0xa, 0x1ff, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000002800)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f000027c000/0x4000)=nil, 0x4000, 0x16) read$FUSE(r7, &(0x7f00000007c0)={0x2020}, 0x2020) 3.263951069s ago: executing program 1 (id=34): mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, 0x0, 0x7d, 0x6) 3.107865954s ago: executing program 1 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000480)={0x0, 0x3f73, 0x100, 0x0, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r8, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r5, 0x3516, 0xf400, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) r9 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r9, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x2, 0xffffffffe8110f4f, 0xd, 0xffff, 0x1ff, 0xffeffffa, 0x0, 0x0, 0x40, 0xffff}}, 0x50) 2.587774651s ago: executing program 3 (id=36): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x20840, 0x18a) fcntl$getownex(r0, 0x11, &(0x7f0000000000)) 2.41608111s ago: executing program 4 (id=37): unshare(0x600) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) connect$unix(r1, 0x0, 0x0) 2.37900344s ago: executing program 3 (id=38): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) recvmsg(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f0000000780)=""/4108, 0x437aba2}], 0x1, 0x0, 0xfffffdee, 0x407006}, 0x104) 2.214279002s ago: executing program 4 (id=39): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x8a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee0, 0x80, 0xfffffffe, 0xbfe04003}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.120558533s ago: executing program 2 (id=40): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) listen(r1, 0x0) creat(0x0, 0x122) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x5, 0x6, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1.520513974s ago: executing program 4 (id=41): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8431", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "199646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x351, 0x0, 0x3}}}}}}}, 0x0) 1.187289182s ago: executing program 3 (id=42): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x9, 0x3, 0x330, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0xb7, 0x3, 0x7, 0x10, 0xec, @empty, @mcast1, @dev={0xfe, 0x80, '\x00', 0x18}, [0xff, 0x0, 0xffffffff], [0x0, 0xf50c7c44b1ea8694, 0xff, 0xffffff00], [0xff, 0xb2bcaa9c6fc23515, 0xffffffff, 0xc5669662a80a715b], 0x2004, 0x2100}}, @common=@frag={{0x30}, {[0x10001], 0x400, 0x1a, 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x4, 0x6}, {0x0, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) 1.023980353s ago: executing program 4 (id=43): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040)={0x1}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x2, 0x2}, {0x2, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0xb, 0x0, 0xd}]}) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000140)="02", 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x20000000, 0x3, 0x10, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}}, 0x8000) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x4040850) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="e91e63acaca20180c20000000800450000240d0000000011907800800000000000000000000000109078e202000080000000"], 0x0) syz_emit_ethernet(0x2d, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xffff, 0xb, 0x0, @opaque="66b71b"}}}}}, 0x0) syz_emit_ethernet(0x38e, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x358, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af18"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab28"}, {0x18, 0x1c, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d8931"}, {0x5, 0xa, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c00000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.014911452s ago: executing program 0 (id=44): mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x130}}], 0x1, 0x810) utimes(&(0x7f0000002840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)={{0x0, 0x2710}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$kvm(0x0, &(0x7f00000002c0), 0xa600, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c4217}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fchdir(r3) creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x116) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) accept4(r4, 0x0, 0x0, 0x800) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x4}}) 857.882331ms ago: executing program 3 (id=45): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r2}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x80000000, 0x7, 0x2, {0xa, @sliced={0x1, [0x5, 0x1, 0x7, 0x6, 0x7, 0x3, 0x5, 0x800, 0xfffa, 0x1, 0x9, 0x6, 0x0, 0x101, 0xe7, 0x40, 0x3, 0xfff, 0x4000, 0x7, 0x101, 0x3, 0x1, 0xfffa, 0x9, 0x2, 0x8, 0x6, 0x401, 0xb, 0x1, 0x9, 0x7, 0xd82, 0x5, 0x6, 0x1, 0x7, 0xb2, 0x1, 0xd, 0x7, 0xf, 0x101, 0x1, 0x200, 0x4]}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@overlay={0x1, 0xa, 0x4, 0x2000, 0x1, {0x0, 0xea60}, {0x2, 0x1, 0x1, 0x4, 0x8, 0x1, "16a683cf"}, 0x7fe, 0x3, {}, 0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ffffffffffffffff00"/42], 0xb8}}, 0x8000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="c4c37905d6040f0866bad104ec66660f388043006665660f3a0d9a0050000000b805000000b9050000000f01d926d0eb0f20e035200000000f22e0b9800000c00f3235000100000f306566dad3", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 303.745092ms ago: executing program 0 (id=46): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x180, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010102, @in6=@local, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x33}, @in6=@mcast1, {0xfe, 0x1000000000000192, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xff7ffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'poly1305-simd\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x844) 0s ago: executing program 0 (id=47): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0xbe, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 82.603244][ T5827] cgroup: Unknown subsys name 'net' [ 82.722829][ T5827] cgroup: Unknown subsys name 'cpuset' [ 82.732905][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.393772][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.833791][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.844391][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.852480][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.861081][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.871093][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.883143][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.891292][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.896307][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.906303][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.908942][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.933363][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.941473][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.951137][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.961610][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.970002][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.987907][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.996476][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.007475][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.021148][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.031105][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.083641][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.095120][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.103888][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.112755][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.120540][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.965591][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 87.986904][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 88.082462][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 88.103592][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 88.322770][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 88.363457][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.370988][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.378275][ T5856] bridge_slave_0: entered allmulticast mode [ 88.386562][ T5856] bridge_slave_0: entered promiscuous mode [ 88.404284][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.411655][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.419123][ T5840] bridge_slave_0: entered allmulticast mode [ 88.427047][ T5840] bridge_slave_0: entered promiscuous mode [ 88.463281][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.471187][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.479183][ T5856] bridge_slave_1: entered allmulticast mode [ 88.487107][ T5856] bridge_slave_1: entered promiscuous mode [ 88.507217][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.515716][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.523492][ T5840] bridge_slave_1: entered allmulticast mode [ 88.532084][ T5840] bridge_slave_1: entered promiscuous mode [ 88.620275][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.627685][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.635061][ T5839] bridge_slave_0: entered allmulticast mode [ 88.643012][ T5839] bridge_slave_0: entered promiscuous mode [ 88.685769][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.693159][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.700654][ T5846] bridge_slave_0: entered allmulticast mode [ 88.708452][ T5846] bridge_slave_0: entered promiscuous mode [ 88.717746][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.725247][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.732695][ T5839] bridge_slave_1: entered allmulticast mode [ 88.740786][ T5839] bridge_slave_1: entered promiscuous mode [ 88.753132][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.775068][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.784584][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.792366][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.800072][ T5846] bridge_slave_1: entered allmulticast mode [ 88.807922][ T5846] bridge_slave_1: entered promiscuous mode [ 88.846029][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.867307][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.951473][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.960769][ T5842] Bluetooth: hci1: command tx timeout [ 88.971916][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.024359][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.037489][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.041652][ T5842] Bluetooth: hci0: command tx timeout [ 89.048274][ T5844] Bluetooth: hci2: command tx timeout [ 89.074719][ T5856] team0: Port device team_slave_0 added [ 89.080755][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.088149][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.095722][ T5852] bridge_slave_0: entered allmulticast mode [ 89.103776][ T5852] bridge_slave_0: entered promiscuous mode [ 89.115059][ T5840] team0: Port device team_slave_0 added [ 89.121997][ T5844] Bluetooth: hci3: command tx timeout [ 89.157812][ T5856] team0: Port device team_slave_1 added [ 89.164136][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.171753][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.179146][ T5852] bridge_slave_1: entered allmulticast mode [ 89.186918][ T5852] bridge_slave_1: entered promiscuous mode [ 89.197317][ T5840] team0: Port device team_slave_1 added [ 89.204872][ T5844] Bluetooth: hci4: command tx timeout [ 89.238472][ T5839] team0: Port device team_slave_0 added [ 89.286851][ T5846] team0: Port device team_slave_0 added [ 89.296269][ T5839] team0: Port device team_slave_1 added [ 89.331795][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.338997][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.365884][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.381047][ T5846] team0: Port device team_slave_1 added [ 89.401644][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.408711][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.435246][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.452062][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.462989][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.470167][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.496395][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.535415][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.542462][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.568499][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.583762][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.619758][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.626745][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.652963][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.712741][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.720217][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.746375][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.760801][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.767894][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.794089][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.806977][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.814021][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.840425][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.877228][ T5852] team0: Port device team_slave_0 added [ 89.913201][ T5852] team0: Port device team_slave_1 added [ 89.956577][ T5840] hsr_slave_0: entered promiscuous mode [ 89.963872][ T5840] hsr_slave_1: entered promiscuous mode [ 90.049068][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.056051][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.082009][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.100239][ T5856] hsr_slave_0: entered promiscuous mode [ 90.107298][ T5856] hsr_slave_1: entered promiscuous mode [ 90.114294][ T5856] debugfs: 'hsr0' already exists in 'hsr' [ 90.120152][ T5856] Cannot create hsr debugfs directory [ 90.147955][ T5846] hsr_slave_0: entered promiscuous mode [ 90.155514][ T5846] hsr_slave_1: entered promiscuous mode [ 90.162582][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 90.168346][ T5846] Cannot create hsr debugfs directory [ 90.182371][ T5839] hsr_slave_0: entered promiscuous mode [ 90.189938][ T5839] hsr_slave_1: entered promiscuous mode [ 90.196762][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 90.202677][ T5839] Cannot create hsr debugfs directory [ 90.210277][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.217227][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.243276][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.549481][ T5852] hsr_slave_0: entered promiscuous mode [ 90.556522][ T5852] hsr_slave_1: entered promiscuous mode [ 90.564294][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 90.570121][ T5852] Cannot create hsr debugfs directory [ 91.040368][ T5844] Bluetooth: hci1: command tx timeout [ 91.116937][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.119239][ T5844] Bluetooth: hci0: command tx timeout [ 91.128768][ T5842] Bluetooth: hci2: command tx timeout [ 91.147291][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.160019][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.184906][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.199228][ T5842] Bluetooth: hci3: command tx timeout [ 91.279949][ T5842] Bluetooth: hci4: command tx timeout [ 91.292897][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.311813][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.325876][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.337757][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.457050][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.474151][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.498106][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.509740][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.673395][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.687311][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.701138][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.715442][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.738513][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.882466][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.896041][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.908359][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.924903][ T42] cfg80211: failed to load regulatory.db [ 91.931108][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.944809][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.977094][ T571] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.984621][ T571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.001806][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.029090][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.036360][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.108067][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.166567][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.173808][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.199604][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.245117][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.252309][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.341370][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.393751][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.401042][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.451143][ T571] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.458342][ T571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.600782][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.682802][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.816405][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.834786][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.870757][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.877949][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.888586][ T97] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.895964][ T97] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.918990][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.938152][ T97] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.945363][ T97] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.994601][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.001925][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.095659][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.119343][ T5842] Bluetooth: hci1: command tx timeout [ 93.198885][ T5842] Bluetooth: hci2: command tx timeout [ 93.204405][ T5842] Bluetooth: hci0: command tx timeout [ 93.280465][ T5842] Bluetooth: hci3: command tx timeout [ 93.315665][ T5839] veth0_vlan: entered promiscuous mode [ 93.359361][ T5842] Bluetooth: hci4: command tx timeout [ 93.411017][ T5839] veth1_vlan: entered promiscuous mode [ 93.475859][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.668006][ T5839] veth0_macvtap: entered promiscuous mode [ 93.725690][ T5839] veth1_macvtap: entered promiscuous mode [ 93.827634][ T5846] veth0_vlan: entered promiscuous mode [ 93.867103][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.904745][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.931015][ T5846] veth1_vlan: entered promiscuous mode [ 93.943609][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.976264][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.014313][ T5840] veth0_vlan: entered promiscuous mode [ 94.025587][ T571] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.038033][ T571] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.063500][ T571] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.087242][ T571] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.112363][ T5840] veth1_vlan: entered promiscuous mode [ 94.224563][ T5846] veth0_macvtap: entered promiscuous mode [ 94.285083][ T5846] veth1_macvtap: entered promiscuous mode [ 94.326369][ T5856] veth0_vlan: entered promiscuous mode [ 94.344527][ T5852] veth0_vlan: entered promiscuous mode [ 94.362236][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.372460][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.427212][ T5840] veth0_macvtap: entered promiscuous mode [ 94.452400][ T5856] veth1_vlan: entered promiscuous mode [ 94.463767][ T97] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.472286][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.480029][ T5840] veth1_macvtap: entered promiscuous mode [ 94.489382][ T97] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.513219][ T5852] veth1_vlan: entered promiscuous mode [ 94.533115][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.602857][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.614006][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.634609][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.656795][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.670159][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.728462][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.796920][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.824108][ T5852] veth0_macvtap: entered promiscuous mode [ 94.841996][ T5852] veth1_macvtap: entered promiscuous mode [ 94.884107][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.906357][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.033060][ T5856] veth0_macvtap: entered promiscuous mode [ 95.047658][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.068002][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.228686][ T5842] Bluetooth: hci1: command tx timeout [ 95.279516][ T5842] Bluetooth: hci0: command tx timeout [ 95.285483][ T5844] Bluetooth: hci2: command tx timeout [ 95.358859][ T5844] Bluetooth: hci3: command tx timeout [ 95.439602][ T5844] Bluetooth: hci4: command tx timeout [ 95.492123][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.736272][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.748668][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.844593][ T5856] veth1_macvtap: entered promiscuous mode [ 95.860913][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.871302][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.905125][ T5966] Zero length message leads to an empty skb [ 95.959785][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.974778][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.024995][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.044243][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.101353][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192411][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.099604][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.209812][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.244000][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.301691][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.314087][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.327397][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.357350][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.403338][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.414507][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.743867][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.775039][ T5979] ======================================================= [ 97.775039][ T5979] WARNING: The mand mount option has been deprecated and [ 97.775039][ T5979] and is ignored by this kernel. Remove the mand [ 97.775039][ T5979] option from the mount to silence this warning. [ 97.775039][ T5979] ======================================================= [ 97.893297][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.908853][ T5979] netlink: 'syz.2.8': attribute type 1 has an invalid length. [ 98.408420][ T3046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.456274][ T3046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.689520][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.835495][ T5985] loop2: detected capacity change from 0 to 512 [ 99.104590][ T5985] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0082] [ 99.114424][ T5985] System zones: 0-2, 18-18, 34-35 [ 99.247989][ T5985] EXT4-fs error (device loop2): __ext4_iget:5381: inode #3: block 127754: comm syz.2.9: invalid block [ 99.260378][ T5985] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 99.268921][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 99.285433][ C0] EXT4-fs (loop2): initial error at time 1773904526: __ext4_iget:5381: inode 3: block 127754 [ 99.295690][ C0] EXT4-fs (loop2): last error at time 1773904526: __ext4_iget:5381: inode 3: block 127754 [ 99.390567][ T5985] EXT4-fs error (device loop2): ext4_quota_enable:7195: comm syz.2.9: Bad quota inode: 3, type: 0 [ 99.401668][ T5985] loop2: lost filesystem error report for type 5 error -117 [ 99.442509][ T5985] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 99.472554][ T5985] EXT4-fs (loop2): mount failed [ 99.935962][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.551722][ T5992] mmap: syz.4.5 (5992) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 100.998719][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.035927][ T5985] loop2: detected capacity change from 0 to 1024 [ 101.052994][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.237957][ T5985] hfsplus: failed to load catalog file [ 101.387395][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 101.407163][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'. [ 103.879155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.288719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 105.108899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 105.518747][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.588854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.380809][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 109.962891][ T6058] openvswitch: netlink: Message has 8 unknown bytes. [ 110.065880][ T6067] geneve1: entered allmulticast mode [ 110.103976][ T6067] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 110.408851][ T5960] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 110.468095][ T5960] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 110.801627][ T6076] fido_id[6076]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 111.307270][ T6090] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.420037][ T6108] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 113.818103][ T6130] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.769917][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.953010][ T6132] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 114.964948][ T6132] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 114.973380][ T6132] CPU: 0 UID: 0 PID: 6132 Comm: syz.3.45 Not tainted syzkaller #0 PREEMPT(full) [ 114.982485][ T6132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 114.992549][ T6132] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 114.998025][ T6132] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 115.017631][ T6132] RSP: 0018:ffffc9000567f540 EFLAGS: 00010006 [ 115.023714][ T6132] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 115.031681][ T6132] RDX: 1ffff92000acfeb4 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 115.039653][ T6132] RBP: ffffc9000567f640 R08: 0000000000000003 R09: 0000000000000004 [ 115.047619][ T6132] R10: dffffc0000000000 R11: fffff52000acfec4 R12: 0000000000000000 [ 115.055591][ T6132] R13: ffff888011b6a850 R14: 0000000000000018 R15: ffffc9000567f700 [ 115.063562][ T6132] FS: 00007fd733ccf6c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 115.072497][ T6132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.079101][ T6132] CR2: 000020000039a030 CR3: 00000000336e2000 CR4: 00000000003526f0 [ 115.087084][ T6132] Call Trace: [ 115.090389][ T6132] [ 115.093326][ T6132] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 115.098621][ T6132] ? do_raw_spin_lock+0x12b/0x2f0 [ 115.103653][ T6132] rwsem_del_wake_waiter+0x25d/0x2e0 [ 115.108954][ T6132] rwsem_down_read_slowpath+0x76c/0x940 [ 115.114508][ T6132] ? rwsem_down_read_slowpath+0x596/0x940 [ 115.120258][ T6132] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 115.128232][ T6132] ? __unix_dgram_recvmsg+0x9e9/0xd60 [ 115.135649][ T6132] ? mmap_read_lock_killable+0x1d/0x70 [ 115.141833][ T6132] down_read_killable+0x9e/0x340 [ 115.146885][ T6132] mmap_read_lock_killable+0x1d/0x70 [ 115.152465][ T6132] lock_mm_and_find_vma+0x2d7/0x340 [ 115.157677][ T6132] ? do_user_addr_fault+0x2c9/0x1340 [ 115.162973][ T6132] do_user_addr_fault+0x330/0x1340 [ 115.168109][ T6132] ? rcu_is_watching+0x15/0xb0 [ 115.172884][ T6132] ? trace_page_fault_kernel+0x84/0x210 [ 115.178463][ T6132] exc_page_fault+0x6a/0xc0 [ 115.182970][ T6132] asm_exc_page_fault+0x26/0x30 [ 115.187835][ T6132] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 115.193648][ T6132] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 115.213256][ T6132] RSP: 0018:ffffc9000567fa18 EFLAGS: 00050206 [ 115.219324][ T6132] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 115.227308][ T6132] RDX: 0000000000000001 RSI: 000020000007e000 RDI: ffffc9000567faa0 [ 115.235292][ T6132] RBP: ffffc9000567fc30 R08: ffffc9000567fad7 R09: 1ffff92000acff5a [ 115.243264][ T6132] R10: dffffc0000000000 R11: fffff52000acff5b R12: ffffc9000567fba0 [ 115.251239][ T6132] R13: dffffc0000000000 R14: ffffc9000567faa0 R15: 000020000007e000 [ 115.259220][ T6132] _copy_from_user+0x7a/0xb0 [ 115.263831][ T6132] ___sys_recvmsg+0x175/0x590 [ 115.268517][ T6132] ? __lock_acquire+0x6b5/0x2cf0 [ 115.273463][ T6132] ? __pfx____sys_recvmsg+0x10/0x10 [ 115.278678][ T6132] do_recvmmsg+0x334/0x800 [ 115.283103][ T6132] ? __pfx_do_recvmmsg+0x10/0x10 [ 115.288055][ T6132] __x64_sys_recvmmsg+0x198/0x250 [ 115.293083][ T6132] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 115.298638][ T6132] do_syscall_64+0x14d/0xf80 [ 115.303233][ T6132] ? trace_irq_disable+0x3b/0x150 [ 115.308256][ T6132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.314320][ T6132] ? clear_bhb_loop+0x40/0x90 [ 115.318995][ T6132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.324889][ T6132] RIP: 0033:0x7fd732d9c799 [ 115.329340][ T6132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.348954][ T6132] RSP: 002b:00007fd733ccf028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 115.357475][ T6132] RAX: ffffffffffffffda RBX: 00007fd733016090 RCX: 00007fd732d9c799 [ 115.365483][ T6132] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 115.373468][ T6132] RBP: 00007fd732e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 115.381442][ T6132] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 115.389410][ T6132] R13: 00007fd733016128 R14: 00007fd733016090 R15: 00007ffdc2c1cf68 [ 115.397386][ T6132] [ 115.400401][ T6132] Modules linked in: [ 115.404323][ T6132] ---[ end trace 0000000000000000 ]--- [ 115.409783][ T6132] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 115.415250][ T6132] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 115.434879][ T6132] RSP: 0018:ffffc9000567f540 EFLAGS: 00010006 [ 115.440960][ T6132] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 115.448950][ T6132] RDX: 1ffff92000acfeb4 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 115.456926][ T6132] RBP: ffffc9000567f640 R08: 0000000000000003 R09: 0000000000000004 [ 115.464899][ T6132] R10: dffffc0000000000 R11: fffff52000acfec4 R12: 0000000000000000 [ 115.472869][ T6132] R13: ffff888011b6a850 R14: 0000000000000018 R15: ffffc9000567f700 [ 115.480893][ T6132] FS: 00007fd733ccf6c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 115.489843][ T6132] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.496439][ T6132] CR2: 000020000039a030 CR3: 00000000336e2000 CR4: 00000000003526f0 [ 115.504420][ T6132] Kernel panic - not syncing: Fatal exception [ 116.622641][ T6132] Shutting down cpus with NMI [ 116.627971][ T6132] Kernel Offset: disabled [ 116.632333][ T6132] Rebooting in 86400 seconds..