last executing test programs: 7.206555963s ago: executing program 0 (id=70): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x480142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) keyctl$clear(0x11, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_clone3(&(0x7f0000000580)={0x802000, &(0x7f0000000140), 0x0, &(0x7f00000001c0), {0x29}, &(0x7f0000000200)=""/164, 0xa4, &(0x7f0000000600)=""/142, &(0x7f0000000540)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x4, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x2, 0x180000, 0x1}, 0x1c) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 6.443148237s ago: executing program 1 (id=71): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=""/106, &(0x7f0000000780), &(0x7f00000007c0), 0x80, r6, 0x0, 0x7}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r7 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x2, 0x268, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bd9a}}}, &(0x7f00000001c0)) 6.267471132s ago: executing program 2 (id=72): r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x7, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x278, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00)="2700000014000707030e", 0xa) socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) r7 = syz_open_procfs$userns(r1, &(0x7f0000000280)) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x2c, 0x1402, 0x202, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x20000010) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) 5.504210753s ago: executing program 0 (id=74): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@ifindex, 0xffffffffffffffff, 0xfe12bcd38ec9e455, 0x4}, 0x20) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x800}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r7, 0x4) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r8}, 0x8) read(r9, 0x0, 0x60) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r10, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @remote, @remote}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000000c0)=0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x7, 0x0, r11}) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f9000000800040000001388050005"], 0xa8}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$IP_VS_SO_SET_ADDDEST(r12, 0x0, 0x487, &(0x7f0000000140)={{0x33, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'nq\x00', 0x29, 0x0, 0x48}, {@empty, 0x4e24, 0x4, 0x7, 0xfce6, 0x7}}, 0x44) 5.459300943s ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='quota,grpquota_inode_hardlimit=3,noswap,']) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000700), 0x1, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x800, 0x100) read$char_usb(r4, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000980), 0x0, r5) readlinkat(r0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000880)=""/205, 0xcd) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) 5.13921166s ago: executing program 3 (id=76): openat$comedi(0xffffffffffffff9c, 0x0, 0x80400, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_vhci(0x0, 0x0) socket$kcm(0x2, 0x7, 0x2) r1 = socket(0x10, 0x2, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0x34}, 0x10001}], 0x2, 0x40010000, 0x0) clock_adjtime(0x0, 0x0) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0f8565c, &(0x7f0000000340)={0x1ff, 0x5, 0x1, {0x1, @pix={0xff, 0xa, 0x31324d4e, 0x0, 0x9, 0xffffff61, 0x9, 0x9, 0x0, 0x7, 0x2, 0x6}}, 0xd5a}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x4000, 0x4) sendmmsg$alg(r5, &(0x7f0000001240), 0x0, 0x190) 4.418343853s ago: executing program 0 (id=77): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) close(0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000780)={0x0, @reserved}) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r3) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee42, 0x8200, 0x3, 0x367}}], 0x1, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000900)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000007f00000000000000c2beb2e1"], &(0x7f0000000980)=0x2c) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f00000071c0)={0x18, {"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", 0x1000}}, 0x1006) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 3.941211479s ago: executing program 1 (id=78): openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x82084, 0x0) syz_extract_tcp_res(0x0, 0x6, 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, &(0x7f0000000300)={0x0, 0x10f211, 0x4, 0x2002, 0x40001c, 0x0, r0}, &(0x7f00000007c0), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000680)="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", 0x102}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000005c0)='j', 0x1}], 0x1}}], 0x2, 0x14) shutdown(r2, 0x1) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000440), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000880)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x3]}}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d9", 0x6c}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 3.602954023s ago: executing program 2 (id=79): mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x8400) read(r2, &(0x7f0000000740)=""/209, 0xd1) mkdirat(0xffffffffffffff9c, &(0x7f0000000bc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./proc\x00', &(0x7f0000000c40)='proc\x00', 0x4000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000cc0)='270', 0x3) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000d80)={0x2000009, "f563eb0000001c4c18410000055e0000001400"}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0xb, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="180000005800000000000000070000009500"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync_file_range(r5, 0x800, 0x5f0f, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./tracing/events/sched/filter\x00', 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) unshare(0x40000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040010) 3.411032287s ago: executing program 3 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000140), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="f1", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x240c1) ioctl$SIOCSIFHWADDR(r1, 0x8905, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(&(0x7f0000000140), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000580)={0x1, @pix={0xe7ff, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x3, 0xfeedcafc, 0x3, 0x2, 0x2, 0x4}}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) symlinkat(&(0x7f00000002c0)='./file1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x42, 0x18e) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000280)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)={0x100, 0x72, 0x10}, 0x18) open_tree(r5, &(0x7f0000000080)='./proc/net/afs/rootcell\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r6, &(0x7f0000000400)='syz0:127.0.0.1', 0xe) 3.023689207s ago: executing program 0 (id=81): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)={0x34, r2, 0x1, 0x0, 0xfffffffe, {0x3}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x69, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}]}]}, 0x34}}, 0x8008) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) ptrace$getregs(0xffffffffffffffff, r4, 0x7, &(0x7f0000000000)=""/100) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xd1, 0xffffffffffffffff) r8 = add_key$user(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="f9", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r8, r7, r8}, &(0x7f0000000500)=""/68, 0x44, &(0x7f0000000580)={&(0x7f00000005c0)={'sha3-512\x00'}}) fanotify_init(0xef0, 0x2) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 2.795711804s ago: executing program 1 (id=82): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xa6) read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @remote}, 0x4, 0x0, 0x0, 0x0, 0x200a, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000080)=0x200000000) dup2(r5, r7) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) 2.626177984s ago: executing program 3 (id=83): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, 0x0, 0x4000880) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$autofs(0xffffff9c, &(0x7f0000000380), 0x280, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file2\x00'}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x5, 0x0, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x7995}, 0x8, 0xfffffffc, 0x0, 0x48000000, 0x0, 0x2000000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x59f, 0x19) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0xe57b, 0x0, 0x0, 0x124, 0x5}}, 0x5e) ftruncate(0xffffffffffffffff, 0x2007ffb) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100), 0x6) bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0x2, 0x2}, 0x6) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000340)={'veth1_to_team\x00', 0x8001}) syz_create_resource$binfmt(&(0x7f0000000200)='./file1\x00') ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) 2.53594142s ago: executing program 3 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101840, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file3\x00', 0x105042, 0x0) mount(&(0x7f0000000240)=@sr0, &(0x7f0000000280)='./file3\x00', &(0x7f00000002c0)='erofs\x00', 0x0, &(0x7f0000000300)='acl') close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)='g', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000004c0)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r2, &(0x7f0000000500)="8b", 0x1, 0x0, &(0x7f0000000540)={0xa, 0x0, 0x0, @remote, 0x80000}, 0x1c) shutdown(r2, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000004200100027bd7400fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) fadvise64(r1, 0x400001fe, 0x4, 0x3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040804}, 0x840) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x40000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'veth0_to_team\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f00000008c0)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000900)={0x11, 0x300, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) writev(r1, &(0x7f0000000a00)=[{&(0x7f0000000a40)='.', 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 2.523693592s ago: executing program 2 (id=85): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x10000000000}]) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@remote, @in6=@remote, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x0, 0x8, 0xa}, {@in=@remote, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0xfffffffd, 0x8, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) fcntl$notify(r4, 0x402, 0x8000003d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x20000000000006) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) tee(r7, r8, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) r10 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) keyctl$setperm(0x5, r10, 0x300127) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.330032274s ago: executing program 2 (id=86): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffee7d9ce0aaaaaaaaaabb08004500001400000000008990780039702c"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ffff0000000048c411201fab10eb1b5f807a0000ffffffff9500000000000000"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x1ff) syz_open_procfs(0xffffffffffffffff, 0x0) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='jfs\x00', 0x0, 0x0) r3 = openat$audio1(0xffffff9c, 0x0, 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0xd}}, './config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus/file0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r4, &(0x7f0000000880)=ANY=[@ANYBLOB='exec :'], 0x167) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000040)='./file0\x00', 0x0) symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00') mount(0x0, 0x0, 0x0, 0x10, 0x0) 2.111292587s ago: executing program 3 (id=87): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00/\x00\t'], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) socket(0x3, 0xa, 0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0) recvmsg(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000001c0)={0xfff, r5, 0x2}) syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) set_mempolicy(0x6005, &(0x7f0000000100)=0x11, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r6, &(0x7f0000002140)={0x2020}, 0x2020) 2.01790449s ago: executing program 3 (id=88): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='stat\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x1f4, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x143102) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000400)={0x4001}, 0xfea3) writev(r2, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x3, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000640)) dup(0xffffffffffffffff) openat$comedi(0xffffffffffffff9c, &(0x7f0000000680)='/dev/comedi3\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fdatasync(r3) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f0000000880)='3', 0x1}], 0x1) pread64(r0, &(0x7f0000000040)=""/15, 0xf, 0x4) madvise(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x12) 1.510984596s ago: executing program 1 (id=89): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) close(r0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vimc1(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000780)={0x0, @reserved}) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000480), r4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2000, 0x1d1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xee42, 0x8200, 0x3, 0x367}}], 0x1, 0x0, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000900)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000007f00000000000000c2beb2e1"], &(0x7f0000000980)=0x2c) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f00000071c0)={0x18, {"a2e3ad2119c752f91b5e09091bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838721a0890e0878f0e1ac6e7049b3d63959b509a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31320d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70d998ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5af098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000108000e0a37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b2fc652c54e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f794c9eee1198751adaa13d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2dc19a3a375e71e078342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb0100008051fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d8872fe174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0559be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f980000000203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 1.491090506s ago: executing program 0 (id=90): unshare(0x8020000) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x3400, 0xa, 0x15d}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0xd0af, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x800, 0x1, 0x23b}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x4, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r7 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r7, 0x0, 0xd, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1fd) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) mount(0x0, &(0x7f00000000c0)='my_sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x50, &(0x7f0000000400)={0x0, 0x0}, 0x10) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000440)=0x80000001, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/arp\x00') symlinkat(&(0x7f0000000540)='.\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file1\x00', 0x1) r10 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r10, 0x0, 0x13, 0x0, 0x0) bind$inet(r10, &(0x7f0000000640)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7a) 1.404384103s ago: executing program 2 (id=91): r0 = socket$key(0xf, 0x3, 0x2) openat$null(0xffffffffffffff9c, 0x0, 0x38ec1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a0000000000000000000000030006000000000002000000ac1414000000000200000000020001000000000000000002fffffffb030005000000000002000000000000000000000000000000ae4f58741d2567c421f48ec91fcdea3c843efaa03dba50f7230ac216287364fe16d6763bee4b29b4a00c8c5865690211e8adeda83c8344d7201fbf05761ab6943534463fe52a552973ca2e3b8dd3eaf130bdecbca04060e991fa467454aa51c7523b8dee6df061a6500ff0277bdd6583a9f1c43bb0bf7ffeec0dc7b53f6a3490ead3e03187c0eba7055518e0c30c"], 0x50}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000003c0), &(0x7f0000000400)=0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x840, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x14, 0x2, 0x9, 0x46, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x0, 0x723, 0x400, 0x1, 0x13, 0x100, 0x2, 0x66, 0x34d, 0x5, 0x402, 0x9, 0x200, 0xe2df, 0x8, 0xfffffffe, 0x4, 0x0, 0x7, 0xf56, 0x6]}) r5 = openat$cdrom(0xffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$CDROMVOLCTRL(r5, 0x530a, &(0x7f00000000c0)={0x10, 0xa2, 0x1, 0x8}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="3400000041000701feff0bff00000000017c0000040042801800019c10000400cab1893a20b8d2a93521800a04001c8004000280"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bind$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x2}, 0x20) connect$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) write$tun(r6, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000540000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r7 = socket$inet6(0xa, 0x4, 0xf1) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020900110200000001000000ffdbdf25"], 0x10}}, 0x0) 183.074859ms ago: executing program 2 (id=92): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='vfat\x00', 0x81, &(0x7f0000000280)='nfs\x00') setsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000000c0)={0x1f, 0x2}, 0x29) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'bridge0\x00', 0x1}, 0x18) write$bt_hci(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0195"], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='./dev/sda1\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000440)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000480)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f00000004c0)='./file1\x00', 0x64842, 0x86) pwritev2(r5, &(0x7f0000000500)=[{&(0x7f0000000540)="c5", 0x1}], 0x1, 0x7800, 0x2, 0x2c) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0x9}}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x840) write(0xffffffffffffffff, &(0x7f0000000080)="240000001e", 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 21.543766ms ago: executing program 0 (id=93): r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = socket$rxrpc(0x21, 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000380)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='0 0 0 0\n', 0x8) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/kernel/panic_on_warn\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='0\n\x00', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/module/kernel/parameters/panic_on_warn\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='test,0x8000000000000000,0x1000\x00', 0x1e) close(r4) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000640)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) bind$rxrpc(r1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r6, @ANYBLOB="101000000000000008000d1f05000000e4031680e00301800c00070000000000adffffff0c00", @ANYRES32=r6, @ANYBLOB="eb91"], 0x40c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0xfffffffe, {0x7, 0x0, 0x0, r7, 0x3000}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x70}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800c800}, 0x0) 0s ago: executing program 1 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x4a10, &(0x7f0000000600)={0x0, 0x42030b5, 0x1, 0x2, 0x157}, 0x0, &(0x7f0000000000), &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000040)='./file2\x00', 0x81) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, 0x0, &(0x7f0000000580)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x0, 0x3, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x2, 0x8004, 0x0, 0x0}}, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_DO_IT(r6, 0xab03) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) r8 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x200) ioctl$VIDIOC_STREAMOFF(r8, 0x40045613, &(0x7f0000000040)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:22559' (ED25519) to the list of known hosts. [ 42.000927][ T5780] cgroup: Unknown subsys name 'net' [ 42.104665][ T5780] cgroup: Unknown subsys name 'cpuset' [ 42.109048][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.154752][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.618035][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.618956][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.621491][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.623787][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.628623][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.631024][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.640934][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.641605][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.642131][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.642243][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.643079][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.644125][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.644413][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.645221][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.645456][ T5806] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.647931][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.648652][ T5806] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.650922][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.654126][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.659374][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.876545][ T5801] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.879352][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.881812][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.882946][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.888070][ T5802] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.965810][ T5792] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 47.981007][ T5793] infiniband rxe0: set active [ 47.981387][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.981501][ T5793] infiniband rxe0: added rxe_eth0 [ 47.989596][ T5793] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 47.989615][ T5793] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 47.989634][ T5793] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 47.995061][ T5792] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.004741][ T5793] RDS/IB: rxe0: added [ 48.005370][ T5793] smc: adding ib device rxe0 with port count 1 [ 48.005406][ T5793] smc: ib device rxe0 port 1 has no pnetid [ 48.021568][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.165832][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.223668][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.225081][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.225188][ T5802] bridge_slave_0: entered allmulticast mode [ 48.226535][ T5802] bridge_slave_0: entered promiscuous mode [ 48.240112][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.240230][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.240322][ T5801] bridge_slave_0: entered allmulticast mode [ 48.241614][ T5801] bridge_slave_0: entered promiscuous mode [ 48.244242][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.244342][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.244429][ T5801] bridge_slave_1: entered allmulticast mode [ 48.245625][ T5801] bridge_slave_1: entered promiscuous mode [ 48.246620][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.246695][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.246782][ T5802] bridge_slave_1: entered allmulticast mode [ 48.248048][ T5802] bridge_slave_1: entered promiscuous mode [ 48.274610][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.301420][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.303848][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.305194][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.335410][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.358762][ T5801] team0: Port device team_slave_0 added [ 48.369185][ T5802] team0: Port device team_slave_0 added [ 48.371069][ T5801] team0: Port device team_slave_1 added [ 48.385804][ T5802] team0: Port device team_slave_1 added [ 48.402017][ T5793] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.403312][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.403323][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.403341][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.412064][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.412073][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.412084][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.412536][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.412543][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.412554][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.423079][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.423087][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.423099][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.471229][ T5801] hsr_slave_0: entered promiscuous mode [ 48.471797][ T5801] hsr_slave_1: entered promiscuous mode [ 48.480215][ T5802] hsr_slave_0: entered promiscuous mode [ 48.480680][ T5802] hsr_slave_1: entered promiscuous mode [ 48.481080][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 48.481092][ T5802] Cannot create hsr debugfs directory [ 48.777081][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.777178][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.777270][ T5792] bridge_slave_0: entered allmulticast mode [ 48.778636][ T5792] bridge_slave_0: entered promiscuous mode [ 48.795831][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.795902][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.795985][ T5792] bridge_slave_1: entered allmulticast mode [ 48.797076][ T5792] bridge_slave_1: entered promiscuous mode [ 48.837511][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.837695][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.846899][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.847577][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.852009][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.856051][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.856789][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.862768][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.863420][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.870639][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.899341][ T5792] team0: Port device team_slave_0 added [ 48.910664][ T5792] team0: Port device team_slave_1 added [ 48.957853][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.957868][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.957885][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.964620][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.964634][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.964658][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.973645][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.980869][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.999993][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.002769][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.020939][ T5792] hsr_slave_0: entered promiscuous mode [ 49.021711][ T5792] hsr_slave_1: entered promiscuous mode [ 49.022223][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 49.022235][ T5792] Cannot create hsr debugfs directory [ 49.022861][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.026045][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.027051][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.031005][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.061171][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.061259][ T5801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.061602][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.061647][ T5801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.090079][ T202] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.092032][ T202] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.134133][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.134213][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.134314][ T5793] bridge_slave_0: entered allmulticast mode [ 49.135610][ T5793] bridge_slave_0: entered promiscuous mode [ 49.151322][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.151487][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.151610][ T5793] bridge_slave_1: entered allmulticast mode [ 49.152855][ T5793] bridge_slave_1: entered promiscuous mode [ 49.185122][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.194997][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.219613][ T5793] team0: Port device team_slave_0 added [ 49.237925][ T5793] team0: Port device team_slave_1 added [ 49.257213][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.257230][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.257249][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.280913][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.280923][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.280951][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.329515][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.336725][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.340588][ T5793] hsr_slave_0: entered promiscuous mode [ 49.341108][ T5793] hsr_slave_1: entered promiscuous mode [ 49.341386][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 49.341394][ T5793] Cannot create hsr debugfs directory [ 49.356997][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.362521][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.363273][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.366346][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.367127][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.370380][ T5792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.422217][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.452397][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.531186][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.541371][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.566707][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.566767][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.567665][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.567705][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.570085][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.570164][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.593410][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.593477][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.650786][ T5802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.650801][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.655272][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.659257][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.659728][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.664435][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.681662][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.685861][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.687539][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.691053][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.693927][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.724936][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.729694][ T67] Bluetooth: hci2: command tx timeout [ 49.729732][ T5794] Bluetooth: hci3: command tx timeout [ 49.730023][ T67] Bluetooth: hci0: command tx timeout [ 49.730030][ T5794] Bluetooth: hci1: command tx timeout [ 49.749785][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.749869][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.764830][ T109] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.764910][ T109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.844569][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.856460][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.864272][ T109] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.864349][ T109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.876863][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.876946][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.016711][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.041474][ T5802] veth0_vlan: entered promiscuous mode [ 50.048611][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.050639][ T5802] veth1_vlan: entered promiscuous mode [ 50.075286][ T5802] veth0_macvtap: entered promiscuous mode [ 50.077377][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.085770][ T5802] veth1_macvtap: entered promiscuous mode [ 50.087902][ T5801] veth0_vlan: entered promiscuous mode [ 50.095550][ T5801] veth1_vlan: entered promiscuous mode [ 50.102734][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.115552][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.122053][ T5871] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.122308][ T5792] veth0_vlan: entered promiscuous mode [ 50.127734][ T5792] veth1_vlan: entered promiscuous mode [ 50.157038][ T5801] veth0_macvtap: entered promiscuous mode [ 50.166081][ T5801] veth1_macvtap: entered promiscuous mode [ 50.184979][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.187678][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.187689][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.197476][ T5792] veth0_macvtap: entered promiscuous mode [ 50.201059][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.208261][ T5792] veth1_macvtap: entered promiscuous mode [ 50.215586][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.215597][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.220371][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.233196][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.236108][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.286422][ T5793] veth0_vlan: entered promiscuous mode [ 50.296758][ T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.296770][ T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.319856][ T5793] veth1_vlan: entered promiscuous mode [ 50.320812][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.320826][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.321406][ T5802] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.334485][ T5802] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.336561][ T5802] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.337414][ T5802] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.337944][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.337958][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.349614][ T5802] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.355877][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.355888][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.358712][ T5793] veth0_macvtap: entered promiscuous mode [ 50.362283][ T5793] veth1_macvtap: entered promiscuous mode [ 50.373818][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.379876][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.384085][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.384159][ T5838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.384191][ T5838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398890][ T5838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398913][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398929][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398945][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398960][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398977][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.398992][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.399008][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.399029][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.399069][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.399097][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.399121][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.439723][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.439736][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.457817][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.457829][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.472475][ T5952] loop5: detected capacity change from 0 to 7 [ 50.475808][ T5952] Dev loop5: unable to read RDB block 7 [ 50.475828][ T5952] loop5: unable to read partition table [ 50.475920][ T5952] loop5: partition table beyond EOD, truncated [ 50.475955][ T5952] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 51.733461][ T42] audit: type=1326 audit(1793670202.636:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733490][ T42] audit: type=1326 audit(1793670202.636:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733509][ T42] audit: type=1326 audit(1793670202.636:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733528][ T42] audit: type=1326 audit(1793670202.636:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733546][ T42] audit: type=1326 audit(1793670202.636:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733564][ T42] audit: type=1326 audit(1793670202.636:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733617][ T42] audit: type=1326 audit(1793670202.636:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733636][ T42] audit: type=1326 audit(1793670202.636:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733655][ T42] audit: type=1326 audit(1793670202.636:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.733672][ T42] audit: type=1326 audit(1793670202.636:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5981 comm="syz.3.8" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf73fefbc code=0x7ffc0000 [ 51.838842][ T67] Bluetooth: hci0: command tx timeout [ 51.838900][ T67] Bluetooth: hci2: command tx timeout [ 51.838918][ T67] Bluetooth: hci1: command tx timeout [ 51.838938][ T5803] Bluetooth: hci3: command tx timeout [ 52.196424][ T5963] Set syz1 is full, maxelem 65536 reached [ 52.984801][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10'. [ 53.010572][ T5996] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 53.907438][ T5803] Bluetooth: hci1: command tx timeout [ 53.908756][ T5803] Bluetooth: hci0: command tx timeout [ 53.909491][ T5803] Bluetooth: hci3: command tx timeout [ 53.911588][ T5154] Bluetooth: hci2: command tx timeout [ 55.212388][ T6020] jffs2: notice: (6020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 55.968521][ T5794] Bluetooth: hci3: command tx timeout [ 55.968587][ T5794] Bluetooth: hci1: command tx timeout [ 55.969679][ T5803] Bluetooth: hci2: command tx timeout [ 55.969921][ T5154] Bluetooth: hci0: command tx timeout [ 56.435988][ T6030] warning: `syz.1.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.742700][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 56.797168][ T6041] random: crng reseeded on system resumption [ 56.956806][ T6046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19'. [ 57.140470][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 57.140510][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 57.869483][ T6059] Zero length message leads to an empty skb [ 57.886336][ T6059] comedi comedi2: dt2814: I/O base address or length out of range [ 59.048939][ T6067] configfs-gadget.g1 gadget.0: HOST MAC d6:f7:5d:92:f4:3f [ 59.049019][ T6067] configfs-gadget.g1 gadget.0: MAC 02:f9:35:23:12:d2 [ 59.322328][ T5898] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 59.409186][ T6077] Cannot find add_set index 0 as target [ 59.482105][ T5898] usb 5-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 59.498579][ T5898] usb 5-1: Dual-Role OTG device on HNP port [ 59.499313][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.568494][ T5898] cdc_ncm 5-1:1.0: MAC-Address: d6:f7:5d:92:f4:3f [ 59.717035][ T5898] cdc_ncm 5-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), d6:f7:5d:92:f4:3f [ 60.475756][ T5868] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.636159][ T6092] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 61.203921][ T6107] syz.3.29: page allocation failure: order:2, mode:0xcc1(GFP_KERNEL|GFP_DMA), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 61.204150][ T6107] CPU: 2 UID: 0 PID: 6107 Comm: syz.3.29 Not tainted syzkaller #0 PREEMPT(full) [ 61.204163][ T6107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 61.204192][ T6107] Call Trace: [ 61.204200][ T6107] [ 61.204212][ T6107] dump_stack_lvl+0x100/0x190 [ 61.204240][ T6107] warn_alloc.cold+0x9e/0xb2 [ 61.204263][ T6107] ? __pfx_warn_alloc+0x10/0x10 [ 61.204296][ T6107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 61.204321][ T6107] ? __pfx_get_page_from_freelist+0x10/0x10 [ 61.204341][ T6107] __alloc_frozen_pages_noprof+0xaf3/0x3280 [ 61.204364][ T6107] ? do_raw_spin_lock+0x128/0x260 [ 61.204378][ T6107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 61.204395][ T6107] ? mark_held_locks+0x40/0x70 [ 61.204406][ T6107] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 61.204418][ T6107] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.204431][ T6107] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 61.204447][ T6107] ? __kasan_kmalloc+0xaa/0xb0 [ 61.204457][ T6107] ? __kmalloc_noprof+0x32f/0x840 [ 61.204472][ T6107] ? comedi_isadma_alloc+0xc6/0x620 [ 61.204487][ T6107] ? pcl816_attach+0x909/0xb30 [ 61.204515][ T6107] alloc_pages_node_noprof+0x93/0x200 [ 61.204542][ T6107] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 61.204575][ T6107] alloc_pages_exact_nid_noprof+0x32/0xe0 [ 61.204600][ T6107] __dma_direct_alloc_pages.isra.0+0x34e/0x510 [ 61.204616][ T6107] ? dma_alloc_from_dev_coherent+0x2e0/0x570 [ 61.204629][ T6107] dma_direct_alloc+0x3d1/0x8a0 [ 61.204646][ T6107] dma_alloc_attrs+0x1b9/0x3e0 [ 61.204662][ T6107] ? __pfx_dma_alloc_attrs+0x10/0x10 [ 61.204690][ T6107] ? __kmalloc_noprof+0x350/0x840 [ 61.204705][ T6107] ? dma_direct_supported+0xca/0x220 [ 61.204720][ T6107] comedi_isadma_alloc+0x331/0x620 [ 61.204734][ T6107] ? __pfx_comedi_isadma_alloc+0x10/0x10 [ 61.204748][ T6107] ? request_threaded_irq+0x27b/0x3e0 [ 61.204762][ T6107] pcl816_attach+0x909/0xb30 [ 61.204774][ T6107] comedi_device_attach+0x40e/0x6b0 [ 61.204793][ T6107] do_devconfig_ioctl+0x1b3/0x6d0 [ 61.204804][ T6107] ? comedi_unlocked_ioctl+0x180/0x3310 [ 61.204819][ T6107] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 61.204838][ T6107] ? tomoyo_path_number_perm+0x46d/0x580 [ 61.204853][ T6107] ? kasan_save_stack+0x3f/0x50 [ 61.204862][ T6107] ? kasan_save_stack+0x30/0x50 [ 61.204872][ T6107] ? kasan_save_track+0x14/0x30 [ 61.204881][ T6107] ? kasan_save_free_info+0x3b/0x70 [ 61.204897][ T6107] comedi_unlocked_ioctl+0x860/0x3310 [ 61.204915][ T6107] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 61.204940][ T6107] ? kasan_quarantine_put+0x104/0x240 [ 61.204950][ T6107] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.204963][ T6107] ? find_held_lock+0x2b/0x80 [ 61.204977][ T6107] ? tomoyo_path_number_perm+0x28f/0x580 [ 61.204990][ T6107] ? tomoyo_path_number_perm+0x28f/0x580 [ 61.205007][ T6107] ? tomoyo_path_number_perm+0x188/0x580 [ 61.205023][ T6107] comedi_compat_ioctl+0x438/0xe20 [ 61.205038][ T6107] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 61.205052][ T6107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 61.205066][ T6107] ? do_vfs_ioctl+0x226/0x13e0 [ 61.205082][ T6107] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 61.205100][ T6107] ? __fget_files+0x34/0x3d0 [ 61.205112][ T6107] ? find_held_lock+0x2b/0x80 [ 61.205125][ T6107] ? __fget_files+0x215/0x3d0 [ 61.205135][ T6107] ? hook_file_ioctl_common+0x140/0x440 [ 61.205153][ T6107] ? __fget_files+0x21f/0x3d0 [ 61.205166][ T6107] ? __pfx_comedi_compat_ioctl+0x10/0x10 [ 61.205180][ T6107] __ia32_compat_sys_ioctl+0x2cf/0x360 [ 61.205198][ T6107] __do_fast_syscall_32+0x14b/0x8c0 [ 61.205216][ T6107] ? lockdep_hardirqs_on+0x7d/0x110 [ 61.205229][ T6107] do_fast_syscall_32+0x32/0x70 [ 61.205243][ T6107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 61.205257][ T6107] RIP: 0023:0xf73fefbc [ 61.205266][ T6107] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 61.205275][ T6107] RSP: 002b:00000000f53f550c EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 61.205286][ T6107] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000040946400 [ 61.205293][ T6107] RDX: 0000000080000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 61.205299][ T6107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 61.205304][ T6107] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 61.205310][ T6107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 61.205324][ T6107] [ 61.205515][ T6107] Mem-Info: [ 61.205522][ T6107] active_anon:7369 inactive_anon:82 isolated_anon:0 [ 61.205522][ T6107] active_file:61 inactive_file:53432 isolated_file:0 [ 61.205522][ T6107] unevictable:1000 dirty:644 writeback:0 [ 61.205522][ T6107] slab_reclaimable:10103 slab_unreclaimable:53918 [ 61.205522][ T6107] mapped:25204 shmem:1527 pagetables:1107 [ 61.205522][ T6107] sec_pagetables:296 bounce:0 [ 61.205522][ T6107] kernel_misc_reclaimable:0 [ 61.205522][ T6107] free:32617 free_pcp:3 free_cma:0 [ 61.205658][ T6107] Node 0 active_anon:4kB inactive_anon:0kB active_file:52kB inactive_file:160kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:16kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8096kB pagetables:1036kB sec_pagetables:1124kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 61.205758][ T6107] Node 0 DMA free:2664kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 61.205811][ T6107] lowmem_reserve[]: 0 256 256 256 256 [ 61.205864][ T6107] Node 0 DMA: 134*4kB (UM) 14*8kB (UM) 6*16kB (UM) 20*32kB (UM) 8*64kB (UM) 2*128kB (M) 2*256kB (M) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 2664kB [ 61.206068][ T6107] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.206099][ T6107] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.206108][ T6107] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 61.206116][ T6107] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 61.206123][ T6107] 55050 total pagecache pages [ 61.206126][ T6107] 59 pages in swap cache [ 61.206130][ T6107] Free swap = 123044kB [ 61.206158][ T6107] Total swap = 124996kB [ 61.206163][ T6107] 524155 pages RAM [ 61.206166][ T6107] 0 pages HighMem/MovableOnly [ 61.206169][ T6107] 217658 pages reserved [ 61.206172][ T6107] 0 pages cma reserved [ 62.519166][ T6133] overlayfs: missing 'lowerdir' [ 62.586161][ T6124] mmap: syz.3.33 (6124) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.588429][ T1360] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 62.661141][ T6126] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 62.663135][ T109] IPVS: starting estimator thread 0... [ 62.739146][ T1360] usb 7-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 62.740844][ T1360] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.745727][ T1360] usb 7-1: config 0 descriptor?? [ 62.769864][ T6145] IPVS: using max 31 ests per chain, 74400 per kthread [ 62.993939][ T6132] batman_adv: batadv0: Adding interface: macvtap1 [ 62.993954][ T6132] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.993974][ T6132] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 63.324848][ T6132] batman_adv: batadv0: Removing interface: macvtap1 [ 63.655883][ T6164] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 63.655942][ T6164] netlink: 'syz.3.37': attribute type 2 has an invalid length. [ 63.998336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 64.108601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 64.321857][ T6171] netlink: 'syz.0.39': attribute type 10 has an invalid length. [ 65.121106][ T1360] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 65.303881][ T6171] nvme nvme0: failed to connect socket: -512 [ 65.353002][ T1360] [drm:udl_init] *ERROR* Selecting channel failed [ 65.551770][ T1360] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 65.551786][ T1360] [drm] Initialized udl on minor 2 [ 65.554332][ T1360] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 65.554916][ T1360] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 65.556904][ T1360] usb 7-1: USB disconnect, device number 2 [ 65.558206][ T24] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 65.562844][ T24] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 65.963543][ T6193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.971614][ T6193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.042669][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.043053][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.053145][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.654104][ T6196] pim6reg: entered allmulticast mode [ 66.861393][ T6199] FAULT_INJECTION: forcing a failure. [ 66.861393][ T6199] name failslab, interval 1, probability 0, space 0, times 1 [ 66.861424][ T6199] CPU: 1 UID: 0 PID: 6199 Comm: syz.0.46 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.861450][ T6199] Tainted: [L]=SOFTLOCKUP [ 66.861457][ T6199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.861468][ T6199] Call Trace: [ 66.861474][ T6199] [ 66.861481][ T6199] dump_stack_lvl+0x100/0x190 [ 66.861511][ T6199] should_fail_ex.cold+0x5/0xa [ 66.861535][ T6199] should_failslab+0xc2/0x120 [ 66.861555][ T6199] __kmalloc_cache_noprof+0x91/0x6d0 [ 66.861577][ T6199] ? __kasan_kmalloc+0xaa/0xb0 [ 66.861595][ T6199] ? __v4l2_subdev_state_alloc+0x53/0x410 [ 66.861625][ T6199] __v4l2_subdev_state_alloc+0x53/0x410 [ 66.861649][ T6199] subdev_open+0xa6/0x510 [ 66.861670][ T6199] v4l2_open+0x1d2/0x490 [ 66.861687][ T6199] ? __pfx_v4l2_open+0x10/0x10 [ 66.861703][ T6199] chrdev_open+0x234/0x6a0 [ 66.861721][ T6199] ? __pfx_apparmor_file_open+0x10/0x10 [ 66.861743][ T6199] ? __pfx_chrdev_open+0x10/0x10 [ 66.861765][ T6199] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 66.861795][ T6199] do_dentry_open+0x674/0x1470 [ 66.861813][ T6199] ? __pfx_chrdev_open+0x10/0x10 [ 66.861836][ T6199] vfs_open_consume+0xcc/0x460 [ 66.861862][ T6199] path_openat+0x1547/0x23f0 [ 66.861886][ T6199] ? __pfx_path_openat+0x10/0x10 [ 66.861913][ T6199] do_file_open+0x20e/0x430 [ 66.861936][ T6199] ? __pfx_do_file_open+0x10/0x10 [ 66.861975][ T6199] ? _raw_spin_unlock+0x28/0x50 [ 66.861993][ T6199] ? alloc_fd+0x471/0x7a0 [ 66.862019][ T6199] do_sys_openat2+0x163/0x1d0 [ 66.862040][ T6199] ? __pfx_do_sys_openat2+0x10/0x10 [ 66.862067][ T6199] ? __ia32_sys_futex_time32+0x2f4/0x470 [ 66.862101][ T6199] __ia32_compat_sys_openat+0x12d/0x210 [ 66.862127][ T6199] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 66.862160][ T6199] do_int80_emulation+0x166/0x650 [ 66.862193][ T6199] asm_int80_emulation+0x1a/0x20 [ 66.862211][ T6199] RIP: 0023:0xf71e7f6b [ 66.862228][ T6199] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 66.862246][ T6199] RSP: 002b:00000000f54a603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 66.862267][ T6199] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f54a6100 [ 66.862278][ T6199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.862289][ T6199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 66.862300][ T6199] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 66.862311][ T6199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 66.862336][ T6199] [ 66.899486][ T6196] pim6reg: left allmulticast mode [ 67.002475][ T6188] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.024074][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 67.177646][ T6196] hsr_slave_1 (unregistering): left promiscuous mode [ 67.391166][ T6128] syz.3.33 (6128) used greatest stack depth: 19848 bytes left [ 67.862601][ T6216] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 67.869386][ T6206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.364988][ T6245] process 'syz.0.53' launched './file2' with NULL argv: empty string added [ 70.904754][ T6252] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 70.910161][ T6252] CIFS: Attempting to mount //127.0.0.1/test [ 70.931760][ T6249] ptrace attach of "/syz-executor exec"[6250] was attempted by "/syz-executor exec"[6249] [ 70.931839][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.931873][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.933809][ T6249] fuse: fd is not a fuse device [ 70.938814][ T77] IPVS: starting estimator thread 0... [ 71.028420][ T6253] IPVS: using max 43 ests per chain, 103200 per kthread [ 71.196754][ T2102] cfg80211: failed to load regulatory.db [ 71.526915][ T6264] bridge0: port 3(netdevsim0) entered blocking state [ 71.527405][ T6264] bridge0: port 3(netdevsim0) entered disabled state [ 71.528098][ T6264] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 71.533202][ T6264] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 71.534367][ T6264] bridge0: port 3(netdevsim0) entered blocking state [ 71.534455][ T6264] bridge0: port 3(netdevsim0) entered forwarding state [ 71.818240][ T6252] CIFS: VFS: Error connecting to socket. Aborting operation. [ 71.821320][ T6252] CIFS: VFS: cifs_mount failed w/return code = -4 [ 72.033264][ T6270] bridge_slave_0: left allmulticast mode [ 72.033287][ T6270] bridge_slave_0: left promiscuous mode [ 72.037944][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.053275][ T6270] bridge_slave_1: left allmulticast mode [ 72.053291][ T6270] bridge_slave_1: left promiscuous mode [ 72.053409][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.080244][ T6270] bond0: (slave bond_slave_0): Releasing backup interface [ 72.107877][ T6270] bond0: (slave bond_slave_1): Releasing backup interface [ 72.325827][ T6270] team0: Port device team_slave_0 removed [ 72.384223][ T6270] team0: Port device team_slave_1 removed [ 72.384976][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.384995][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.530936][ T6270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.530991][ T6270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.890280][ T6270] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.108763][ T5898] libceph: connect (1)[c::]:6789 error -101 [ 73.109518][ T5898] libceph: mon0 (1)[c::]:6789 connect error [ 73.110035][ T6273] ceph: No mds server is up or the cluster is laggy [ 73.147873][ T6270] netlink: 40 bytes leftover after parsing attributes in process `syz.1.60'. [ 73.214306][ T6259] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 73.932094][ T42] kauditd_printk_skb: 1041 callbacks suppressed [ 73.932107][ T42] audit: type=1800 audit(1793670224.846:1053): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="file0" dev="overlay" ino=96 res=0 errno=-22 [ 74.439984][ T6327] netlink: 'syz.0.65': attribute type 10 has an invalid length. [ 76.309690][ T6360] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 76.544747][ T6361] gretap1: entered promiscuous mode [ 76.688999][ T6360] bond1 (unregistering): Released all slaves [ 77.568985][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 77.570106][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 78.675425][ T6393] loop9: detected capacity change from 0 to 7 [ 78.823050][ T6393] Dev loop9: unable to read RDB block 7 [ 78.823178][ T6393] loop9: unable to read partition table [ 78.823652][ T6393] loop9: partition table beyond EOD, truncated [ 78.823662][ T6393] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 79.050865][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 79.397794][ T6400] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.507267][ T6404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.81'. [ 79.737828][ T6408] nvme nvme0: failed to connect socket: -111 [ 79.900254][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 79.913968][ T6421] /dev/sr0: Can't open blockdev [ 79.933318][ T6421] netlink: 'syz.3.84': attribute type 39 has an invalid length. [ 79.998131][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.998147][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.008089][ T6423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.008103][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.264451][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 80.608338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.678333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.688355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.928671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 82.337608][ T6454] FAT-fs (sr0): bogus number of reserved sectors [ 82.337621][ T6454] FAT-fs (sr0): Can't find a valid FAT filesystem [ 82.663799][ T6458] ioremap: invalid physical address 8000000000000000 [ 82.663953][ T6458] ------------[ cut here ]------------ [ 82.663959][ T6458] 1 [ 82.663969][ T6458] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller.isra.0.cold+0x59/0xa4, CPU#0: syz.0.93/6458 [ 82.672304][ T6458] Modules linked in: [ 82.673745][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.0.93 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.677051][ T6458] Tainted: [L]=SOFTLOCKUP [ 82.678452][ T6458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.681756][ T6458] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 82.683841][ T6458] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db d4 9a 00 e8 10 52 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb d4 9a 00 e8 f3 51 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 82.689899][ T6458] RSP: 0018:ffffc9000f9bf8b8 EFLAGS: 00010286 [ 82.691858][ T6458] RAX: 0000000000000032 RBX: 1ffff92001f37f1b RCX: 0000000000000000 [ 82.694360][ T6458] RDX: 0000000000000032 RSI: ffffffff81eb6e59 RDI: fffff52001f37f08 [ 82.696867][ T6458] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 82.699430][ T6458] R10: ffffc9000f9bf67f R11: 0000000000000001 R12: 8000000000000fff [ 82.701924][ T6458] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 82.704456][ T6458] FS: 0000000000000000(0000) GS:ffff888095281000(0063) knlGS:00000000f54a6b40 [ 82.707264][ T6458] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 82.709414][ T6458] CR2: 000000002ee07ff8 CR3: 0000000026737000 CR4: 0000000000352ef0 [ 82.711939][ T6458] Call Trace: [ 82.713048][ T6458] [ 82.714044][ T6458] ? register_device+0x1bb/0x6a0 [ 82.715709][ T6458] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 82.717644][ T6458] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 82.719474][ T6458] ? register_device+0x164/0x6a0 [ 82.721075][ T6458] register_device+0x1bb/0x6a0 [ 82.722761][ T6458] phram_setup+0x3b1/0x4c0 [ 82.724447][ T6458] ? __pfx_phram_setup+0x10/0x10 [ 82.726045][ T6458] ? trace_contention_end+0x126/0x160 [ 82.727798][ T6458] ? param_attr_store+0xec/0x300 [ 82.729452][ T6458] ? __pfx___mutex_lock+0x10/0x10 [ 82.731815][ T6458] phram_param_call+0xa6/0xd0 [ 82.733537][ T6458] param_attr_store+0x199/0x300 [ 82.735114][ T6458] ? __pfx_param_attr_store+0x10/0x10 [ 82.736846][ T6458] module_attr_store+0x58/0x80 [ 82.738407][ T6458] ? __pfx_module_attr_store+0x10/0x10 [ 82.740190][ T6458] sysfs_kf_write+0xf2/0x150 [ 82.741691][ T6458] kernfs_fop_write_iter+0x3e0/0x5f0 [ 82.743435][ T6458] ? __pfx_sysfs_kf_write+0x10/0x10 [ 82.745291][ T6458] vfs_write+0x6af/0x1050 [ 82.746655][ T6458] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 82.748626][ T6458] ? __pfx_vfs_write+0x10/0x10 [ 82.750175][ T6458] ? find_held_lock+0x2b/0x80 [ 82.751734][ T6458] ksys_write+0x12a/0x250 [ 82.753139][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 82.754718][ T6458] __do_fast_syscall_32+0x14b/0x8c0 [ 82.756403][ T6458] do_fast_syscall_32+0x32/0x70 [ 82.757976][ T6458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.760037][ T6458] RIP: 0023:0xf748efbc [ 82.761362][ T6458] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 82.767422][ T6458] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 82.770151][ T6458] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600 [ 82.772641][ T6458] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 82.775119][ T6458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.777602][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.780120][ T6458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.782623][ T6458] [ 82.783669][ T6458] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 82.785930][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.0.93 Tainted: G L syzkaller #0 PREEMPT(full) [ 82.789208][ T6458] Tainted: [L]=SOFTLOCKUP [ 82.790553][ T6458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 82.793653][ T6458] Call Trace: [ 82.794711][ T6458] [ 82.795648][ T6458] dump_stack_lvl+0x100/0x190 [ 82.797196][ T6458] vpanic+0x2dc/0x6f8 [ 82.798444][ T6458] panic+0xd1/0xe0 [ 82.799640][ T6458] ? __pfx_panic+0x10/0x10 [ 82.801058][ T6458] check_panic_on_warn.cold+0x19/0x34 [ 82.802715][ T6458] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 82.804571][ T6458] __warn.cold+0x191/0x321 [ 82.805970][ T6458] __report_bug+0x30f/0x440 [ 82.807420][ T6458] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 82.809266][ T6458] ? __pfx___report_bug+0x10/0x10 [ 82.810857][ T6458] ? irq_work_queue+0xd1/0x100 [ 82.812375][ T6458] ? __wake_up_klogd+0x7a/0xb0 [ 82.813882][ T6458] ? vprintk_emit+0x1c9/0x6b0 [ 82.815376][ T6458] ? __pfx_vprintk_emit+0x10/0x10 [ 82.816956][ T6458] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 82.818784][ T6458] report_bug+0xb3/0x220 [ 82.820163][ T6458] ? __ioremap_caller.isra.0.cold+0x59/0xa4 [ 82.822009][ T6458] handle_bug+0x16a/0x2a0 [ 82.823379][ T6458] exc_invalid_op+0x17/0x50 [ 82.824811][ T6458] asm_exc_invalid_op+0x1a/0x20 [ 82.826336][ T6458] RIP: 0010:__ioremap_caller.isra.0.cold+0x59/0xa4 [ 82.828354][ T6458] Code: 48 8b 34 24 48 c7 c7 00 2e 0c 8c e8 4a 22 01 00 e9 db d4 9a 00 e8 10 52 ec 00 4c 89 ee 48 c7 c7 60 2c 0c 8c e8 31 22 01 00 90 <0f> 0b 90 e9 bb d4 9a 00 e8 f3 51 ec 00 41 0f b6 d7 4c 89 ee 48 c7 [ 82.834243][ T6458] RSP: 0018:ffffc9000f9bf8b8 EFLAGS: 00010286 [ 82.836125][ T6458] RAX: 0000000000000032 RBX: 1ffff92001f37f1b RCX: 0000000000000000 [ 82.838555][ T6458] RDX: 0000000000000032 RSI: ffffffff81eb6e59 RDI: fffff52001f37f08 [ 82.841017][ T6458] RBP: 0000000000001000 R08: 0000000000000000 R09: 0000000000000000 [ 82.843475][ T6458] R10: ffffc9000f9bf67f R11: 0000000000000001 R12: 8000000000000fff [ 82.845900][ T6458] R13: 8000000000000000 R14: 0000000000000002 R15: 0000000000020000 [ 82.848346][ T6458] ? vprintk_emit+0x1c9/0x6b0 [ 82.849825][ T6458] ? __ioremap_caller.isra.0.cold+0x58/0xa4 [ 82.851683][ T6458] ? register_device+0x1bb/0x6a0 [ 82.853230][ T6458] ? __pfx___ioremap_caller.isra.0+0x10/0x10 [ 82.855089][ T6458] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 82.856846][ T6458] ? register_device+0x164/0x6a0 [ 82.858385][ T6458] register_device+0x1bb/0x6a0 [ 82.859896][ T6458] phram_setup+0x3b1/0x4c0 [ 82.861297][ T6458] ? __pfx_phram_setup+0x10/0x10 [ 82.862828][ T6458] ? trace_contention_end+0x126/0x160 [ 82.864504][ T6458] ? param_attr_store+0xec/0x300 [ 82.866045][ T6458] ? __pfx___mutex_lock+0x10/0x10 [ 82.867622][ T6458] phram_param_call+0xa6/0xd0 [ 82.869084][ T6458] param_attr_store+0x199/0x300 [ 82.870634][ T6458] ? __pfx_param_attr_store+0x10/0x10 [ 82.872327][ T6458] module_attr_store+0x58/0x80 [ 82.873866][ T6458] ? __pfx_module_attr_store+0x10/0x10 [ 82.875567][ T6458] sysfs_kf_write+0xf2/0x150 [ 82.877018][ T6458] kernfs_fop_write_iter+0x3e0/0x5f0 [ 82.878655][ T6458] ? __pfx_sysfs_kf_write+0x10/0x10 [ 82.880303][ T6458] vfs_write+0x6af/0x1050 [ 82.881650][ T6458] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 82.883498][ T6458] ? __pfx_vfs_write+0x10/0x10 [ 82.884994][ T6458] ? find_held_lock+0x2b/0x80 [ 82.886477][ T6458] ksys_write+0x12a/0x250 [ 82.887834][ T6458] ? __pfx_ksys_write+0x10/0x10 [ 82.889357][ T6458] __do_fast_syscall_32+0x14b/0x8c0 [ 82.891423][ T6458] do_fast_syscall_32+0x32/0x70 [ 82.893417][ T6458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 82.895849][ T6458] RIP: 0023:0xf748efbc [ 82.897140][ T6458] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 82.904689][ T6458] RSP: 002b:00000000f54a650c EFLAGS: 00000292 ORIG_RAX: 0000000000000004 [ 82.908035][ T6458] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000600 [ 82.911201][ T6458] RDX: 000000000000001e RSI: 0000000000000000 RDI: 0000000000000000 [ 82.914393][ T6458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 82.917561][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.920752][ T6458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 82.923934][ T6458] [ 82.925727][ T6458] Kernel Offset: disabled [ 82.927491][ T6458] Rebooting in 86400 seconds..