last executing test programs: 1m48.236691254s ago: executing program 4 (id=5): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 1m47.118144132s ago: executing program 4 (id=6): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timerfd_create(0x0, 0x80800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m44.203853515s ago: executing program 4 (id=11): socket(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x21, 0x2, 0xa) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000880)=@generic={0x2a, "f9bd16cb242a23a087fb11ea5627f0e5eb7cd9f09a9c63616de11d1dda2d4f483e71dd50c958cc9665608afaebb363a173d9cea524a3902638498b071384d338171f56972e3a0eb375a0d8a2dc0580bfa6935534fc5346e8f30a92eb7c32dc240eb6dd1fb61f43979cf80df0ac50df4e884d968a242ce0400e46ea4f0c74"}, 0x80, 0x0}, 0xfc00) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000780)=ANY=[@ANYRES32=r3, @ANYRESDEC=r2, @ANYRES8=r1, @ANYRESHEX, @ANYRES32=r3, @ANYRESDEC=r3, @ANYRESHEX=0x0], &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000001010000000000feffffffb553c567860500000000000000"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701fefeffff00000000017c0000040042801400018006000600800a000006000b40800a000004000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1m40.809392218s ago: executing program 4 (id=16): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x0, 0x4, 0x5, 0x1, @tick=0x40001, {0x1, 0x10}, {0x3, 0x10}, @raw32={[0x0, 0x1, 0x81]}}, {0x2, 0x87, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x4, 0x9, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x3c}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x40}}}], 0x70) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) socket(0x40000000015, 0x5, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0xfffffdd3}], 0x1}, 0x4048081) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 1m25.363983242s ago: executing program 32 (id=16): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001e40), 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x0, 0x4, 0x5, 0x1, @tick=0x40001, {0x1, 0x10}, {0x3, 0x10}, @raw32={[0x0, 0x1, 0x81]}}, {0x2, 0x87, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x4, 0x9, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x3c}, @result={0xb4c, 0x8}}, {0x3, 0x5, 0xff, 0x0, @tick=0x6, {0x1}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x40}}}], 0x70) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0x3, 0x1, 0x4ddf, 0x1}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) socket(0x40000000015, 0x5, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0xfffffdd3}], 0x1}, 0x4048081) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) 17.455535644s ago: executing program 0 (id=145): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty, 0x4}, 0x1c) bind$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x20) 17.041701019s ago: executing program 0 (id=146): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 13.031202981s ago: executing program 0 (id=159): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11.230730747s ago: executing program 0 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r0, 0x10, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) chmod(0x0, 0x57eeb83c9526c7ac) truncate(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) writev(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) 10.504994164s ago: executing program 2 (id=164): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e22, 0x3, 'wrr\x00', 0x9, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1024000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x44001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) 8.173138816s ago: executing program 2 (id=166): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7.378008159s ago: executing program 0 (id=168): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.484683567s ago: executing program 5 (id=172): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x3, 0x10) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) read(r3, &(0x7f00000002c0)=""/153, 0x99) 6.114823237s ago: executing program 5 (id=174): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000240)={0x0, &(0x7f0000000380)=[{}, {}, {}, {}], 0x0, 0x0, '\x00', 0x0, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) statfs(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', &(0x7f00000002c0)=""/166) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000100)={0x0, 0x5, 0xa5}) syz_open_dev$dvb_dvr(0x0, 0x22, 0x240082) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000f25000/0x2000)=nil) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x6}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x40, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0xa1b, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72f, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x6, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x80, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x5, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0xffffffff, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) write$input_event(r5, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) epoll_create1(0x0) 5.926746308s ago: executing program 3 (id=175): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 5.19535884s ago: executing program 5 (id=177): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.183063408s ago: executing program 5 (id=180): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x70, 0xd, 0x2, "abc6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.026928084s ago: executing program 2 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x70b67cbeee55ba84}, 0x88c1) 3.762842068s ago: executing program 1 (id=182): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x80ad}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 3.643069156s ago: executing program 1 (id=183): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e22, 0x3, 'wrr\x00', 0x9, 0x80005, 0x6f}, 0x2c) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.486724547s ago: executing program 1 (id=184): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f00000002c0)=""/153, 0x99) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) userfaultfd(0x1) 3.083423535s ago: executing program 3 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r3, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x40007f, @dev={0xfe, 0x80, '\x00', 0x20}, 0xc7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r4, 0x8b2c, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0/file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x101000, 0x108) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 2.346688594s ago: executing program 1 (id=186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x4080) 2.108537589s ago: executing program 2 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6d", 0x9) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(0x0, 0x111) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000000306050000000000000000000200000505000100070000"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x20008000) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./control\x00', 0x404) 2.093167689s ago: executing program 1 (id=188): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.001884635s ago: executing program 3 (id=189): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, 0x0, 0x0) timerfd_create(0x0, 0x80800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0x2, 0x1, 0x9, 0x4, 0xa}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x44, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x8009ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xf7b, 0xa004, 0x8, 0x5, 0x20000a17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x6, 0xfff, 0xe4af, 0x0, 0x8, 0x7}, {0x6, 0xd, 0x230, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x80000000}, {0x2, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0xb904, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x1d00, 0x5, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x6, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0xec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x0, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x44}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x3, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x1, 0xa4, 0x4, 0x7}, {0x5, 0xe4, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0xd7d6, 0xfffffffb}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x6, 0x9c, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x7, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0xb, 0xfffffffe, 0x800, 0x0, 0x1}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0x9d, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0xa}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0xffffffff, 0xc0, 0xfffff44c}, {0x4, 0x3, 0xfffffff5, 0x9, 0xbe, 0x4}, {0x20006, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x5, 0x9, 0xbc, 0x11}, {0x1ff, 0xfffffffc, 0xf, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x0, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x0, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x7f, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0xa, 0x100006, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x381, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x9, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x200, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x0, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x5}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x7ff, 0x1, 0x3f, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x7, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0x40000fff, 0x54, 0x8, 0xc, 0x0, 0x6}, {0x401, 0x0, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x84, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x405}, {0x7011, 0xfff, 0x9, 0x1, 0x40000009, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x0, 0x9, 0xc402, 0x2, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x3, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0x7, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x7f, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0x2f, 0x7}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x8000, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x2, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0xd, 0x1}, {0x5, 0x1000, 0x9, 0x7ffc, 0x24e, 0x1}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0x6, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x2, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5}, {}, {0x5}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x6}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.226100568s ago: executing program 1 (id=190): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x1b6, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "47966a", 0x180, 0x2f, 0x1, @remote, @mcast1, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x66}, @routing={0x2c, 0x0, 0x2}, @srh={0x16, 0x0, 0x4, 0x0, 0xfe, 0x40, 0x7f}, @srh={0x0, 0x2, 0x4, 0x1, 0x3, 0x0, 0xa77, [@mcast2]}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x98, 0x1, [], "4e70c299222e66097819381bb343abce0cd64911275142f5a1a3c69a5c6b65b1e5843ae06292fce12dc393c19a6ada19d48bf68067422f4ce6743c55c3b1ee0c785fc1c04939ebfd85d9feba1e08e753c4068b2d994fd9136911073a90db40c3cbc9ea3263e1bf43bc150e2762a2349b870d6e87b9dc2150f0ef566e1a59f8e7791c4cd9c817b6ab462282cb2d55ae944b7b19dccd07f273"}, {0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x4], "6e5f404fd0948596da8177c23191cde54ffceec1da656cf7413824"}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x6, 0x3, 0x1, 0x3, 0x3, 0x8}, 0x1, {0x8f06}}}, {0x8, 0x22eb, 0x3, {{0xc, 0x2, 0x8, 0x1, 0x1, 0x1, 0x2, 0x9}, 0x2, {0x8, 0x1, 0x1, 0x3, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x3, "8edf5f57ae5f98e05555f1a69ab81a48b64c78f36458b5b2b1db59fce80a56957254b88b909e9854dabcade2538921f5e11a474cebb9be3a86f9da9bbcbd533c7a5e809fdb84adfb85c1b8683a3150146496c18fc69c34"}}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) mount$binderfs(0x0, 0x0, 0x0, 0x1880036, &(0x7f0000000100)=ANY=[@ANYBLOB='max']) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05040f20"], 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, 0x0, 0x0, 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000240)) 1.100031509s ago: executing program 3 (id=191): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000cc0)={0x40000000, 0x271, "6dfb376ec628798c49c5ecc80e6e54b479ac7abf1d150c6bf341c91308bfa82b", 0xe, 0x7, 0x7, 0x7, 0x0, 0x3ff, 0x3, 0x401, [0x0, 0x7, 0x63f1, 0x38]}) 855.960225ms ago: executing program 2 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000080)={{0x4, 0xffffffff, 0x0, 0x9a, 0x3, 0x1, 0xf, 0x0, 0x0, 0xf9, 0x0, 0x7f}, {0xd000, 0x8080000, 0x3, 0x5, 0xc2, 0xc0, 0x9, 0x66, 0xc5, 0x1, 0x30, 0x40}, {0xdddd0000, 0xdddd1000, 0x9, 0x6, 0xb, 0x34, 0xe, 0x6, 0x3, 0xc, 0x2, 0xff}, {0x8000000, 0x6000, 0xc, 0x58, 0x7f, 0x76, 0x2, 0xc, 0x7f, 0xfc, 0x9, 0xf}, {0x504ce1cb89483871, 0x1000, 0xa, 0x8f, 0x80, 0x2, 0x9, 0x3, 0x1, 0x8, 0x4, 0x6}, {0xdddd1000, 0x6000, 0x3, 0x2, 0x3, 0x7, 0x1, 0xb7, 0x2, 0x1, 0xf8, 0xd}, {0xffff1000, 0x100000, 0x10, 0x2, 0x8, 0x3, 0x6, 0x0, 0x9, 0xb, 0x6, 0x7}, {0xeeee0000, 0x5000, 0x9, 0x6, 0xff, 0x0, 0x9, 0x80, 0x9, 0x8f, 0xdb, 0x31}, {0x4000, 0x59}, {0x4, 0x7}, 0x10000, 0x0, 0x1, 0x151, 0x3, 0x1000, 0xdddd1000, [0x8, 0x3, 0x3, 0x3]}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) 846.995537ms ago: executing program 3 (id=193): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$kcm(0x11, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) ioctl$sock_SIOCETHTOOL(r0, 0x89ff, 0x0) 539.417817ms ago: executing program 5 (id=194): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 345.368057ms ago: executing program 2 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mount$bind(0x0, 0x0, 0x0, 0x2b4c47, 0xfeffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x121400, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, &(0x7f0000000000), 0x0}, 0x20) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x47, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0xfffffffd, 0x0, 0x66, 0xffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x10, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdff, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x40, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000, 0x1, 0x0, 0x80, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0xeb4b, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x20000000, 0x40000000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x0, 0x0, 0xfffffffc, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffd], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x80, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 307.719541ms ago: executing program 3 (id=196): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) read(r4, &(0x7f00000002c0)=""/153, 0x99) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) userfaultfd(0x1) 255.40186ms ago: executing program 5 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x70b67cbeee55ba84}, 0x88c1) 0s ago: executing program 0 (id=198): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000019c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f00000002c0)="ba3e54588d4df5e51c1013", 0x0, 0x1ff, 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0}, 0x50) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_wakeup_irq', 0x20940, 0x1e2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. [ 75.347680][ T5829] cgroup: Unknown subsys name 'net' [ 75.458252][ T5829] cgroup: Unknown subsys name 'cpuset' [ 75.466894][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.094312][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.181446][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.193515][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.204582][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.213244][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.214728][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.226199][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.230624][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.247697][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.249420][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.257646][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.270479][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.270900][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.284237][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.287576][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.297587][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.302997][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.316787][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.317853][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.326049][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.337038][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.340174][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.347134][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.355956][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.360785][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.377411][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.094853][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 82.219118][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 82.288627][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 82.311370][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 82.407501][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 82.537509][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.545722][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.553583][ T5843] bridge_slave_0: entered allmulticast mode [ 82.561495][ T5843] bridge_slave_0: entered promiscuous mode [ 82.617793][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.625454][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.633535][ T5843] bridge_slave_1: entered allmulticast mode [ 82.641438][ T5843] bridge_slave_1: entered promiscuous mode [ 82.668784][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.676285][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.684128][ T5842] bridge_slave_0: entered allmulticast mode [ 82.691691][ T5842] bridge_slave_0: entered promiscuous mode [ 82.745186][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.752757][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.760318][ T5842] bridge_slave_1: entered allmulticast mode [ 82.768438][ T5842] bridge_slave_1: entered promiscuous mode [ 82.775892][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.783243][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.790612][ T5850] bridge_slave_0: entered allmulticast mode [ 82.798500][ T5850] bridge_slave_0: entered promiscuous mode [ 82.825367][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.832805][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.840184][ T5844] bridge_slave_0: entered allmulticast mode [ 82.848546][ T5844] bridge_slave_0: entered promiscuous mode [ 82.870432][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.878079][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.885453][ T5850] bridge_slave_1: entered allmulticast mode [ 82.893161][ T5850] bridge_slave_1: entered promiscuous mode [ 82.904569][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.927782][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.935209][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.943154][ T5844] bridge_slave_1: entered allmulticast mode [ 82.950758][ T5844] bridge_slave_1: entered promiscuous mode [ 82.984736][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.025834][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.061044][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.068616][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.076407][ T5841] bridge_slave_0: entered allmulticast mode [ 83.084115][ T5841] bridge_slave_0: entered promiscuous mode [ 83.108471][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.122108][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.144444][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.151832][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.159566][ T5841] bridge_slave_1: entered allmulticast mode [ 83.168399][ T5841] bridge_slave_1: entered promiscuous mode [ 83.180541][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.207403][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.219782][ T5843] team0: Port device team_slave_0 added [ 83.230047][ T5843] team0: Port device team_slave_1 added [ 83.252111][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.326726][ T5842] team0: Port device team_slave_0 added [ 83.363525][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.389002][ T5842] team0: Port device team_slave_1 added [ 83.397767][ T5850] team0: Port device team_slave_0 added [ 83.405314][ T5845] Bluetooth: hci1: command tx timeout [ 83.408701][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.418156][ T5860] Bluetooth: hci4: command tx timeout [ 83.423675][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.423712][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.461199][ T5845] Bluetooth: hci3: command tx timeout [ 83.472266][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.482589][ T5845] Bluetooth: hci0: command tx timeout [ 83.482663][ T5860] Bluetooth: hci2: command tx timeout [ 83.492709][ T5844] team0: Port device team_slave_0 added [ 83.515976][ T5850] team0: Port device team_slave_1 added [ 83.523723][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.530781][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.558290][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.583491][ T5844] team0: Port device team_slave_1 added [ 83.649733][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.657171][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.684686][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.711108][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.718469][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.745581][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.773470][ T5841] team0: Port device team_slave_0 added [ 83.794140][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.801306][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.829573][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.843236][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.850256][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.876838][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.903949][ T5841] team0: Port device team_slave_1 added [ 83.911464][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.918808][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.945117][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.980795][ T5843] hsr_slave_0: entered promiscuous mode [ 83.988250][ T5843] hsr_slave_1: entered promiscuous mode [ 84.009547][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.017092][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.043647][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.118155][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.126256][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.152505][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.206606][ T5842] hsr_slave_0: entered promiscuous mode [ 84.213546][ T5842] hsr_slave_1: entered promiscuous mode [ 84.220037][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 84.226232][ T5842] Cannot create hsr debugfs directory [ 84.233687][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.240774][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.267231][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.335122][ T5844] hsr_slave_0: entered promiscuous mode [ 84.341838][ T5844] hsr_slave_1: entered promiscuous mode [ 84.349117][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 84.354900][ T5844] Cannot create hsr debugfs directory [ 84.370004][ T5850] hsr_slave_0: entered promiscuous mode [ 84.377205][ T5850] hsr_slave_1: entered promiscuous mode [ 84.384004][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 84.389776][ T5850] Cannot create hsr debugfs directory [ 84.621578][ T5841] hsr_slave_0: entered promiscuous mode [ 84.629348][ T5841] hsr_slave_1: entered promiscuous mode [ 84.636325][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 84.642322][ T5841] Cannot create hsr debugfs directory [ 85.147822][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.161751][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.174125][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.198264][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.287072][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.304449][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.328012][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.340106][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.467333][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.482174][ T5860] Bluetooth: hci4: command tx timeout [ 85.482193][ T5845] Bluetooth: hci1: command tx timeout [ 85.488176][ T5860] Bluetooth: hci3: command tx timeout [ 85.506366][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.520018][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.539974][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.563391][ T5860] Bluetooth: hci2: command tx timeout [ 85.563703][ T5845] Bluetooth: hci0: command tx timeout [ 85.617348][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.692987][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.706656][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.741602][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.755551][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.774976][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.840725][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.848339][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.859153][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.866628][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.944279][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.958794][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.976971][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.993618][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.020580][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.127225][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.177224][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.185342][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.249818][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.257334][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.346291][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.503590][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.531178][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.571609][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.593206][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.600375][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.658122][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.670627][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.678053][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.744640][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.770902][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.778661][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.831514][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.838890][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.853707][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.860942][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.873903][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.916767][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.924196][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.023993][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.360571][ T5843] veth0_vlan: entered promiscuous mode [ 87.475539][ T5843] veth1_vlan: entered promiscuous mode [ 87.563968][ T5860] Bluetooth: hci1: command tx timeout [ 87.564053][ T5845] Bluetooth: hci4: command tx timeout [ 87.569776][ T5860] Bluetooth: hci3: command tx timeout [ 87.646006][ T51] Bluetooth: hci2: command tx timeout [ 87.651621][ T5860] Bluetooth: hci0: command tx timeout [ 87.836477][ T5843] veth0_macvtap: entered promiscuous mode [ 87.906492][ T5843] veth1_macvtap: entered promiscuous mode [ 87.976128][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.004086][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.048404][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.060153][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.099503][ T179] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.109658][ T179] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.130884][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.142561][ T179] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.154434][ T179] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.210082][ T5842] veth0_vlan: entered promiscuous mode [ 88.281306][ T5842] veth1_vlan: entered promiscuous mode [ 88.402151][ T5841] veth0_vlan: entered promiscuous mode [ 88.420701][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.429446][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.464520][ T5841] veth1_vlan: entered promiscuous mode [ 88.502209][ T5850] veth0_vlan: entered promiscuous mode [ 88.544396][ T5844] veth0_vlan: entered promiscuous mode [ 88.553702][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.565002][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.576958][ T5842] veth0_macvtap: entered promiscuous mode [ 88.597738][ T5850] veth1_vlan: entered promiscuous mode [ 88.613282][ T5842] veth1_macvtap: entered promiscuous mode [ 88.662864][ T5844] veth1_vlan: entered promiscuous mode [ 88.673013][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.741144][ T5841] veth0_macvtap: entered promiscuous mode [ 88.765926][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.787455][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.799353][ T5841] veth1_macvtap: entered promiscuous mode [ 88.854439][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.864640][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.885624][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.914083][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.929137][ T5850] veth0_macvtap: entered promiscuous mode [ 88.978895][ T5844] veth0_macvtap: entered promiscuous mode [ 89.004304][ T5968] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 89.004304][ T5968] program syz.1.2 not setting count and/or reply_len properly [ 89.029581][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.041002][ T5844] veth1_macvtap: entered promiscuous mode [ 89.060887][ T5850] veth1_macvtap: entered promiscuous mode [ 89.104070][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.157668][ T3466] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.174949][ T3466] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.216748][ T3466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.229402][ T3466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.280149][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.306846][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.333473][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.344816][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.397981][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.440395][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.522981][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.536095][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.536725][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.575041][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.590405][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.632462][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.642846][ T5860] Bluetooth: hci4: command tx timeout [ 89.649157][ T51] Bluetooth: hci1: command tx timeout [ 89.649612][ T5845] Bluetooth: hci3: command tx timeout [ 89.697443][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.716868][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.726609][ T5845] Bluetooth: hci0: command tx timeout [ 89.726646][ T5845] Bluetooth: hci2: command tx timeout [ 89.797011][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.822103][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.846955][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.880448][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.107893][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.294168][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.171021][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.209182][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.418033][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.435531][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.458049][ T5979] Zero length message leads to an empty skb [ 91.509142][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.525488][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.534846][ T5981] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.683317][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.717210][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.925826][ T5983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.450036][ T2093] cfg80211: failed to load regulatory.db [ 92.639776][ T5992] netlink: zone id is out of range [ 92.645465][ T5992] netlink: zone id is out of range [ 92.650755][ T5992] netlink: zone id is out of range [ 92.656237][ T5992] netlink: zone id is out of range [ 92.662405][ T5992] netlink: zone id is out of range [ 92.667692][ T5992] netlink: zone id is out of range [ 92.673296][ T5992] netlink: zone id is out of range [ 92.678647][ T5992] netlink: zone id is out of range [ 92.685775][ T5992] netlink: zone id is out of range [ 92.716820][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 92.739616][ T5992] netlink: zone id is out of range [ 94.037102][ T6002] netlink: 72 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.102573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.358876][ T6017] overlayfs: missing 'workdir' [ 96.922048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.662615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.825259][ T6035] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 99.825259][ T6035] program syz.4.16 not setting count and/or reply_len properly [ 102.562874][ T6060] netlink: 72 bytes leftover after parsing attributes in process `syz.3.24'. [ 103.895726][ T6058] net_ratelimit: 11 callbacks suppressed [ 103.895741][ T6058] netlink: zone id is out of range [ 103.906607][ T6058] netlink: zone id is out of range [ 103.912303][ T6058] netlink: zone id is out of range [ 103.917421][ T6058] netlink: zone id is out of range [ 103.922562][ T6058] netlink: zone id is out of range [ 103.927674][ T6058] netlink: zone id is out of range [ 103.932849][ T6058] netlink: zone id is out of range [ 103.937983][ T6058] netlink: zone id is out of range [ 103.943302][ T6058] netlink: zone id is out of range [ 103.948423][ T6058] netlink: zone id is out of range [ 103.971518][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 105.223009][ T6078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.722275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 111.236809][ T6107] netlink: 72 bytes leftover after parsing attributes in process `syz.2.35'. [ 113.047864][ T6115] syz.2.36 uses obsolete (PF_INET,SOCK_PACKET) [ 113.338338][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 113.351644][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 113.360656][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 113.370774][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 113.381033][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 113.555109][ T6121] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.562883][ T6121] overlayfs: failed to set xattr on upper [ 113.591757][ T6121] overlayfs: ...falling back to redirect_dir=nofollow. [ 113.599053][ T6121] overlayfs: ...falling back to index=off. [ 113.605362][ T6121] overlayfs: ...falling back to uuid=null. [ 113.611318][ T6121] overlayfs: maximum fs stacking depth exceeded [ 115.157786][ T6125] program syz.0.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.371659][ T30] audit: type=1800 audit(1773910130.643:2): pid=6125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.39" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 115.494488][ T5845] Bluetooth: hci5: command tx timeout [ 116.488686][ T1111] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.642177][ T6142] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 116.651513][ T6142] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 116.929572][ T6147] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 116.939117][ T6147] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 117.572953][ T5845] Bluetooth: hci5: command tx timeout [ 117.730549][ T1111] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.119422][ T6160] net_ratelimit: 11 callbacks suppressed [ 118.119443][ T6160] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 118.744422][ T1111] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.062793][ T6165] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 119.069919][ T6165] overlayfs: failed to set xattr on upper [ 119.076020][ T6165] overlayfs: ...falling back to redirect_dir=nofollow. [ 119.083209][ T6165] overlayfs: ...falling back to index=off. [ 119.089130][ T6165] overlayfs: ...falling back to uuid=null. [ 119.095262][ T6165] overlayfs: maximum fs stacking depth exceeded [ 119.534097][ T1111] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.054708][ T6170] overlayfs: missing 'workdir' [ 120.844733][ T5845] Bluetooth: hci5: command tx timeout [ 122.037706][ T6180] program syz.1.51 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.050937][ T30] audit: type=1800 audit(1773910137.483:3): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.51" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 122.430116][ T6117] chnl_net:caif_netlink_parms(): no params data found [ 122.546508][ T1111] bridge_slave_1: left allmulticast mode [ 122.568432][ T1111] bridge_slave_1: left promiscuous mode [ 122.585981][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.922199][ T5845] Bluetooth: hci5: command tx timeout [ 124.170504][ T6206] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 124.181348][ T6206] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 124.664929][ T1111] bridge_slave_0: left allmulticast mode [ 124.724678][ T1111] bridge_slave_0: left promiscuous mode [ 124.755856][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.522230][ T6219] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 125.532342][ T6219] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 126.550656][ T6231] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 127.423875][ T6232] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 127.431483][ T6232] overlayfs: failed to set xattr on upper [ 127.443165][ T6232] overlayfs: ...falling back to redirect_dir=nofollow. [ 127.451028][ T6232] overlayfs: ...falling back to index=off. [ 127.457336][ T6232] overlayfs: ...falling back to uuid=null. [ 127.463464][ T6232] overlayfs: maximum fs stacking depth exceeded [ 128.352137][ T6237] overlayfs: missing 'lowerdir' [ 129.247836][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.305841][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.331252][ T1111] bond0 (unregistering): Released all slaves [ 130.042811][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.068230][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.096178][ T6117] bridge_slave_0: entered allmulticast mode [ 130.179667][ T6117] bridge_slave_0: entered promiscuous mode [ 130.293875][ T6254] program syz.1.65 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.359224][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.383390][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.415295][ T6117] bridge_slave_1: entered allmulticast mode [ 130.439208][ T6117] bridge_slave_1: entered promiscuous mode [ 130.700602][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.764396][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.966315][ T1111] hsr_slave_0: left promiscuous mode [ 130.987446][ T1111] hsr_slave_1: left promiscuous mode [ 131.014772][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.459292][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.488340][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.511487][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.615030][ T1111] veth1_macvtap: left promiscuous mode [ 131.651677][ T1111] veth0_macvtap: left promiscuous mode [ 131.674699][ T1111] veth1_vlan: left promiscuous mode [ 131.694453][ T1111] veth0_vlan: left promiscuous mode [ 132.727477][ T6278] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 132.737192][ T6278] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 132.892463][ T6279] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 132.902248][ T6279] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 133.129535][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.142255][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.532745][ T6284] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 135.773568][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 136.658342][ T6299] overlayfs: missing 'lowerdir' [ 137.062273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 137.706470][ T6302] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 137.713852][ T6302] overlayfs: failed to set xattr on upper [ 137.719702][ T6302] overlayfs: ...falling back to redirect_dir=nofollow. [ 137.727166][ T6302] overlayfs: ...falling back to index=off. [ 137.733531][ T6302] overlayfs: ...falling back to uuid=null. [ 137.739638][ T6302] overlayfs: maximum fs stacking depth exceeded [ 138.036063][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 139.593644][ T6117] team0: Port device team_slave_0 added [ 139.720701][ T6117] team0: Port device team_slave_1 added [ 139.938180][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.960454][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.006140][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.036748][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.070549][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.185802][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.444914][ T6328] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 142.182264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 142.591923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 142.647950][ T6117] hsr_slave_0: entered promiscuous mode [ 142.750566][ T6117] hsr_slave_1: entered promiscuous mode [ 142.883736][ T6117] debugfs: 'hsr0' already exists in 'hsr' [ 142.896489][ T6117] Cannot create hsr debugfs directory [ 142.948439][ T6337] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 142.958628][ T6337] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 143.454268][ T6341] overlayfs: missing 'lowerdir' [ 144.706189][ T6350] program syz.3.84 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.911787][ T30] audit: type=1800 audit(1773910160.333:4): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.84" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 145.220637][ T6358] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 145.228115][ T6358] overlayfs: failed to set xattr on upper [ 145.234232][ T6358] overlayfs: ...falling back to redirect_dir=nofollow. [ 145.241466][ T6358] overlayfs: ...falling back to index=off. [ 145.247701][ T6358] overlayfs: ...falling back to uuid=null. [ 145.253867][ T6358] overlayfs: maximum fs stacking depth exceeded [ 145.303160][ T6117] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.604731][ T6117] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.643386][ T6117] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.679335][ T6117] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 146.094766][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.214391][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.313771][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.321137][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.813529][ T6378] overlayfs: missing 'lowerdir' [ 147.302335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 148.203333][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.210893][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.385995][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 152.675692][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.343808][ T6423] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 154.360619][ T6423] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 156.216875][ T6444] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 156.226471][ T6444] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.844286][ T6117] veth0_vlan: entered promiscuous mode [ 157.920291][ T6117] veth1_vlan: entered promiscuous mode [ 158.145136][ T6117] veth0_macvtap: entered promiscuous mode [ 158.182973][ T6117] veth1_macvtap: entered promiscuous mode [ 158.329033][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.417558][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.479046][ T1115] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.525923][ T1115] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.551365][ T1115] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.598192][ T1115] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.644914][ T6454] program syz.2.100 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.825568][ T30] audit: type=1800 audit(1773910174.233:5): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.100" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 159.054658][ T6460] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 159.062141][ T6460] overlayfs: failed to set xattr on upper [ 159.067966][ T6460] overlayfs: ...falling back to redirect_dir=nofollow. [ 159.075042][ T6460] overlayfs: ...falling back to index=off. [ 159.134422][ T6460] overlayfs: ...falling back to uuid=null. [ 159.141296][ T6460] overlayfs: maximum fs stacking depth exceeded [ 159.559487][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.578000][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.980207][ T6207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.038972][ T6207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.889221][ T6482] program syz.5.37 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.967976][ T30] audit: type=1800 audit(1773910177.343:6): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.37" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 164.828448][ T6497] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 164.837947][ T6497] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 165.631991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 167.330915][ T6511] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 167.559029][ T5849] IPVS: starting estimator thread 0... [ 167.666772][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 167.692877][ T6515] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 167.701193][ T6515] overlayfs: failed to set xattr on upper [ 167.707554][ T6515] overlayfs: ...falling back to redirect_dir=nofollow. [ 167.717354][ T6515] overlayfs: ...falling back to index=off. [ 167.725280][ T6515] overlayfs: ...falling back to uuid=null. [ 167.733772][ T6517] IPVS: using max 27 ests per chain, 64800 per kthread [ 167.742376][ T6515] overlayfs: maximum fs stacking depth exceeded [ 167.887092][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 168.015940][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 168.177955][ T24] usb 3-1: config index 0 descriptor too short (expected 38808, got 36) [ 168.328658][ T24] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.462604][ T24] usb 3-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.700375][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 168.725635][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.40 [ 168.762281][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.803474][ T24] usb 3-1: Product: syz [ 168.829658][ T24] usb 3-1: Manufacturer: syz [ 168.848455][ T24] usb 3-1: SerialNumber: syz [ 169.119117][ T6528] program syz.5.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.266479][ T6531] overlayfs: missing 'workdir' [ 169.772911][ T24] usbhid 3-1:1.0: fixing wrong optional hid class descriptors count [ 169.840005][ T24] usbhid 3-1:1.0: can't add hid device: -22 [ 169.862777][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 170.036060][ T24] usb 3-1: USB disconnect, device number 2 [ 172.230645][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 173.445049][ T9] IPVS: starting estimator thread 0... [ 173.552276][ T6574] IPVS: using max 29 ests per chain, 69600 per kthread [ 173.920250][ T6580] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 173.933221][ T6580] overlayfs: failed to set xattr on upper [ 173.939111][ T6580] overlayfs: ...falling back to redirect_dir=nofollow. [ 173.946386][ T6580] overlayfs: ...falling back to index=off. [ 173.952952][ T6580] overlayfs: ...falling back to uuid=null. [ 173.979840][ T6580] overlayfs: maximum fs stacking depth exceeded [ 175.277553][ T6598] overlayfs: missing 'workdir' [ 178.639667][ T6628] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 179.320314][ T6614] program syz.3.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.244395][ T6046] IPVS: starting estimator thread 0... [ 180.344529][ T6649] IPVS: using max 26 ests per chain, 62400 per kthread [ 181.595152][ T2093] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 181.821453][ T2093] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 181.851568][ T2093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.866150][ T6046] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 181.876301][ T2093] usb 1-1: Product: syz [ 181.882715][ T2093] usb 1-1: Manufacturer: syz [ 181.904443][ T2093] usb 1-1: SerialNumber: syz [ 182.042101][ T6046] usb 2-1: Using ep0 maxpacket: 16 [ 182.072383][ T6046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 182.102128][ T6046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 182.138122][ T6046] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 182.158299][ T6046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.179838][ T6046] usb 2-1: Product: syz [ 182.189929][ T6046] usb 2-1: Manufacturer: syz [ 182.204477][ T6046] usb 2-1: SerialNumber: syz [ 182.255611][ T6046] usb 2-1: config 0 descriptor?? [ 182.414557][ T2093] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 182.421302][ T6046] hub 2-1:0.0: bad descriptor, ignoring hub [ 182.775462][ T6046] hub 2-1:0.0: probe with driver hub failed with error -5 [ 182.806128][ T2093] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 182.859131][ T6046] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 183.891818][ T2093] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 183.953214][ T2093] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 184.012840][ T6046] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 184.098356][ T6046] usb 2-1: USB disconnect, device number 2 [ 184.307978][ T6707] udevd[6707]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.437395][ T2093] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 184.522671][ T2093] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 184.537096][ T2093] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 184.611819][ T2093] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 184.730943][ T2093] usb 1-1: USB disconnect, device number 2 [ 186.022535][ T6729] program syz.2.158 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.138945][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.163'. [ 191.780140][ T6766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.296427][ T6784] program syz.5.174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.213864][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 193.394758][ T24] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 193.419570][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.547071][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.561614][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.572805][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.591633][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.613555][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.621697][ T6796] netlink: 72 bytes leftover after parsing attributes in process `syz.1.179'. [ 193.644313][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.663682][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.714748][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.738676][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.757040][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.770238][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.790405][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.817214][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.846684][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.861458][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.873799][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.885371][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.895283][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.907849][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.920871][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 193.929558][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 193.940823][ T24] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 193.971278][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 194.012221][ T2093] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 194.027845][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 194.054339][ T24] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 194.101759][ T24] usb 4-1: Product: syz [ 194.117598][ T24] usb 4-1: Manufacturer: syz [ 194.125520][ T24] usb 4-1: SerialNumber: syz [ 194.159118][ T24] usb 4-1: config 0 descriptor?? [ 194.210667][ T2093] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.235143][ T2093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.248112][ T2093] usb 1-1: Product: syz [ 194.257275][ T2093] usb 1-1: Manufacturer: syz [ 194.266685][ T2093] usb 1-1: SerialNumber: syz [ 194.436186][ T24] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 194.463704][ T2093] usb 1-1: config 0 descriptor?? [ 194.515151][ T24] usb 4-1: USB disconnect, device number 2 [ 194.542061][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.549361][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.561291][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 194.602302][ T24] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 194.686221][ T2093] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.722015][ T5918] usb 6-1: Using ep0 maxpacket: 16 [ 194.740300][ T5918] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 194.775513][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.022498][ T5918] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.042024][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.059242][ T5918] usb 6-1: Product: syz [ 195.063718][ T5918] usb 6-1: Manufacturer: syz [ 195.068584][ T5918] usb 6-1: SerialNumber: syz [ 195.112201][ T5918] usb 6-1: config 0 descriptor?? [ 195.145886][ T5918] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.162312][ T5918] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 195.617559][ T6826] ======================================================= [ 195.617559][ T6826] WARNING: The mand mount option has been deprecated and [ 195.617559][ T6826] and is ignored by this kernel. Remove the mand [ 195.617559][ T6826] option from the mount to silence this warning. [ 195.617559][ T6826] ======================================================= [ 195.816533][ T6826] overlayfs: failed to resolve './file0/file0': -2 [ 196.178984][ T5918] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 196.195330][ T5918] em28xx 6-1:0.0: Config register raw data: 0xab [ 196.204460][ T5918] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 196.210836][ T5918] em28xx 6-1:0.0: No AC97 audio processor [ 196.415048][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 196.969425][ T5918] usb 6-1: USB disconnect, device number 2 [ 197.429180][ T2093] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 197.462305][ T2093] usb 1-1: USB disconnect, device number 3 [ 198.144758][ T6854] node ffff88806950e680 offset 0 parent ffff88806950e3c0 shift 0 count 1 values 0 array ffff88802958cce0 list ffff88806950e698 ffff88806950e698 marks 0 0 0 [ 198.352290][ T6854] ------------[ cut here ]------------ [ 198.357932][ T6854] kernel BUG at ./include/linux/xarray.h:1441! [ 198.408722][ T6854] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 198.415022][ T6854] CPU: 0 UID: 0 PID: 6854 Comm: syz.2.195 Not tainted syzkaller #0 PREEMPT(full) [ 198.424225][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.434369][ T6854] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 198.440385][ T6854] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 198.460278][ T6854] RSP: 0018:ffffc90005ab6e20 EFLAGS: 00010246 [ 198.466403][ T6854] RAX: 0000000000000000 RBX: ffff88806950e680 RCX: d6e6945ce2ce7600 [ 198.474548][ T6854] RDX: ffffc900065b2000 RSI: 0000000000006032 RDI: 0000000000006033 [ 198.482523][ T6854] RBP: ffffc90005ab7130 R08: ffffc90005ab6ba7 R09: 1ffff92000b56d74 [ 198.490501][ T6854] R10: dffffc0000000000 R11: fffff52000b56d75 R12: ffffea000134f070 [ 198.498592][ T6854] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90005ab7010 [ 198.506764][ T6854] FS: 00007f26fe9966c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 198.515888][ T6854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 198.522561][ T6854] CR2: 00007fdb7181bff8 CR3: 000000001ca98000 CR4: 00000000003526f0 [ 198.530573][ T6854] Call Trace: [ 198.533855][ T6854] [ 198.536833][ T6854] ? collapse_scan_file+0x1c1/0x5230 [ 198.542256][ T6854] ? lockdep_hardirqs_on+0x7a/0x110 [ 198.547485][ T6854] ? __pfx_collapse_scan_file+0x10/0x10 [ 198.553164][ T6854] ? wake_up_q+0x99/0xd0 [ 198.557412][ T6854] ? preempt_schedule_thunk+0x16/0x30 [ 198.562888][ T6854] ? preempt_schedule_common+0x82/0xd0 [ 198.568351][ T6854] ? preempt_schedule_thunk+0x16/0x30 [ 198.573738][ T6854] ? __up_read+0x2fe/0x6b0 [ 198.578164][ T6854] ? __pfx___up_read+0x10/0x10 [ 198.582967][ T6854] collapse_single_pmd+0x22b/0x4510 [ 198.588181][ T6854] ? lockdep_hardirqs_on+0x7a/0x110 [ 198.593402][ T6854] ? debug_object_free+0x2d7/0x490 [ 198.598555][ T6854] ? __flush_work+0xa26/0xc50 [ 198.603245][ T6854] ? __pfx_collapse_single_pmd+0x10/0x10 [ 198.608899][ T6854] ? __flush_work+0x100/0xc50 [ 198.613616][ T6854] ? madvise_collapse+0x18c/0x820 [ 198.618827][ T6854] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 198.624553][ T6854] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.630539][ T6854] madvise_collapse+0x34c/0x820 [ 198.635394][ T6854] madvise_vma_behavior+0x1094/0x4460 [ 198.640962][ T6854] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.645988][ T6854] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 198.651723][ T6854] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.656868][ T6854] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 198.662253][ T6854] ? debug_object_assert_init+0x209/0x370 [ 198.667993][ T6854] ? rcu_is_watching+0x15/0xb0 [ 198.672767][ T6854] ? trace_hrtimer_start+0x82/0x230 [ 198.678071][ T6854] ? finish_task_switch+0x41f/0xbe0 [ 198.683277][ T6854] ? lockdep_hardirqs_on+0x7a/0x110 [ 198.688482][ T6854] ? finish_task_switch+0x41f/0xbe0 [ 198.693793][ T6854] ? rcu_is_watching+0x15/0xb0 [ 198.698758][ T6854] ? trace_sched_exit_tp+0x3a/0x150 [ 198.704154][ T6854] ? __schedule+0x167b/0x5590 [ 198.709020][ T6854] ? mas_prev_slot+0xb7b/0xbf0 [ 198.713847][ T6854] ? find_vma_prev+0x123/0x1b0 [ 198.718629][ T6854] ? __pfx_find_vma_prev+0x10/0x10 [ 198.723836][ T6854] ? futex_unqueue+0x22/0x240 [ 198.728621][ T6854] ? __futex_wait+0x371/0x420 [ 198.733479][ T6854] madvise_walk_vmas+0x573/0xae0 [ 198.738435][ T6854] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 198.743996][ T6854] ? blk_start_plug+0x6e/0x1b0 [ 198.748770][ T6854] madvise_do_behavior+0x386/0x540 [ 198.753887][ T6854] ? __pfx_madvise_do_behavior+0x10/0x10 [ 198.759572][ T6854] ? down_read+0x270/0x2e0 [ 198.764167][ T6854] ? madvise_lock+0x146/0x2e0 [ 198.768865][ T6854] do_madvise+0x1fa/0x2e0 [ 198.773280][ T6854] ? __pfx_do_madvise+0x10/0x10 [ 198.778755][ T6854] ? __se_sys_futex+0x3a8/0x450 [ 198.784091][ T6854] ? rcu_is_watching+0x15/0xb0 [ 198.788949][ T6854] __x64_sys_madvise+0xa6/0xc0 [ 198.794234][ T6854] do_syscall_64+0x14d/0xf80 [ 198.798959][ T6854] ? trace_irq_disable+0x3b/0x150 [ 198.804021][ T6854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.810178][ T6854] ? clear_bhb_loop+0x40/0x90 [ 198.815075][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.821071][ T6854] RIP: 0033:0x7f26fdb9c799 [ 198.825497][ T6854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.845282][ T6854] RSP: 002b:00007f26fe996028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 198.853797][ T6854] RAX: ffffffffffffffda RBX: 00007f26fde15fa0 RCX: 00007f26fdb9c799 [ 198.861958][ T6854] RDX: 0000000000000019 RSI: 0000000000600722 RDI: 0000200000000000 [ 198.869941][ T6854] RBP: 00007f26fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 198.878173][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.886233][ T6854] R13: 00007f26fde16038 R14: 00007f26fde15fa0 R15: 00007ffeeabd4e18 [ 198.894243][ T6854] [ 198.897269][ T6854] Modules linked in: [ 198.902509][ T6854] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.979830][ T6854] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 199.102007][ T6854] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 199.140938][ T6854] RSP: 0018:ffffc90005ab6e20 EFLAGS: 00010246 [ 199.158926][ T6854] RAX: 0000000000000000 RBX: ffff88806950e680 RCX: d6e6945ce2ce7600 [ 199.178481][ T6854] RDX: ffffc900065b2000 RSI: 0000000000006032 RDI: 0000000000006033 [ 199.211054][ T6854] RBP: ffffc90005ab7130 R08: ffffc90005ab6ba7 R09: 1ffff92000b56d74 [ 199.231972][ T6854] R10: dffffc0000000000 R11: fffff52000b56d75 R12: ffffea000134f070 [ 199.281418][ T6854] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90005ab7010 [ 199.336525][ T6854] FS: 00007f26fe9966c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 199.391946][ T6854] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.448341][ T6852] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#2] SMP KASAN PTI [ 199.460308][ T6852] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 199.469115][ T6852] CPU: 0 UID: 0 PID: 6852 Comm: syz.2.195 Tainted: G D syzkaller #0 PREEMPT(full) [ 199.480177][ T6852] Tainted: [D]=DIE [ 199.483932][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 199.494202][ T6852] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 199.499706][ T6852] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 199.519523][ T6852] RSP: 0018:ffffc90005a8f9a0 EFLAGS: 00010006 [ 199.525698][ T6852] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 199.533850][ T6852] RDX: 1ffff92000b51f40 RSI: 0000000000000000 RDI: ffff88807e7d34d0 [ 199.542009][ T6852] RBP: ffffc90005a8faa0 R08: 0000000000000003 R09: 0000000000000004 [ 199.550652][ T6852] R10: dffffc0000000000 R11: fffff52000b51f50 R12: 0000000000000000 [ 199.558833][ T6852] R13: ffff88807e7d34d0 R14: 0000000000000018 R15: ffffc90005a8fc20 [ 199.566823][ T6852] FS: 0000555573606500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 199.575843][ T6852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.582428][ T6852] CR2: 00005557fb12dee8 CR3: 000000001ca98000 CR4: 00000000003526f0 [ 199.590417][ T6852] Call Trace: [ 199.593717][ T6852] [ 199.596924][ T6852] ? __lock_acquire+0x6b5/0x2cf0 [ 199.601875][ T6852] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 199.607171][ T6852] ? do_raw_spin_lock+0x12b/0x2f0 [ 199.612201][ T6852] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 199.617576][ T6852] rwsem_del_wake_waiter+0x25d/0x2e0 [ 199.622866][ T6852] rwsem_down_write_slowpath+0xa6f/0x1080 [ 199.628604][ T6852] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 199.634594][ T6852] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 199.640838][ T6852] ? futex_wake+0x4ac/0x580 [ 199.645359][ T6852] ? __pfx_futex_wait+0x10/0x10 [ 199.650313][ T6852] ? vm_mmap_pgoff+0x234/0x4f0 [ 199.655161][ T6852] down_write_killable+0x1eb/0x240 [ 199.660557][ T6852] ? __pfx_down_write_killable+0x10/0x10 [ 199.666206][ T6852] ? apparmor_mmap_file+0x197/0x3e0 [ 199.671503][ T6852] ? security_mmap_file+0x4df/0xa20 [ 199.676738][ T6852] vm_mmap_pgoff+0x234/0x4f0 [ 199.681341][ T6852] ? __se_sys_futex+0x3a8/0x450 [ 199.686282][ T6852] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 199.691759][ T6852] ? __pfx___se_sys_futex+0x10/0x10 [ 199.697040][ T6852] ? rcu_is_watching+0x15/0xb0 [ 199.701828][ T6852] ? ksys_mmap_pgoff+0xf3/0x760 [ 199.707107][ T6852] ? __x64_sys_mmap+0x7f/0x140 [ 199.712097][ T6852] do_syscall_64+0x14d/0xf80 [ 199.716732][ T6852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.722849][ T6852] ? clear_bhb_loop+0x40/0x90 [ 199.727790][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.733684][ T6852] RIP: 0033:0x7f26fdb9c502 [ 199.738105][ T6852] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 199.757900][ T6852] RSP: 002b:00007ffeeabd4da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 199.766854][ T6852] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f26fdb9c502 [ 199.775008][ T6852] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 199.783166][ T6852] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 199.791135][ T6852] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffeeabd4f10 [ 199.799282][ T6852] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 199.807443][ T6852] [ 199.810467][ T6852] Modules linked in: [ 199.814448][ T6852] ---[ end trace 0000000000000000 ]--- [ 199.819907][ T6852] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 199.825909][ T6852] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 199.845692][ T6852] RSP: 0018:ffffc90005ab6e20 EFLAGS: 00010246 [ 199.851862][ T6852] RAX: 0000000000000000 RBX: ffff88806950e680 RCX: d6e6945ce2ce7600 [ 199.860120][ T6852] RDX: ffffc900065b2000 RSI: 0000000000006032 RDI: 0000000000006033 [ 199.868715][ T6852] RBP: ffffc90005ab7130 R08: ffffc90005ab6ba7 R09: 1ffff92000b56d74 [ 199.876864][ T6852] R10: dffffc0000000000 R11: fffff52000b56d75 R12: ffffea000134f070 [ 199.884920][ T6852] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90005ab7010 [ 199.892979][ T6852] FS: 0000555573606500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 199.901922][ T6852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.908527][ T6852] CR2: 00005557fb12dee8 CR3: 000000001ca98000 CR4: 00000000003526f0 [ 199.916531][ T6852] Kernel panic - not syncing: Fatal exception [ 199.923097][ T6852] Kernel Offset: disabled [ 199.927423][ T6852] Rebooting in 86400 seconds..