last executing test programs: 19.765800365s ago: executing program 1 (id=180): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x28, 0x801, 0x0) shutdown(r4, 0x1) 15.259742157s ago: executing program 4 (id=189): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x224e, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x5, 0x0, 0x0, 0xefdde095b55cd7ee, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000b40)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000004c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0x1, 0x3fff}) 15.091893826s ago: executing program 1 (id=190): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x402, 0x0) r2 = dup2(r1, r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000180)={0xfffff374, 0x1}) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x90) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) rename(&(0x7f0000000380)='./file1\x00', &(0x7f0000000240)='./file3\x00') 13.633739112s ago: executing program 1 (id=192): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) r7 = eventfd2(0x1, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000080)=r7, 0x1) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) 13.549943415s ago: executing program 4 (id=193): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$usbfs(0x0, 0x205, 0x8401) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 12.262277782s ago: executing program 1 (id=195): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_emit_vhci(0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x29, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000000c0)={0xfb, 0x8e1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x47], 0xeeee8000, 0x202}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.032198463s ago: executing program 0 (id=198): socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r3, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 9.958580325s ago: executing program 2 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) 9.621724822s ago: executing program 0 (id=200): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x202, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0xfffffffffffffff1, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000007, 0xb06c}, 0x0, 0x0) 8.530765066s ago: executing program 1 (id=201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) socket$netlink(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000100)="65dc348b93ad260f20e06635000010000f22e00fc79e0e003e660f71f576660f388283abd93665c0a9c12e0e363e0fec2b66b95f0b00000f32660fc735", 0x3d}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x100000, 0x0, {}, 0x0, 0x6}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.418857379s ago: executing program 2 (id=202): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="8510000001000000950000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000128850000007600000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 7.948209475s ago: executing program 2 (id=204): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)}], 0x1) mprotect(&(0x7f000026f000/0x3000)=nil, 0x3000, 0x200000c) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000340), 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x3c, r4, 0x211, 0x4, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x804) 6.592728541s ago: executing program 0 (id=206): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, 0x0, 0x0, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.456615103s ago: executing program 3 (id=207): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r3, &(0x7f0000000040)="3c5c2d3ecd45036a2762bb626c65640a", 0x10) 6.349061905s ago: executing program 1 (id=208): openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FITRIM(r1, 0xc0185879, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) socket$inet_mptcp(0x2, 0x1, 0x106) unlinkat(0xffffffffffffffff, 0x0, 0x0) 6.320013719s ago: executing program 2 (id=209): prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x406, r1) read$FUSE(r2, 0x0, 0x0) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) 6.119085407s ago: executing program 4 (id=210): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.323936393s ago: executing program 3 (id=211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x6, 0x7, 0x200, 0x4, 0x8, 0x8ed, 0x10, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8810) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0x4, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048800}, 0x20000000) 4.698545244s ago: executing program 4 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20000014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r3, 0x5, 0x9, 0x6, 0x80, 0x5, 0x1, 0x7f, {0x0, @in={{0x2, 0x4e21, @multicast1}}, 0x5, 0x5, 0x93e, 0x4, 0x9}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100), 0x4) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 4.697590309s ago: executing program 0 (id=213): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='\xd9\xeb\x00F\xb4\xa1\x97\x7fu8X\xaaj\x95\'\x8aC\x16\xca\\J\x85 \xd7/\x7f\x9cMTm\x97\xd8#\x9c\n\x88{\xf3t\xbb\x88\\\xe3\xdeA\xa9a\xa6\x1c\x19:;u', &(0x7f0000000c40)='\xea\xff\xff\xff\xff\xff\xff\xff%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x13\xb9\x0e\xb5\xd2\xcb\xcdF\xbb#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x205, 0x8401) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.291331969s ago: executing program 2 (id=215): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, r2, 0x5, 0x0, 0x1fffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x34}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x44, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x8001) r7 = getpgid(0x0) fcntl$setownex(r6, 0xf, &(0x7f0000000140)={0x1, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x41}}, 0x14) sendmmsg$unix(r5, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) 3.290722486s ago: executing program 0 (id=216): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044004) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') pread64(r3, &(0x7f0000000000)=""/37, 0x25, 0x10001) 3.289920513s ago: executing program 3 (id=217): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000440)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0x2) socket$rxrpc(0x21, 0x2, 0x0) getsockopt(r4, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) 3.289089603s ago: executing program 4 (id=218): r0 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x1f0, 0x258, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [0x4e22], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], 0x0, [], 0x0, 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00', {}, {}, 0x29}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x6}, {0x1, 0x3, 0x3}, {0x2, 0x3, 0x2}, 0x9, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) memfd_create(&(0x7f0000000480)='[tP\vx\'\xa5)\x1a\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x1c\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb:(\xb5\xe1jW\xd6\x91\x82\t%\x80|\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\x16\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x99\x83\xcd\b\xd1\x02B\xae\x80z8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) 3.044981042s ago: executing program 2 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.848331295s ago: executing program 4 (id=220): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc010) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto(r2, &(0x7f0000000700)='ab', 0xfffffcf4, 0x0, 0x0, 0x0) 1.852419297s ago: executing program 3 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000450001000200080004000000030000000400cb80100001800c00108008000200050000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 1.509745091s ago: executing program 0 (id=222): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./backing_file\x00', 0x42, 0x1ed) ftruncate(r0, 0x1000000) close(r0) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r1, &(0x7f0000000480)='./backing_fi', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) write(0xffffffffffffffff, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') 0s ago: executing program 3 (id=223): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001000)=0x8) r0 = getpid() ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0xe0, {0xa000, 0xffffffff, 0x89511, 0x871}}) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040), 0x59, 0x200) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@overlay={0x5, 0x3, 0x4, 0x400, 0xffffff7f, {}, {0x883e6d071e081f0e, 0x8, 0x5, 0x80, 0xe, 0x8, "92588968"}, 0x6, 0x3, {}, 0xffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='hfsplus\x00', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. [ 82.204307][ T5567] cgroup: Unknown subsys name 'net' [ 82.448517][ T5567] cgroup: Unknown subsys name 'cpuset' [ 82.500478][ T5567] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.403636][ T5567] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.273664][ T5587] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.290928][ T5589] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.309432][ T5593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.321686][ T5593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.350003][ T5593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.378190][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.408282][ T5593] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.409454][ T5593] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.412382][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.418337][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.455890][ T5599] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.460050][ T5599] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.496462][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.497181][ T5593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.497953][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.527786][ T5587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.541567][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.544642][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.556756][ T5589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.559924][ T5589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.563448][ T4896] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.564239][ T5589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.579961][ T4896] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.633541][ T5589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.678389][ T5595] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.601088][ T5593] Bluetooth: hci3: command tx timeout [ 90.760001][ T59] Bluetooth: hci4: command tx timeout [ 90.760024][ T4896] Bluetooth: hci0: command tx timeout [ 90.760168][ T59] Bluetooth: hci1: command tx timeout [ 90.760704][ T5593] Bluetooth: hci2: command tx timeout [ 91.138885][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.140474][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.141070][ T5581] bridge_slave_0: entered allmulticast mode [ 91.147314][ T5581] bridge_slave_0: entered promiscuous mode [ 91.199111][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.199212][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.199317][ T5582] bridge_slave_0: entered allmulticast mode [ 91.210225][ T5582] bridge_slave_0: entered promiscuous mode [ 91.228147][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.228232][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.228371][ T5581] bridge_slave_1: entered allmulticast mode [ 91.234159][ T5581] bridge_slave_1: entered promiscuous mode [ 91.289798][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.289919][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.290268][ T5582] bridge_slave_1: entered allmulticast mode [ 91.292370][ T5582] bridge_slave_1: entered promiscuous mode [ 91.395751][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.395913][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.396023][ T5583] bridge_slave_0: entered allmulticast mode [ 91.397941][ T5583] bridge_slave_0: entered promiscuous mode [ 91.453814][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.475647][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.475757][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.475900][ T5583] bridge_slave_1: entered allmulticast mode [ 91.478748][ T5583] bridge_slave_1: entered promiscuous mode [ 91.520264][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.523797][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.524393][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.524516][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.524682][ T5584] bridge_slave_0: entered allmulticast mode [ 91.526573][ T5584] bridge_slave_0: entered promiscuous mode [ 91.619298][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.642886][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.642990][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.643509][ T5584] bridge_slave_1: entered allmulticast mode [ 91.645289][ T5584] bridge_slave_1: entered promiscuous mode [ 91.683436][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.683541][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.684256][ T5586] bridge_slave_0: entered allmulticast mode [ 91.685822][ T5586] bridge_slave_0: entered promiscuous mode [ 91.756242][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.756497][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.756615][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.757113][ T5586] bridge_slave_1: entered allmulticast mode [ 91.759122][ T5586] bridge_slave_1: entered promiscuous mode [ 91.806788][ T5581] team0: Port device team_slave_0 added [ 91.833285][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.857096][ T5582] team0: Port device team_slave_0 added [ 91.859406][ T5581] team0: Port device team_slave_1 added [ 91.872261][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.905805][ T31] cfg80211: failed to load regulatory.db [ 91.934582][ T5582] team0: Port device team_slave_1 added [ 91.961765][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.008087][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.071091][ T5583] team0: Port device team_slave_0 added [ 92.073940][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.104826][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.104838][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.104859][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.157171][ T5583] team0: Port device team_slave_1 added [ 92.178193][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.178205][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.178226][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.179422][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.179437][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.179466][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.214871][ T5584] team0: Port device team_slave_0 added [ 92.297039][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.297053][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.297073][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.302389][ T5584] team0: Port device team_slave_1 added [ 92.353051][ T5586] team0: Port device team_slave_0 added [ 92.384652][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.384664][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.384682][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.387378][ T5586] team0: Port device team_slave_1 added [ 92.445705][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.445721][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.445748][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.510455][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.510467][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.510486][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.611741][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.611754][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.611774][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.614219][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.614232][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.614251][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.634737][ T5581] hsr_slave_0: entered promiscuous mode [ 92.639616][ T5581] hsr_slave_1: entered promiscuous mode [ 92.681763][ T5593] Bluetooth: hci3: command tx timeout [ 92.839987][ T5595] Bluetooth: hci2: command tx timeout [ 92.840020][ T5595] Bluetooth: hci4: command tx timeout [ 92.840041][ T5595] Bluetooth: hci1: command tx timeout [ 92.840174][ T5593] Bluetooth: hci0: command tx timeout [ 93.042496][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.042508][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.042526][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.054470][ T5582] hsr_slave_0: entered promiscuous mode [ 93.065622][ T5582] hsr_slave_1: entered promiscuous mode [ 93.068199][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 93.068482][ T5582] Cannot create hsr debugfs directory [ 93.196653][ T5583] hsr_slave_0: entered promiscuous mode [ 93.197583][ T5583] hsr_slave_1: entered promiscuous mode [ 93.198247][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 93.198264][ T5583] Cannot create hsr debugfs directory [ 93.308090][ T5584] hsr_slave_0: entered promiscuous mode [ 93.309064][ T5584] hsr_slave_1: entered promiscuous mode [ 93.309708][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 93.311825][ T5584] Cannot create hsr debugfs directory [ 93.409505][ T5586] hsr_slave_0: entered promiscuous mode [ 93.413391][ T5586] hsr_slave_1: entered promiscuous mode [ 93.415491][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 93.415561][ T5586] Cannot create hsr debugfs directory [ 94.277897][ T5581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.331417][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.339713][ T5581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.375357][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.378947][ T5581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.415703][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.438438][ T5581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.474074][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.576922][ T5582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.624423][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.628887][ T5582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.652092][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.655012][ T5582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.685240][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.720687][ T5582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.754208][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.761082][ T5593] Bluetooth: hci3: command tx timeout [ 94.865684][ T5583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.895989][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.908576][ T5583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.920070][ T4896] Bluetooth: hci0: command tx timeout [ 94.920100][ T4896] Bluetooth: hci1: command tx timeout [ 94.920124][ T4896] Bluetooth: hci2: command tx timeout [ 94.920305][ T5593] Bluetooth: hci4: command tx timeout [ 94.956144][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.959661][ T5583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.017061][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.049482][ T5583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.093590][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.254986][ T5584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.293373][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.316269][ T5584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.353704][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.363692][ T5584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.393809][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.437385][ T5584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.475185][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.561372][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.630909][ T5586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.674025][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.688329][ T5586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.713144][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.717945][ T5586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.749043][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.766411][ T5586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.803885][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.850737][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.910986][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.911361][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.918045][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.003797][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.003888][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.098166][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.145879][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.159277][ T1033] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.159428][ T1033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.213160][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.213433][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.286177][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.355329][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.355520][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.393477][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.432978][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.433103][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.567151][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.630881][ T192] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.631111][ T192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.662684][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.718242][ T1033] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.719056][ T1033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.830122][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.842395][ T5593] Bluetooth: hci3: command tx timeout [ 96.919091][ T3211] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.919294][ T3211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.998578][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.998781][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.000160][ T59] Bluetooth: hci2: command tx timeout [ 97.000235][ T59] Bluetooth: hci1: command tx timeout [ 97.000296][ T59] Bluetooth: hci0: command tx timeout [ 97.000473][ T5593] Bluetooth: hci4: command tx timeout [ 97.485885][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.890346][ T5581] veth0_vlan: entered promiscuous mode [ 97.980772][ T5581] veth1_vlan: entered promiscuous mode [ 98.112457][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.231217][ T5581] veth0_macvtap: entered promiscuous mode [ 98.248686][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.290184][ T5581] veth1_macvtap: entered promiscuous mode [ 98.381340][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.383971][ T5582] veth0_vlan: entered promiscuous mode [ 98.419290][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.542743][ T5582] veth1_vlan: entered promiscuous mode [ 98.604155][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.909633][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.036529][ T5582] veth0_macvtap: entered promiscuous mode [ 99.116518][ T5582] veth1_macvtap: entered promiscuous mode [ 99.173651][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.173682][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.195117][ T5584] veth0_vlan: entered promiscuous mode [ 99.300405][ T5584] veth1_vlan: entered promiscuous mode [ 99.311794][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.334823][ T1055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.334844][ T1055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.338208][ T5583] veth0_vlan: entered promiscuous mode [ 99.381889][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.383752][ T5586] veth0_vlan: entered promiscuous mode [ 99.449488][ T5583] veth1_vlan: entered promiscuous mode [ 99.478141][ T5586] veth1_vlan: entered promiscuous mode [ 99.653667][ T5584] veth0_macvtap: entered promiscuous mode [ 99.798649][ T5584] veth1_macvtap: entered promiscuous mode [ 100.059715][ T5583] veth0_macvtap: entered promiscuous mode [ 100.097248][ T5586] veth0_macvtap: entered promiscuous mode [ 100.133549][ T5583] veth1_macvtap: entered promiscuous mode [ 100.193552][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.211170][ T5586] veth1_macvtap: entered promiscuous mode [ 100.244748][ T1055] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.244768][ T1055] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.277655][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.366882][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.445525][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.449500][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.473898][ T1033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.473917][ T1033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.511981][ T198] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.565779][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.789426][ T198] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 100.789456][ T198] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 100.789476][ T198] usb 1-1: Product: syz [ 100.789491][ T198] usb 1-1: SerialNumber: syz [ 101.196719][ T198] usb 1-1: config 0 descriptor?? [ 101.713639][ T198] hso 1-1:0.0: Failed to find BULK eps [ 101.997124][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.997143][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.255637][ T198] usb 1-1: USB disconnect, device number 2 [ 102.352153][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.393778][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.526051][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.526073][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.695939][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.695961][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.906364][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.906382][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.308067][ T3211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.308087][ T3211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.401912][ T192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.816868][ T5793] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.863840][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.869067][ T1132] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.869310][ T1132] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.869536][ T1132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.869716][ T1132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.927590][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.927669][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.080323][ T192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.082955][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.083191][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.193268][ T192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.252103][ T1132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.289619][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.291440][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.291942][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.020148][ T1132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.053313][ T192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.082598][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.081553][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.530088][ T5712] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.703895][ T5712] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.703953][ T5712] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 110.703979][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.775648][ T5855] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 110.810414][ T5855] CIFS: Attempting to mount //127.0.0.1/share [ 111.271066][ T5855] CIFS: VFS: Error connecting to socket. Aborting operation. [ 111.271226][ T5855] CIFS: VFS: cifs_mount failed w/return code = -4 [ 111.407017][ T5712] as10x_usb: device has been detected [ 111.432619][ T5712] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 111.456351][ T5855] syz.4.23 (5855) used greatest stack depth: 19760 bytes left [ 111.535991][ T5712] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 111.753721][ T5712] as10x_usb: error during firmware upload part1 [ 111.754359][ T5712] Registered device Abilis Systems DVB-Titan [ 112.160973][ T5869] binder: 5868:5869 ioctl c0306201 200000000080 returned -14 [ 112.303868][ T5869] binder: 5868:5869 ioctl c0306201 2000000003c0 returned -14 [ 112.483202][ T5705] usb 2-1: USB disconnect, device number 2 [ 113.037957][ T5887] trusted_key: syz.4.31 sent an empty control message without MSG_MORE. [ 113.315751][ T5705] Unregistered device Abilis Systems DVB-Titan [ 113.383383][ T5705] as10x_usb: device has been disconnected [ 114.881267][ T5904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.34'. [ 115.140496][ T5905] Illegal XDP return value 4294967294 on prog (id 4) dev N/A, expect packet loss! [ 118.053826][ T5948] Bluetooth: ISO socket layer initialized [ 118.393307][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.620001][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 118.622353][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.622385][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.622410][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 118.622439][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 118.622483][ T9] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 118.622508][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.748434][ T9] usb 3-1: config 0 descriptor?? [ 119.239994][ T5954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.267449][ T5954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.294539][ T9] hid (null): bogus close delimiter [ 119.294560][ T9] hid (null): unknown global tag 0xd [ 119.294593][ T9] hid (null): global environment stack underflow [ 119.567821][ T9] usb 3-1: USB disconnect, device number 2 [ 121.009779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.609849][ T5850] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.814901][ T5850] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.828209][ T5850] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 123.828275][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.828298][ T5850] usb 3-1: Product: syz [ 123.828315][ T5850] usb 3-1: Manufacturer: syz [ 123.828330][ T5850] usb 3-1: SerialNumber: syz [ 125.041129][ T5850] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 125.340708][ T37] audit: type=1326 audit(1786033818.711:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6022 comm="syz.1.72" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa05d4ce0d9 code=0x0 [ 125.466894][ T6025] ======================================================= [ 125.466894][ T6025] WARNING: The mand mount option has been deprecated and [ 125.466894][ T6025] and is ignored by this kernel. Remove the mand [ 125.466894][ T6025] option from the mount to silence this warning. [ 125.466894][ T6025] ======================================================= [ 126.019566][ T6009] syz.4.66 (6009) used greatest stack depth: 16840 bytes left [ 126.536316][ T5850] gspca_mr97310a: reg write [21] error -71 [ 126.536439][ T5850] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 126.566304][ T5850] usb 3-1: USB disconnect, device number 3 [ 129.578715][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 132.555480][ T6089] bond0: (slave bond_slave_0): Releasing backup interface [ 132.867624][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.887530][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.203461][ T6113] vlan2: entered allmulticast mode [ 133.203484][ T6113] veth0_vlan: entered allmulticast mode [ 133.879164][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 133.879206][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 136.377568][ T5593] Bluetooth: hci0: Zero size dump init pkt [ 139.939958][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.120'. [ 140.015270][ T37] audit: type=1326 audit(1786033833.431:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b08e0d9 code=0x7ffc0000 [ 140.015387][ T37] audit: type=1326 audit(1786033833.431:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b08e0d9 code=0x7ffc0000 [ 140.049618][ T37] audit: type=1326 audit(1786033833.431:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0e7b04a52c code=0x7ffc0000 [ 140.049678][ T37] audit: type=1326 audit(1786033833.431:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f0e7b04a58e code=0x7ffc0000 [ 140.113374][ T37] audit: type=1326 audit(1786033833.481:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b08e0d9 code=0x7ffc0000 [ 140.122939][ T37] audit: type=1326 audit(1786033833.431:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e7b08dd6b code=0x7ffc0000 [ 140.123074][ T37] audit: type=1326 audit(1786033833.541:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0e7b08e0d9 code=0x7ffc0000 [ 140.402125][ T37] audit: type=1326 audit(1786033833.711:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b08e0d9 code=0x7ffc0000 [ 140.402201][ T37] audit: type=1326 audit(1786033833.711:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b08e0d9 code=0x7ffc0000 [ 140.402251][ T37] audit: type=1326 audit(1786033833.711:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6186 comm="syz.3.123" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e7b08e0d9 code=0x7ffc0000 [ 142.241282][ T198] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 143.224136][ T198] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.224163][ T198] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 143.224207][ T198] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 143.270429][ T198] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.270461][ T198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.270483][ T198] usb 5-1: Product: syz [ 143.270499][ T198] usb 5-1: Manufacturer: syz [ 143.270532][ T198] usb 5-1: SerialNumber: syz [ 143.402181][ T6229] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.407681][ T6229] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 143.519198][ T198] cdc_mbim 5-1:1.0: skipping garbage [ 143.519225][ T198] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 143.519272][ T198] cdc_mbim 5-1:1.0: bind() failure [ 145.342772][ T6254] syz.0.136 uses obsolete (PF_INET,SOCK_PACKET) [ 146.696556][ T198] usb 5-1: USB disconnect, device number 2 [ 149.182296][ T6275] fuse: Bad value for 'fd' [ 149.439781][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 152.810123][ T6295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 153.423070][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 153.969775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.989764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 153.999759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.009760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.019756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.029758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.039754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.049765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 156.276059][ T37] kauditd_printk_skb: 52 callbacks suppressed [ 156.276081][ T37] audit: type=1800 audit(1786033849.651:65): pid=6316 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.159" name="idVendor" dev="configfs" ino=10726 res=0 errno=0 [ 156.332203][ T37] audit: type=1800 audit(1786033849.741:66): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.159" name="direction" dev="configfs" ino=10734 res=0 errno=0 [ 157.154949][ T6332] Zero length message leads to an empty skb [ 157.803888][ T6340] netlink: 48 bytes leftover after parsing attributes in process `syz.1.164'. [ 159.898987][ T6351] netlink: 'syz.2.166': attribute type 16 has an invalid length. [ 160.110491][ T6351] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.490350][ T6375] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.951389][ T6419] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 171.800191][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 175.299062][ T6481] netlink: 'syz.2.202': attribute type 16 has an invalid length. [ 175.299083][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 181.056542][ T6537] warning: `syz.0.216' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 182.205349][ T6545] netlink: 'syz.3.221': attribute type 2 has an invalid length. [ 182.249728][ T37] audit: type=1326 audit(1786033875.641:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6538 comm="syz.3.221" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e7b08e0d9 code=0x0 [ 183.190778][ T6546] nvmet: adding nsid 1 to subsystem testnqn [ 183.194385][ T37] audit: type=1800 audit(1786033876.611:68): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.222" name="buffered_io" dev="configfs" ino=11192 res=0 errno=0 [ 183.197238][ T37] audit: type=1800 audit(1786033876.611:69): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.222" name="enable" dev="configfs" ino=11193 res=0 errno=0 [ 183.198204][ T6546] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 183.198229][ T6546] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 183.198264][ T6546] CPU: 1 UID: 0 PID: 6546 Comm: syz.0.222 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 183.198291][ T6546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.198304][ T6546] RIP: 0010:strlen+0x29/0x70 [ 183.198349][ T6546] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c[ 183.198349][ T6546] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 183.198369][ T6546] RSP: 0018:ffffc9000843f978 EFLAGS: 00010246 [ 183.198399][ T6546] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 183.198413][ T6546] RDX: ffffc90004831000 RSI: 0000000000000041 RDI: 0000000000000000 [ 183.198429][ T6546] RBP: ffffc9000843fab8 R08: 0000000000000000 R09: 0000000000000000 [ 183.198444][ T6546] R10: dffffc0000000000 R11: fffffbfff1f5e5c7 R12: 1ffff92001087f40 [ 183.198462][ T6546] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 183.198480][ T6546] FS: 00007f16203966c0(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 183.198500][ T6546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.198516][ T6546] CR2: 0000001b31a11ff8 CR3: 0000000037662000 CR4: 00000000003526f0 [ 183.198540][ T6546] Call Trace: [ 183.198548][ T6546] [ 183.198559][ T6546] do_getname_kernel+0x1d/0x230 [ 183.198595][ T6546] ? getname_kernel+0xd/0x20 [ 183.198631][ T6546] filp_open+0x87/0x1d0 [ 183.198670][ T6546] ? lock_acquire+0x106/0x350 [ 183.198693][ T6546] ? __pfx_filp_open+0x10/0x10 [ 183.198732][ T6546] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 183.198759][ T6546] nvmet_file_ns_enable+0x74/0x360 [ 183.198791][ T6546] ? nvmet_ns_enable+0x4d/0x780 [ 183.198817][ T6546] nvmet_ns_enable+0xaa/0x780 [ 183.198839][ T6546] ? rwbase_write_lock+0x550/0x720 [ 183.198872][ T6546] nvmet_ns_enable_store+0xd7/0x170 [ 183.198909][ T6546] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 183.198944][ T6546] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 183.198970][ T6546] ? configfs_write_iter+0x81/0x430 [ 183.198995][ T6546] ? __pfx_nvmet_ns_enable_store+0x10/0x10 [ 183.199040][ T6546] configfs_write_iter+0x33a/0x430 [ 183.199083][ T6546] vfs_write+0x61e/0xbb0 [ 183.199113][ T6546] ? __pfx_vfs_write+0x10/0x10 [ 183.199141][ T6546] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 183.199166][ T6546] ? lockdep_hardirqs_on+0x7a/0x110 [ 183.199191][ T6546] ? mutex_lock_nested+0x152/0x1d0 [ 183.199222][ T6546] ? fdget_pos+0x252/0x320 [ 183.199249][ T6546] ksys_write+0x156/0x270 [ 183.199277][ T6546] ? __pfx_ksys_write+0x10/0x10 [ 183.199308][ T6546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.199333][ T6546] do_syscall_64+0x174/0x580 [ 183.199359][ T6546] ? clear_bhb_loop+0x40/0x90 [ 183.199385][ T6546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.199409][ T6546] RIP: 0033:0x7f162213e0d9 [ 183.199435][ T6546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.199454][ T6546] RSP: 002b:00007f1620396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 183.199478][ T6546] RAX: ffffffffffffffda RBX: 00007f16223c5fa0 RCX: 00007f162213e0d9 [ 183.199496][ T6546] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000004 [ 183.199510][ T6546] RBP: 00007f16221d5024 R08: 0000000000000000 R09: 0000000000000000 [ 183.199525][ T6546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.199539][ T6546] R13: 00007f16223c6038 R14: 00007f16223c5fa0 R15: 00007ffd85c738a8 [ 183.199565][ T6546] [ 183.199573][ T6546] Modules linked in: [ 183.199612][ T6546] ---[ end trace 0000000000000000 ]--- [ 183.199635][ T6546] RIP: 0010:strlen+0x29/0x70 [ 183.199665][ T6546] Code: 90 f3 0f 1e fa 41 57 41 56 41 54 53 48 c7 c0 ff ff ff ff 49 be 00 00 00 00 00 fc ff df 48 89 fb 49 89 c7 48 89 d8 48 c1 e8 03 <42> 0f b6 04 30 84 c0 75 11 48 ff c3 49 8d 47 01 42 80 7c 3f 01 00 [ 183.352820][ T6546] RSP: 0018:ffffc9000843f978 EFLAGS: 00010246 [ 183.352847][ T6546] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 183.352863][ T6546] RDX: ffffc90004831000 RSI: 0000000000000041 RDI: 0000000000000000 [ 183.352879][ T6546] RBP: ffffc9000843fab8 R08: 0000000000000000 R09: 0000000000000000 [ 183.352894][ T6546] R10: dffffc0000000000 R11: fffffbfff1f5e5c7 R12: 1ffff92001087f40 [ 183.352912][ T6546] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffffffffffffff [ 183.352930][ T6546] FS: 00007f16203966c0(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 183.354951][ T6546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.354972][ T6546] CR2: 00007f0e792e6d58 CR3: 0000000037662000 CR4: 00000000003526f0 [ 183.354998][ T6546] Kernel panic - not syncing: Fatal exception [ 183.355607][ T6546] Kernel Offset: disabled