last executing test programs: 10.546382486s ago: executing program 2 (id=65): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10d00, 0xf) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10.545541076s ago: executing program 3 (id=66): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x6, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x5, 0xfffffffe) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r2, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000114fbdb"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) recvfrom(r7, 0x0, 0x0, 0x40012061, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) tkill(r4, 0x3e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x6, 0x2, 0x9, 0xcd0}}, @TCA_CT_ZONE={0x6, 0x4, 0xff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c034001000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 10.420434646s ago: executing program 1 (id=68): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) sendto$packet(r0, &(0x7f0000000700)="654279e05daa2b7293bfcecaf78668bbb02ac98606ec4545dde6943e05af70707d4446622c0ff74316", 0x29, 0x4800, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf9}}, 0x14) 10.141702408s ago: executing program 1 (id=69): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) syz_open_dev$evdev(&(0x7f0000000140), 0x40, 0x6000) 9.230353471s ago: executing program 3 (id=71): syz_open_dev$vim2m(&(0x7f0000000000), 0x7ff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8020) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000080)={{0x1, 0x1}, {0x4}, 0x8, 0x4}) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x4000090) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r2, &(0x7f0000000200)=ANY=[], 0x7) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r6 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r6, 0x89a0, &(0x7f0000000200)={@multicast2, @rand_addr=0x64010125}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x58040}, 0x0) syz_open_dev$media(&(0x7f0000000080), 0x4000000000000000, 0x2002) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000f40), 0x80400, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x4a) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000070000100000000000200000007000000", @ANYRES32, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$xdp(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x2c, 0xb, 0x0, 0xe}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000000300)="289f708cab7516d26344f3dee439cf2241cbc2be3229226b243e1d51229c56aa173b15d2f4ab3ad8bbfbbabc6d4f786586b4fdfcb043a9983d982f138d123a87c0d58bde45794554e012e7baacae278e5dbbec30b600c3bca49bc37f31621ebff9d3831d97691f542ff40888", 0x6c}, {&(0x7f0000000380)="c67a80a0c5f8b7766f2974", 0xb}], 0x3, 0x0, 0x0, 0x44040}, 0x4040000) 8.167567416s ago: executing program 3 (id=73): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000440)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0x8, 0xfa00, {r9, 0x3}}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)) 7.109409571s ago: executing program 0 (id=74): socket(0x1, 0x80000, 0x7f) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r3, 0x75e7f000) write$FUSE_INIT(r3, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1282, 0x400c6001, 0x5, 0xd, 0x10, 0xc40b, 0x0, 0x0, 0x40, 0x6}}, 0x50) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='mountinfo\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 7.066722404s ago: executing program 2 (id=75): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 6.558588895s ago: executing program 0 (id=76): socket$kcm(0x29, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 5.86030807s ago: executing program 1 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, r1, 0x1, 0x0, 0x0, {0x35}}, 0x14}}, 0x0) 5.860046001s ago: executing program 0 (id=78): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0x7) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000100)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000080)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) 5.840195812s ago: executing program 2 (id=79): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r3, 0x6, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x5, 0xfffffffe) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r4, r2, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000114fbdb"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) recvfrom(r7, 0x0, 0x0, 0x40012061, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) tkill(r4, 0x3e) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000580)=@newtaction={0x84, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x70, 0x1, [@m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x6, 0x2, 0x9, 0xcd0}}, @TCA_CT_ZONE={0x6, 0x4, 0xff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c034001000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 5.649944227s ago: executing program 1 (id=80): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfcbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x9, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c", 0x29}], 0x2}, 0x0) 4.572455034s ago: executing program 2 (id=81): socket$kcm(0x29, 0x2, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) gettid() openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 4.349343042s ago: executing program 1 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 3.800843805s ago: executing program 2 (id=83): socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = syz_open_dev$sg(&(0x7f0000006d00), 0x0, 0x103001) ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000006d40)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c8, 0x12) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x5020, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 3.098466101s ago: executing program 1 (id=84): setresuid(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x43fb, 0x0, 0x2, 0xffffffff}}}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x54}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc0106442, &(0x7f0000000000)) 2.944875964s ago: executing program 3 (id=85): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4f, 0x5, 0x8, 0x4fec, 0x4, 0x8, 0x1, 0x4, 0x2, 0x3, 0x95, 0x400, 0xfff7, 0x8, 0x6, 0xc3, [0x1, 0x9]}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0x0, 0x2, 0x9]}) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.396313978s ago: executing program 3 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r4, 0x6, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x5, 0xfffffffe) request_key(&(0x7f0000000480)='cifs.spnego\x00', &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r5, r3, 0x0, 0x1, &(0x7f00000000c0)='\x00'}, 0x30) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000114fbdb"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) recvfrom(r8, 0x0, 0x0, 0x40012061, 0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000580)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_bpf={0xfc, 0x1a, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x2, 0x10, 0x3, 0x2}, {0x2de, 0x7f, 0x7, 0x2}, {0xc, 0xff, 0x9, 0x6}, {0xaa, 0x4, 0x4, 0x40}, {0x790, 0xb, 0xa5, 0x800}, {0x969, 0x1, 0x1, 0x700}, {0x8001, 0x21, 0x2, 0x9}, {0x7fff, 0xd, 0x9, 0x3}, {0x8, 0x4, 0xdf, 0x77}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x4, 0x10000000, 0x4, 0x89a5}}]}, {0x6d, 0x6, "d9e8bac18899090f47869d7a3504658bf2a9ae8b296b36962b9a80c24bf4767583144da8f2a43c76f1955a755c143435990f880a0f33f03a9b659d32662f62a24bbaf02b411fef0a477f9c660a8cb4fa9daca00458e553644c2c39f867292133dd1afe2f17b8b44b83"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x6c, 0x1, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_PARMS={0x18, 0x1, {0x5, 0x6, 0x2, 0x9, 0xcd0}}, @TCA_CT_ZONE={0x6, 0x4, 0xff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x180}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c034001000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 1.636754409s ago: executing program 0 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100000002000000000007000000", @ANYRES32=r3, @ANYBLOB="000006000a0002"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_vlan\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r6, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000100000024000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x24000010}}], 0x1, 0x0) recvmmsg(r6, 0x0, 0x0, 0x40010062, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.354382811s ago: executing program 3 (id=88): syz_mount_image$jfs(&(0x7f00000021c0), &(0x7f0000002140)='./bus\x00', 0x2008010, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6286, &(0x7f000000dc80)="$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") r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4) chdir(&(0x7f0000000380)='./file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x58, 0x0, 0xa}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r6, 0x0, 0x0) getsockopt$packet_int(r5, 0x107, 0x13, 0x0, &(0x7f0000000100)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./bus\x00') 995.1659ms ago: executing program 0 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) 437.828734ms ago: executing program 0 (id=90): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfcbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0x9, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c", 0x29}], 0x2}, 0x0) 0s ago: executing program 2 (id=91): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB], 0x78}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mq_unlink(0x0) mkdir(0x0, 0xa0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) getgroups(0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) getpid() socket$tipc(0x1e, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 81.306577][ T5773] cgroup: Unknown subsys name 'net' [ 81.466872][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.203444][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.313745][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.328192][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.336100][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.344699][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.352992][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.367632][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.409473][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.418428][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.426581][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.434746][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.444273][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.452506][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.460674][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.469193][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.478736][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.486636][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.495453][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.495855][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.509268][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.511207][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.517087][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.525312][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.545031][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.553248][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.115899][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 86.136331][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 86.169471][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.355754][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 86.382701][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.390361][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.398597][ T5789] bridge_slave_0: entered allmulticast mode [ 86.405817][ T5789] bridge_slave_0: entered promiscuous mode [ 86.439787][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.446937][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.454229][ T5782] bridge_slave_0: entered allmulticast mode [ 86.461727][ T5782] bridge_slave_0: entered promiscuous mode [ 86.470662][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.477950][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.485342][ T5789] bridge_slave_1: entered allmulticast mode [ 86.492834][ T5789] bridge_slave_1: entered promiscuous mode [ 86.533871][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.542294][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.549671][ T5782] bridge_slave_1: entered allmulticast mode [ 86.556792][ T5782] bridge_slave_1: entered promiscuous mode [ 86.582715][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.604529][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.611938][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.619400][ T5786] bridge_slave_0: entered allmulticast mode [ 86.626597][ T5786] bridge_slave_0: entered promiscuous mode [ 86.649794][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.685622][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.692961][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.701139][ T5786] bridge_slave_1: entered allmulticast mode [ 86.709456][ T5786] bridge_slave_1: entered promiscuous mode [ 86.732902][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.776356][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.790616][ T5789] team0: Port device team_slave_0 added [ 86.850273][ T5789] team0: Port device team_slave_1 added [ 86.870651][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.878134][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.885368][ T5792] bridge_slave_0: entered allmulticast mode [ 86.893799][ T5792] bridge_slave_0: entered promiscuous mode [ 86.904064][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.916784][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.941715][ T5782] team0: Port device team_slave_0 added [ 86.951564][ T5782] team0: Port device team_slave_1 added [ 86.958757][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.965989][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.973426][ T5792] bridge_slave_1: entered allmulticast mode [ 86.980460][ T5792] bridge_slave_1: entered promiscuous mode [ 87.084407][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.092742][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.118909][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.136698][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.146035][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.177021][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.195162][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.202751][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.234161][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.253110][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.260422][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.291963][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.312459][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.325340][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.343249][ T5786] team0: Port device team_slave_0 added [ 87.418371][ T5793] Bluetooth: hci0: command tx timeout [ 87.419743][ T5786] team0: Port device team_slave_1 added [ 87.438782][ T5789] hsr_slave_0: entered promiscuous mode [ 87.445618][ T5789] hsr_slave_1: entered promiscuous mode [ 87.526208][ T5792] team0: Port device team_slave_0 added [ 87.542586][ T5792] team0: Port device team_slave_1 added [ 87.577748][ T5793] Bluetooth: hci3: command tx timeout [ 87.577771][ T5788] Bluetooth: hci2: command tx timeout [ 87.577996][ T5788] Bluetooth: hci1: command tx timeout [ 87.672869][ T5782] hsr_slave_0: entered promiscuous mode [ 87.681004][ T5782] hsr_slave_1: entered promiscuous mode [ 87.688265][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.696250][ T5782] Cannot create hsr debugfs directory [ 87.708982][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.716195][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.742721][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.757830][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.764934][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.791563][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.804787][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.811930][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.837905][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.892429][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.900577][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.927922][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.006883][ T5786] hsr_slave_0: entered promiscuous mode [ 88.013562][ T5786] hsr_slave_1: entered promiscuous mode [ 88.021120][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.028881][ T5786] Cannot create hsr debugfs directory [ 88.132629][ T5792] hsr_slave_0: entered promiscuous mode [ 88.140115][ T5792] hsr_slave_1: entered promiscuous mode [ 88.146569][ T5792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.154273][ T5792] Cannot create hsr debugfs directory [ 88.447140][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.466784][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.481198][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.497286][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.565544][ T5782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.614410][ T5782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.625736][ T5782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.658085][ T5782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.674694][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.689511][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.708979][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.719858][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.815578][ T5792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.829201][ T5792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.852986][ T5792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.864033][ T5792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.008777][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.070994][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.082054][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.112640][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.132165][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.139820][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.159259][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.184698][ T1074] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.191918][ T1074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.215527][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.240447][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.247675][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.257315][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.264494][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.309954][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.317237][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.358158][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.382850][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.390123][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.429757][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.456107][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.463455][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.497594][ T5788] Bluetooth: hci0: command tx timeout [ 89.523164][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.530450][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.657640][ T5788] Bluetooth: hci1: command tx timeout [ 89.658846][ T5791] Bluetooth: hci3: command tx timeout [ 89.663097][ T5788] Bluetooth: hci2: command tx timeout [ 89.995193][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.125755][ T5789] veth0_vlan: entered promiscuous mode [ 90.162889][ T5789] veth1_vlan: entered promiscuous mode [ 90.195951][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.231731][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.277047][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.314810][ T5789] veth0_macvtap: entered promiscuous mode [ 90.345957][ T5782] veth0_vlan: entered promiscuous mode [ 90.361869][ T5789] veth1_macvtap: entered promiscuous mode [ 90.383431][ T5782] veth1_vlan: entered promiscuous mode [ 90.435829][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.450013][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.484063][ T5786] veth0_vlan: entered promiscuous mode [ 90.495321][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.505529][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.514446][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.523310][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.551651][ T5782] veth0_macvtap: entered promiscuous mode [ 90.563599][ T5792] veth0_vlan: entered promiscuous mode [ 90.584002][ T5792] veth1_vlan: entered promiscuous mode [ 90.600154][ T5786] veth1_vlan: entered promiscuous mode [ 90.610176][ T5782] veth1_macvtap: entered promiscuous mode [ 90.714128][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.730686][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.742812][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.756315][ T5786] veth0_macvtap: entered promiscuous mode [ 90.793520][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.796416][ T5786] veth1_macvtap: entered promiscuous mode [ 90.809636][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.825241][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.825510][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.845978][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.872108][ T5782] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.881476][ T5782] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.890387][ T5782] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.899325][ T5782] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.944028][ T5792] veth0_macvtap: entered promiscuous mode [ 90.960687][ T5792] veth1_macvtap: entered promiscuous mode [ 90.970031][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.980831][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.980995][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.999900][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.010245][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.021424][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.033244][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.058363][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.069621][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.080122][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.091234][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.103887][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.127142][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.143189][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.153527][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.162678][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.184069][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.195939][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.206480][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.217277][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.227625][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.238288][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.249805][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.315758][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.327395][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.353743][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.371907][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.384022][ T5792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.395009][ T5792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.406984][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.453272][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.475605][ T5792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.489992][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.495558][ T5792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.515794][ T5792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.525207][ T5792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.577829][ T5788] Bluetooth: hci0: command tx timeout [ 91.589343][ T5875] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.656488][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.673068][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.738652][ T5788] Bluetooth: hci3: command tx timeout [ 91.738715][ T5793] Bluetooth: hci1: command tx timeout [ 91.744159][ T5788] Bluetooth: hci2: command tx timeout [ 91.766637][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.793955][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.874108][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.885772][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.893397][ T5878] Zero length message leads to an empty skb [ 92.020704][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.047657][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.086972][ T5880] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.142394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 92.218894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.243929][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.258063][ T965] cfg80211: failed to load regulatory.db [ 92.276270][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.524649][ T5884] syz.3.4[5884]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 92.577809][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.728172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.904241][ T5888] loop2: detected capacity change from 0 to 4096 [ 92.967239][ T5888] ntfs3: loop2: ino=3, Correct links count -> 2. [ 93.012357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 93.166114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 93.260725][ T5888] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.328049][ T5888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.658511][ T5788] Bluetooth: hci0: command tx timeout [ 93.778429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.807050][ T5886] loop0: detected capacity change from 0 to 40427 [ 93.808189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.822498][ T5788] Bluetooth: hci1: command tx timeout [ 93.823333][ T5793] Bluetooth: hci3: command tx timeout [ 93.828947][ T5788] Bluetooth: hci2: command tx timeout [ 93.857525][ T5886] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 93.899605][ T5886] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.948848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.957552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 93.982061][ T5884] loop3: detected capacity change from 0 to 32768 [ 94.042510][ T5884] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (5884) [ 94.072351][ T5884] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.090960][ T5886] F2FS-fs (loop0): invalid crc value [ 94.128407][ T5884] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 94.137311][ T5884] BTRFS info (device loop3): disabling tree log [ 94.166755][ T5886] F2FS-fs (loop0): Found nat_bits in checkpoint [ 94.237924][ T5884] BTRFS info (device loop3): setting nodatacow, compression disabled [ 94.280829][ T5884] BTRFS info (device loop3): max_inline at 0 [ 94.324847][ T5884] BTRFS info (device loop3): enabling disk space caching [ 94.363222][ T5884] BTRFS info (device loop3): turning off barriers [ 94.392388][ T5884] BTRFS info (device loop3): turning on flush-on-commit [ 94.439091][ T5884] BTRFS info (device loop3): doing ref verification [ 94.455367][ T5884] BTRFS info (device loop3): force clearing of disk cache [ 94.477754][ T5886] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 94.498620][ T5884] BTRFS info (device loop3): enabling ssd optimizations [ 94.519244][ T5886] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.533653][ T5884] BTRFS info (device loop3): max_inline at 0 [ 94.575577][ T5884] BTRFS info (device loop3): disk space caching is enabled [ 95.068090][ T5916] loop1: detected capacity change from 0 to 40427 [ 95.092335][ T5916] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 95.101118][ T5916] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 95.132453][ T5916] F2FS-fs (loop1): invalid crc value [ 95.160136][ T5916] F2FS-fs (loop1): Found nat_bits in checkpoint [ 95.214539][ T5884] BTRFS info (device loop3): auto enabling async discard [ 95.250231][ T5916] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 95.257349][ T5916] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 95.264924][ T5884] BTRFS info (device loop3): rebuilding free space tree [ 95.412501][ T5884] BTRFS info (device loop3): disabling free space tree [ 95.474239][ T5884] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 95.548301][ T5884] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 98.258116][ T27] audit: type=1800 audit(1755598404.077:2): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 98.333137][ T5789] syz-executor: attempt to access beyond end of device [ 98.333137][ T5789] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 98.395818][ T5789] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 98.531195][ T5786] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.546170][ T5945] loop2: detected capacity change from 0 to 2048 [ 101.219477][ T5945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.362091][ T5947] netlink: 68 bytes leftover after parsing attributes in process `syz.3.17'. [ 101.521341][ T5949] loop3: detected capacity change from 0 to 256 [ 101.533566][ T5949] ======================================================= [ 101.533566][ T5949] WARNING: The mand mount option has been deprecated and [ 101.533566][ T5949] and is ignored by this kernel. Remove the mand [ 101.533566][ T5949] option from the mount to silence this warning. [ 101.533566][ T5949] ======================================================= [ 101.587713][ T5949] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.642140][ T5949] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 101.715463][ T5949] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 101.843414][ T5955] loop1: detected capacity change from 0 to 1024 [ 103.237818][ T5957] loop0: detected capacity change from 0 to 32768 [ 103.263484][ T5969] loop3: detected capacity change from 0 to 256 [ 103.352561][ T5957] JBD2: Ignoring recovery information on journal [ 104.184197][ T5957] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.463731][ T5981] netlink: 68 bytes leftover after parsing attributes in process `syz.3.28'. [ 104.758177][ T48] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.059527][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 105.075573][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.088787][ T48] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.102225][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.131925][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 105.170189][ T48] usb 3-1: config 0 descriptor?? [ 105.238480][ T5829] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.443864][ T48] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.486563][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 105.537630][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.593818][ T5829] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.730275][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.733023][ T5998] netlink: 6 bytes leftover after parsing attributes in process `syz.1.34'. [ 105.824143][ T5829] usb 4-1: config 0 descriptor?? [ 106.122213][ T5829] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 106.443749][ T5998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 107.801266][ T6010] loop1: detected capacity change from 0 to 32768 [ 108.614725][ T5876] usb 4-1: USB disconnect, device number 2 [ 108.624497][ T6010] JBD2: Ignoring recovery information on journal [ 108.805155][ T6019] capability: warning: `syz.2.39' uses deprecated v2 capabilities in a way that may be insecure [ 108.833410][ T6019] program syz.2.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.359366][ T6010] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 113.056947][ T5789] ocfs2: Unmounting device (7,1) on (node local) [ 114.287327][ T6046] (null): rxe_set_mtu: Set mtu to 1024 [ 114.296126][ T6046] wg1 speed is unknown, defaulting to 1000 [ 114.304776][ T6046] wg1 speed is unknown, defaulting to 1000 [ 114.312857][ T6046] wg1 speed is unknown, defaulting to 1000 [ 114.450372][ T6046] infiniband syz0: set active [ 114.455358][ T6046] infiniband syz0: added wg1 [ 114.472585][ T2195] wg1 speed is unknown, defaulting to 1000 [ 114.512025][ T6046] RDS/IB: syz0: added [ 114.516912][ T6046] smc: adding ib device syz0 with port count 1 [ 114.523399][ T6046] smc: ib device syz0 port 1 has pnetid [ 114.533614][ T6046] wg1 speed is unknown, defaulting to 1000 [ 114.684407][ T6046] wg1 speed is unknown, defaulting to 1000 [ 114.833150][ T6046] wg1 speed is unknown, defaulting to 1000 [ 114.981986][ T6046] wg1 speed is unknown, defaulting to 1000 [ 115.126731][ T2195] wg1 speed is unknown, defaulting to 1000 [ 115.812993][ T6060] loop3: detected capacity change from 0 to 512 [ 115.825383][ T6060] EXT4-fs: Ignoring removed nobh option [ 116.920034][ T6060] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.933721][ T6060] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 116.945139][ T6060] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.51: Corrupt directory, running e2fsck is recommended [ 116.993746][ T6060] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 117.034963][ T6060] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.51: corrupted in-inode xattr: invalid ea_ino [ 117.287604][ T6060] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.51: couldn't read orphan inode 15 (err -117) [ 117.314672][ T6067] loop0: detected capacity change from 0 to 4096 [ 117.324386][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.385574][ T6067] ntfs3: Bad value for 'gid' [ 117.437277][ T6060] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.602516][ T6060] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 117.819619][ T6060] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.51: Corrupt directory, running e2fsck is recommended [ 118.030507][ T6078] loop1: detected capacity change from 0 to 64 [ 118.485515][ T6080] netlink: 36 bytes leftover after parsing attributes in process `syz.1.55'. [ 118.502484][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 118.585806][ T6080] bridge0: port 3(batadv1) entered blocking state [ 118.593313][ T6080] bridge0: port 3(batadv1) entered disabled state [ 118.601262][ T6080] batadv1: entered allmulticast mode [ 118.619109][ T6080] batadv1: entered promiscuous mode [ 119.113343][ T136] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 119.123381][ T136] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 119.439730][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.509650][ T6067] loop0: detected capacity change from 0 to 32768 [ 119.673746][ T6085] netlink: 'syz.1.56': attribute type 3 has an invalid length. [ 119.682014][ T6085] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.56'. [ 121.056719][ T5876] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 121.876999][ T5876] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.924566][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.007853][ T5876] usb 4-1: Product: syz [ 122.106165][ T6109] loop0: detected capacity change from 0 to 1024 [ 122.217114][ T5876] usb 4-1: Manufacturer: syz [ 122.222735][ T5876] usb 4-1: SerialNumber: syz [ 122.230815][ T5876] usb 4-1: config 0 descriptor?? [ 122.377112][ T6112] loop2: detected capacity change from 0 to 256 [ 126.437640][ T5876] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 126.462731][ T5876] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -110 [ 126.785817][ T6112] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 127.657178][ T5850] usb 4-1: USB disconnect, device number 3 [ 127.682744][ T6109] hfsplus: failed to load extents file [ 128.332721][ T6126] netlink: 'syz.3.66': attribute type 3 has an invalid length. [ 128.340499][ T6126] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.66'. [ 129.335672][ T6133] netlink: 6 bytes leftover after parsing attributes in process `syz.3.71'. [ 129.359828][ T6133] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.999606][ T5876] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 130.366230][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 130.375111][ T5876] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 130.384659][ T5876] usb 2-1: config 179 has no interface number 0 [ 130.397527][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 130.426188][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 130.459998][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.464708][ T6140] warning: `syz.3.73' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.472021][ T5876] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 130.554057][ T5876] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 130.599980][ T5876] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 130.663111][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.697300][ T6130] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 131.295937][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 131.372229][ T6148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.399442][ T6148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.494718][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 131.503282][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 131.597520][ T9] usb 2-1: USB disconnect, device number 2 [ 131.625882][ T9] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 133.032087][ T6165] netlink: 'syz.2.79': attribute type 3 has an invalid length. [ 133.039859][ T6165] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.79'. [ 133.239329][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.255153][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.245815][ T6185] netlink: 'syz.3.86': attribute type 3 has an invalid length. [ 136.253714][ T6185] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.86'. [ 136.561219][ T6175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.081022][ T6188] syz0: rxe_newlink: already configured on wg1 [ 137.546320][ T6175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.645907][ T6194] fuse: Unknown parameter 'group_id00000000000000000000' [ 137.782040][ T6175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.091521][ T6175] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.254417][ T6190] loop3: detected capacity change from 0 to 32768 [ 138.325896][ T6190] [ 138.325896][ T6190] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 138.325896][ T6190] [ 138.396897][ T6203] loop2: detected capacity change from 0 to 64 [ 138.424976][ T6175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.432917][ T6190] read_mapping_page failed! [ 138.446023][ T6175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.473926][ T6190] ERROR: (device loop3): txCommit: [ 138.473926][ T6190] [ 139.264092][ T6206] read_mapping_page failed! [ 139.269135][ T6206] ERROR: (device loop3): txCommit: [ 139.269135][ T6206] [ 139.292965][ T6204] ================================================================== [ 139.301090][ T6204] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x12ca/0x3b10 [ 139.308597][ T6204] Read of size 1 at addr ffff88805e4fd335 by task syz.3.88/6204 [ 139.316241][ T6204] [ 139.318595][ T6204] CPU: 1 PID: 6204 Comm: syz.3.88 Not tainted 6.6.102-syzkaller #0 [ 139.326508][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.336592][ T6204] Call Trace: [ 139.339895][ T6204] [ 139.342852][ T6204] dump_stack_lvl+0x16c/0x230 [ 139.347551][ T6204] ? read_lock_is_recursive+0x20/0x20 [ 139.352941][ T6204] ? show_regs_print_info+0x20/0x20 [ 139.358162][ T6204] ? load_image+0x3b0/0x3b0 [ 139.363040][ T6204] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 139.368444][ T6204] ? __virt_addr_valid+0x18c/0x540 [ 139.373580][ T6204] ? __virt_addr_valid+0x469/0x540 [ 139.378710][ T6204] print_report+0xac/0x220 [ 139.383137][ T6204] ? dtSplitPage+0x12ca/0x3b10 [ 139.387920][ T6204] kasan_report+0x117/0x150 [ 139.392439][ T6204] ? dtSplitPage+0x12ca/0x3b10 [ 139.397242][ T6204] dtSplitPage+0x12ca/0x3b10 [ 139.402039][ T6204] ? __lock_acquire+0x7c80/0x7c80 [ 139.407096][ T6204] dtInsert+0x108f/0x5f40 [ 139.411450][ T6204] ? kasan_quarantine_put+0xd8/0x220 [ 139.416769][ T6204] ? slab_free_freelist_hook+0x130/0x1b0 [ 139.422436][ T6204] ? UniStrupr+0x2e0/0x2e0 [ 139.426891][ T6204] ? dtSearch+0x1d20/0x21b0 [ 139.431438][ T6204] jfs_symlink+0x719/0xe50 [ 139.435902][ T6204] ? jfs_unlink+0xa60/0xa60 [ 139.440431][ T6204] ? make_vfsuid+0x51/0xb0 [ 139.444869][ T6204] ? inode_permission+0xf3/0x480 [ 139.449830][ T6204] ? bpf_lsm_inode_symlink+0x9/0x10 [ 139.455062][ T6204] ? security_inode_symlink+0xb6/0x100 [ 139.460550][ T6204] vfs_symlink+0x138/0x2b0 [ 139.464988][ T6204] do_symlinkat+0x1b2/0x3f0 [ 139.469596][ T6204] ? vfs_symlink+0x2b0/0x2b0 [ 139.474201][ T6204] ? getname_flags+0x20a/0x500 [ 139.478987][ T6204] __x64_sys_symlink+0x7e/0x90 [ 139.483852][ T6204] do_syscall_64+0x55/0xb0 [ 139.488307][ T6204] ? clear_bhb_loop+0x40/0x90 [ 139.493018][ T6204] ? clear_bhb_loop+0x40/0x90 [ 139.497705][ T6204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.503624][ T6204] RIP: 0033:0x7f106e58ebe9 [ 139.508275][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.527987][ T6204] RSP: 002b:00007f106c7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 139.536420][ T6204] RAX: ffffffffffffffda RBX: 00007f106e7b6090 RCX: 00007f106e58ebe9 [ 139.544421][ T6204] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 139.552405][ T6204] RBP: 00007f106e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 139.560481][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.568469][ T6204] R13: 00007f106e7b6128 R14: 00007f106e7b6090 R15: 00007ffdb5e0f9e8 [ 139.576477][ T6204] [ 139.579506][ T6204] [ 139.581845][ T6204] Allocated by task 6190: [ 139.586186][ T6204] kasan_set_track+0x4e/0x70 [ 139.590808][ T6204] __kasan_slab_alloc+0x6c/0x80 [ 139.595843][ T6204] slab_post_alloc_hook+0x6e/0x4d0 [ 139.601210][ T6204] kmem_cache_alloc_lru+0x115/0x2e0 [ 139.606429][ T6204] jfs_alloc_inode+0x28/0x60 [ 139.611085][ T6204] iget_locked+0x1ad/0x840 [ 139.615520][ T6204] jfs_iget+0x24/0x3c0 [ 139.619621][ T6204] jfs_lookup+0x1c6/0x380 [ 139.623963][ T6204] __lookup_slow+0x281/0x3b0 [ 139.628665][ T6204] lookup_slow+0x53/0x70 [ 139.632956][ T6204] walk_component+0x2be/0x3f0 [ 139.637644][ T6204] path_lookupat+0x169/0x440 [ 139.642404][ T6204] filename_lookup+0x1f4/0x510 [ 139.647192][ T6204] user_path_at_empty+0x42/0x60 [ 139.652081][ T6204] __se_sys_chdir+0x95/0x290 [ 139.656684][ T6204] do_syscall_64+0x55/0xb0 [ 139.661130][ T6204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.667054][ T6204] [ 139.669389][ T6204] The buggy address belongs to the object at ffff88805e4fca00 [ 139.669389][ T6204] which belongs to the cache jfs_ip of size 2240 [ 139.683107][ T6204] The buggy address is located 117 bytes to the right of [ 139.683107][ T6204] allocated 2240-byte region [ffff88805e4fca00, ffff88805e4fd2c0) [ 139.698245][ T6204] [ 139.700576][ T6204] The buggy address belongs to the physical page: [ 139.707031][ T6204] page:ffffea0001793e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e4f8 [ 139.717201][ T6204] head:ffffea0001793e00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 139.726144][ T6204] memcg:ffff88802655b901 [ 139.730394][ T6204] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 139.738507][ T6204] page_type: 0xffffffff() [ 139.742914][ T6204] raw: 00fff00000000840 ffff888018be88c0 dead000000000122 0000000000000000 [ 139.751617][ T6204] raw: 0000000000000000 00000000800d000d 00000001ffffffff ffff88802655b901 [ 139.760299][ T6204] page dumped because: kasan: bad access detected [ 139.766721][ T6204] page_owner tracks the page as allocated [ 139.772447][ T6204] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6067, tgid 6066 (syz.0.52), ts 119530475599, free_ts 107779222112 [ 139.796009][ T6204] post_alloc_hook+0x1cd/0x210 [ 139.800804][ T6204] get_page_from_freelist+0x195c/0x19f0 [ 139.806370][ T6204] __alloc_pages+0x1e3/0x460 [ 139.810996][ T6204] alloc_slab_page+0x5d/0x170 [ 139.815691][ T6204] new_slab+0x87/0x2e0 [ 139.819779][ T6204] ___slab_alloc+0xc6d/0x12f0 [ 139.824478][ T6204] kmem_cache_alloc_lru+0x1ae/0x2e0 [ 139.829728][ T6204] jfs_alloc_inode+0x28/0x60 [ 139.834333][ T6204] new_inode_pseudo+0x63/0x1d0 [ 139.839143][ T6204] new_inode+0x22/0x1b0 [ 139.843309][ T6204] jfs_fill_super+0x396/0xac0 [ 139.848035][ T6204] mount_bdev+0x22b/0x2d0 [ 139.852404][ T6204] legacy_get_tree+0xea/0x180 [ 139.857208][ T6204] vfs_get_tree+0x8c/0x280 [ 139.861641][ T6204] do_new_mount+0x24b/0xa40 [ 139.866173][ T6204] __se_sys_mount+0x2da/0x3c0 [ 139.870867][ T6204] page last free stack trace: [ 139.875545][ T6204] free_unref_page_prepare+0x7ce/0x8e0 [ 139.881029][ T6204] free_unref_page+0x32/0x2e0 [ 139.885839][ T6204] __slab_free+0x35e/0x410 [ 139.890282][ T6204] qlist_free_all+0x75/0xe0 [ 139.894800][ T6204] kasan_quarantine_reduce+0x143/0x160 [ 139.900288][ T6204] __kasan_slab_alloc+0x22/0x80 [ 139.905156][ T6204] slab_post_alloc_hook+0x6e/0x4d0 [ 139.910468][ T6204] __kmem_cache_alloc_node+0x13e/0x260 [ 139.915950][ T6204] __kmalloc+0xa4/0x240 [ 139.920122][ T6204] tomoyo_realpath_from_path+0xe3/0x5d0 [ 139.925692][ T6204] tomoyo_check_open_permission+0x1c3/0x3c0 [ 139.931708][ T6204] security_file_open+0x62/0xa0 [ 139.936575][ T6204] do_dentry_open+0x380/0x1500 [ 139.941362][ T6204] path_openat+0x274b/0x3190 [ 139.945967][ T6204] do_filp_open+0x1c5/0x3d0 [ 139.950486][ T6204] do_sys_openat2+0x12c/0x1c0 [ 139.955198][ T6204] [ 139.957531][ T6204] Memory state around the buggy address: [ 139.963531][ T6204] ffff88805e4fd200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 139.971607][ T6204] ffff88805e4fd280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 139.979806][ T6204] >ffff88805e4fd300: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 139.987887][ T6204] ^ [ 139.993558][ T6204] ffff88805e4fd380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.001754][ T6204] ffff88805e4fd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 140.009839][ T6204] ================================================================== [ 140.017967][ C1] sched: RT throttling activated [ 140.024501][ T6204] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 140.031742][ T6204] CPU: 1 PID: 6204 Comm: syz.3.88 Not tainted 6.6.102-syzkaller #0 [ 140.039766][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 140.049863][ T6204] Call Trace: [ 140.053179][ T6204] [ 140.056239][ T6204] dump_stack_lvl+0x16c/0x230 [ 140.060974][ T6204] ? show_regs_print_info+0x20/0x20 [ 140.066267][ T6204] ? load_image+0x3b0/0x3b0 [ 140.070838][ T6204] panic+0x2c0/0x710 [ 140.074779][ T6204] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 140.081071][ T6204] ? bpf_jit_dump+0xd0/0xd0 [ 140.085634][ T6204] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 140.091587][ T6204] ? _raw_spin_unlock+0x40/0x40 [ 140.096576][ T6204] ? dtSplitPage+0x12ca/0x3b10 [ 140.101393][ T6204] check_panic_on_warn+0x84/0xa0 [ 140.106380][ T6204] ? dtSplitPage+0x12ca/0x3b10 [ 140.111198][ T6204] end_report+0x6f/0x140 [ 140.115490][ T6204] kasan_report+0x128/0x150 [ 140.120040][ T6204] ? dtSplitPage+0x12ca/0x3b10 [ 140.124859][ T6204] dtSplitPage+0x12ca/0x3b10 [ 140.129595][ T6204] ? __lock_acquire+0x7c80/0x7c80 [ 140.134693][ T6204] dtInsert+0x108f/0x5f40 [ 140.139086][ T6204] ? kasan_quarantine_put+0xd8/0x220 [ 140.144441][ T6204] ? slab_free_freelist_hook+0x130/0x1b0 [ 140.150142][ T6204] ? UniStrupr+0x2e0/0x2e0 [ 140.154611][ T6204] ? dtSearch+0x1d20/0x21b0 [ 140.159184][ T6204] jfs_symlink+0x719/0xe50 [ 140.163703][ T6204] ? jfs_unlink+0xa60/0xa60 [ 140.168285][ T6204] ? make_vfsuid+0x51/0xb0 [ 140.172802][ T6204] ? inode_permission+0xf3/0x480 [ 140.177789][ T6204] ? bpf_lsm_inode_symlink+0x9/0x10 [ 140.183060][ T6204] ? security_inode_symlink+0xb6/0x100 [ 140.188573][ T6204] vfs_symlink+0x138/0x2b0 [ 140.193116][ T6204] do_symlinkat+0x1b2/0x3f0 [ 140.197670][ T6204] ? vfs_symlink+0x2b0/0x2b0 [ 140.202296][ T6204] ? getname_flags+0x20a/0x500 [ 140.207114][ T6204] __x64_sys_symlink+0x7e/0x90 [ 140.211912][ T6204] do_syscall_64+0x55/0xb0 [ 140.216365][ T6204] ? clear_bhb_loop+0x40/0x90 [ 140.221087][ T6204] ? clear_bhb_loop+0x40/0x90 [ 140.225806][ T6204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.231792][ T6204] RIP: 0033:0x7f106e58ebe9 [ 140.236250][ T6204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.255907][ T6204] RSP: 002b:00007f106c7d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 140.264362][ T6204] RAX: ffffffffffffffda RBX: 00007f106e7b6090 RCX: 00007f106e58ebe9 [ 140.272374][ T6204] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000080 [ 140.280366][ T6204] RBP: 00007f106e611e19 R08: 0000000000000000 R09: 0000000000000000 [ 140.288363][ T6204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.296360][ T6204] R13: 00007f106e7b6128 R14: 00007f106e7b6090 R15: 00007ffdb5e0f9e8 [ 140.304361][ T6204] [ 140.307725][ T6204] Kernel Offset: disabled [ 140.312056][ T6204] Rebooting in 86400 seconds..