last executing test programs: 24.327202912s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b6, 0x0, &(0x7f0000000180)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd8730945636837fa980b788a1e78b46a2599f69c84033e65c1d6a53200386ce51d4a9c6ff0300008a645c2b9c0614907dac12c6d3cd73c6f7e79b50b7773a97aad715106eca76bf796a430e6c6a874a1602148380c5a6fcf022b0a04fcbefc0d85cdf5d0b97e6d6336b1742017dfd81f3ebc1b048e42b13e8f8486976acd9d7b9f50900dff445f7fa5e166f86db80a5022d4a325e208f57f534d397b00996c9b7a8ec126165847603201e39f0d9aa8ff5e67722c594a5d8bae0210aef032d3facd18db998014f0e10be9456d0090de35dc0c3ec1ba60d62330540086efd653b5336e8ac6ef838093da55d93b0b3ab0be5f07333d156930b4b4bb193112d582e4d57e60c67365429f03f5ac6951ca9865887027aeb1874955d47fe6f180f3eb3f9103f4c9e351576d6a988b03405cca892c3f3bd5627704c4bd8e7c9d8284f084025f4c5db7f283df92c057aeaaa528ada852770ddd180135caf320f4cb580eb72bbc1aaec63dbc7cfc64799462116bd5107a010232a1e56379c93c60324df8e288c8634531ae5cc8cafa6c9343e23b5795bc186a950d0ae15", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r1 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) listen(r3, 0x2) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000180)=0x8) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000380)={0x20, 0xc, 0x100, {0x100, 0x24, "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"}}, &(0x7f00000004c0)={0x0, 0x3, 0x70, @string={0x70, 0x3, "66f10aa7509a89647304db6406eb9155c60e723926726959f2ecb48b151393dc78edf3e3f2fb1f65de0ae508a4fefcbd3e8331a1ab55d3d77c3575297db68dfe419e357ecebd9edaed7aa1c94f6f694eae3c809faf7764b9fe02670f7d5cdebbe30aeda06d811525a133b432e225"}}, &(0x7f0000000540)={0x0, 0xf, 0xbd, {0x5, 0xf, 0xbd, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x38, 0xff, 0xc}, @generic={0x9a, 0x10, 0xa, "9d82e35ed2afc9742efe7a3fb96010de0ef90675de906ab59d674ff3f154b4fa99dd4f2648e62a06e11f4c65b847ff7e1590d3164d1657ded7e77832c301daeef208e3bcb365cc64ecf695769b218533e5be144eb01e638a64ca5ac84fd3ee06fafa36906fdda369e19bf3d9c17269e01c093ef07a3842f26a0f8bc14fa0e988cb723422c9130a36880f4acdf3f81f25ea134aa2a2b247"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x79, 0x9, 0x3ff}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x3, 0xff, "62f3a3f9", "f49c44e0"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x80, 0x3, 0x5, 0x5, 0xe, 0x1}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000700)={0x0, 0x30, 0x83, "fb22a584f483284e3322f3718fd863fe6ca2d6ba332cbc55b9309ef5fd0decf45e65fbe2a7544a50027d6f4776be827892680847895be2803afe63e14e293a34ba2c8fdbfc7541ffde813a168572da72e762bfcde021876006b1298cfcebd4adccb69580f2721f6b1f923963b92a1250dc1e5114d7f093b39906a09842d362b7078fb4"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1c}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1760, 0x40}}, &(0x7f00000008c0)={0x40, 0x7, 0x2}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0xb, 0x2, "1ac3"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000a00)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "d25f"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x9b}}) syz_usb_control_io$hid(r0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x93, 0x3}) capset(&(0x7f0000000100)={0x19980330, r4}, &(0x7f0000000340)={0x4b5c, 0x0, 0x7aa, 0x1, 0x40, 0x5}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b6, 0x0, &(0x7f0000000180)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd8730945636837fa980b788a1e78b46a2599f69c84033e65c1d6a53200386ce51d4a9c6ff0300008a645c2b9c0614907dac12c6d3cd73c6f7e79b50b7773a97aad715106eca76bf796a430e6c6a874a1602148380c5a6fcf022b0a04fcbefc0d85cdf5d0b97e6d6336b1742017dfd81f3ebc1b048e42b13e8f8486976acd9d7b9f50900dff445f7fa5e166f86db80a5022d4a325e208f57f534d397b00996c9b7a8ec126165847603201e39f0d9aa8ff5e67722c594a5d8bae0210aef032d3facd18db998014f0e10be9456d0090de35dc0c3ec1ba60d62330540086efd653b5336e8ac6ef838093da55d93b0b3ab0be5f07333d156930b4b4bb193112d582e4d57e60c67365429f03f5ac6951ca9865887027aeb1874955d47fe6f180f3eb3f9103f4c9e351576d6a988b03405cca892c3f3bd5627704c4bd8e7c9d8284f084025f4c5db7f283df92c057aeaaa528ada852770ddd180135caf320f4cb580eb72bbc1aaec63dbc7cfc64799462116bd5107a010232a1e56379c93c60324df8e288c8634531ae5cc8cafa6c9343e23b5795bc186a950d0ae15", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) (async) syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) (async) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x85) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) (async) listen(r3, 0x2) (async) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) (async) getsockopt$SO_COOKIE(r3, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000180)=0x8) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000006c0)={0x2c, &(0x7f0000000380)={0x20, 0xc, 0x100, {0x100, 0x24, "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"}}, &(0x7f00000004c0)={0x0, 0x3, 0x70, @string={0x70, 0x3, "66f10aa7509a89647304db6406eb9155c60e723926726959f2ecb48b151393dc78edf3e3f2fb1f65de0ae508a4fefcbd3e8331a1ab55d3d77c3575297db68dfe419e357ecebd9edaed7aa1c94f6f694eae3c809faf7764b9fe02670f7d5cdebbe30aeda06d811525a133b432e225"}}, &(0x7f0000000540)={0x0, 0xf, 0xbd, {0x5, 0xf, 0xbd, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x6, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x38, 0xff, 0xc}, @generic={0x9a, 0x10, 0xa, "9d82e35ed2afc9742efe7a3fb96010de0ef90675de906ab59d674ff3f154b4fa99dd4f2648e62a06e11f4c65b847ff7e1590d3164d1657ded7e77832c301daeef208e3bcb365cc64ecf695769b218533e5be144eb01e638a64ca5ac84fd3ee06fafa36906fdda369e19bf3d9c17269e01c093ef07a3842f26a0f8bc14fa0e988cb723422c9130a36880f4acdf3f81f25ea134aa2a2b247"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x79, 0x9, 0x3ff}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x60, 0x3, 0xff, "62f3a3f9", "f49c44e0"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x10, 0x80, 0x3, 0x5, 0x5, 0xe, 0x1}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000700)={0x0, 0x30, 0x83, "fb22a584f483284e3322f3718fd863fe6ca2d6ba332cbc55b9309ef5fd0decf45e65fbe2a7544a50027d6f4776be827892680847895be2803afe63e14e293a34ba2c8fdbfc7541ffde813a168572da72e762bfcde021876006b1298cfcebd4adccb69580f2721f6b1f923963b92a1250dc1e5114d7f093b39906a09842d362b7078fb4"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x1c}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x1760, 0x40}}, &(0x7f00000008c0)={0x40, 0x7, 0x2}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000940)={0x40, 0xb, 0x2, "1ac3"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, &(0x7f0000000a00)={0x40, 0x17, 0x6}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "d25f"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x9b}}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_default\x00', 0x0, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000000)=ANY=[]) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1, 0x2, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x93, 0x3}) (async) capset(&(0x7f0000000100)={0x19980330, r4}, &(0x7f0000000340)={0x4b5c, 0x0, 0x7aa, 0x1, 0x40, 0x5}) (async) 23.88297463s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 21.225952103s ago: executing program 0 (id=11): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) syz_io_uring_complete(0x0, 0x0) syz_io_uring_setup(0x6b8c, 0x0, 0x0, 0x0, &(0x7f0000000540)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) socket$key(0xf, 0x3, 0x2) openat$kvm(0xffffff9c, &(0x7f0000000580), 0x408082, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44040) mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000012, 0x12, r2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x200007, 0x2000000007c, 0x0, 0x4, 0x4, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x400, 0xffffffffffffffff, 0x6, 0x4, 0xf, 0x4000000007d5}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.294710833s ago: executing program 2 (id=13): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711095000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@new_dev={0x3, 0xef5, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x20}}}, &(0x7f00000000c0)) ioctl$UBLK_U_CMD_DEL_DEV(0xffffffffffffffff, 0xc0207505, &(0x7f0000000100)={0x0}) ioctl$UBLK_U_CMD_DEL_DEV(r0, 0xc0207505, &(0x7f0000000180)={r1}) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000780)=[{0x3, 0xfffffffffffffff8, 0x400, {0x7, 0x9}, 0x7ff, 0xbd98, 0x200}, {0xa, 0x1, 0xd07, {0x4, 0x2}, 0x9, 0x7, 0x7}, {0x7, 0x9, 0x10001, {0x7fffffffffffffff, 0xe}, 0x5, 0x1, 0x9e0}], 0x3, 0x40, 0xd, 0xe2}, {&(0x7f0000000300)=[{0x5}], 0x1, 0x10, 0x20c, 0xfffffffffffffff8}, {&(0x7f0000000340)=[0x6], 0x1, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x403, 0x6, 0x1, 0x7f, 0xd}], 0x1, 0x28, 0x0, 0xffffffffffffff2d}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x9, 0xffff}}) syz_ublk_setup_io_uring(0x46ef, &(0x7f0000000280)={0x0, 0x6dfd, 0x2000, 0x0, 0x331, 0x0, r2}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) socket(0x40000000015, 0x5, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x2000d}}, {@anchor={'anchor', 0x3d, 0x10ffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@shortad}, {@umask={'umask', 0x3d, 0x6}}, {@gid={'gid', 0x3d, 0xee00}}, {@longad}, {@gid_ignore}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, 0x1) 19.723280637s ago: executing program 4 (id=14): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200010025bd70000000000007", @ANYRES32=0x0, @ANYBLOB="00000005"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x78f, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSRNk/a95MGD9/pWgQcaKJ2YGlsFF3ElgoWCrm3DZBpqJpmSmZQmZNEightBxYWgm679UXdu/bFwo/+FC2mpmhYrLiRy50czTWbSSZqZCeTzgZs55/7IOd8595577sxlbgCH1lj6JxNxIiLeSyJGavOTiBiopPojpqvrPVhfy6VTEhsbr/2aVNa5v76Wi4ZtUsdqmf9GxLdvR5zMbC+3tLI6P1Mo5Jdq+YnywpWJ0srqqcsLM3P5ufzimcmpqdNnnzt7Zv9i/f3H1eN33n/56S+m/3zrP7fe/S6J6TheW9YYx34Zi7HaezKQvoWbRva7pN5Lel0B9iQ9NPuqR3mciJHoq6RaGOpmzQCATtkAAA6hxBgAAA6Z+ucA99fXcvWpt59IdNfdlyLiaDX++veb1SX9MR2DlYUDETF8P3nkm5EkIkb3ofyxiPjkqzc+S6eotYPv0oBuuH4jIi6Ojm3v/5NH71nYg2d2WrgxWHkZ2zL7sJ1/oJe+Tsc/zzcb/2Vqx//Ryt+t45/BJsfuXjz++M/c3rrN96/vQ8E16fjvxYZ72x40xF8z2lfL/aMy5htILl0u5NO+7Z8RMR4Dg2l+srJq85Hb+L2/7rUqv3H899sHb36alp++bq6Rud0/+Og2szPlmSeNu+7ujYj/9TeLP3nY/kmL8e/5Nst45YV3Pm61LI0/jbc+bY+/szZuRjzVtP032zLZ8f7EicruMFHfKZr48qePhluV39j+6ZSWX78W6Ia0/Yd3jn80abxfs7T7Mn64OfJNq2WPj7/5/n8kqXYCR2rzrs2Uy0uTEUeSV7fPP725bT1fXz+Nf/z/zY//arHN9//0mvBim/H33/nl873H31lp/LO7av/dJ249mO9rVX577T9VSY3X5rTT/7VbwSd57wAAAAAAAAAAAAAAAAAAAAAAAACgXZmIOB5JJvswnclks9VneP87hjOFYql88lJxeXE2Ks/KHo2BTP2nLkcafg91svZ7+PX86S35ZyPiXxHx4eBQJZ/NFQuzvQ4eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGqOtXj+f+rnwV7XDgDomKO9rgAA0HXO/wBw+Ozu/D/UsXoAAN3j+h8ADp+2z/8XO1sPAKB7XP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQYefPnUunjT/W13JpfvbqyvJ88eqp2XxpPruwnMvmiktXsnPF4lwhn80VF1r+o+vVl0KxeGUqFpevTZTzpfJEaWX1wkJxebF84fLCzFz+Qn6ga5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPtKK6vzM4VCfklix8TQwajGgUn0x4GohkTHEo29xFDvOigAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+7vAAAA//9oei8M") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20000) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r2, 0x40044103, &(0x7f0000000040)=0xd5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r3, &(0x7f0000000000)='2', 0x1, 0x4fed0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x5848d0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x80000, 0xffffffffffffffff}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x1a, "b0bf2ebb48c849ac0000000003000018bfff40"}) r8 = syz_open_pts(r7, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$TIOCSTI(r9, 0x80045440, &(0x7f0000000140)=0x12) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01864c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000080)={0x0, 0x1, r5}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r9, 0xc02864c3, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, r10, r11], 0x1000, 0x3, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01864c1, &(0x7f0000000140)={r11}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 18.849103394s ago: executing program 0 (id=15): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000840)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000008c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000800), r1, r0}}, 0x18) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r3, 0x401) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) statx(r2, &(0x7f0000000a80)='./file1\x00', 0x2000, 0x40, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x5a, 0xa, 0x0, "3258c546dacccfae1e008faa022c1e00f4bf40074000000200"}) setreuid(r4, r5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r7, 0x1}}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x40000000, 0x6}) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000005000000000000000000000009030000000000000061"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb59, '\x00', 0x0, r9, 0x0, 0x3}, 0x50) fcntl$lock(r8, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0x2}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000080)={0x6, @pix_mp={0x1, 0x3, 0x42474752, 0x2, 0x8, [{0x8, 0x7}, {0x0, 0xebf}, {0xffffff4e, 0x80000000}, {0x2, 0x4}, {0x24, 0xfffffff0}, {0xe, 0xae67}, {0xfffeffff, 0x800}, {0x10000, 0x10000}], 0xff, 0xf9, 0x3, 0x2, 0x2}}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) r10 = syz_create_resource$binfmt(&(0x7f0000000100)='./file0\x00') execveat$binfmt(r8, r10, &(0x7f0000000480)={[&(0x7f0000000140)='cpuset.effective_cpus\x00', &(0x7f00000003c0)=':,.\x00', &(0x7f0000000400)='cpuset.effective_cpus\x00', &(0x7f0000000440)='^\'']}, &(0x7f0000000640)={[&(0x7f00000004c0)='\x00', &(0x7f0000000500)='cramfs\x00', &(0x7f0000000540)='#^%\x00', &(0x7f0000000580)='/g+^\x85!\\+\x00', &(0x7f00000005c0)='cramfs\x00', &(0x7f0000000600)='cramfs\x00']}, 0x800) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4008010}, 0x6000) syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="e4fb39599c808ad34b6b52a24b2e2748e3a9e47370bd4b42a7c26b00000059ce3765000000000000003732289225a5a50c3be5ab0304b0747abace08ce521cd749311a6f39ec3acb969bf9aacc7adf9014d7418abc78c21b7f2bf9d076f8e61176a154e68b586159425236215bcfa248adea3ad2d8a0c392aec00cf98aea5202e6dd9e140f1b347bd2d3c86ebf974d0019ffb8b914019bcc1c7982d458f1ee02daaedd7776cc8b6506cea16e6896c252dd8b0fad84dee0da"], 0x1, 0x147, &(0x7f0000000240)="$eJzs0L9LOnEcx/HXfe++EqX9IAMLMqGhIzHPE2tq0EgSsoPCpUmwiwLFSChHI9oaglYHS2gS/wXLWiyFsH+ixS1oLM6PIEZL++uxHPd8v3kPn/XVlgoPIENYy2aOjs1cztzzbBvx6M57rRa2ug3A0MBc7N+HgQPrqwCdM8DKjw5g/zBtLqWyaeu/EwZUAJER0TWI3WGrOUUL9Jo6D9SnRNN/acFem1GAyFj/3tcNsGDdm+jf+wCQL3qrleetZiPmW7yblXER885NSoPdbV7q0emy3SUjYT7dItKdv/kbvld/tdJuNeObRtxoBXV9OagFNC3UNl6asVDhCsqG/QTY/XHPBpdbSQDnEnDdnXUeJAeAeunTyIyulHpvXTiVPYCUL6aSrv/lpHP8H2QVEoiIiIiIiIiIiIiIiIiIiP7qOwAA//8GdGWV") 16.897366267s ago: executing program 1 (id=17): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830500000700ffffff"], 0x4}}, 0x0) sendfile(r2, r0, 0x0, 0x100000000) 16.512960867s ago: executing program 2 (id=18): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100), 0x4, 0x4eb, &(0x7f0000000a40)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x6, 0x1000000000000001, 0x5, 0x42, 0x4, 0xfffffffffffffffd, 0x66c}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) 16.003132964s ago: executing program 4 (id=19): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') unshare(0x2c060000) unshare(0x2a060400) r2 = socket(0x15, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002f40)={'syztnl0\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000003180)={0x0, @initdev, @initdev}, &(0x7f00000031c0)=0xc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x10) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x4, @any, 0x4, 0x1}, 0xe) connect$bt_l2cap(r1, 0x0, 0x0) 15.738936633s ago: executing program 3 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) 15.695756748s ago: executing program 1 (id=21): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x2, 0x7, 0x10, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xc, 0x0}, 0x0) 15.257221904s ago: executing program 0 (id=22): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.031279138s ago: executing program 2 (id=23): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x20c010, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r1, &(0x7f0000000500)=[{&(0x7f0000000800)="3769da66", 0x4}, {0x0}], 0x2) 14.62341676s ago: executing program 1 (id=24): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") io_uring_setup(0x89c, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x0, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fremovexattr(r1, &(0x7f0000000180)=@known='system.posix_acl_access\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x1b, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.559218183s ago: executing program 3 (id=25): syz_usb_connect$uac2(0x5, 0x83, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) gettid() read(0xffffffffffffffff, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 14.160901345s ago: executing program 4 (id=26): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3", 0xa9, 0x5, 0xffffffff}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5", 0x2d}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.652331048s ago: executing program 0 (id=27): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(0x0, 0x0, 0x0, 0x29c439, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) syz_io_uring_setup(0x7677, 0x0, 0x0, 0x0, 0x0) 13.196726641s ago: executing program 3 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x7044}, 0x20004800) 12.815005761s ago: executing program 1 (id=29): read$nci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$nci(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtfilter={0x43c, 0x2c, 0x8, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0x9, 0xe}, {0x2, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x10001, 0x0, 0x48bc, 0x9, 0x5, 0x101, 0x40, 0x1, 0x7, 0x100, 0x8, 0xa76a, 0x4, 0xe2, 0x0, 0x6, 0x83f4, 0x20, 0xaa, 0x40007, 0x0, 0x7, 0x7, 0x20a, 0x86e, 0x2, 0x50, 0x0, 0xff, 0x8, 0x1, 0x3, 0x100, 0x7, 0x85b, 0x4, 0x8, 0x9, 0x9, 0x6, 0x7, 0x3, 0x401, 0x0, 0x7, 0x1, 0xd, 0x8, 0xfffeffff, 0x0, 0x1, 0xe16, 0x101, 0x4, 0x8, 0x9, 0x8, 0x0, 0x90, 0x3, 0x1, 0x7344, 0x3, 0xfff, 0xed38, 0xb0f9, 0x8, 0x400, 0x879, 0x3, 0x4, 0x8b8, 0x2, 0x1, 0xffffff7f, 0xffff8001, 0xa605, 0x4fa9, 0x4859, 0x8, 0xfffffffc, 0x6, 0x7fffffff, 0x84ee, 0xf, 0x2, 0xb, 0x4, 0xffff, 0x4, 0x10001, 0x5, 0x1, 0x4, 0x1, 0x4, 0x200, 0x9, 0x1, 0x4, 0x3, 0x4, 0xd4c5, 0xa, 0x7, 0x2, 0x2, 0x2fd4e867, 0x4, 0xe, 0x9, 0x8, 0x3, 0x0, 0x7d, 0x9, 0x8, 0x5, 0x1, 0x3, 0x2, 0x9, 0x4, 0x6, 0x0, 0xc4, 0xfffffff8, 0x5, 0x4, 0x86b978a9, 0x8, 0x0, 0x9, 0x7f, 0x5, 0x5, 0x4, 0xb9, 0x0, 0x5e4, 0xffffffff, 0x3a39de97, 0x3, 0x3ff, 0x4d, 0x7, 0x3, 0xa, 0x80, 0x1, 0x8, 0x900000, 0xc73d, 0x1, 0x0, 0x80000000, 0x4, 0x3, 0x9, 0x7fff, 0x1d6, 0x0, 0x100, 0x4, 0x1, 0x6, 0x7, 0x40, 0xb22, 0x3, 0x0, 0x2ced, 0xa7a, 0x8, 0x75c, 0x93ca, 0x8, 0x9, 0x10, 0x7, 0x82f9, 0x7, 0x1000, 0xa8e, 0xfff, 0x5, 0xfff, 0x262, 0x81, 0x4, 0x2, 0xff, 0xfffffffb, 0xffff, 0xb36, 0x5, 0x8, 0x10000, 0xda, 0x428, 0xd, 0x1, 0xb0e, 0x2, 0x4, 0x4000, 0x7, 0xfff, 0xf, 0x56, 0x800, 0x401, 0xfff, 0x3, 0x1, 0x6, 0x0, 0xf0, 0x3, 0x5, 0x7dae8f6b, 0xffffffff, 0x3, 0x5, 0x5, 0xf7, 0xfffffff7, 0x6, 0x80, 0x4c6, 0x70d, 0x101, 0x40, 0x4, 0x3, 0x5, 0x2, 0x5, 0x2, 0x0, 0x9, 0x8, 0x7, 0x13050aa4, 0x8000, 0x1ff, 0x7, 0xfff, 0xfaa, 0x0, 0x6, 0x8, 0x40, 0x7, 0x1, 0x8]}]}]}}]}, 0x43c}}, 0x800) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) 12.598908113s ago: executing program 0 (id=30): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x160) 12.432805958s ago: executing program 2 (id=31): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac2(0x0, 0xa6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) 12.302405541s ago: executing program 3 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x4, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xeeee8000, 0xeeee0002, 0xc, 0x8, 0x81, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xff}, {0x10000, 0x5000, 0x3, 0xf4, 0x8, 0x0, 0x0, 0x64, 0xe, 0x0, 0x5, 0xfc}, {0x3000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x3, 0x2}, {0xffff1000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x3, 0x7, 0x0, 0x0, 0x3}, {0x6000, 0xffff1000, 0xf, 0xa, 0x80, 0x10, 0x3, 0xc, 0x58, 0x8, 0x6, 0xfd}, {0x5000, 0x1000, 0xd, 0x3, 0x9b, 0xfd, 0xfc, 0x4, 0x0, 0x9, 0xc0, 0x10}, {0x3000, 0x100000, 0x10, 0x0, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0xe, 0x2, 0x2, 0x6f, 0x1, 0xfd, 0x0, 0x9, 0x3, 0x5}, {0x2000, 0xb}, {}, 0x9df9ffdf, 0x0, 0x2, 0x20, 0xe, 0x8000, 0x2000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) 11.90752955s ago: executing program 4 (id=33): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f00000007c0)='./file1\x00', 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) epoll_create(0x10001) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9.248266001s ago: executing program 1 (id=34): socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvfrom(r4, 0x0, 0x0, 0x2080, 0x0, 0x0) 6.249896849s ago: executing program 3 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 4.851075689s ago: executing program 2 (id=36): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f00000003c0)=""/71, 0xfffffffffffffe83, 0x122, 0x0, 0x0) 4.727561449s ago: executing program 4 (id=37): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/pm_print_times', 0x2242, 0x114) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0xbe}) close_range(r1, 0xffffffffffffffff, 0x0) 1.380546984s ago: executing program 1 (id=38): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$setperm(0x5, 0x0, 0xb8e89b3b78e5d4f1) syslog(0x2, &(0x7f0000000080), 0x0) r3 = semget$private(0x0, 0x7, 0x191) semtimedop(r3, &(0x7f0000000000)=[{0x4, 0x3, 0x1800}], 0x1, 0x0) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000040)) 1.103880062s ago: executing program 0 (id=39): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) sendfile(r2, r2, 0x0, 0x1002000ff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000001340), 0x0, 0xc040) 0s ago: executing program 3 (id=40): r0 = socket$l2tp(0x2, 0x2, 0x73) openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x3008, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x6d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1b}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r4, 0xc0105500, &(0x7f0000000140)=ANY=[]) socket$nl_netfilter(0x10, 0x3, 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x54882) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 194.755828][ T5556] cgroup: Unknown subsys name 'net' [ 194.887955][ T5556] cgroup: Unknown subsys name 'cpuset' [ 194.905264][ T5556] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 201.276168][ T5556] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 205.288442][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.295134][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.212867][ T5575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.223740][ T5575] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.235618][ T5575] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.256618][ T5580] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.271529][ T5580] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 206.308143][ T5578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 206.316091][ T5580] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.327207][ T5578] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 206.344936][ T5580] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 206.352952][ T4876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 206.367799][ T4876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 206.383740][ T4876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 206.413505][ T5586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 206.422743][ T5578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 206.437115][ T5575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 206.467211][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.476339][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.490838][ T5578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.501896][ T5578] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.503017][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.524894][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.538861][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.548613][ T5578] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.561332][ T5578] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 206.561473][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.417591][ T5578] Bluetooth: hci0: command tx timeout [ 208.497040][ T5578] Bluetooth: hci2: command tx timeout [ 208.576938][ T5578] Bluetooth: hci1: command tx timeout [ 208.657048][ T5578] Bluetooth: hci3: command tx timeout [ 208.668899][ T5578] Bluetooth: hci4: command tx timeout [ 210.498282][ T5578] Bluetooth: hci0: command tx timeout [ 210.581296][ T5578] Bluetooth: hci2: command tx timeout [ 210.657472][ T5578] Bluetooth: hci1: command tx timeout [ 210.737518][ T5578] Bluetooth: hci4: command tx timeout [ 210.738924][ T5580] Bluetooth: hci3: command tx timeout [ 211.225778][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.248546][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.258240][ T5574] bridge_slave_0: entered allmulticast mode [ 211.284673][ T5574] bridge_slave_0: entered promiscuous mode [ 211.387692][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.395437][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.403598][ T5574] bridge_slave_1: entered allmulticast mode [ 211.412447][ T5574] bridge_slave_1: entered promiscuous mode [ 211.825564][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.882190][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.890360][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.899556][ T5584] bridge_slave_0: entered allmulticast mode [ 211.910607][ T5584] bridge_slave_0: entered promiscuous mode [ 211.937520][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.105512][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.129062][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.146305][ T5584] bridge_slave_1: entered allmulticast mode [ 212.159714][ T5584] bridge_slave_1: entered promiscuous mode [ 212.341043][ T5574] team0: Port device team_slave_0 added [ 212.349819][ T5577] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.358117][ T5577] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.365793][ T5577] bridge_slave_0: entered allmulticast mode [ 212.376883][ T5577] bridge_slave_0: entered promiscuous mode [ 212.481080][ T5574] team0: Port device team_slave_1 added [ 212.487627][ T5577] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.495338][ T5577] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.503304][ T5577] bridge_slave_1: entered allmulticast mode [ 212.513038][ T5577] bridge_slave_1: entered promiscuous mode [ 212.523996][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.531678][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.539389][ T5585] bridge_slave_0: entered allmulticast mode [ 212.548195][ T5585] bridge_slave_0: entered promiscuous mode [ 212.568931][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.578346][ T5580] Bluetooth: hci0: command tx timeout [ 212.592653][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.657316][ T5580] Bluetooth: hci2: command tx timeout [ 212.691086][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.699135][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.706888][ T5585] bridge_slave_1: entered allmulticast mode [ 212.715452][ T5585] bridge_slave_1: entered promiscuous mode [ 212.746910][ T5580] Bluetooth: hci1: command tx timeout [ 212.755335][ T5573] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.763199][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.771071][ T5573] bridge_slave_0: entered allmulticast mode [ 212.780032][ T5573] bridge_slave_0: entered promiscuous mode [ 212.816970][ T5580] Bluetooth: hci4: command tx timeout [ 212.822717][ T5578] Bluetooth: hci3: command tx timeout [ 212.910336][ T5573] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.918593][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.926130][ T5573] bridge_slave_1: entered allmulticast mode [ 212.935470][ T5573] bridge_slave_1: entered promiscuous mode [ 212.949279][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.956347][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.982944][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.004803][ T5577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.051495][ T5584] team0: Port device team_slave_0 added [ 213.088571][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.095728][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.122228][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.143116][ T5577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.161571][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.180018][ T5584] team0: Port device team_slave_1 added [ 213.264315][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.323073][ T5573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.345691][ T5573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.441981][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.449449][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.475883][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.557951][ T5577] team0: Port device team_slave_0 added [ 213.620536][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.628716][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.655689][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.676001][ T5573] team0: Port device team_slave_0 added [ 213.690498][ T5577] team0: Port device team_slave_1 added [ 213.704090][ T5585] team0: Port device team_slave_0 added [ 213.765525][ T5573] team0: Port device team_slave_1 added [ 213.807442][ T5585] team0: Port device team_slave_1 added [ 213.828662][ T5574] hsr_slave_0: entered promiscuous mode [ 213.838183][ T5574] hsr_slave_1: entered promiscuous mode [ 213.970274][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.978013][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.004591][ T5577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.047949][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.055116][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.081398][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.122305][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.129938][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.156444][ T5573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.170962][ T5577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.178764][ T5577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.205091][ T5577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.270415][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.278153][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.304612][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.350770][ T5573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.358329][ T5573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.384945][ T5573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.482823][ T5584] hsr_slave_0: entered promiscuous mode [ 214.491815][ T5584] hsr_slave_1: entered promiscuous mode [ 214.500459][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 214.506345][ T5584] Cannot create hsr debugfs directory [ 214.656953][ T5580] Bluetooth: hci0: command tx timeout [ 214.748274][ T5580] Bluetooth: hci2: command tx timeout [ 214.817182][ T5580] Bluetooth: hci1: command tx timeout [ 214.833305][ T5577] hsr_slave_0: entered promiscuous mode [ 214.842315][ T5577] hsr_slave_1: entered promiscuous mode [ 214.850849][ T5577] debugfs: 'hsr0' already exists in 'hsr' [ 214.856819][ T5577] Cannot create hsr debugfs directory [ 214.907834][ T5580] Bluetooth: hci4: command tx timeout [ 214.908325][ T5578] Bluetooth: hci3: command tx timeout [ 214.929844][ T5585] hsr_slave_0: entered promiscuous mode [ 214.939636][ T5585] hsr_slave_1: entered promiscuous mode [ 214.948428][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 214.954301][ T5585] Cannot create hsr debugfs directory [ 214.975128][ T5573] hsr_slave_0: entered promiscuous mode [ 214.984528][ T5573] hsr_slave_1: entered promiscuous mode [ 214.993315][ T5573] debugfs: 'hsr0' already exists in 'hsr' [ 214.999347][ T5573] Cannot create hsr debugfs directory [ 216.352311][ T5574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.383551][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.398212][ T5574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.423434][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.435863][ T5574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.455751][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.481805][ T5574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.504176][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.625430][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 216.650256][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.661688][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 216.681536][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.703816][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 216.725809][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.735944][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.757003][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.938984][ T5577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 216.965703][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.977980][ T5577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.000634][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.013843][ T5577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.032738][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.047715][ T5577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.073307][ T5577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.361137][ T5573] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.382048][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.428669][ T5573] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.452374][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.463467][ T5573] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.491282][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.501739][ T5573] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.525676][ T5573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 217.811036][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.833950][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.868127][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.894396][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 217.952764][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.973122][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 217.984068][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.012929][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 218.171433][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.405733][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.436334][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.502276][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.509936][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.621343][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.628923][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.672863][ T5577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.742916][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.835919][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.843372][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.935613][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.943090][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.018861][ T5573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.038301][ T5577] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.146458][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.154056][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.288501][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.296700][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.404476][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.438214][ T5573] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.553346][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.561069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.644357][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.652056][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.834032][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.950873][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.958541][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.061792][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.069454][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.907769][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.761529][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.837007][ T5574] veth0_vlan: entered promiscuous mode [ 224.028810][ T5574] veth1_vlan: entered promiscuous mode [ 224.114592][ T5577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.540513][ T5573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.602485][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.746134][ T5574] veth0_macvtap: entered promiscuous mode [ 224.791094][ T5574] veth1_macvtap: entered promiscuous mode [ 224.955236][ T5577] veth0_vlan: entered promiscuous mode [ 225.078172][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.158688][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.172952][ T5577] veth1_vlan: entered promiscuous mode [ 225.334074][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.350603][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.394048][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.410943][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.609933][ T5585] veth0_vlan: entered promiscuous mode [ 225.651803][ T5573] veth0_vlan: entered promiscuous mode [ 225.871100][ T5585] veth1_vlan: entered promiscuous mode [ 225.988613][ T5573] veth1_vlan: entered promiscuous mode [ 226.049651][ T5584] veth0_vlan: entered promiscuous mode [ 226.067737][ T5577] veth0_macvtap: entered promiscuous mode [ 226.203847][ T5577] veth1_macvtap: entered promiscuous mode [ 226.236455][ T5584] veth1_vlan: entered promiscuous mode [ 226.537004][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.610154][ T5573] veth0_macvtap: entered promiscuous mode [ 226.653749][ T5585] veth0_macvtap: entered promiscuous mode [ 226.705947][ T5577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.776468][ T5573] veth1_macvtap: entered promiscuous mode [ 226.838247][ T5585] veth1_macvtap: entered promiscuous mode [ 226.895839][ T199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.920109][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.940132][ T5584] veth0_macvtap: entered promiscuous mode [ 226.968611][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.981125][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.034756][ T5584] veth1_macvtap: entered promiscuous mode [ 227.221086][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.270275][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.423764][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.449996][ T5573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.503165][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.627289][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.641182][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.672025][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.696251][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.730983][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.834788][ T56] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.855319][ T56] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.911617][ T1011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.945608][ T1011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.043874][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.080547][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.164510][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.198234][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.191080][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.235583][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.588898][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.602535][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.227333][ T5574] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 233.338292][ T30] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 233.394807][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.429909][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.573647][ T30] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x1 is Bulk; changing to Interrupt [ 233.591864][ T30] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 233.641098][ T30] usb 1-1: config 1 interface 0 has no altsetting 0 [ 233.682844][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.705924][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.735300][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.743318][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.764759][ T30] usb 1-1: Product: ༠첖將孍䢰鋎ʗਫ衖䠹⍸뭲봘Ç鋞褫᤟Ꚇ뭼֏窂逕퉈뷠霦攗穯ﱞͺ눮髬▕珐溃饗㵛衖﯇ᦅ홐划决స觍㑥࿡ﵞ潚 [ 233.828606][ T30] usb 1-1: Manufacturer: ခ [ 233.858628][ T30] usb 1-1: SerialNumber: ф [ 233.907202][ T5824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 233.957675][ T5824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 234.510116][ T5824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.560539][ T5824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.899458][ T30] usb 1-1: USB disconnect, device number 2 [ 234.925208][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.969188][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.170111][ T1011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.180501][ T1011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.252132][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.271057][ T1601] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 235.290578][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.413640][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.424386][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.496286][ T1601] usb 2-1: config 1 interface 0 altsetting 128 endpoint 0x1 is Bulk; changing to Interrupt [ 235.514822][ T1601] usb 2-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.553557][ T1601] usb 2-1: config 1 interface 0 has no altsetting 0 [ 235.587239][ T1601] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 235.646790][ T1601] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.655153][ T1601] usb 2-1: Product: ༠첖將孍䢰鋎ʗਫ衖䠹⍸뭲봘Ç鋞褫᤟Ꚇ뭼֏窂逕퉈뷠霦攗穯ﱞͺ눮髬▕珐溃饗㵛衖﯇ᦅ홐划决స觍㑥࿡ﵞ潚 [ 235.701013][ T1601] usb 2-1: Manufacturer: ခ [ 235.727901][ T1601] usb 2-1: SerialNumber: ф [ 235.759769][ T5841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.809830][ T5841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.854820][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.899296][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.225672][ T5705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.246125][ T5705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.388660][ T5841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.445161][ T5841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.727636][ T30] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 236.796212][ T5852] FAULT_INJECTION: forcing a failure. [ 236.796212][ T5852] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 236.901098][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(lazy) [ 236.901248][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 236.901352][ T5852] Call Trace: [ 236.901407][ T5852] [ 236.901460][ T5852] __dump_stack+0x26/0x30 [ 236.901646][ T5852] dump_stack_lvl+0x14c/0x1c0 [ 236.901824][ T5852] dump_stack+0x1e/0x25 [ 236.901971][ T5852] should_fail_ex+0x7e2/0x8c0 [ 236.902162][ T5852] should_fail+0x2a/0x40 [ 236.902313][ T5852] should_fail_usercopy+0x2e/0x40 [ 236.902487][ T5852] strncpy_from_user+0x38/0x4b0 [ 236.902626][ T5852] ? kmsan_get_metadata+0xf1/0x160 [ 236.902846][ T5852] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 236.903061][ T5852] do_getname+0xc7/0x530 [ 236.903213][ T5852] __se_sys_mkdirat+0x3f/0x330 [ 236.903408][ T5852] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 236.903626][ T5852] __x64_sys_mkdirat+0x97/0xe0 [ 236.903832][ T5852] x64_sys_call+0x37fc/0x3ea0 [ 236.904014][ T5852] do_syscall_64+0x15d/0x3c0 [ 236.904288][ T5852] ? clear_bhb_loop+0x50/0xa0 [ 236.904447][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.904615][ T5852] RIP: 0033:0x7fcafa19bcc7 [ 236.904754][ T5852] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.904877][ T5852] RSP: 002b:00007fcafb119e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 236.905019][ T5852] RAX: ffffffffffffffda RBX: 00007fcafb119ee0 RCX: 00007fcafa19bcc7 [ 236.905111][ T5852] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 236.905195][ T5852] RBP: 0000200000000040 R08: 00002000000000c0 R09: 0000000000000000 [ 236.905314][ T5852] R10: 0000200000000040 R11: 0000000000000246 R12: 0000200000000080 [ 236.905413][ T5852] R13: 00007fcafb119ea0 R14: 0000000000000000 R15: 0000000000000000 [ 236.905545][ T5852] [ 236.969327][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 237.058425][ T1601] usb 2-1: USB disconnect, device number 2 [ 237.372152][ T30] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.448717][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.495156][ T30] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 237.535299][ T5857] openvswitch: netlink: IP tunnel attribute has 1620 unknown bytes. [ 237.571328][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.602512][ T30] usb 5-1: Product: syz [ 237.650333][ T30] usb 5-1: Manufacturer: syz [ 237.662865][ T30] usb 5-1: SerialNumber: syz [ 237.711238][ T30] usb 5-1: config 0 descriptor?? [ 237.974247][ T5847] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 238.011442][ T5847] program syz.4.5 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 238.108247][ T5853] syzkaller0: entered promiscuous mode [ 238.131537][ T5853] syzkaller0: entered allmulticast mode [ 238.201454][ T5863] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 238.278233][ T30] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 238.737829][ T1601] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 238.957494][ T1601] usb 2-1: Using ep0 maxpacket: 32 [ 239.010344][ T30] rc_core: IR keymap rc-imon-pad not found [ 239.014006][ T1601] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 239.041157][ T30] Registered IR keymap rc-empty [ 239.061504][ T1601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.091762][ T30] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 239.132727][ T30] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 239.153442][ T1601] usb 2-1: config 0 descriptor?? [ 239.249665][ T30] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 239.289262][ T1601] gspca_main: sunplus-2.14.0 probing 041e:400b [ 239.334362][ T30] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input6 [ 239.450139][ T30] imon 5-1:0.0: iMON device (15c2:0041, intf0) on usb<5:2> initialized [ 239.805765][ T5869] program syz.1.10 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 239.829711][ T1601] gspca_sunplus: reg_w_riv err -110 [ 239.857032][ T1601] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 240.041618][ T5869] loop1: detected capacity change from 0 to 256 [ 240.142385][ T5869] exfat: Deprecated parameter 'namecase' [ 240.168533][ T5869] exfat: Deprecated parameter 'namecase' [ 240.431334][ T5869] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 240.498210][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 240.511256][ T1601] usb 5-1: USB disconnect, device number 2 [ 240.568554][ T5881] loop3: detected capacity change from 0 to 512 [ 240.843800][ T5881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.899910][ T5881] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.119495][ T5887] loop4: detected capacity change from 0 to 2048 [ 241.239922][ T5887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.380695][ T5882] loop2: detected capacity change from 0 to 4096 [ 241.500199][ T5887] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 241.629371][ T5895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.655532][ T5887] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 241.670102][ T5892] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 241.725324][ T5882] NILFS (loop2): bad btree node (ino=3, blocknr=1024): level = 0, flags = 0x0, nchildren = 0 [ 241.767425][ T5882] NILFS (loop2): error -5 preparing GC: cannot read source blocks [ 241.779790][ T5887] EXT4-fs (loop4): This should not happen!! Data will be lost [ 241.779790][ T5887] [ 241.873397][ T5892] EXT4-fs (loop4): This should not happen!! Data will be lost [ 241.873397][ T5892] [ 241.878531][ T5887] EXT4-fs (loop4): Total free blocks count 0 [ 241.932891][ T5897] ucma_write: process 18 (syz.0.15) changed security contexts after opening file descriptor, this is not allowed. [ 241.954877][ T5573] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.042634][ T5892] EXT4-fs (loop4): Total free blocks count 0 [ 242.071880][ T5887] EXT4-fs (loop4): Free/Dirty block details [ 242.181667][ T5892] EXT4-fs (loop4): Free/Dirty block details [ 242.187389][ T5887] EXT4-fs (loop4): free_blocks=2415919504 [ 242.418904][ T1601] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 242.581779][ T5887] ======================================================= [ 242.581779][ T5887] WARNING: The mand mount option has been deprecated and [ 242.581779][ T5887] and is ignored by this kernel. Remove the mand [ 242.581779][ T5887] option from the mount to silence this warning. [ 242.581779][ T5887] ======================================================= [ 242.746897][ T1601] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 242.810256][ T1601] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 242.882344][ T1601] usb 1-1: config 220 has no interface number 2 [ 242.917448][ T1601] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 243.004241][ T1601] usb 1-1: config 220 interface 0 has no altsetting 0 [ 243.060524][ T1601] usb 1-1: config 220 interface 76 has no altsetting 0 [ 243.104493][ T1601] usb 1-1: config 220 interface 1 has no altsetting 0 [ 243.186286][ T1601] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 243.221775][ T1601] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.252785][ T1601] usb 1-1: Product: syz [ 243.276161][ T1601] usb 1-1: Manufacturer: syz [ 243.304165][ T1601] usb 1-1: SerialNumber: syz [ 243.325736][ T5675] usb 2-1: USB disconnect, device number 3 [ 243.722246][ T5897] loop0: detected capacity change from 0 to 16 [ 243.853572][ T5897] cramfs: Unknown parameter '9YKkRK.'HspKBk' [ 244.047528][ T1601] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 244.079651][ T1601] uvcvideo 1-1:220.0: No valid video chain found. [ 244.107415][ T1601] usb 1-1: selecting invalid altsetting 0 [ 244.253266][ T5584] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 244.270359][ T1601] usb 1-1: selecting invalid altsetting 0 [ 244.304005][ T1601] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 244.350084][ T1601] usb 1-1: USB disconnect, device number 3 [ 244.448498][ T5912] loop2: detected capacity change from 0 to 512 [ 244.643092][ T5912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.684884][ T5912] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.283260][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.475174][ T5931] loop1: detected capacity change from 0 to 2048 [ 246.540187][ T5931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.751640][ T5931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.827748][ T5930] loop2: detected capacity change from 0 to 4096 [ 246.893237][ T5931] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.24: corrupted in-inode xattr: invalid ea_ino [ 247.002265][ T5931] EXT4-fs (loop1): Remounting filesystem read-only [ 247.024278][ T5930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.062457][ T5942] process 'syz.0.27' launched './file1' with NULL argv: empty string added [ 247.433231][ T5948] netlink: 20 bytes leftover after parsing attributes in process `syz.3.28'. [ 247.545436][ T5577] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.935227][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.227410][ T5953] loop0: detected capacity change from 0 to 256 [ 248.891238][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.548574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.607734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.710397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 249.917014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 250.017372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 250.187703][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 250.427093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 250.529429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 250.632058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 252.259559][ T5953] FAT-fs (loop0): Directory bread(block 64) failed [ 252.463220][ T5953] FAT-fs (loop0): Directory bread(block 65) failed [ 252.619269][ T5953] FAT-fs (loop0): Directory bread(block 66) failed [ 252.712477][ T5953] FAT-fs (loop0): Directory bread(block 67) failed [ 252.858873][ T5953] FAT-fs (loop0): Directory bread(block 68) failed [ 253.005034][ T5953] FAT-fs (loop0): Directory bread(block 69) failed [ 253.130845][ T5953] FAT-fs (loop0): Directory bread(block 70) failed [ 253.217962][ T5953] FAT-fs (loop0): Directory bread(block 71) failed [ 253.360262][ T5953] FAT-fs (loop0): Directory bread(block 72) failed [ 253.479267][ T5953] FAT-fs (loop0): Directory bread(block 73) failed [ 260.547074][ T5988] ===================================================== [ 260.554620][ T5988] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 260.565945][ T5988] mptcp_established_options+0x112f/0x3530 [ 260.573540][ T5988] tcp_established_options+0x312/0xcc0 [ 260.579491][ T5988] __tcp_transmit_skb+0x5dc/0x5fe0 [ 260.584960][ T5988] __tcp_send_ack+0x967/0xad0 [ 260.590036][ T5988] tcp_send_ack+0x3d/0x60 [ 260.594637][ T5988] mptcp_subflow_shutdown+0x164/0x690 [ 260.600824][ T5988] mptcp_check_send_data_fin+0x31b/0x3d0 [ 260.606919][ T5988] __mptcp_close+0x860/0x1360 [ 260.611868][ T5988] mptcp_close+0x42/0x260 [ 260.616395][ T5988] inet_release+0x1ee/0x2a0 [ 260.621333][ T5988] sock_close+0xd6/0x2f0 [ 260.625777][ T5988] __fput+0x60e/0x1010 [ 260.630446][ T5988] ____fput+0x25/0x30 [ 260.634646][ T5988] task_work_run+0x208/0x2b0 [ 260.639662][ T5988] get_signal+0x136/0x29f0 [ 260.644328][ T5988] arch_do_signal_or_restart+0x53/0xc70 [ 260.650305][ T5988] exit_to_user_mode_loop+0x214/0x2420 [ 260.655983][ T5988] do_syscall_64+0x261/0x3c0 [ 260.661118][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.670665][ T5988] [ 260.673113][ T5988] Local variable opts created at: [ 260.678395][ T5988] __tcp_transmit_skb+0x4d/0x5fe0 [ 260.683644][ T5988] __tcp_send_ack+0x967/0xad0 [ 260.688893][ T5988] [ 260.691370][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: syz.2.36 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 260.702507][ T5988] Tainted: [L]=SOFTLOCKUP [ 260.707083][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 260.717495][ T5988] ===================================================== [ 260.724564][ T5988] Disabling lock debugging due to kernel taint [ 263.273352][ T5988] Kernel panic - not syncing: kmsan.panic set ... [ 263.279982][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.2.36 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 263.290901][ T5988] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 263.296562][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.306765][ T5988] Call Trace: [ 263.310190][ T5988] [ 263.313236][ T5988] __dump_stack+0x26/0x30 [ 263.317774][ T5988] dump_stack_lvl+0x50/0x1c0 [ 263.322564][ T5988] ? dump_stack+0x12/0x25 [ 263.327095][ T5988] dump_stack+0x1e/0x25 [ 263.331459][ T5988] vpanic+0x7b4/0x1430 [ 263.335781][ T5988] panic+0x15d/0x160 [ 263.339985][ T5988] kmsan_report+0x31a/0x320 [ 263.344748][ T5988] ? __msan_warning+0x1b/0x30 [ 263.349641][ T5988] ? mptcp_established_options+0x112f/0x3530 [ 263.355869][ T5988] ? tcp_established_options+0x312/0xcc0 [ 263.361698][ T5988] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 263.367189][ T5988] ? __tcp_send_ack+0x967/0xad0 [ 263.372237][ T5988] ? tcp_send_ack+0x3d/0x60 [ 263.376971][ T5988] ? mptcp_subflow_shutdown+0x164/0x690 [ 263.382792][ T5988] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 263.388839][ T5988] ? __mptcp_close+0x860/0x1360 [ 263.393925][ T5988] ? mptcp_close+0x42/0x260 [ 263.398614][ T5988] ? inet_release+0x1ee/0x2a0 [ 263.403530][ T5988] ? sock_close+0xd6/0x2f0 [ 263.408126][ T5988] ? __fput+0x60e/0x1010 [ 263.412553][ T5988] ? ____fput+0x25/0x30 [ 263.416898][ T5988] ? task_work_run+0x208/0x2b0 [ 263.421846][ T5988] ? get_signal+0x136/0x29f0 [ 263.426652][ T5988] ? arch_do_signal_or_restart+0x53/0xc70 [ 263.432571][ T5988] ? exit_to_user_mode_loop+0x214/0x2420 [ 263.438408][ T5988] ? do_syscall_64+0x261/0x3c0 [ 263.443477][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.449748][ T5988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.456028][ T5988] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 263.462100][ T5988] ? mptcp_established_options+0x61/0x3530 [ 263.468161][ T5988] ? filter_irq_stacks+0x49/0x190 [ 263.473387][ T5988] ? stack_depot_save_flags+0x35/0x790 [ 263.479052][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.484405][ T5988] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 263.490976][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.496438][ T5988] __msan_warning+0x1b/0x30 [ 263.501162][ T5988] mptcp_established_options+0x112f/0x3530 [ 263.507262][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.512688][ T5988] tcp_established_options+0x312/0xcc0 [ 263.518400][ T5988] __tcp_transmit_skb+0x5dc/0x5fe0 [ 263.523737][ T5988] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 263.530191][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.535595][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.540970][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.546338][ T5988] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 263.552492][ T5988] ? __alloc_skb+0xb7d/0x1190 [ 263.557427][ T5988] __tcp_send_ack+0x967/0xad0 [ 263.562337][ T5988] tcp_send_ack+0x3d/0x60 [ 263.566926][ T5988] mptcp_subflow_shutdown+0x164/0x690 [ 263.572554][ T5988] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 263.578628][ T5988] mptcp_check_send_data_fin+0x31b/0x3d0 [ 263.584534][ T5988] __mptcp_close+0x860/0x1360 [ 263.589475][ T5988] ? __pfx_mptcp_close+0x10/0x10 [ 263.594612][ T5988] mptcp_close+0x42/0x260 [ 263.599128][ T5988] ? __pfx_mptcp_close+0x10/0x10 [ 263.604261][ T5988] inet_release+0x1ee/0x2a0 [ 263.609025][ T5988] ? __pfx_inet_release+0x10/0x10 [ 263.614299][ T5988] sock_close+0xd6/0x2f0 [ 263.618921][ T5988] ? __pfx_sock_close+0x10/0x10 [ 263.623979][ T5988] __fput+0x60e/0x1010 [ 263.628376][ T5988] ? __pfx_____fput+0x10/0x10 [ 263.633264][ T5988] ____fput+0x25/0x30 [ 263.637531][ T5988] task_work_run+0x208/0x2b0 [ 263.642330][ T5988] get_signal+0x136/0x29f0 [ 263.646967][ T5988] ? arch_do_signal_or_restart+0x11/0xc70 [ 263.652898][ T5988] ? filter_irq_stacks+0x49/0x190 [ 263.658166][ T5988] ? stack_depot_save_flags+0x35/0x790 [ 263.663835][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.669224][ T5988] ? arch_do_signal_or_restart+0x43/0xc70 [ 263.675146][ T5988] ? exit_to_user_mode_loop+0x214/0x2420 [ 263.680986][ T5988] arch_do_signal_or_restart+0x53/0xc70 [ 263.686769][ T5988] ? __sys_recvfrom+0x3f7/0x550 [ 263.691857][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.697215][ T5988] ? kfree+0x20/0x1100 [ 263.701514][ T5988] ? kcov_ioctl+0x212/0x640 [ 263.706196][ T5988] ? kmsan_get_metadata+0xf1/0x160 [ 263.711553][ T5988] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 263.718134][ T5988] exit_to_user_mode_loop+0x214/0x2420 [ 263.723877][ T5988] do_syscall_64+0x261/0x3c0 [ 263.728736][ T5988] ? clear_bhb_loop+0x50/0xa0 [ 263.733655][ T5988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.739785][ T5988] RIP: 0033:0x7fa676b9ce59 [ 263.744362][ T5988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.764264][ T5988] RSP: 002b:00007fa674dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 263.772881][ T5988] RAX: fffffffffffffe00 RBX: 00007fa676e16180 RCX: 00007fa676b9ce59 [ 263.781036][ T5988] RDX: fffffffffffffe83 RSI: 00002000000003c0 RDI: 0000000000000005 [ 263.789194][ T5988] RBP: 00007fa676c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 263.797325][ T5988] R10: 0000000000000122 R11: 0000000000000246 R12: 0000000000000000 [ 263.805442][ T5988] R13: 00007fa676e16218 R14: 00007fa676e16180 R15: 00007ffe27627d38 [ 263.813617][ T5988] [ 263.817462][ T5988] Kernel Offset: disabled [ 263.821872][ T5988] Rebooting in 86400 seconds..