last executing test programs: 14.378992281s ago: executing program 0 (id=21): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/cpuinfo\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f00000005c0)={r5, @in={{0x2, 0x4e24, @private=0xa010100}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x1}, 0x8) 14.136363838s ago: executing program 0 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x10, 0x5, 0x801, 0x0, &(0x7f0000000280), 0x2) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 10.401253108s ago: executing program 0 (id=32): syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x4, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x5, 0x0) ioctl(r0, 0xc4c85513, &(0x7f0000000200)="1b0000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000") ioctl(r1, 0xc4c85513, &(0x7f0000000200)) ioctl(r2, 0xc4c85513, &(0x7f0000000200)) ioctl(r3, 0xc4c85513, &(0x7f0000000200)) ioctl(r4, 0xc4c85513, &(0x7f0000000200)) ioctl(r5, 0xc4c85513, &(0x7f0000000200)) 9.595256827s ago: executing program 3 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1a}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000324c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 9.570072518s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='2049\n\x00', 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000700)={0x2, 0x802, @empty}, 0x10) listen(r1, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs\x00', &(0x7f0000000300)='nfs4\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2050,minorversion=2\x00') (async) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000800)={0x1}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r2, &(0x7f0000000600)="80000028123456780000000000000002000186a30000000300000000000003e700"/44, 0x2c) 8.354576858s ago: executing program 1 (id=36): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000006540), 0x8) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x100, 0x0, 0x2a6}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x11e6}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x1000000, 0x10}}}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 8.295668569s ago: executing program 2 (id=37): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000006c0)={0xffffffffffffffff, &(0x7f0000000140)='nonumtail=0', 0x0, &(0x7f0000000180)={@_ha_fsid={[0x4, 0xfffffffe]}, {0x1ff, 0x70, 0x8, 0x9}}, 0x100, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x129080, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20980, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000c0000000500000007"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x85, 0x6, 0x0, 0x0, 0x10003, 0x3d, 0x400200cc4, 0xffd, 0x4, 0x9, 0x8001, 0x4, 0x2, 0xfffffffffffffffc, 0x6a, 0x8d], 0x60000, 0x2011c0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.159785532s ago: executing program 3 (id=38): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x48000, 0x9, 0x6, 0x4, 0xffff}, 0x8d23}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)="eb", 0x1}], 0x1}, 0x4011) 7.807471341s ago: executing program 2 (id=39): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40081, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 7.172512106s ago: executing program 1 (id=40): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x1, 0x1}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x5dc}], 0x1}, 0x4011) 6.862509924s ago: executing program 3 (id=41): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) 6.751304727s ago: executing program 1 (id=42): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 6.730571237s ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='./file0\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='1\x00', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1\x00', 0x1ff) 5.997340945s ago: executing program 0 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40408d0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000080)=0xfff, 0x4) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "c42d63f980dfbaa6", "43bcecdd21f55be0266a460d84605c030802ac0b38baa9d317c79977994ab3fe", "2b710100", "d23a3ee3389eec27"}, 0x38) 5.262537953s ago: executing program 1 (id=45): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000400)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000340)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000002440)=[{&(0x7f0000000200)="9c", 0x1}, {0x0}], 0x2}}], 0x1, 0x20008004) 5.220918804s ago: executing program 3 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='2049\n\x00', 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000700)={0x2, 0x802, @empty}, 0x10) listen(r1, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000200)='./nfs\x00', &(0x7f0000000300)='nfs4\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2050,minorversion=2\x00') (async) accept$inet(r1, 0x0, 0x0) nanosleep(&(0x7f0000000800)={0x1}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r2, &(0x7f0000000600)="80000028123456780000000000000002000186a30000000300000000000003e700"/44, 0x2c) 4.503240361s ago: executing program 2 (id=47): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) 4.329775096s ago: executing program 0 (id=48): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = fcntl$dupfd(r1, 0x406, r1) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x8001) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r4) sendmmsg$inet(r4, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="8f", 0x1}], 0x1}}], 0x1, 0x40840) 3.814392928s ago: executing program 1 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) 2.029501981s ago: executing program 0 (id=50): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mlockall(0x7) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f00000006c0)={0x2, {{0x2, 0x4e1c, @multicast2}}, {{0x2, 0x4e21, @empty}}}, 0x108) 2.001962022s ago: executing program 2 (id=51): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0xc0480c0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "0f979fc13f8d9dd0", "724be51cffd88a0cddc0abcddba9f77d", '|Q;s', "bd63fa052085e630"}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.991234612s ago: executing program 1 (id=52): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, 0x0, 0x6}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x20000885) 1.363502097s ago: executing program 3 (id=53): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) gettid() r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x2c, r3, 0xa01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x865}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}}, 0x0) 0s ago: executing program 3 (id=54): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000003c0)={'dmm32at\x00', [0x140, 0xffffffff, 0xd, 0x6, 0x5, 0x8, 0x10001, 0x40000006, 0x7, 0xc72d, 0x5, 0x7, 0x2009, 0xd, 0x20fff, 0x9e9b, 0x101, 0x8, 0x6, 0x9, 0x4, 0x461, 0xa, 0x9, 0xffd, 0x88000004, 0xaf, 0x3, 0x283, 0x8001, 0x4]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts. [ 75.589102][ T5761] cgroup: Unknown subsys name 'net' [ 75.720809][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.255491][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.800034][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.808331][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.823422][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.842540][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.847130][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.850685][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.860205][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.871252][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.879584][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.883399][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.900164][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.904949][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.911781][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.916390][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.923424][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.929850][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.942862][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.943010][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.957180][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.958863][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.973296][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.975837][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.988929][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.999948][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.437896][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 79.486548][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 79.588968][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 79.600205][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.607768][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.615599][ T5775] bridge_slave_0: entered allmulticast mode [ 79.622674][ T5775] bridge_slave_0: entered promiscuous mode [ 79.660877][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.668318][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.675527][ T5775] bridge_slave_1: entered allmulticast mode [ 79.682384][ T5775] bridge_slave_1: entered promiscuous mode [ 79.689427][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 79.742127][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.762655][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.769778][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.777271][ T5774] bridge_slave_0: entered allmulticast mode [ 79.784601][ T5774] bridge_slave_0: entered promiscuous mode [ 79.800441][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.817780][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.825184][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.832293][ T5774] bridge_slave_1: entered allmulticast mode [ 79.839573][ T5774] bridge_slave_1: entered promiscuous mode [ 79.931716][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.944042][ T5775] team0: Port device team_slave_0 added [ 79.961033][ T5775] team0: Port device team_slave_1 added [ 79.979367][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.008701][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.018341][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.025652][ T5773] bridge_slave_0: entered allmulticast mode [ 80.032922][ T5773] bridge_slave_0: entered promiscuous mode [ 80.040912][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.048104][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.055309][ T5773] bridge_slave_1: entered allmulticast mode [ 80.062242][ T5773] bridge_slave_1: entered promiscuous mode [ 80.097335][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.107011][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.114296][ T5772] bridge_slave_0: entered allmulticast mode [ 80.121068][ T5772] bridge_slave_0: entered promiscuous mode [ 80.148456][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.155687][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.181815][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.194321][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.201466][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.208683][ T5772] bridge_slave_1: entered allmulticast mode [ 80.215659][ T5772] bridge_slave_1: entered promiscuous mode [ 80.234736][ T5774] team0: Port device team_slave_0 added [ 80.246322][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.256342][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.265983][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.292153][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.316131][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.326928][ T5774] team0: Port device team_slave_1 added [ 80.345395][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.372069][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.408456][ T5773] team0: Port device team_slave_0 added [ 80.425353][ T5773] team0: Port device team_slave_1 added [ 80.431585][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.441292][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.470004][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.518832][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.526145][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.552695][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.575711][ T5775] hsr_slave_0: entered promiscuous mode [ 80.582032][ T5775] hsr_slave_1: entered promiscuous mode [ 80.608853][ T5772] team0: Port device team_slave_0 added [ 80.617436][ T5772] team0: Port device team_slave_1 added [ 80.627012][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.634091][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.660106][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.672388][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.679456][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.705437][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.759826][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.766842][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.792975][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.806174][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.813736][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.839853][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.872023][ T5774] hsr_slave_0: entered promiscuous mode [ 80.879835][ T5774] hsr_slave_1: entered promiscuous mode [ 80.886520][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.894523][ T5774] Cannot create hsr debugfs directory [ 80.952797][ T5773] hsr_slave_0: entered promiscuous mode [ 80.959194][ T5773] hsr_slave_1: entered promiscuous mode [ 80.965883][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.974180][ T5773] Cannot create hsr debugfs directory [ 81.004042][ T5772] hsr_slave_0: entered promiscuous mode [ 81.010300][ T5772] hsr_slave_1: entered promiscuous mode [ 81.016539][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.024360][ T5772] Cannot create hsr debugfs directory [ 81.053558][ T5779] Bluetooth: hci0: command tx timeout [ 81.059219][ T5779] Bluetooth: hci1: command tx timeout [ 81.061914][ T5786] Bluetooth: hci3: command tx timeout [ 81.064816][ T5779] Bluetooth: hci2: command tx timeout [ 81.407895][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.432126][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.443591][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.467640][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.547540][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.558098][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.576974][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.595718][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.675978][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.706000][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.717812][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.738946][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.771420][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.785928][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.795826][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.815676][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.837510][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.863869][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.888469][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.895762][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.945881][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.953090][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.065005][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.080301][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.097694][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.116082][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.147769][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.173677][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.180820][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.201401][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.208579][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.241196][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.248380][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.279835][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.286984][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.321818][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.396219][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.403457][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.432556][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.439703][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.460954][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.687097][ T5775] veth0_vlan: entered promiscuous mode [ 82.720225][ T5775] veth1_vlan: entered promiscuous mode [ 82.800016][ T5775] veth0_macvtap: entered promiscuous mode [ 82.846407][ T5775] veth1_macvtap: entered promiscuous mode [ 82.895278][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.922231][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.954454][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.981855][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.993496][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.002230][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.012016][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.077373][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.108189][ T5772] veth0_vlan: entered promiscuous mode [ 83.131076][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.136393][ T5786] Bluetooth: hci3: command tx timeout [ 83.141040][ T5085] Bluetooth: hci2: command tx timeout [ 83.143790][ T5786] Bluetooth: hci1: command tx timeout [ 83.150712][ T5085] Bluetooth: hci0: command tx timeout [ 83.185965][ T5772] veth1_vlan: entered promiscuous mode [ 83.221245][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.240148][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.261630][ T5773] veth0_vlan: entered promiscuous mode [ 83.305429][ T5773] veth1_vlan: entered promiscuous mode [ 83.318279][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.336297][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.346791][ T5772] veth0_macvtap: entered promiscuous mode [ 83.360411][ T5772] veth1_macvtap: entered promiscuous mode [ 83.421328][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.439263][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.451400][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.466967][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.477535][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.488684][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.498488][ T5774] veth0_vlan: entered promiscuous mode [ 83.527342][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.537882][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.549807][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.558732][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.576140][ T5774] veth1_vlan: entered promiscuous mode [ 83.606896][ T5773] veth0_macvtap: entered promiscuous mode [ 83.655506][ T5773] veth1_macvtap: entered promiscuous mode [ 83.689643][ T5774] veth0_macvtap: entered promiscuous mode [ 83.718299][ T5774] veth1_macvtap: entered promiscuous mode [ 83.753717][ T5834] Bluetooth: MGMT ver 1.22 [ 83.776715][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.788429][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.799181][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.810819][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.844474][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.893880][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.905917][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.908342][ T5836] mmap: syz.3.5 (5836) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.922634][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.938565][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.948772][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.962380][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.974906][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.984848][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.996502][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.006623][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.015383][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.026273][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.037517][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.048836][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.071958][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.081489][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.090408][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.100077][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.120431][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.131098][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.141449][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.151918][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.161889][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.172354][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.184632][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.203346][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.213579][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.226176][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.235108][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.261026][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.271620][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.413929][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.421808][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.510579][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.525790][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.583285][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.591341][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.605433][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.628321][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.005491][ T5848] netlink: 'syz.3.7': attribute type 13 has an invalid length. [ 85.023487][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 85.049395][ T5848] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 85.119769][ T5853] syzkaller0: entered promiscuous mode [ 85.148465][ T5853] syzkaller0: entered allmulticast mode [ 85.217305][ T5786] Bluetooth: hci3: command tx timeout [ 85.222918][ T5779] Bluetooth: hci2: command tx timeout [ 85.228575][ T5786] Bluetooth: hci0: command tx timeout [ 85.259219][ T5085] Bluetooth: hci1: command tx timeout [ 87.322720][ T5785] Bluetooth: hci1: command tx timeout [ 87.328322][ T5785] Bluetooth: hci0: command tx timeout [ 87.332714][ T5085] Bluetooth: hci2: command tx timeout [ 87.334068][ T5785] Bluetooth: hci3: command tx timeout [ 87.373238][ T5874] (null): rxe_set_mtu: Set mtu to 4096 [ 87.384908][ T5873] warning: `syz.3.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.399680][ T5874] lo speed is unknown, defaulting to 1000 [ 87.419188][ T5874] lo speed is unknown, defaulting to 1000 [ 87.439141][ T5875] syz.1.10[5875]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.474806][ T5874] lo speed is unknown, defaulting to 1000 [ 87.703699][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'. [ 87.847047][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.019836][ T5895] loop0: detected capacity change from 0 to 1024 [ 88.086501][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.109824][ T5815] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 88.125754][ T5815] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 88.135364][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.143563][ T5815] usb 3-1: Product: syz [ 88.147934][ T5815] usb 3-1: Manufacturer: syz [ 88.152850][ T5815] usb 3-1: SerialNumber: syz [ 88.160203][ T5895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.185520][ T5815] port100 3-1:1.0: NFC: Could not find bulk-in or bulk-out endpoint [ 88.289736][ T5874] infiniband sz1: set active [ 88.295888][ T5815] lo speed is unknown, defaulting to 1000 [ 88.302320][ T5874] infiniband sz1: added lo [ 88.384865][ T5874] RDS/IB: sz1: added [ 88.392146][ T5874] smc: adding ib device sz1 with port count 1 [ 88.398835][ T5874] smc: ib device sz1 port 1 has pnetid [ 88.406299][ T56] lo speed is unknown, defaulting to 1000 [ 88.416629][ T5874] lo speed is unknown, defaulting to 1000 [ 88.777213][ T5874] lo speed is unknown, defaulting to 1000 [ 88.875574][ T5875] loop1: detected capacity change from 0 to 32768 [ 88.889102][ T5875] XFS: ikeep mount option is deprecated. [ 88.971910][ T5780] XFS (loop1): Inode block alignment (16) must match chunk size (32) for sparse inodes. [ 89.002559][ T5875] XFS (loop1): SB validate failed with error -22. [ 89.151692][ T5874] lo speed is unknown, defaulting to 1000 [ 89.161899][ T5773] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.183261][ T5908] digital: digital_start_poll: Unknown protocol [ 89.312169][ T5910] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.590647][ T5874] lo speed is unknown, defaulting to 1000 [ 90.797492][ T5780] usb 3-1: USB disconnect, device number 2 [ 90.902598][ T28] audit: type=1326 audit(1785919991.410:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 90.957701][ T28] audit: type=1326 audit(1785919991.410:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 90.984032][ T5875] smc: removing ib device sz1 [ 90.991398][ T28] audit: type=1326 audit(1785919991.410:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 91.043457][ T5922] Zero length message leads to an empty skb [ 91.073017][ T28] audit: type=1326 audit(1785919991.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 91.132481][ T28] audit: type=1326 audit(1785919991.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 91.178502][ T28] audit: type=1326 audit(1785919991.410:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 91.209676][ T28] audit: type=1326 audit(1785919991.410:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 91.240001][ T28] audit: type=1326 audit(1785919991.410:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 91.268127][ T28] audit: type=1326 audit(1785919991.410:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 91.343408][ T28] audit: type=1326 audit(1785919991.410:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.21" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d4559e019 code=0x7ffc0000 [ 91.445765][ T5812] IPVS: starting estimator thread 0... [ 91.543518][ T5933] ======================================================= [ 91.543518][ T5933] WARNING: The mand mount option has been deprecated and [ 91.543518][ T5933] and is ignored by this kernel. Remove the mand [ 91.543518][ T5933] option from the mount to silence this warning. [ 91.543518][ T5933] ======================================================= [ 91.682709][ T5931] IPVS: using max 16 ests per chain, 38400 per kthread [ 92.476523][ T8] cfg80211: failed to load regulatory.db [ 92.580033][ T5939] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 93.860283][ T5944] ceph: No mds server is up or the cluster is laggy [ 93.871157][ T5868] libceph: connect (1)[c::]:6789 error -101 [ 93.895259][ T5868] libceph: mon0 (1)[c::]:6789 connect error [ 95.694702][ T5868] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.908305][ T5868] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 95.959599][ T5868] usb 1-1: config 1 has no interface number 0 [ 96.012126][ T5971] syzkaller0: entered promiscuous mode [ 96.075894][ T5868] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 96.126840][ T5971] syzkaller0: entered allmulticast mode [ 96.139614][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.191703][ T5868] usb 1-1: Product: syz [ 96.235053][ T5868] usb 1-1: Manufacturer: syz [ 96.270538][ T5868] usb 1-1: SerialNumber: syz [ 97.542294][ T5988] syzkaller0: entered promiscuous mode [ 97.570035][ T5988] syzkaller0: entered allmulticast mode [ 97.799807][ T5868] usb 1-1: 3:1 : does not exist [ 97.806043][ T5988] TC_ACT_REPEAT abuse ? [ 97.819241][ T5868] usb 1-1: 3:2 : does not exist [ 98.070177][ T5868] usb 1-1: USB disconnect, device number 2 [ 98.245976][ T5995] syzkaller0: entered promiscuous mode [ 98.262266][ T5995] syzkaller0: entered allmulticast mode [ 99.199037][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 99.199051][ T28] audit: type=1800 audit(1785919999.710:55): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="attr_allow_any_host" dev="configfs" ino=8017 res=0 errno=0 [ 99.904606][ T6004] nvmet: adding nsid 1 to subsystem testnqn [ 100.008664][ T28] audit: type=1800 audit(1785920000.470:56): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="device_path" dev="configfs" ino=8059 res=0 errno=0 [ 100.300754][ T28] audit: type=1800 audit(1785920000.480:57): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="buffered_io" dev="configfs" ino=8060 res=0 errno=0 [ 100.691750][ T28] audit: type=1800 audit(1785920000.480:58): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.43" name="enable" dev="configfs" ino=8061 res=0 errno=0 [ 101.941962][ T6029] xt_policy: output policy not valid in PREROUTING and INPUT [ 104.662429][ C0] sched: RT throttling activated [ 104.841703][ T6044] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 105.230065][ T6044] syz.3.53 (6044) used greatest stack depth: 19768 bytes left [ 105.576963][ T6053] [ 105.579379][ T6053] ============================= [ 105.584442][ T6053] WARNING: suspicious RCU usage [ 105.589413][ T6053] syzkaller #0 Not tainted [ 105.594043][ T6053] ----------------------------- [ 105.598908][ T6053] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 105.607488][ T6053] [ 105.607488][ T6053] other info that might help us debug this: [ 105.607488][ T6053] [ 105.617752][ T6053] [ 105.617752][ T6053] rcu_scheduler_active = 2, debug_locks = 1 [ 105.626655][ T6053] 1 lock held by syz.1.52/6053: [ 105.631559][ T6053] #0: ffffffff8e3d70c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 105.640852][ T6053] [ 105.640852][ T6053] stack backtrace: [ 105.647060][ T6053] CPU: 1 PID: 6053 Comm: syz.1.52 Not tainted syzkaller #0 [ 105.654299][ T6053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.664393][ T6053] Call Trace: [ 105.667692][ T6053] [ 105.670641][ T6053] dump_stack_lvl+0x18c/0x250 [ 105.675398][ T6053] ? load_image+0x420/0x420 [ 105.679943][ T6053] ? show_regs_print_info+0x20/0x20 [ 105.685179][ T6053] ? load_image+0x420/0x420 [ 105.689823][ T6053] ? print_tainted+0x14c/0x170 [ 105.694656][ T6053] lockdep_rcu_suspicious+0x1e1/0x300 [ 105.700070][ T6053] ieee80211_check_concurrent_iface+0x46b/0x950 [ 105.706367][ T6053] ieee80211_open+0xc1/0x200 [ 105.711036][ T6053] __dev_open+0x2cb/0x430 [ 105.715407][ T6053] ? dev_open+0x190/0x190 [ 105.719768][ T6053] __dev_change_flags+0x1e8/0x6a0 [ 105.724810][ T6053] ? dev_load+0x21/0x1f0 [ 105.729080][ T6053] ? __lock_acquire+0x7d80/0x7d80 [ 105.734133][ T6053] ? dev_get_flags+0x1c0/0x1c0 [ 105.738953][ T6053] ? full_name_hash+0x92/0xe0 [ 105.743686][ T6053] dev_change_flags+0x7c/0x1a0 [ 105.748469][ T6053] dev_ioctl+0x7b4/0x1140 [ 105.752832][ T6053] sock_do_ioctl+0x239/0x310 [ 105.757460][ T6053] ? sock_show_fdinfo+0xb0/0xb0 [ 105.762350][ T6053] sock_ioctl+0x5be/0x7e0 [ 105.766702][ T6053] ? sock_poll+0x3e0/0x3e0 [ 105.771150][ T6053] ? bpf_lsm_file_ioctl+0x9/0x10 [ 105.776215][ T6053] ? security_file_ioctl+0x80/0xa0 [ 105.781359][ T6053] ? sock_poll+0x3e0/0x3e0 [ 105.785797][ T6053] __se_sys_ioctl+0xfd/0x170 [ 105.790426][ T6053] do_syscall_64+0x55/0xb0 [ 105.794861][ T6053] ? clear_bhb_loop+0x40/0x90 [ 105.799558][ T6053] ? clear_bhb_loop+0x40/0x90 [ 105.804257][ T6053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.810162][ T6053] RIP: 0033:0x7feea9d9e019 [ 105.814608][ T6053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.834242][ T6053] RSP: 002b:00007feeaabc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.842684][ T6053] RAX: ffffffffffffffda RBX: 00007feeaa025fa0 RCX: 00007feea9d9e019 [ 105.850714][ T6053] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 105.858759][ T6053] RBP: 00007feea9e3500c R08: 0000000000000000 R09: 0000000000000000 [ 105.866757][ T6053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.874761][ T6053] R13: 00007feeaa026038 R14: 00007feeaa025fa0 R15: 00007fff615c23a8 [ 105.882765][ T6053] [ 105.904981][ T6053] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 105.921556][ T6053] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 107.092603][ T6054] comedi comedi2: board detection failed