last executing test programs: 28.601610214s ago: executing program 1 (id=8): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001600)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r0 = syz_open_dev$video(&(0x7f0000002c40), 0x7fffffff, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) mkdir(0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000001c0)={0x1}) 27.690174166s ago: executing program 1 (id=10): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$setpipe(r0, 0x407, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d3, 0x0) 26.655716325s ago: executing program 1 (id=11): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040810) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.109443931s ago: executing program 4 (id=22): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x191, &(0x7f00000010c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0xa, 0x6, "4f3f8a", 0x15b, 0x3a, 0x0, @local, @private2, {[@srh={0x3c, 0x10, 0x4, 0x8, 0xae, 0x30, 0xb, [@private2, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0xf}, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @ndisc_ns={0x87, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, [{0x1f, 0x17, "8335e7073e944cd6560b0e441c2147e92926694ecb3581a72202071849121cc7ce47424f4af5a8cb0601d35bbc9acd5e764f4b4a910fca336a69cb204ed3f617f9b38d63bd2f6a5333ed50bc314284702658f2f02d84c7ae846ddbc82e30ebb93e12566d204717f16ab96105cf7183419e2217730197edd3643bf4b5475296b1281bfecf061b8a7618c212771457df2a4aad61ae0db8abe773cf2674c78f4084167a9ca463e10d7500822eb54485ac976c053a7d16e3463c90"}, {0x1f}, {0x18}]}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x73, 0x0, @local, @local}}}}, 0x0) bind$inet(r0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) semget$private(0x0, 0x2, 0x302) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x10, 0x80002, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007a80), 0x0, 0x48000) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x1003502, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x0) 17.870501313s ago: executing program 3 (id=24): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getitimer(0x2, &(0x7f0000000000)) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000240), &(0x7f0000000300)=ANY=[], 0x55, 0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f0000000040)=[{0x0}], 0x1, 0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xb5) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB, @ANYRES32, @ANYRES64=0x0], 0x20) msgsnd(0x0, 0x0, 0x0, 0x800) 16.500375607s ago: executing program 0 (id=26): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4040800) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x9, 0x80000000, 0x9, 0x8, 0x0, 0x200006, 0xf5, 0x9, 0xb9, 0x747d5a13, 0x7, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x3959, 0x8, 0xe, 0x3, 0x2, 0xde, 0x8, 0x9, 0x1, 0x1, 0x80000001, 0x2, 0xc, 0x1, 0x4, 0x0, 0xe, 0x5, 0x40, 0xc, 0x7, 0x1], [0x6, 0x1e, 0x0, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x6, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x714, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x4000000, 0x981, 0x4, 0x100, 0x9, 0x2, 0x8, 0x0, 0x1000001, 0xdc3, 0xfffffffd, 0x0, 0x5, 0x1, 0xfffffbff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x4, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x8, 0x6, 0x1, 0x1, 0xfffffffe, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x1004, 0x7, 0x20000010, 0x7, 0x9, 0x0, 0x5, 0x80000001, 0x5, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0xe, 0x80000001, 0x4, 0x4, 0x5, 0x6, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x2, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fff9, 0x2, 0x7, 0x4, 0xea, 0x7, 0x5, 0x6, 0xd9, 0x0, 0x8, 0x401, 0x25], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x3, 0x50, 0x2, 0x764, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe48, 0x3, 0x3, 0x4, 0x103, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x7, 0x2, 0x40, 0x6e7, 0x2, 0x4, 0x4, 0x10, 0x800, 0xfffffffd, 0x7f, 0x2, 0xfffffff8, 0x5, 0x9, 0x200, 0x7, 0x4ee1, 0xfffffffd, 0x7, 0xe, 0x2, 0xc, 0x2000b, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x8847ba, 0x69cc, 0xf, 0x0, 0x0) readv(r2, 0x0, 0x0) 16.419537558s ago: executing program 4 (id=27): r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() sched_setscheduler(0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x440}], 0x85, 0x0, 0x0}) 12.62280099s ago: executing program 1 (id=28): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[], 0x5e}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000200), &(0x7f0000000380), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000300)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000000000053"], 0x53}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_sco(0xffffffffffffffff, &(0x7f00000007c0), 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.560827832s ago: executing program 2 (id=29): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) io_setup(0x3, 0x0) io_submit(0x0, 0x1, &(0x7f00000005c0)=[0x0]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xefc9, 0x7f9, 0xb2, "20ab9809006ea4a7446c180000cd681ec267a0", 0x7, 0x200008}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, 0x0) 12.293367808s ago: executing program 3 (id=30): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 12.204697955s ago: executing program 0 (id=31): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x25a5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000002140), 0x2, 0x80002) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000002180)=ANY=[@ANYBLOB]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000002240)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mremap(&(0x7f0000ff8000/0x3000)=nil, 0x7fffdf00a000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 10.702816161s ago: executing program 2 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000404}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getgid() bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 9.819615493s ago: executing program 4 (id=33): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x288803, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x10122, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x3, 0x3, 0x70, 0x65, 0x6, 0xea, 0x88, 0x1, @private=0xa010101, @local}, "14"}}}}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x300) 8.931840665s ago: executing program 3 (id=34): r0 = io_uring_setup(0x1450, &(0x7f0000000180)={0x0, 0x73d5, 0x80, 0x3, 0x1f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'nr0\x00', @local}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x0, {0x8, 0x7}, 0x8}, 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10282c9, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.841632972s ago: executing program 2 (id=35): prctl$PR_SET_SECUREBITS(0x1c, 0x1e) setfsuid(0xee01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, &(0x7f0000000100)) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000240)=@ethtool_sset_info={0x37, 0x4, 0x80000000}}) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) 8.624377848s ago: executing program 0 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x151) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r4, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r4, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) 7.897504178s ago: executing program 4 (id=37): r0 = syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000180)={[{@nolazytime}, {@abort}, {@lazytime}, {@mblk_io_submit}, {@noauto_da_alloc}]}, 0xde, 0x53b, &(0x7f0000000e00)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mknodat$null(r0, 0x0, 0xc000, 0x103) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r1}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r6, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 6.637441547s ago: executing program 2 (id=38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c) 6.636643498s ago: executing program 3 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_kvm_add_vcpu$x86(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000004e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 6.576315946s ago: executing program 1 (id=40): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) io_setup(0x5, &(0x7f0000002b80)=0x0) io_submit(r0, 0x1, &(0x7f00000040c0)=[0x0]) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./bus\x00', 0xa00000, &(0x7f0000000100)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@undelete}, {@undelete}, {@adinicb}, {@gid}, {@shortad}, {@uid_forget}, {@iocharset={'iocharset', 0x3d, 'macroman'}}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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") setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b80000000800003fecf20000000086070000", 0x4000, r4) 4.952664528s ago: executing program 0 (id=41): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@hopopts={0x62}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) gettid() timer_create(0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 4.947876974s ago: executing program 3 (id=42): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x327}], 0x1, 0xa) fcntl$setpipe(r2, 0x407, 0x6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000d40)=[{}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYRES16=0x0], 0x254}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 3.679543865s ago: executing program 0 (id=43): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = socket(0x10, 0x400000000080803, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, 0x0, 0x0) landlock_restrict_self(r3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000040)={'wg2\x00', 0x0}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) setrlimit(0x0, &(0x7f0000000300)={0xaab, 0x2fd}) read$dsp(r0, &(0x7f00000001c0)=""/95, 0x2) 3.514564507s ago: executing program 2 (id=44): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, 0x0) 3.051463783s ago: executing program 1 (id=45): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = socket(0x1, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) sendmmsg$unix(r4, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') write$P9_RWSTAT(r6, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) close_range(r1, 0xffffffffffffffff, 0x0) 2.505488173s ago: executing program 4 (id=46): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) writev(r6, &(0x7f00000004c0)=[{&(0x7f0000000000)="26eba9fdb4cbab48929e1af151000000000000000500000000000100", 0x1c}], 0x1) 2.348650404s ago: executing program 3 (id=47): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0xdc) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getpid() 1.522636192s ago: executing program 2 (id=48): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200008c0}, 0x14008000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$nl_generic(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x3cc, 0x12, 0x10, 0x70bd2c, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x7, 0x0, 0x0, @ipv4=@multicast1}, @generic="44fd2ce20a8c039d6b09c48358d01276bc9342342b1358820b4b3fccb3178d8e7e989c83697030fdc1d622392b71360a8c603bf93d1c56ddbe804f7c082eef046750530f6f537835e8677b1def56cecad606a882d7d4b4961d752eeadd449911e123ea17f1328b5cf66b69b5a7add6ef21139642a9a33dc31bbb631c20ca153e2c36e9caaa27b8d2419bb48e16e2ab56093b", @generic="0773704b6f9fb446446d", @nested={0x89, 0x11a, 0x0, 0x1, [@nested={0x4, 0x120}, @generic="16f0bc42665434f4500473d5c4f1f42920b92260bf53d7915e5e3fa52091a117872216ccdbedcc4bfd32f8eb9105e0", @generic="ba04d07721057812640c0e10664b31158705731bd40e1ca851039b9ecfe55200339feb7e4ac23c587041bc6cd0a3cdf0e2f54cc38bc3e4234cd42861eeb7f4ced472a8e2cfeb2a842f8306c7c69593259ce7"]}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0xc4, 0x0, 0x0, @pid}, @generic="0eebb44350b019c2bc86e899b7de6478a727a5f64a2ee483a5355681a30bf27bc4b328bee1f5cc", @nested={0x71, 0x147, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @u32=0x4}, @generic="d04e7aaf3b9f0a78b5275068472250bc2f8bd4bac07d93e3d9c3272cfb470448033188c9ef346ef5cb8bf2d180747aad674fd2ebca3ecfb86dbe125d4ebe4f9f57bb51b125c79cfe57038b27495a9aba2ae1298233de5e3e598dd8fd056f089be4f5311af0"]}, @generic="1ddeaf11d212e174d859771051777d5995893b3636394f186b914564bd337d937f25739361b6d44f78543e7673da4b123252fb24ca9d182f18425a0057dadb257943c2e94c9c2b2cb6e55b8d009ea4185daf82ab69ddc0c28b3440235a6f84f3a22d263249db36a80fc5258eefcbcf93c56ee35b7d5120f1e573c38fc3b7f80dbc9bb17164c62cd195d5ab93ba1deecf27ac519f6bfd6a21d1a6f57e8b481b12198730677194995b27c80d27a65f96572604718af0c6d4464329b92db1119402bc54d025f22280c503b7", @nested={0x10d, 0xce, 0x0, 0x1, [@nested={0x4, 0xec}, @generic="b00b5ad2b11cde5bf871f23a9736eb9e37bc4e52bbd08b05cf269eb5d1c9f338f35799078e8b2ab446452f43bc20e2792ca6eee17c836c4b8c763dda3ed2d408356a6bc4e4503c7d3fd0d896b54fce87771d693733c237660ff7569fd04d2c8bcf23e717cca93aaac650fd7345f01463c1c0dc824289247d0cdd315b14cd6f837d865a0892230d1e18223861f9fc0c50ee7a7c737c8232ecabd257f74b489912e13f998bd2b6d1a3ad510d4ccb34204d156b4db30f0b614493c671db35221132c1a374b2e8fa50fc44d0fb7cfc2fc72c29984e3cbb07e3563a637bd840d40df7b1ec5cbe85", @nested={0x4, 0x42}, @typed={0x8, 0x100, 0x0, 0x0, @uid}, @typed={0x14, 0x59, 0x0, 0x0, @ipv6=@remote}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x4008000}, 0x40001) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 796.500334ms ago: executing program 0 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0xa, 0x2, {}, 0x58603}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=50): ioperm(0x284, 0x7f, 0xe3) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000100), 0x4) memfd_create(0x0, 0x1) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) sysinfo(0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x40401, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000080)={'security\x00', 0x0, [0x5, 0xffffb7f7, 0x20000004, 0x3, 0x10000c]}, &(0x7f0000000040)=0x54) syz_open_dev$sg(&(0x7f0000000000), 0x6, 0x8001) r6 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r6, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0xee01, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x4, 0xffffffff, 0x1000, 0x5, 0x0, 0x0, 0xf1, 0xffffffffffffffff}) msgsnd(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="03008d0050ba521d3b0eabf3295b505a9dac80bca1e3dc56d0071fb327c35367"], 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 81.701567][ T5832] cgroup: Unknown subsys name 'net' [ 81.873047][ T5832] cgroup: Unknown subsys name 'cpuset' [ 81.882454][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.444872][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.791479][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.809807][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.817438][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.825521][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.834094][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.842918][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.850505][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.859485][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.867096][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.881034][ T5866] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.883580][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.897665][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.900016][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.918700][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.924497][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.928059][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.933782][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.940785][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.954950][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.962224][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.964487][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.970463][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.985015][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.012704][ T5165] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.020482][ T5165] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.609364][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 88.641176][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 88.696817][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 88.806036][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 88.822592][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 88.996878][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.004228][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.012702][ T5860] bridge_slave_0: entered allmulticast mode [ 89.020167][ T5860] bridge_slave_0: entered promiscuous mode [ 89.029731][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.036868][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.044075][ T5860] bridge_slave_1: entered allmulticast mode [ 89.051535][ T5860] bridge_slave_1: entered promiscuous mode [ 89.070980][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.078307][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.085430][ T5849] bridge_slave_0: entered allmulticast mode [ 89.093089][ T5849] bridge_slave_0: entered promiscuous mode [ 89.100913][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.108694][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.115848][ T5852] bridge_slave_0: entered allmulticast mode [ 89.123043][ T5852] bridge_slave_0: entered promiscuous mode [ 89.131602][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.138843][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.145991][ T5852] bridge_slave_1: entered allmulticast mode [ 89.154213][ T5852] bridge_slave_1: entered promiscuous mode [ 89.185673][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.193096][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.200342][ T5849] bridge_slave_1: entered allmulticast mode [ 89.207454][ T5849] bridge_slave_1: entered promiscuous mode [ 89.284557][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.315485][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.339539][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.376262][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.390572][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.441251][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.462920][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.470525][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.477761][ T5854] bridge_slave_0: entered allmulticast mode [ 89.484915][ T5854] bridge_slave_0: entered promiscuous mode [ 89.494363][ T5860] team0: Port device team_slave_0 added [ 89.503237][ T5860] team0: Port device team_slave_1 added [ 89.514531][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.521715][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.529198][ T5855] bridge_slave_0: entered allmulticast mode [ 89.536385][ T5855] bridge_slave_0: entered promiscuous mode [ 89.573481][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.582786][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.591244][ T5854] bridge_slave_1: entered allmulticast mode [ 89.599519][ T5854] bridge_slave_1: entered promiscuous mode [ 89.618589][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.625717][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.633333][ T5855] bridge_slave_1: entered allmulticast mode [ 89.640856][ T5855] bridge_slave_1: entered promiscuous mode [ 89.662410][ T5849] team0: Port device team_slave_0 added [ 89.671943][ T5852] team0: Port device team_slave_0 added [ 89.720080][ T5849] team0: Port device team_slave_1 added [ 89.742478][ T5852] team0: Port device team_slave_1 added [ 89.763293][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.770334][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.796982][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.856093][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.869408][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.880343][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.887306][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.914182][ T5856] Bluetooth: hci4: command tx timeout [ 89.919961][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.933762][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.943629][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.951619][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.978224][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.991017][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.998292][ T5856] Bluetooth: hci1: command tx timeout [ 89.998303][ T5165] Bluetooth: hci3: command tx timeout [ 90.003992][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.035554][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.068281][ T5856] Bluetooth: hci0: command tx timeout [ 90.068288][ T5165] Bluetooth: hci2: command tx timeout [ 90.108062][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.125289][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.132501][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.159626][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.221761][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.229017][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.255467][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.274930][ T5854] team0: Port device team_slave_0 added [ 90.286270][ T5860] hsr_slave_0: entered promiscuous mode [ 90.292736][ T5860] hsr_slave_1: entered promiscuous mode [ 90.302005][ T5855] team0: Port device team_slave_0 added [ 90.310963][ T5855] team0: Port device team_slave_1 added [ 90.333464][ T5854] team0: Port device team_slave_1 added [ 90.382153][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.389469][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.415648][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.428825][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.436260][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.462449][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.530145][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.537137][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.563984][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.581020][ T5849] hsr_slave_0: entered promiscuous mode [ 90.587310][ T5849] hsr_slave_1: entered promiscuous mode [ 90.593719][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 90.599697][ T5849] Cannot create hsr debugfs directory [ 90.643110][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.650543][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.676463][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.714773][ T5852] hsr_slave_0: entered promiscuous mode [ 90.721049][ T5852] hsr_slave_1: entered promiscuous mode [ 90.727200][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 90.733359][ T5852] Cannot create hsr debugfs directory [ 90.758141][ T5855] hsr_slave_0: entered promiscuous mode [ 90.764527][ T5855] hsr_slave_1: entered promiscuous mode [ 90.771081][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 90.776822][ T5855] Cannot create hsr debugfs directory [ 90.921727][ T5854] hsr_slave_0: entered promiscuous mode [ 90.928893][ T5854] hsr_slave_1: entered promiscuous mode [ 90.934957][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 90.941289][ T5854] Cannot create hsr debugfs directory [ 91.403892][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.416731][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.434749][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.453742][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.500831][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.521274][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.534739][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.546467][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.620021][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.636635][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.648202][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.658417][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.791844][ T5855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.804174][ T5855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.815658][ T5855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.834657][ T981] cfg80211: failed to load regulatory.db [ 91.844719][ T5855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.947308][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.965376][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.975614][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.988250][ T5165] Bluetooth: hci4: command tx timeout [ 92.008920][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.019765][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.043047][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.058635][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.065863][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.074647][ T5165] Bluetooth: hci3: command tx timeout [ 92.078650][ T5856] Bluetooth: hci1: command tx timeout [ 92.139863][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.147013][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.154671][ T5856] Bluetooth: hci2: command tx timeout [ 92.160201][ T5165] Bluetooth: hci0: command tx timeout [ 92.162755][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.240454][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.258513][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.288868][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.295997][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.315333][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.329394][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.372801][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.379955][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.394800][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.401930][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.425399][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.432553][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.467470][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.483356][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.519519][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.526682][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.573180][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.580366][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.598713][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.671162][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.678372][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.740162][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.747330][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.999941][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.276146][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.304132][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.404465][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.476949][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.495483][ T5852] veth0_vlan: entered promiscuous mode [ 93.518810][ T5849] veth0_vlan: entered promiscuous mode [ 93.549407][ T5852] veth1_vlan: entered promiscuous mode [ 93.564582][ T5849] veth1_vlan: entered promiscuous mode [ 93.656971][ T5852] veth0_macvtap: entered promiscuous mode [ 93.666410][ T5854] veth0_vlan: entered promiscuous mode [ 93.695285][ T5852] veth1_macvtap: entered promiscuous mode [ 93.710735][ T5849] veth0_macvtap: entered promiscuous mode [ 93.726049][ T5849] veth1_macvtap: entered promiscuous mode [ 93.737427][ T5854] veth1_vlan: entered promiscuous mode [ 93.745792][ T5860] veth0_vlan: entered promiscuous mode [ 93.754119][ T5855] veth0_vlan: entered promiscuous mode [ 93.792356][ T5860] veth1_vlan: entered promiscuous mode [ 93.804941][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.824178][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.842575][ T5855] veth1_vlan: entered promiscuous mode [ 93.854361][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.866451][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.901697][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.911827][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.925861][ T5854] veth0_macvtap: entered promiscuous mode [ 93.935037][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.943913][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.973017][ T5854] veth1_macvtap: entered promiscuous mode [ 93.980286][ T3453] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.991279][ T3453] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.004743][ T3453] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.024630][ T5855] veth0_macvtap: entered promiscuous mode [ 94.033907][ T3534] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.044476][ T5860] veth0_macvtap: entered promiscuous mode [ 94.063913][ T5855] veth1_macvtap: entered promiscuous mode [ 94.069782][ T5856] Bluetooth: hci4: command tx timeout [ 94.080173][ T5860] veth1_macvtap: entered promiscuous mode [ 94.144068][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.151963][ T5856] Bluetooth: hci3: command tx timeout [ 94.151973][ T5165] Bluetooth: hci1: command tx timeout [ 94.203306][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.229929][ T5856] Bluetooth: hci0: command tx timeout [ 94.230302][ T5165] Bluetooth: hci2: command tx timeout [ 94.250854][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.258523][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.268295][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.303750][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.305901][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.322858][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.331038][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.334768][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.346606][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.356571][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.377275][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.388390][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.404557][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.435141][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.456015][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.479215][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.489224][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.521246][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.529597][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.547487][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.599318][ T5965] loop2: detected capacity change from 0 to 256 [ 94.633932][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.648236][ T5965] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 94.656150][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.676551][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.696486][ T5965] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 94.719183][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.786555][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.815002][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.882124][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.152396][ T3453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.209137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.217863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.226088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.311541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.320240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.413959][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.422625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.516259][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.525068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.618678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.858175][ T3453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.920800][ T3534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.937412][ T3534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.182237][ T5165] Bluetooth: hci4: command tx timeout [ 96.228574][ T5856] Bluetooth: hci3: command tx timeout [ 96.235389][ T5165] Bluetooth: hci1: command tx timeout [ 96.308079][ T5165] Bluetooth: hci0: command tx timeout [ 96.313526][ T5165] Bluetooth: hci2: command tx timeout [ 96.396945][ T3453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.437006][ T3453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.609685][ T3534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.619452][ T3534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.586235][ T5991] Zero length message leads to an empty skb [ 98.614202][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.623157][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.212381][ T6000] use of bytesused == 0 is deprecated and will be removed in the future, [ 99.221052][ T6000] use the actual size instead. [ 100.051729][ T6007] loop4: detected capacity change from 0 to 256 [ 101.614565][ T6007] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x5f5f3cac, utbl_chksum : 0xe619d30d) [ 101.716186][ T30] audit: type=1804 audit(1752713951.584:2): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5" name="/newroot/0/file1/bus" dev="loop4" ino=1048600 res=1 errno=0 [ 101.756925][ T30] audit: type=1804 audit(1752713951.624:3): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5" name="/newroot/0/file1/bus" dev="loop4" ino=1048600 res=1 errno=0 [ 105.466743][ T6043] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 107.613557][ T5165] Bluetooth: hci3: ACL packet for unknown connection handle 203 [ 107.807927][ T6057] loop3: detected capacity change from 0 to 1024 [ 107.814830][ T6057] ======================================================= [ 107.814830][ T6057] WARNING: The mand mount option has been deprecated and [ 107.814830][ T6057] and is ignored by this kernel. Remove the mand [ 107.814830][ T6057] option from the mount to silence this warning. [ 107.814830][ T6057] ======================================================= [ 108.600846][ T6057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.841361][ T6066] input: syz0 as /devices/virtual/input/input5 [ 113.007329][ T6077] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.009942][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.029954][ T6076] binder: BINDER_SET_CONTEXT_MGR already set [ 113.040067][ T6076] binder: 6072:6076 ioctl 4018620d 200000000040 returned -16 [ 113.150080][ T6076] binder: 6072:6076 ioctl c0306201 200000000280 returned -14 [ 118.965098][ T6117] loop4: detected capacity change from 0 to 512 [ 118.993030][ T6117] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.104427][ T6117] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.974074][ T6117] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 120.223496][ T6131] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.240056][ T6128] loop1: detected capacity change from 0 to 2048 [ 120.267019][ T6117] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 120.275663][ T6128] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.459129][ T6117] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 120.472486][ T6117] System zones: 0-2, 18-18, 34-34 [ 121.369182][ T6117] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.37: iget: bad i_size value: 360287970189639680 [ 121.487091][ T6117] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.37: couldn't read orphan inode 15 (err -117) [ 121.868190][ T6117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.670679][ T5860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.895732][ T6152] syz.3.47: attempt to access beyond end of device [ 124.895732][ T6152] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 125.008319][ T6152] ------------[ cut here ]------------ [ 125.013888][ T6152] WARNING: fs/buffer.c:1125 at bdev_getblk+0x580/0x660, CPU#0: syz.3.47/6152 [ 125.022857][ T6152] Modules linked in: [ 125.026901][ T6152] CPU: 0 UID: 0 PID: 6152 Comm: syz.3.47 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 125.038476][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.049101][ T6152] RIP: 0010:bdev_getblk+0x580/0x660 [ 125.051941][ T6159] nbd3: detected capacity change from 0 to 8589934592 [ 125.055443][ T6152] Code: 26 fb ff ff e8 d1 5c 78 ff 48 c7 c7 60 0c 9a 8b 48 c7 c6 92 69 9e 8d 4c 89 fa 4c 89 e9 e8 f8 53 e0 fe eb bd e8 b1 5c 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 125.081221][ T6152] RSP: 0000:ffffc9000b3376b0 EFLAGS: 00010287 [ 125.087313][ T6152] RAX: ffffffff82474a1f RBX: ffff888148d0ae18 RCX: 0000000000080000 [ 125.095334][ T6152] RDX: ffffc9000c36b000 RSI: 000000000000600e RDI: 000000000000600f [ 125.103470][ T6152] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff821717ad [ 125.112759][ T6152] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888148d0b770 [ 125.121975][ T6152] R13: ffff888148d0ae00 R14: 0000000000000200 R15: 1ffff110291a15c3 [ 125.130329][ T6152] FS: 00007f09592226c0(0000) GS:ffff888125be2000(0000) knlGS:0000000000000000 [ 125.139372][ T6152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 125.144845][ T6011] Buffer I/O error on dev nbd3, logical block 0, async page read [ 125.145971][ T6152] CR2: 000000110c3af14b CR3: 000000007db36000 CR4: 00000000003526f0 [ 125.145993][ T6152] Call Trace: [ 125.146003][ T6152] [ 125.168138][ T6152] __bread_gfp+0x89/0x3c0 [ 125.172491][ T6152] udf_read_tagged+0xad/0xe00 [ 125.177183][ T6152] udf_check_anchor_block+0x99/0x550 [ 125.182513][ T6152] ? udf_get_last_block+0x286/0x360 [ 125.188527][ T6152] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 125.194433][ T6152] ? __bread_gfp+0x340/0x3c0 [ 125.199071][ T6152] udf_load_vrs+0x6e3/0xf20 [ 125.203593][ T6152] ? __pfx_udf_load_vrs+0x10/0x10 [ 125.208643][ T6152] ? udf_get_last_session+0x100/0x200 [ 125.214398][ T6152] ? __pfx_udf_get_last_session+0x10/0x10 [ 125.220445][ T6152] udf_fill_super+0x5ad/0x17a0 [ 125.225220][ T6152] ? __pfx_udf_fill_super+0x10/0x10 [ 125.230438][ T6152] ? set_blocksize+0x21e/0x500 [ 125.235212][ T6152] ? sb_set_blocksize+0x104/0x180 [ 125.240291][ T6152] ? setup_bdev_super+0x4c1/0x5b0 [ 125.245327][ T6152] get_tree_bdev_flags+0x40e/0x4d0 [ 125.250484][ T6152] ? __pfx_udf_fill_super+0x10/0x10 [ 125.255682][ T6152] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.261397][ T6152] vfs_get_tree+0x8f/0x2b0 [ 125.265833][ T6152] do_new_mount+0x2a2/0x9e0 [ 125.270366][ T6152] ? ns_capable+0x8a/0xf0 [ 125.274688][ T6152] ? __pfx_do_new_mount+0x10/0x10 [ 125.279755][ T6152] ? path_mount+0x61c/0xfe0 [ 125.284259][ T6152] ? user_path_at+0x44/0x60 [ 125.288791][ T6152] __se_sys_mount+0x317/0x410 [ 125.293492][ T6152] ? __pfx___se_sys_mount+0x10/0x10 [ 125.298754][ T6152] ? rcu_is_watching+0x15/0xb0 [ 125.303548][ T6152] ? do_syscall_64+0xbe/0x3b0 [ 125.308278][ T6152] ? __x64_sys_mount+0x20/0xc0 [ 125.313075][ T6152] do_syscall_64+0xfa/0x3b0 [ 125.318119][ T6152] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.323332][ T6152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.329830][ T6152] ? clear_bhb_loop+0x60/0xb0 [ 125.334533][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.340478][ T6152] RIP: 0033:0x7f095838e929 [ 125.344916][ T6152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.364620][ T6152] RSP: 002b:00007f0959222038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.373061][ T6152] RAX: ffffffffffffffda RBX: 00007f09585b5fa0 RCX: 00007f095838e929 [ 125.381060][ T6152] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 125.389049][ T6152] RBP: 00007f0958410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 125.397111][ T6152] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 125.405105][ T6152] R13: 0000000000000000 R14: 00007f09585b5fa0 R15: 00007ffc720231d8 [ 125.413113][ T6152] [ 125.416130][ T6152] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 125.423402][ T6152] CPU: 0 UID: 0 PID: 6152 Comm: syz.3.47 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 125.434673][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.444717][ T6152] Call Trace: [ 125.447986][ T6152] [ 125.450918][ T6152] dump_stack_lvl+0x99/0x250 [ 125.455592][ T6152] ? __asan_memcpy+0x40/0x70 [ 125.460177][ T6152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.465368][ T6152] ? __pfx__printk+0x10/0x10 [ 125.469963][ T6152] vpanic+0x281/0x750 [ 125.473938][ T6152] ? __pfx__printk+0x10/0x10 [ 125.478524][ T6152] ? __pfx_vpanic+0x10/0x10 [ 125.483026][ T6152] ? is_bpf_text_address+0x292/0x2b0 [ 125.488305][ T6152] ? is_bpf_text_address+0x26/0x2b0 [ 125.493511][ T6152] panic+0xb9/0xc0 [ 125.497231][ T6152] ? __pfx_panic+0x10/0x10 [ 125.501649][ T6152] __warn+0x334/0x4c0 [ 125.505646][ T6152] ? bdev_getblk+0x580/0x660 [ 125.510231][ T6152] ? bdev_getblk+0x580/0x660 [ 125.514813][ T6152] report_bug+0x2be/0x4f0 [ 125.519138][ T6152] ? bdev_getblk+0x580/0x660 [ 125.523757][ T6152] ? bdev_getblk+0x580/0x660 [ 125.528343][ T6152] ? bdev_getblk+0x582/0x660 [ 125.532930][ T6152] handle_bug+0x84/0x160 [ 125.537174][ T6152] exc_invalid_op+0x1a/0x50 [ 125.541681][ T6152] asm_exc_invalid_op+0x1a/0x20 [ 125.546519][ T6152] RIP: 0010:bdev_getblk+0x580/0x660 [ 125.551710][ T6152] Code: 26 fb ff ff e8 d1 5c 78 ff 48 c7 c7 60 0c 9a 8b 48 c7 c6 92 69 9e 8d 4c 89 fa 4c 89 e9 e8 f8 53 e0 fe eb bd e8 b1 5c 78 ff 90 <0f> 0b 90 48 b8 00 00 00 00 00 fc ff df 41 80 3c 07 00 74 08 48 89 [ 125.571339][ T6152] RSP: 0000:ffffc9000b3376b0 EFLAGS: 00010287 [ 125.577409][ T6152] RAX: ffffffff82474a1f RBX: ffff888148d0ae18 RCX: 0000000000080000 [ 125.585374][ T6152] RDX: ffffc9000c36b000 RSI: 000000000000600e RDI: 000000000000600f [ 125.593338][ T6152] RBP: 0000000000000200 R08: 0000000000000000 R09: ffffffff821717ad [ 125.601305][ T6152] R10: 0000000000000406 R11: 0000000000000002 R12: ffff888148d0b770 [ 125.609269][ T6152] R13: ffff888148d0ae00 R14: 0000000000000200 R15: 1ffff110291a15c3 [ 125.617250][ T6152] ? fs_reclaim_acquire+0x7d/0x100 [ 125.622366][ T6152] ? bdev_getblk+0x57f/0x660 [ 125.626973][ T6152] __bread_gfp+0x89/0x3c0 [ 125.631322][ T6152] udf_read_tagged+0xad/0xe00 [ 125.636013][ T6152] udf_check_anchor_block+0x99/0x550 [ 125.641298][ T6152] ? udf_get_last_block+0x286/0x360 [ 125.646498][ T6152] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 125.652501][ T6152] ? __bread_gfp+0x340/0x3c0 [ 125.657098][ T6152] udf_load_vrs+0x6e3/0xf20 [ 125.661706][ T6152] ? __pfx_udf_load_vrs+0x10/0x10 [ 125.666725][ T6152] ? udf_get_last_session+0x100/0x200 [ 125.672109][ T6152] ? __pfx_udf_get_last_session+0x10/0x10 [ 125.677920][ T6152] udf_fill_super+0x5ad/0x17a0 [ 125.682697][ T6152] ? __pfx_udf_fill_super+0x10/0x10 [ 125.687900][ T6152] ? set_blocksize+0x21e/0x500 [ 125.692677][ T6152] ? sb_set_blocksize+0x104/0x180 [ 125.697712][ T6152] ? setup_bdev_super+0x4c1/0x5b0 [ 125.702736][ T6152] get_tree_bdev_flags+0x40e/0x4d0 [ 125.707844][ T6152] ? __pfx_udf_fill_super+0x10/0x10 [ 125.713041][ T6152] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 125.718683][ T6152] vfs_get_tree+0x8f/0x2b0 [ 125.723101][ T6152] do_new_mount+0x2a2/0x9e0 [ 125.727613][ T6152] ? ns_capable+0x8a/0xf0 [ 125.731947][ T6152] ? __pfx_do_new_mount+0x10/0x10 [ 125.736974][ T6152] ? path_mount+0x61c/0xfe0 [ 125.741476][ T6152] ? user_path_at+0x44/0x60 [ 125.745985][ T6152] __se_sys_mount+0x317/0x410 [ 125.750667][ T6152] ? __pfx___se_sys_mount+0x10/0x10 [ 125.755863][ T6152] ? rcu_is_watching+0x15/0xb0 [ 125.760623][ T6152] ? do_syscall_64+0xbe/0x3b0 [ 125.765294][ T6152] ? __x64_sys_mount+0x20/0xc0 [ 125.770055][ T6152] do_syscall_64+0xfa/0x3b0 [ 125.774557][ T6152] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.779757][ T6152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.785813][ T6152] ? clear_bhb_loop+0x60/0xb0 [ 125.790481][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.796360][ T6152] RIP: 0033:0x7f095838e929 [ 125.800765][ T6152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.820361][ T6152] RSP: 002b:00007f0959222038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 125.828773][ T6152] RAX: ffffffffffffffda RBX: 00007f09585b5fa0 RCX: 00007f095838e929 [ 125.836741][ T6152] RDX: 0000200000000080 RSI: 0000200000004a00 RDI: 0000200000000000 [ 125.844702][ T6152] RBP: 00007f0958410ca1 R08: 0000000000000000 R09: 0000000000000000 [ 125.852660][ T6152] R10: 0000000002008087 R11: 0000000000000246 R12: 0000000000000000 [ 125.860623][ T6152] R13: 0000000000000000 R14: 00007f09585b5fa0 R15: 00007ffc720231d8 [ 125.868643][ T6152] [ 125.871994][ T6152] Kernel Offset: disabled [ 125.876320][ T6152] Rebooting in 86400 seconds..