last executing test programs: 3.797963937s ago: executing program 2 (id=3): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xa0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x173) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x28) write(r2, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x80d83, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x38, r4, 0x321, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x4000804) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xc, 0x80) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x26e1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.797641832s ago: executing program 3 (id=4): syz_io_uring_setup(0xf06, &(0x7f0000000780)={0x0, 0x5b62, 0x80, 0x0, 0x142}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket(0x18, 0x1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f00000001c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x800) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x2c, 0x0, 0xffffffffffffffff, 0x1c, &(0x7f0000000640)={{0xa, 0x4e23, 0x20000, @mcast2, 0x4}}, 0x0, 0x0, 0x1}) write(r3, &(0x7f0000000340)="9c7a4461e1a7df12a285a48906dec373a62f6b17392cac7f58afcf8d4e72c8dcae5778425b96f6ba3c3e0154fb68f9705ae2db29656160e9f3eac1400bc83ea89e17a711b610e849c6253ebddab2446d4b529b5a249cad588e3eebaea9c44244e991db2051fe97ad11569ded9437be607d63d3354a97f7982a29c2359ed444057dab480d74291bb1e9b1efd2db3c01dc3a897b33a7cf225c8946665ee777a0b7f95a44f67af1357d070004b3df39f59f9fcc7bdc9bf1bae7", 0xb8) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000000314100026bd700200000078c93612f819cef8e772c27f007278650014002c006c6f0085b3cc2ed89f786e00000000000000000000040000000000006faa7b691254d45bdd6fb60d3d252c491d8412b471501766dea50fc67de89eec36ea2d3e97ef5d995952e7e964d86350f39753ba904a03b15218d5865102b08d6d64a7ef3c1413b36d31c388f00b4d0048f6b88104d12be27c37ff0f3bb6bf5a02f003345f73afe2081a8a22fca9a830c8a67d734ef806843f99e568f41f4a88d38eb2d7831286c66be0ebfe53ad0b5b414031a21a3b73e18de5297e24d11cc94afaaeac68d0902785c04e9b6d"], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000700)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r11, 0x3e8}}, 0x48) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r10, &(0x7f0000000800)={0x4, 0x8, 0xfa00, {r11, 0x3e8}}, 0x10) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r10, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, r11}}, 0x120) r12 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002bbd700000000000ff023b5efa639b9c0389000000000001ff02000000000000000000100000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000006000000000004003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008010000000000000001000000440005000000000000000000000000000000000100000000320000000a0000000000000000000000000000000000000006000000040200"/176], 0xfc}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010001fff03000000fdfffeff00000000", @ANYRES32=0x0, @ANYBLOB="0000000040cc0300380012800b00010067656e657665000028000280140007000000000000000000000000000000000105000c00ffffffff050009000100000008000a00", @ANYRES32=r6], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.534930869s ago: executing program 1 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) close(r0) 3.464521205s ago: executing program 1 (id=6): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xa0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./proc\x00', 0x173) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x28) write(r2, &(0x7f0000000000)='3', 0x4e) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x80d83, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e643000000014000580"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x38, r4, 0x321, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x4000804) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xc, 0x80) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x67, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x26e1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.349262562s ago: executing program 3 (id=7): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x801, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000003c0)='_', 0x1, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={'xcbc(serpent)\x00'}}) 3.253952318s ago: executing program 2 (id=8): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="53f3000000000000000000000006000079b005"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r3 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000340)={&(0x7f0000000380)=[{0x1e, 0x5011, 0x0, 0x0}], 0x1}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) mmap$IORING_OFF_SQES(0x0, 0x547e, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r6 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', @ifru_settings={0x3, 0xfff, @te1=0x0}}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r7, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='1\x00', 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) write(r8, &(0x7f0000000140)='1\x00', 0x1) 3.102998797s ago: executing program 0 (id=9): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)="b0", 0x1, 0x40, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x4}, 0x1c) listen(r4, 0xfffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x7, &(0x7f0000000500)) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x1) r7 = socket$netlink(0x10, 0x3, 0x4) listen(r3, 0x8200002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r8, &(0x7f0000000180)='[', 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) futex_waitv(&(0x7f0000000f80)=[{0x7f, &(0x7f0000000240)=0x8, 0x2}, {0x38, &(0x7f0000000280)=0x2, 0x2}, {0xff, &(0x7f00000002c0)=0x800, 0x82}, {0xf, &(0x7f00000004c0)=0x7, 0x2}, {0xffffffffffffffff, &(0x7f0000000540)=0x42, 0x80}, {0x3, &(0x7f0000000580)=0x241051e0, 0x82}, {0x6, &(0x7f00000005c0)=0x19a5}, {0x1d, &(0x7f0000000600)=0xa, 0x2}, {0x7ff, &(0x7f0000000640)=0x6, 0x80}, {0x0, &(0x7f0000000680)=0x45, 0x82}, {0x7f, &(0x7f00000006c0)=0x2db7, 0x2}, {0x6, &(0x7f0000000700)=0x9, 0x82}, {0x2, &(0x7f0000000740)=0xfffffffffffffffa, 0x2}, {0x560, &(0x7f0000000780)=0x2, 0x2}, {0x8, &(0x7f00000007c0)=0x3ff, 0x2}, {0x80000000, &(0x7f0000000800)=0x3, 0x2}, {0x200, &(0x7f0000000840)=0x9, 0x82}, {0xed, &(0x7f0000000880)=0x6, 0x2}, {0x3, &(0x7f00000008c0)=0x9, 0x2}, {0x277e91ce, &(0x7f0000000900)=0x4, 0x82}, {0x3, &(0x7f0000000940)=0x4, 0x2}, {0xa077, &(0x7f0000000980)=0x3, 0x82}, {0xa9b, &(0x7f00000009c0)=0xd, 0x2}, {0x6, &(0x7f0000000a00)=0x7ff, 0x2}, {0x5, &(0x7f0000000a40)=0x100000001, 0x82}, {0x7, &(0x7f0000000a80)=0xfffc, 0x2}, {0xfffffffffffffff9, &(0x7f0000000ac0)=0x3, 0x82}, {0xfff, &(0x7f0000000b00)=0x20000000000002, 0x2}, {0x1, &(0x7f0000000b40)=0xffffffffffffffff, 0x82}, {0x5, &(0x7f0000000b80)=0xffffffff, 0x2}, {0x0, &(0x7f0000000bc0)=0x6, 0x82}, {0xb8, &(0x7f0000000c00)=0x9, 0x2}, {0x5, &(0x7f0000000c40)=0x3, 0x2}, {0x800, &(0x7f0000000c80)=0x3ff, 0x82}, {0x4f, &(0x7f0000000cc0)=0xb, 0x2}, {0x2cc, &(0x7f0000000d00)=0xdb36, 0x82}, {0x2, &(0x7f0000000d40)=0xfffffffffffffffb, 0x2}, {0x2, &(0x7f0000000d80)=0xfffffffffffffff8, 0x2}, {0xc, &(0x7f0000000dc0)=0x8, 0x82}, {0x6, &(0x7f0000000e00)=0x7, 0x2}, {0x9, &(0x7f0000000e40)=0x3, 0x82}, {0x3, &(0x7f0000000e80)=0x9, 0x2}, {0x6, &(0x7f0000000ec0)=0x5, 0x82}, {0x1, &(0x7f0000000f00)=0x3, 0x2}, {0x7fffffffffffffff, &(0x7f0000000f40)=0x401, 0x82}], 0x2d, 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x0, &(0x7f0000000440)={0x0, 0xf, 0x0, @thr={&(0x7f0000000080)="be3a2c8e6b3b61489dcc71a511f83aaae070f157b4cdc61c46a75d4e133613d8cff991c406788b98871a72933a31735d9567f8219775599b663160f5b4eb09958b937dab02b103d57a1553a88154576007c048be06f0e17907ce9a306942616db5", &(0x7f0000000340)="04298255903fe7e78fbbde58dc2b4eea60e63c0023a6256b427a42c7313bf770bce6f3e49bec94470edfc0dc173859de8082db323926fc3319ae5492056c8e17edd8565c95fc2b0ee40fa75fa07f6a3347d75b84be5b6e68d11b643875b639c0f30a758c20b50c14ec4d8fd037e5e8e3d179114b6df4248a7ad32fe7d52c49647801f9576d628487a730153eee072127393595c436f52b3e37d2a0caa7eb20c3503f9c44f7fc"}}, &(0x7f0000000480)=0x0) timer_settime(r9, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 2.81365362s ago: executing program 1 (id=10): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x501800) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r3 = open$dir(&(0x7f00000002c0)='./nfsd\x00', 0x40, 0xa4) r4 = openat(r3, &(0x7f0000000300)='./nfsd\x00', 0x2, 0x0) preadv(r4, &(0x7f0000002a40)=[{&(0x7f0000000480)=""/125, 0x7d}], 0x1, 0x3c, 0x9) syz_usb_disconnect(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_usb_connect(0x0, 0x24, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x5f, 0xbf, 0xda, 0x40, 0x4e2, 0x1412, 0x990f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x2, 0x40, 0x9, "", [{{0x9, 0x4, 0xb6, 0x0, 0x0, 0x2, 0x5e, 0x8d, 0xf}}]}}]}}, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000002e40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000000800)={0x25d0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x6b}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xd9, 0xfc, "bcb968bb7a25a0f1b0cb6e08e70f1f34f8d4234d0c9cdece87cfa53a277fea4460ec441bfcf1e491771b9407185ec00399f1be24ce30d156389d5ca04c0539d4813c5131e6a6850a7072841df3b8b6c946f1f45bf9309a433e6eb96df85dc3c8efe2b0f3a4eee54fbb532fceb86f0af67b7abe64808efe2bb822e4f1dd44f000b7baa0151bed3ecbf8bfae82677614d966c563ba17c8ea6e418611dae35aee60ae4663b7370cb79a63d4f159d261650c9b326718783e6a7b8edf47ffd0a00aaa6ffdb4dcef919cb3c6719978557996075907e256c1"}, @NL80211_ATTR_FILS_ERP_REALM={0xe8, 0xfa, "aed78a6a71109815f053eab89aefa93a3dace0b8afb61d1a734ef701d70d83490aae89afc8ce3c3b4040296f9a2cee30d3ed6c878c9d3c92b894490153d83099f98adf43fe7aa86623cb1bd1b99a7f256637739a51f568a1a309d97d42ffa8a982c4140fc212925ce93af443557880498dccca5383a64196dab3c7ebc1d1390cb579d03ecdbc9d91d3ad2accae62fbaaf2972ec3fbb70d67b5bf184a4885c7e88ffbd6bce361c463bdd67715217a6eeb7232dbe3ca5f37b35ee51cc6522c68340a317c58ae0a3fa969086d164a48c29403c852b52cce2d20ebe98b26212b25754277b81f"}, @NL80211_ATTR_FILS_ERP_REALM={0xd9, 0xfa, "2e23f237160f17a3086a6b3c8d286eb11e1d00217581e4538c74c22c406ecde983bd14e97d52bfbf34892dd70a386e0577fbd6d17972849b2e19dddf6519a57a39bdfa5ada3fe3e6309d7541bcd0a145b708ff8b7abac10fbb456c8a221e099c88cb32d3153b4814d3e32220bb20038ad655f3e42955ab4d456a6b92469ef33e6c083f454faa3e0ed9f4f7950da9044722bdae322cdc0185de9f0f3c0efd10ff53b89c8d3f41f4c5980536a1e0eb9d6f8cf9537d0836d171817323e7fc2964a6a4a9c16319cf01edbcda55d520e831eea8ce4ebfd6"}], @NL80211_ATTR_IE={0x164, 0x2a, [@ssid={0x0, 0x5, @random="046a2637c4"}, @mic={0x8c, 0x18, {0xf8c, "a39aa3b154b8", @long="8b1ba50e7f20c5dacedae1745af32eb1"}}, @preq={0x82, 0x7d, {{0x0, 0x0, 0x1}, 0x4, 0x1, 0xd62, @device_a, 0xfffffffa, @void, 0x6, 0x3, 0x9, [{{}, @device_a, 0x10000}, {{0x1}, @broadcast, 0x5}, {{0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x81}, {{0x1, 0x0, 0x1}, @device_b, 0x1}, {{0x1}, @device_b, 0x7cf}, {{}, @device_b, 0x8001}, {{0x1}, @device_b, 0x4}, {{0x0, 0x0, 0x1}, @device_a, 0x10}]}}, @sec_chan_ofs={0x3e, 0x1}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, {{}, 0xa, 0xb, @broadcast, 0xcbf, @void, 0x4, 0x1, @broadcast, 0x4}}, @random={0x8, 0x87, "ef046d66105fc8116cf08cf6d44a018e39c73f5e6859d93c88602142167ff4da2965b216701931f903f3ac1e3ac130fd1f88cfda63649425abfba1de3e8420054afd04ead0e6092f54c007d8ec62e8ba7e17ee5c189b9a644ade50e18c45f109469daf69efdee23a6363f925c441a17783475bac1bfdf4a5b2ebe91943be0fa20130a5e4d486a2"}, @erp={0x2a, 0x1}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "85b379f6606ad8631a24337aa708"}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0x39, 0xfc, "7e8df3a314ee18cd53aac555bbaf8c25118bdb991c87aca103ac02fa4f16cd9fb4fe7bf25d935f01ae8427c97a4cb8edc7e41b83e7"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "6726a4e3c55e473f9bbe1598b6a2dda1"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8000}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "6c49405de180a387e23f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "7208fea77702a703a85a6eaf3c"}], @NL80211_ATTR_IE={0xa2, 0x2a, [@channel_switch={0x25, 0x3, {0x0, 0x88, 0x81}}, @challenge={0x10, 0x1, 0x49}, @fast_bss_trans={0x37, 0x83, {0x8, 0x2, "ec23dddc97cb4e5dcdf21c90e07c1cad", "7ac99f1b915c88f65bebc198d8a435a77abeebffcd4c61b4747c47171bfc9e9d", "a38ac98265547e026cd48f7b30016ef66066afe353b0091c32c3ac6cb9d3825d", [{0x3, 0x1c, "73bbae798bae60573e2803c3414feb9c91fb18f6e8244adcaaa33257"}, {0x2, 0x11, "cf7524a7844dec61a863565f6f601d1561"}]}}, @mesh_chsw={0x76, 0x6, {0xa, 0x1, 0x16, 0x800}}, @dsss={0x3, 0x1, 0x30}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x10, 0xc, 0x7b}}]}, @NL80211_ATTR_IE={0x5a, 0x2a, [@mic={0x8c, 0x18, {0x855, "675cab4eeb4a", @long="c6ac502839e7fc36979a4bc4f6cb1c89"}}, @prep={0x83, 0x1f, {{}, 0x5, 0x6, @device_b, 0x3, @void, 0xfffffff7, 0x7, @device_a, 0x7f}}, @mic={0x8c, 0x10, {0x819, "67ba2e4b2a29", @short="b1e06c8580ebd06a"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x10, 0x28, 0x6}}, @challenge={0x10, 0x1, 0xa3}]}]}, 0x25d0}, 0x1, 0x0, 0x0, 0x4008004}, 0x4084) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) connect$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x0, 0x2}}, 0x10) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x204) bind$inet(r5, 0x0, 0x0) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000040)=""/185, &(0x7f00000007c0)=0xb9) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '', @void}}}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1}) 2.781033439s ago: executing program 0 (id=11): setpgid(0x0, 0x0) r0 = gettid() madvise(&(0x7f00005cf000/0x3000)=nil, 0x3000, 0x16) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000180)={0x2, 0x2, 0x2, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x46795000) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="7b9ea47ec02f09"], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x80, 0x0) dup3(r4, r3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x8000f28, 0x5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000003240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040040) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "5335572af7aa9ec3", "0bb3bbceae3b6d56e33a5c51cbf284c6", "1363cf10", "5c892ebd183c8c13"}, 0x28) recvmsg(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)=""/84, 0x54}], 0x1}, 0x20) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x21) 2.328857959s ago: executing program 3 (id=12): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000440)=""/221) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) readv(r4, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/245, 0xf5}], 0x1) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x2}}) ioctl$TIOCSETD(r4, 0x5423, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x28, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r7 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, 0x0) sendfile(r3, r3, 0x0, 0x8000002) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x4000040) 1.88977404s ago: executing program 0 (id=13): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$cdrom(0xffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$DVD_WRITE_STRUCT(r6, 0x2203, &(0x7f0000000f80)=@manufact={0x4, 0x1, 0x800, "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"}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x0, 0x467}, 0x2, 0xfffffffd, 'id0\x00', 'timer0\x00', 0x0, 0x0, 0xbc23}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x5c, r2, 0x400, 0x70bd2c, 0xd, {{}, {@val={0x8, 0x1, 0x3d}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xf26, 0x35}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x22}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffc5e8, 0x67}}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write(r0, &(0x7f0000000300)='p:test/event1 ./file0:0x0 +', 0x1b) socket$nl_route(0x10, 0x3, 0x0) 1.493215013s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000003bc0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/85, 0x55}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/221, 0xdd}], 0x3}, 0xff}], 0x1, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 894.646325ms ago: executing program 0 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x179) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x13b) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='cgroup\x00', 0x2108410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = memfd_create(0x0, 0x2) ftruncate(r1, 0x1000006) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000280)={0x0, 0xe54d}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000005c0)={r3, 0xcf, "13d1bfcac6ed7c1acfcb7ca289845cf670e1f666564332b71f06cc82e49caa587adcb92369f050109a05f16be3affb87b3c6ae9a69df615ab56cbbbad56ea9a6a57e9dcd9d1d2a7fa4aaf9faf5ddd59a10c70a92f1e38866f7388e013c9fee6b7596e7aa378000ace63b00db699751fcffaa195b1dd88f4728591632a8da8b40705372d021618d0305ddfa21d75c22cdb3dd8ed8c22d2378c9c062114f163e40cef85d9b6b2755364123ef077443041bd5f994da66baea776226e7a70fcafcf8dcfe87c3d4f38e4448e10c4eb1d6d8"}, &(0x7f00000006c0)=0xd7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0xf2259000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000200)={0x0, 0x47144a3e, 0x3}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'team_slave_1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mlock2(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x35) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffff000}]}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d8000000180000002cbd7000fbdbdf251c141405fe00c805002a0000140012000800e5a98c209648c2f4a87a5f97d44105001a000300000005001a004300000084001300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000008000100000000000c00090004000c0b", @ANYRES32=r5, @ANYBLOB="202f9d4aeae5563bbbc08c75297eac34212d194eae768da6733b0090f6e2238d0a02e7342bdbe4bda03f406c6b5cca56f69ec7ed9d520fc7b87ce6055339102274e5cb7ec6a93c60ba8ec322187eb877620f16bf90b1167023e90092f1475669d5a4886fae2448e7b6604b05723c8c4dd72b2ec21d71bdfec3c2139fa857c0810e74bc0245"], 0xd8}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 884.449456ms ago: executing program 0 (id=16): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[], 0x248}}, 0x40000) r0 = syz_open_procfs(0x0, 0x0) symlinkat(&(0x7f0000001900)='./file0\x00', r0, &(0x7f0000001940)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) bind$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd67da7120001868e37d9c080cf76cc666cfa6c9c61101fc020000000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x303}, "d88ba953d840b6f9", "b808398e7f01953cacd5ed068051f44b", "8cfdf591", "4b56b7c27150faec"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0xc08b, 0x80000001, 0x800, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) write$P9_RLERROR(r6, &(0x7f0000000080)=ANY=[], 0xa) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x11, @remote, 0x4e20, 0x3, 'wrr\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'rr\x00', 0xc, 0x5, 0x63}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4623, 0x3, 0x100000cd, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r5, &(0x7f00000005c0)=[{{0x0, 0xf5, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) 641.394487ms ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) pselect6(0x40, &(0x7f00000005c0)={0xc, 0xe, 0x80000000, 0x1, 0x6, 0x0, 0xfffffffffffffffb, 0xc8d1}, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='hist:keys=next_pid\x00', 0x12) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x485, 0x0, 0x4}]}) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 596.83451ms ago: executing program 2 (id=18): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0xa1, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x6a98047402e98331, 0x70bd2c, 0xfffffffc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40) recvmmsg(0xffffffffffffffff, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x100, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f00000003c0), &(0x7f0000000480)=""/133, 0x85, &(0x7f0000000640)={&(0x7f0000000540)={'sha512-neon\x00'}, &(0x7f0000000580)="17e0fbfa1cd0113367a30dc17913a6baa401add72c6476e9fa079fa52bb65d180f077f7eecdccb4727dfd20578aad9f306ea71b3203a9a691bdeda9149024ca4af6da29f18ecaa1bd99639a25f914583293891bc8d4bf383942854f25d1bc952a06f575f45eaf843984940ff20d3b0987a16ff81d16e3bc94f032333aba00aaf99537847d31af9ffc897acb0ef3942f496aa0c8c5cc7ba157bbcf744ccf78f5ecdb254c5a3c4ab1dca2b1ee2195ea26e6a2229", 0xb3}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0xa}, r6, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) r10 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000409000/0x4000)=nil) r11 = shmat(r10, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r10, &(0x7f0000ff9000/0x1000)=nil, 0x4000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="950000000000000018280000", @ANYRES32=r9, @ANYBLOB="00000000100000008510000009000000"], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000a80)=""/4096, 0x40f00, 0x65, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2b60a, r9, 0x1, 0x0, &(0x7f0000001ac0)=[{0x3, 0x3, 0x7, 0xa}], 0x10, 0x3}, 0x94) shmdt(r11) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x53b2, 0x8, 0x1000000, 0x2033f, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x2000, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6d1f, 0x8000, 0x5, 0xdfffffff}}], 0x1, 0x0, 0x0) 0s ago: executing program 0 (id=19): r0 = openat$cdrom(0xffffff9c, &(0x7f0000000000), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$user(&(0x7f0000000200), &(0x7f00000003c0), &(0x7f0000000400)="dade40904c1356d7ab3d10c40581405a59def19bf908d29093eb05a6fd9408110851", 0x22, r6) r8 = add_key$user(&(0x7f0000006400), 0x0, &(0x7f0000000980)="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", 0x134, 0xfffffffffffffffe) r9 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r9, 0x8946, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135a56412a20d4363f5df408fc6441639e75c7470bb11f031bf8ed2", 0x35, 0xfffffffffffffffe) syz_open_dev$video4linux(&(0x7f0000000300), 0xffffffff, 0x399083) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES16=r9], 0x14}}, 0x0) ioctl$CDROMREADAUDIO(r0, 0x530e, &(0x7f0000000080)={@lba=0x18, 0x1, 0x24, &(0x7f0000000040)=""/36}) mkdirat(0xffffffffffffffff, &(0x7f0000000540)='./cgroup/file0\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6(0xa, 0x3, 0x5) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:27981' (ED25519) to the list of known hosts. [ 32.447763][ T5650] cgroup: Unknown subsys name 'net' [ 32.570383][ T5650] cgroup: Unknown subsys name 'cpuset' [ 32.573820][ T5650] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.486425][ T5650] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.631232][ T5734] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.632835][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.635202][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.638620][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.639300][ T5734] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.655247][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 37.662427][ T5746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 37.662556][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 37.665903][ T5746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 37.666126][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 37.666555][ T5746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 37.666902][ T5746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 37.667560][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 37.667926][ T5746] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 37.668416][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 37.672064][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 37.672342][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 37.676155][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 37.677782][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 37.679098][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.242999][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.243134][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.243230][ T5732] bridge_slave_0: entered allmulticast mode [ 38.244556][ T5732] bridge_slave_0: entered promiscuous mode [ 38.247466][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.247574][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.247665][ T5736] bridge_slave_0: entered allmulticast mode [ 38.248990][ T5736] bridge_slave_0: entered promiscuous mode [ 38.276320][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.276365][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.276426][ T5732] bridge_slave_1: entered allmulticast mode [ 38.277148][ T5732] bridge_slave_1: entered promiscuous mode [ 38.292152][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.292237][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.292299][ T5736] bridge_slave_1: entered allmulticast mode [ 38.293095][ T5736] bridge_slave_1: entered promiscuous mode [ 38.311680][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.311733][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.311792][ T5735] bridge_slave_0: entered allmulticast mode [ 38.312541][ T5735] bridge_slave_0: entered promiscuous mode [ 38.327706][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.329278][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.329354][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.329392][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.329463][ T5735] bridge_slave_1: entered allmulticast mode [ 38.330252][ T5735] bridge_slave_1: entered promiscuous mode [ 38.355660][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.366613][ T5732] team0: Port device team_slave_0 added [ 38.374894][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.375997][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.381084][ T5732] team0: Port device team_slave_1 added [ 38.398124][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.426519][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.426567][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.426654][ T5740] bridge_slave_0: entered allmulticast mode [ 38.427495][ T5740] bridge_slave_0: entered promiscuous mode [ 38.433413][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.433422][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.433434][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.435512][ T5736] team0: Port device team_slave_0 added [ 38.435799][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.435807][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.435819][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.436306][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.436346][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.436401][ T5740] bridge_slave_1: entered allmulticast mode [ 38.437131][ T5740] bridge_slave_1: entered promiscuous mode [ 38.443958][ T5735] team0: Port device team_slave_0 added [ 38.453508][ T5736] team0: Port device team_slave_1 added [ 38.455279][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.467997][ T5735] team0: Port device team_slave_1 added [ 38.480310][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.502222][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.502232][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.502245][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.502778][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.502787][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.502799][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.515231][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.515239][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.515251][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.519250][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.519259][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.519272][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.521221][ T5740] team0: Port device team_slave_0 added [ 38.536580][ T5740] team0: Port device team_slave_1 added [ 38.547062][ T5732] hsr_slave_0: entered promiscuous mode [ 38.547826][ T5732] hsr_slave_1: entered promiscuous mode [ 38.591843][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.591854][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.591866][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.594861][ T5736] hsr_slave_0: entered promiscuous mode [ 38.595272][ T5736] hsr_slave_1: entered promiscuous mode [ 38.595823][ T5736] debugfs: 'hsr0' already exists in 'hsr' [ 38.595862][ T5736] Cannot create hsr debugfs directory [ 38.606393][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.606406][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.606419][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.615450][ T5735] hsr_slave_0: entered promiscuous mode [ 38.615858][ T5735] hsr_slave_1: entered promiscuous mode [ 38.616142][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 38.616152][ T5735] Cannot create hsr debugfs directory [ 38.689821][ T5740] hsr_slave_0: entered promiscuous mode [ 38.690232][ T5740] hsr_slave_1: entered promiscuous mode [ 38.690499][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 38.690509][ T5740] Cannot create hsr debugfs directory [ 38.835975][ T5732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.841198][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.842091][ T5732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.845852][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.846390][ T5732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.858027][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.886941][ T5732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.890392][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.927627][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.927894][ T5732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.928170][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.928223][ T5732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.941966][ T5736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.945659][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.946684][ T5736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.949453][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.950006][ T5736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.953098][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.957956][ T5736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.961311][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.011526][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.011595][ T5736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.011699][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.011740][ T5736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.018471][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.022812][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.023242][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.029343][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.036537][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.041472][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.043525][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.045282][ T72] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.047503][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.049665][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.075168][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.077397][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.105023][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.118919][ T5740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.123795][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.124238][ T5740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.128899][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.132700][ T5740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.136348][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.136834][ T5740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.140312][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.158728][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.171127][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.171185][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.174029][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.179005][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.179170][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.205580][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.219425][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.219498][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.228757][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.234954][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.245011][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.245099][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.246839][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.246917][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.250929][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.251005][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.301542][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.331185][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.337616][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.337659][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.342993][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.343057][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.573716][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.582098][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.583160][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.618116][ T5732] veth0_vlan: entered promiscuous mode [ 39.636387][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.638515][ T5732] veth1_vlan: entered promiscuous mode [ 39.647861][ T5735] veth0_vlan: entered promiscuous mode [ 39.652295][ T5736] veth0_vlan: entered promiscuous mode [ 39.659242][ T5735] veth1_vlan: entered promiscuous mode [ 39.663260][ T5736] veth1_vlan: entered promiscuous mode [ 39.675440][ T64] Bluetooth: hci1: command tx timeout [ 39.675443][ T5096] Bluetooth: hci0: command tx timeout [ 39.675690][ T64] Bluetooth: hci2: command tx timeout [ 39.698720][ T5732] veth0_macvtap: entered promiscuous mode [ 39.706464][ T5732] veth1_macvtap: entered promiscuous mode [ 39.708865][ T5735] veth0_macvtap: entered promiscuous mode [ 39.710013][ T5740] veth0_vlan: entered promiscuous mode [ 39.714010][ T5740] veth1_vlan: entered promiscuous mode [ 39.721475][ T5735] veth1_macvtap: entered promiscuous mode [ 39.730218][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.730434][ T5736] veth0_macvtap: entered promiscuous mode [ 39.735317][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.744864][ T5736] veth1_macvtap: entered promiscuous mode [ 39.752182][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.755445][ T5734] Bluetooth: hci3: command tx timeout [ 39.758529][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.762361][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.775529][ T5740] veth0_macvtap: entered promiscuous mode [ 39.779181][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.782569][ T5740] veth1_macvtap: entered promiscuous mode [ 39.822949][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.838996][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.839723][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.839733][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.845409][ T5811] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845729][ T5811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845751][ T5811] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845769][ T5811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845787][ T5811] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845804][ T5811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845822][ T5811] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845839][ T5811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845857][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.845874][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.859572][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.859582][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.898148][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.898161][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.906997][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.907009][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.907157][ T5811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.934600][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.934612][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.948037][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.948048][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.960937][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.960948][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.965770][ T5736] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.973808][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.973820][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.974681][ T5732] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.981381][ T5732] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 39.985277][ T5607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.987939][ T5736] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.000581][ T5736] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 40.004776][ T5811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.004966][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.005102][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.005223][ T5811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.134065][ T5888] FAULT_INJECTION: forcing a failure. [ 40.134065][ T5888] name failslab, interval 1, probability 0, space 0, times 1 [ 40.134086][ T5888] CPU: 1 UID: 0 PID: 5888 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT(full) [ 40.134099][ T5888] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.134106][ T5888] Call Trace: [ 40.134110][ T5888] [ 40.134114][ T5888] dump_stack_lvl+0x100/0x190 [ 40.134132][ T5888] should_fail_ex.cold+0x5/0xa [ 40.134147][ T5888] should_failslab+0xc2/0x120 [ 40.134162][ T5888] kmem_cache_alloc_noprof+0x92/0x6a0 [ 40.134175][ T5888] ? __pfx_map_id_range_down+0x10/0x10 [ 40.134189][ T5888] ? security_inode_alloc+0x3b/0x2c0 [ 40.134206][ T5888] security_inode_alloc+0x3b/0x2c0 [ 40.134221][ T5888] inode_init_always_gfp+0xc6f/0xfb0 [ 40.134236][ T5888] alloc_inode+0x8e/0x250 [ 40.134252][ T5888] new_inode+0x22/0x1c0 [ 40.134266][ T5888] ? d_alloc_parallel+0x9f6/0x14c0 [ 40.134295][ T5888] tracefs_get_inode+0x19/0x80 [ 40.134312][ T5888] eventfs_get_inode+0x53/0x520 [ 40.134329][ T5888] eventfs_root_lookup+0x23c/0xa50 [ 40.134346][ T5888] ? __pfx_eventfs_root_lookup+0x10/0x10 [ 40.134361][ T5888] ? find_held_lock+0x2b/0x80 [ 40.134377][ T5888] ? down_read+0x13b/0x4c0 [ 40.134387][ T5888] ? __pfx_down_read+0x10/0x10 [ 40.134399][ T5888] __lookup_slow+0x155/0x320 [ 40.134416][ T5888] lookup_slow+0x50/0x70 [ 40.134431][ T5888] link_path_walk+0x1377/0x1cc0 [ 40.134459][ T5888] path_openat+0x1ac/0x2440 [ 40.134476][ T5888] ? __pfx_path_openat+0x10/0x10 [ 40.134493][ T5888] do_file_open+0x20e/0x430 [ 40.134506][ T5888] ? __pfx_do_file_open+0x10/0x10 [ 40.134529][ T5888] ? _raw_spin_unlock+0x28/0x50 [ 40.134546][ T5888] ? alloc_fd+0x471/0x7a0 [ 40.134563][ T5888] do_sys_openat2+0x10f/0x1e0 [ 40.134579][ T5888] ? __pfx_do_sys_openat2+0x10/0x10 [ 40.134601][ T5888] __ia32_compat_sys_openat+0x12d/0x210 [ 40.134619][ T5888] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 40.134642][ T5888] __do_fast_syscall_32+0x13a/0x8b0 [ 40.134659][ T5888] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.134676][ T5888] do_fast_syscall_32+0x32/0x70 [ 40.134692][ T5888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.134706][ T5888] RIP: 0023:0xf700efec [ 40.134718][ T5888] Code: Unable to access opcode bytes at 0xf700efc2. [ 40.134723][ T5888] RSP: 002b:00000000f53fd50c EFLAGS: 00000292 ORIG_RAX: 0000000000000127 [ 40.134734][ T5888] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000140 [ 40.134743][ T5888] RDX: 0000000000080d83 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.134749][ T5888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.134755][ T5888] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.134761][ T5888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.134774][ T5888] [ 40.145195][ T5888] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 40.154658][ T5889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 40.198717][ T5891] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 40.199512][ T5891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 40.390301][ T5900] FAULT_INJECTION: forcing a failure. [ 40.390301][ T5900] name fail_futex, interval 1, probability 0, space 0, times 1 [ 40.390321][ T5900] CPU: 1 UID: 0 PID: 5900 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT(full) [ 40.390333][ T5900] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 40.390339][ T5900] Call Trace: [ 40.390343][ T5900] [ 40.390348][ T5900] dump_stack_lvl+0x100/0x190 [ 40.390365][ T5900] should_fail_ex.cold+0x5/0xa [ 40.390379][ T5900] get_futex_key+0x1d0/0x14f0 [ 40.390398][ T5900] ? __pfx_get_futex_key+0x10/0x10 [ 40.390415][ T5900] ? __pfx_futex_hash+0x10/0x10 [ 40.390432][ T5900] ? get_pid_task+0xfc/0x250 [ 40.390443][ T5900] ? get_pid_task+0xfc/0x250 [ 40.390457][ T5900] futex_wake+0xf4/0x5e0 [ 40.390470][ T5900] ? __lock_acquire+0x5c0/0x1f40 [ 40.390485][ T5900] ? __pfx_futex_wake+0x10/0x10 [ 40.390500][ T5900] ? lock_acquire+0x1d1/0x380 [ 40.390517][ T5900] do_futex+0x2b2/0x440 [ 40.390528][ T5900] ? __pfx_do_futex+0x10/0x10 [ 40.390540][ T5900] ? __fget_files+0x21f/0x3d0 [ 40.390554][ T5900] __ia32_sys_futex_time32+0x2f4/0x470 [ 40.390568][ T5900] ? __pfx___ia32_sys_futex_time32+0x10/0x10 [ 40.390584][ T5900] __do_fast_syscall_32+0x13a/0x8b0 [ 40.390601][ T5900] ? lockdep_hardirqs_on+0x7d/0x110 [ 40.390624][ T5900] do_fast_syscall_32+0x32/0x70 [ 40.390642][ T5900] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 40.390657][ T5900] RIP: 0023:0xf708efec [ 40.390670][ T5900] Code: Unable to access opcode bytes at 0xf708efc2. [ 40.390676][ T5900] RSP: 002b:00000000f547d5cc EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 40.390687][ T5900] RAX: ffffffffffffffda RBX: 00000000f7484f8c RCX: 0000000000000081 [ 40.390694][ T5900] RDX: 00000000000f4240 RSI: 0000000020646165 RDI: 0000000063617473 [ 40.390701][ T5900] RBP: 0000000000203a6b R08: 0000000000000000 R09: 0000000000000000 [ 40.390708][ T5900] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 40.390714][ T5900] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 40.390727][ T5900] [ 40.468006][ T5900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 40.955797][ T5828] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 41.104386][ T5828] usb 7-1: Using ep0 maxpacket: 32 [ 41.105394][ T5828] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 41.107335][ T5828] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 41.107348][ T5828] usb 7-1: config 0 has no interface number 0 [ 41.111282][ T5828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.111301][ T5828] usb 7-1: Product: syz [ 41.111311][ T5828] usb 7-1: Manufacturer: syz [ 41.111321][ T5828] usb 7-1: SerialNumber: syz [ 41.113106][ T5828] usb 7-1: config 0 descriptor?? [ 41.117966][ T5919] ALSA: mixer_oss: invalid OSS volume '{ž¤~À/' [ 41.119574][ T5828] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 41.119587][ T5828] usb 7-1: selecting invalid altsetting 1 [ 41.119595][ T5828] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 41.127871][ T5828] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 41.128805][ T5828] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 41.128831][ T5828] usb 7-1: media controller created [ 41.135540][ T5828] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 41.334555][ T5825] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 41.401636][ T5922] kvm: apic: phys broadcast and lowest prio [ 41.411614][ T5922] e1000e 0000:00:02.0 eth1: removed PHC [ 41.509729][ T5922] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 41.554393][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 41.556842][ T5825] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 41.558007][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 41.558026][ T5825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 41.558059][ T5825] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 41.558081][ T5825] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 41.558111][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.574686][ T5825] hub 6-1:1.0: bad descriptor, ignoring hub [ 41.574707][ T5825] hub 6-1:1.0: probe with driver hub failed with error -5 [ 41.578318][ T5825] cdc_wdm 6-1:1.0: skipping garbage [ 41.578332][ T5825] cdc_wdm 6-1:1.0: skipping garbage [ 41.588666][ T5825] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 41.588682][ T5825] cdc_wdm 6-1:1.0: Unknown control protocol [ 41.754596][ T64] Bluetooth: hci0: command tx timeout [ 41.754618][ T64] Bluetooth: hci1: command tx timeout [ 41.754720][ T5734] Bluetooth: hci2: command tx timeout [ 41.835088][ T5734] Bluetooth: hci3: command tx timeout [ 41.913552][ T5928] mmap: syz.3.12 (5928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.196592][ T5917] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 42.197721][ T5917] usb 6-1: device reset changed ep0 maxpacket size! [ 42.199917][ T5917] cdc_wdm 6-1:1.0: Error autopm - -16 [ 42.200088][ T25] usb 6-1: USB disconnect, device number 2 [ 42.235896][ T5828] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 42.236797][ T5828] zl10353_read_register: readreg error (reg=127, ret==-110) [ 42.344408][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 42.930718][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 42.930744][ T25] usb 6-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=99.0f [ 42.950070][ T25] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 42.950090][ T25] usb 6-1: can't read configurations, error -71 [ 43.093338][ T74] IPVS: starting estimator thread 0... [ 43.094063][ T5983] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 43.174450][ T5984] IPVS: using max 43 ests per chain, 103200 per kthread [ 43.834480][ T5734] Bluetooth: hci2: command tx timeout [ 43.834503][ T5734] Bluetooth: hci1: command tx timeout [ 43.834519][ T5734] Bluetooth: hci0: command tx timeout [ 43.914496][ T5096] Bluetooth: hci3: command tx timeout [ 43.919273][ T5828] usb 7-1: USB disconnect, device number 2 [ 43.929079][ T5986] smpboot: CPU 1 is now offline [ 44.167653][ T5988] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 44.177405][ T20] ------------[ cut here ]------------ [ 44.177414][ T20] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 44.177427][ T20] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/20 [ 44.185670][ T20] Modules linked in: [ 44.187200][ T20] CPU: 0 UID: 0 PID: 20 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 44.190522][ T20] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.194153][ T20] Stopper: 0x0 <- 0x0 [ 44.195646][ T20] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 44.197675][ T20] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 98 a0 fa 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 44.204614][ T20] RSP: 0018:ffffc9000046fc30 EFLAGS: 00010046 [ 44.206842][ T20] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 44.209666][ T20] RDX: 0000000000000046 RSI: ffffffff8e3cb4bf RDI: ffffffff8c622c80 [ 44.212508][ T20] RBP: ffffc9000046fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 44.215392][ T20] R10: ffff88802b23cbd8 R11: 0000000a492c7c00 R12: ffffffff914587e4 [ 44.218263][ T20] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 44.221097][ T20] FS: 0000000000000000(0000) GS:ffff888096960000(0000) knlGS:0000000000000000 [ 44.224296][ T20] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.226722][ T20] CR2: 00000000333f8ff8 CR3: 00000000221e7000 CR4: 0000000000352ef0 [ 44.229675][ T20] Call Trace: [ 44.230952][ T20] [ 44.232059][ T20] __schedule+0x1c69/0x6920 [ 44.233756][ T20] ? __lock_acquire+0x5c0/0x1f40 [ 44.235600][ T20] ? __pfx___schedule+0x10/0x10 [ 44.237398][ T20] ? find_held_lock+0x2b/0x80 [ 44.239132][ T20] ? schedule+0x225/0x2c0 [ 44.240732][ T20] schedule+0xdd/0x2c0 [ 44.242198][ T20] smpboot_thread_fn+0x8a0/0xab0 [ 44.243962][ T20] ? kthread+0x13a/0x450 [ 44.245492][ T20] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 44.247439][ T20] kthread+0x373/0x450 [ 44.248909][ T20] ? __pfx_kthread+0x10/0x10 [ 44.250558][ T20] ret_from_fork+0x730/0xd60 [ 44.252211][ T20] ? __pfx_ret_from_fork+0x10/0x10 [ 44.254041][ T20] ? __switch_to+0x800/0x10f0 [ 44.255726][ T20] ? __pfx_kthread+0x10/0x10 [ 44.257418][ T20] ret_from_fork_asm+0x1a/0x30 [ 44.259142][ T20] [ 44.260266][ T20] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 44.262923][ T20] CPU: 0 UID: 0 PID: 20 Comm: migration/0 Not tainted syzkaller #0 PREEMPT(full) [ 44.266195][ T20] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 44.269755][ T20] Stopper: 0x0 <- 0x0 [ 44.271198][ T20] Call Trace: [ 44.272395][ T20] [ 44.273465][ T20] dump_stack_lvl+0x100/0x190 [ 44.275157][ T20] vpanic+0x553/0x970 [ 44.276590][ T20] ? __pfx_vpanic+0x10/0x10 [ 44.278235][ T20] panic+0xd1/0xe0 [ 44.279573][ T20] ? __pfx_panic+0x10/0x10 [ 44.281172][ T20] check_panic_on_warn.cold+0x19/0x34 [ 44.283077][ T20] ? update_rq_clock+0x40a/0xd20 [ 44.284873][ T20] __warn.cold+0x191/0x318 [ 44.286486][ T20] __report_bug+0x30f/0x440 [ 44.288124][ T20] ? update_rq_clock+0x40a/0xd20 [ 44.289924][ T20] ? __pfx___report_bug+0x10/0x10 [ 44.291716][ T20] ? pick_eevdf+0x23e/0x880 [ 44.293354][ T20] ? psi_group_change+0x457/0xa20 [ 44.295184][ T20] ? update_rq_clock+0x40a/0xd20 [ 44.296975][ T20] report_bug+0xb3/0x220 [ 44.298527][ T20] ? update_rq_clock+0x40a/0xd20 [ 44.300319][ T20] handle_bug+0x16a/0x2a0 [ 44.301866][ T20] exc_invalid_op+0x17/0x50 [ 44.303495][ T20] asm_exc_invalid_op+0x1a/0x20 [ 44.305271][ T20] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 44.307201][ T20] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 98 a0 fa 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 44.313675][ T20] RSP: 0018:ffffc9000046fc30 EFLAGS: 00010046 [ 44.315759][ T20] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 44.318492][ T20] RDX: 0000000000000046 RSI: ffffffff8e3cb4bf RDI: ffffffff8c622c80 [ 44.321176][ T20] RBP: ffffc9000046fdd0 R08: 0000000000000001 R09: 0000000000000001 [ 44.323870][ T20] R10: ffff88802b23cbd8 R11: 0000000a492c7c00 R12: ffffffff914587e4 [ 44.326618][ T20] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 44.329414][ T20] __schedule+0x1c69/0x6920 [ 44.331054][ T20] ? __lock_acquire+0x5c0/0x1f40 [ 44.332842][ T20] ? __pfx___schedule+0x10/0x10 [ 44.334555][ T20] ? find_held_lock+0x2b/0x80 [ 44.336205][ T20] ? schedule+0x225/0x2c0 [ 44.337738][ T20] schedule+0xdd/0x2c0 [ 44.339175][ T20] smpboot_thread_fn+0x8a0/0xab0 [ 44.340964][ T20] ? kthread+0x13a/0x450 [ 44.342451][ T20] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 44.344374][ T20] kthread+0x373/0x450 [ 44.345806][ T20] ? __pfx_kthread+0x10/0x10 [ 44.347393][ T20] ret_from_fork+0x730/0xd60 [ 44.349075][ T20] ? __pfx_ret_from_fork+0x10/0x10 [ 44.350848][ T20] ? __switch_to+0x800/0x10f0 [ 44.352493][ T20] ? __pfx_kthread+0x10/0x10 [ 44.354155][ T20] ret_from_fork_asm+0x1a/0x30 [ 44.355843][ T20] [ 45.433454][ T20] Shutting down cpus with NMI [ 45.435517][ T20] Kernel Offset: disabled [ 45.436898][ T20] Rebooting in 86400 seconds..