last executing test programs: 53.744518575s ago: executing program 4 (id=41): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x4, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x7}, {}, {0x4}}}, 0x24}}, 0x44800) 53.208017461s ago: executing program 4 (id=44): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) shutdown(r0, 0x0) shutdown(r0, 0x0) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) 52.922810803s ago: executing program 4 (id=46): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2, 0x7fff}}) 51.91056108s ago: executing program 4 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48e9, 0x0, 0x2, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000006, 0xffffffff80004040}}, 0x50) acct(&(0x7f0000000140)='./file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654805d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f84e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe14ee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb2f673b9247089ab5aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b76ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fc7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x2, {0x1, 0x2, 0xff7ffffffffffffc, 0x0, 0x0, 0x0, {0x100000000, 0x3, 0x10000004, 0xfffffffffffffff7, 0x0, 0x3, 0x0, 0xfffff7fc, 0x9, 0x8000, 0x1f8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 50.861176596s ago: executing program 4 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, 0x0) 50.528156632s ago: executing program 4 (id=55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) 35.436400706s ago: executing program 32 (id=55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) 5.767569979s ago: executing program 2 (id=321): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xfffffffffffffce6, 0x0, &(0x7f0000000100)="ff412f66b0833efc792e968781", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000680), 0x5, r1}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x50) 5.560630291s ago: executing program 3 (id=323): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "bc"}}, 0x119) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000001c0)={{}, 0x1, &(0x7f0000000000)=[0x0]}) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000240)={0x3, 0x5}) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/166, 0xa6}], 0x100000000000005a) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rthdrdstopts={{0x18}}], 0x18}, 0x0) 5.430516945s ago: executing program 2 (id=325): fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x200, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000c00)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022050000"], 0x0}, 0x0) 5.330248315s ago: executing program 3 (id=326): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1011, 0xffffffffffffffff, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000003900)={r1, r1, 0x11, 0x0, 0x0, 0x5, 0x0, 0x7fff, 0x4, 0x2, 0x6, 0xfa, 'syz1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 5.324767952s ago: executing program 5 (id=327): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) r2 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x6, 0x1}) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@op={0x18}], 0x18}], 0x1, 0x40) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.252711514s ago: executing program 1 (id=328): r0 = landlock_create_ruleset(&(0x7f0000000040)={0xc5, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x12}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 4.787904747s ago: executing program 3 (id=329): setresgid(0x0, 0xee00, 0x0) r0 = syz_clone(0x0, 0x0, 0x40, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.560211003s ago: executing program 5 (id=331): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') 4.401510016s ago: executing program 1 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000086fff4)) r5 = getpid() r6 = getpid() kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r1, &(0x7f00000000c0)={r4, r3}) 4.399465501s ago: executing program 5 (id=334): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r3, &(0x7f000000b800)={0x2020}, 0xe80) write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[], 0xfffffe14) 4.274128181s ago: executing program 1 (id=335): io_setup(0x3ff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x8000, 0x5, 0x7, 0x1, 0x9, 0x3, 0xbf, 0xb9, 0x3, 0xf, 0x5, 0x6}, {0x804, 0x5, 0xd, 0x5, 0x10, 0x2, 0xff, 0x5, 0xa0, 0x6, 0xb, 0x7e, 0x3}, {0x4, 0x6, 0x38, 0x6, 0x84, 0x7, 0x0, 0x50, 0x2, 0x60, 0x3, 0xa, 0x400000000006}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc1], 0x0, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.226488675s ago: executing program 2 (id=336): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(0xffffffffffffffff, 0x0, 0x0) shutdown(r0, 0x0) r2 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x10000}, &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x48e9, 0x0, 0x0, 0x0, 0x0) 4.21662971s ago: executing program 0 (id=337): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a569106c72ffffe3fffffffff50000020000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) 3.352762583s ago: executing program 5 (id=338): open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) 3.267951178s ago: executing program 0 (id=339): bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000020601020000000000000000000000000500010007"], 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x101202, 0x0) io_uring_setup(0x6280, 0x0) 3.214102181s ago: executing program 1 (id=340): r0 = gettid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statfs(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3.21340857s ago: executing program 2 (id=341): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0x1, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 2.448179949s ago: executing program 0 (id=342): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x1000000, 0x13, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0c, 0x1, 0x0}, &(0x7f0000000000)=0x40) 2.343255516s ago: executing program 1 (id=343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) syz_clone(0x28218000, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.253925221s ago: executing program 0 (id=344): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x400, 0xfffffffffffffffe, 0x4, 0x2, 0x3, 0xc9, 0x7a9, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0xa77], 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.914116924s ago: executing program 5 (id=345): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00400300000000000000000000000000000000000000000004"], 0xa8}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1044}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f00000aa000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000080)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x8, 0xc, 0x0, 0x9, 0x10, 0x5, 0xd, 0xe, 0x3, 0x6, 0xd, 0x0, 0x0, 0x615, 0x3, 0x7, 0x71, 0x2, '\x00', 0x7, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.891604799s ago: executing program 3 (id=346): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) creat(&(0x7f0000000280)='./file1\x00', 0x4) socket(0x10, 0x3, 0x0) ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000100)=0x9) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 1.871147323s ago: executing program 0 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x4302}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x188) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r2, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000000)='./file0\x00', r4, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 1.813668137s ago: executing program 2 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) init_module(&(0x7f0000000200)=ANY=[@ANYBLOB="7f454c460000000000000000000000000000000000000000000000ce00000000aa7f0000000000000000000000000000000038"], 0x79e80, &(0x7f0000000500)='kfree\x00') 1.7181803s ago: executing program 0 (id=349): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000000540)={{0x108, 0x1, 0x7f, 0xb2, 0x370, 0x80000001, 0xb, 0xfff}, "", ['\x00']}, 0x120) pwritev2(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="a1", 0x1}], 0x1, 0x8, 0x7, 0x4) 1.559904571s ago: executing program 2 (id=350): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 1.550064482s ago: executing program 3 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 1.420605808s ago: executing program 5 (id=352): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000040)=r2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = dup2(r4, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) 67.296146ms ago: executing program 1 (id=353): socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x15, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 0s ago: executing program 3 (id=354): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 73.402277][ T5807] cgroup: Unknown subsys name 'net' [ 73.574940][ T5807] cgroup: Unknown subsys name 'cpuset' [ 73.583192][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.090320][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.536971][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.546003][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.554202][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.569938][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.580014][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.580462][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.595810][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.602306][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.611828][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.622033][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.623625][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.638122][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.646817][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.653850][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.653910][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.663056][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.669734][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.676859][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.689849][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.689880][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.703949][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.704925][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.718261][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.718552][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.734992][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.736124][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.742603][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.757272][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.765647][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.773068][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.163155][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 78.199573][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 78.271881][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 78.385442][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.393723][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.401671][ T5821] bridge_slave_0: entered allmulticast mode [ 78.408964][ T5821] bridge_slave_0: entered promiscuous mode [ 78.437302][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.444574][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.452155][ T5821] bridge_slave_1: entered allmulticast mode [ 78.458936][ T5821] bridge_slave_1: entered promiscuous mode [ 78.523457][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 78.537749][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.547391][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.557988][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.565331][ T5818] bridge_slave_0: entered allmulticast mode [ 78.572687][ T5818] bridge_slave_0: entered promiscuous mode [ 78.596805][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.606281][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 78.617620][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.625127][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.632521][ T5818] bridge_slave_1: entered allmulticast mode [ 78.639246][ T5818] bridge_slave_1: entered promiscuous mode [ 78.711922][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.719100][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.727064][ T5831] bridge_slave_0: entered allmulticast mode [ 78.734137][ T5831] bridge_slave_0: entered promiscuous mode [ 78.758387][ T5821] team0: Port device team_slave_0 added [ 78.767480][ T5821] team0: Port device team_slave_1 added [ 78.776073][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.789270][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.798836][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.806224][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.813520][ T5831] bridge_slave_1: entered allmulticast mode [ 78.820225][ T5831] bridge_slave_1: entered promiscuous mode [ 78.909788][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.935121][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.942538][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.968666][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.989167][ T5818] team0: Port device team_slave_0 added [ 78.996866][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.022489][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.029662][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.037183][ T5819] bridge_slave_0: entered allmulticast mode [ 79.044204][ T5819] bridge_slave_0: entered promiscuous mode [ 79.051806][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.058922][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.066198][ T5819] bridge_slave_1: entered allmulticast mode [ 79.073143][ T5819] bridge_slave_1: entered promiscuous mode [ 79.080380][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.087759][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.114020][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.132982][ T5818] team0: Port device team_slave_1 added [ 79.149974][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.157112][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.164550][ T5817] bridge_slave_0: entered allmulticast mode [ 79.171439][ T5817] bridge_slave_0: entered promiscuous mode [ 79.222534][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.229720][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.237327][ T5817] bridge_slave_1: entered allmulticast mode [ 79.244570][ T5817] bridge_slave_1: entered promiscuous mode [ 79.278858][ T5821] hsr_slave_0: entered promiscuous mode [ 79.285298][ T5821] hsr_slave_1: entered promiscuous mode [ 79.303930][ T5831] team0: Port device team_slave_0 added [ 79.310252][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.317615][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.343881][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.356744][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.363818][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.389790][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.413008][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.427853][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.439533][ T5831] team0: Port device team_slave_1 added [ 79.499298][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.524272][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.535487][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.561589][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.575211][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.596282][ T5819] team0: Port device team_slave_0 added [ 79.604988][ T5819] team0: Port device team_slave_1 added [ 79.639534][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.646657][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.672924][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.710009][ T5818] hsr_slave_0: entered promiscuous mode [ 79.716593][ T5818] hsr_slave_1: entered promiscuous mode [ 79.723283][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.731322][ T5818] Cannot create hsr debugfs directory [ 79.756526][ T5817] team0: Port device team_slave_0 added [ 79.775116][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.782356][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.809674][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.822904][ T5827] Bluetooth: hci4: command tx timeout [ 79.828871][ T5827] Bluetooth: hci1: command tx timeout [ 79.831283][ T5838] Bluetooth: hci0: command tx timeout [ 79.834973][ T5827] Bluetooth: hci3: command tx timeout [ 79.846133][ T55] Bluetooth: hci2: command tx timeout [ 79.858752][ T5831] hsr_slave_0: entered promiscuous mode [ 79.865091][ T5831] hsr_slave_1: entered promiscuous mode [ 79.871620][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.879238][ T5831] Cannot create hsr debugfs directory [ 79.886465][ T5817] team0: Port device team_slave_1 added [ 79.905866][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.913035][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.939381][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.976787][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.984030][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.010480][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.039938][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.047038][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.073626][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.188850][ T5819] hsr_slave_0: entered promiscuous mode [ 80.195881][ T5819] hsr_slave_1: entered promiscuous mode [ 80.202391][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.209954][ T5819] Cannot create hsr debugfs directory [ 80.243258][ T5817] hsr_slave_0: entered promiscuous mode [ 80.249455][ T5817] hsr_slave_1: entered promiscuous mode [ 80.255801][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.263458][ T5817] Cannot create hsr debugfs directory [ 80.500363][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.512032][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.545062][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.559953][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.621925][ T5818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.645211][ T5818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.659381][ T5818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.683808][ T5818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.718966][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.741967][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.768048][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.796373][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.829107][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.848825][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.876193][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.886479][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.969614][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.999243][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.009654][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.019761][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.106120][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.134038][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.172288][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.207517][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.225893][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.233245][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.260363][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.267532][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.286181][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.304024][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.317204][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.324359][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.358296][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.365635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.394693][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.410867][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.442842][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.449982][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.488497][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.495745][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.507412][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.514590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.525884][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.533048][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.594850][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.630288][ T5819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.650212][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.722824][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.775090][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.782286][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.849787][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.856994][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.903336][ T5827] Bluetooth: hci3: command tx timeout [ 81.908822][ T5827] Bluetooth: hci2: command tx timeout [ 81.914441][ T55] Bluetooth: hci0: command tx timeout [ 81.914464][ T5832] Bluetooth: hci1: command tx timeout [ 81.919847][ T55] Bluetooth: hci4: command tx timeout [ 82.075888][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.093482][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.134957][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.206713][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.238536][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.266757][ T5819] veth0_vlan: entered promiscuous mode [ 82.325522][ T5819] veth1_vlan: entered promiscuous mode [ 82.339443][ T5818] veth0_vlan: entered promiscuous mode [ 82.375172][ T5818] veth1_vlan: entered promiscuous mode [ 82.443942][ T5821] veth0_vlan: entered promiscuous mode [ 82.449760][ T5831] veth0_vlan: entered promiscuous mode [ 82.459323][ T5819] veth0_macvtap: entered promiscuous mode [ 82.470831][ T5819] veth1_macvtap: entered promiscuous mode [ 82.490901][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.514291][ T5831] veth1_vlan: entered promiscuous mode [ 82.531973][ T5818] veth0_macvtap: entered promiscuous mode [ 82.540357][ T5821] veth1_vlan: entered promiscuous mode [ 82.563235][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.577891][ T5818] veth1_macvtap: entered promiscuous mode [ 82.623694][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.639789][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.653686][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.665781][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.682660][ T5821] veth0_macvtap: entered promiscuous mode [ 82.693552][ T5821] veth1_macvtap: entered promiscuous mode [ 82.709651][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.719897][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.728965][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.737897][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.770854][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.784353][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.796921][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.806054][ T5831] veth0_macvtap: entered promiscuous mode [ 82.827566][ T5818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.837298][ T5818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.848382][ T5818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.857536][ T5818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.872738][ T5831] veth1_macvtap: entered promiscuous mode [ 82.898924][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.909888][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.920534][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.932904][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.945102][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.956560][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.968044][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.978346][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.989107][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.000271][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.038059][ T5821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.047637][ T5821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.058807][ T5821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.068899][ T5821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.158011][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.170332][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.183311][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.194799][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.204779][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.215268][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.226421][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.244557][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.257267][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.282449][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.294748][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.305289][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.315930][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.325932][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.336428][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.347844][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.358132][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.368408][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.377686][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.388475][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.450603][ T5817] veth0_vlan: entered promiscuous mode [ 83.465093][ T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.473772][ T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.489212][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.498583][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.505471][ T5817] veth1_vlan: entered promiscuous mode [ 83.546667][ T5889] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.562074][ T5889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.648095][ T5817] veth0_macvtap: entered promiscuous mode [ 83.663127][ T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.681984][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.705903][ T5817] veth1_macvtap: entered promiscuous mode [ 83.711142][ T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.747267][ T5889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.763425][ T5889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.834827][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.871105][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.892299][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.905469][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.915778][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.928954][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.939494][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.950471][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.974027][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.981828][ T55] Bluetooth: hci4: command tx timeout [ 83.992412][ T5827] Bluetooth: hci2: command tx timeout [ 83.992795][ T5832] Bluetooth: hci1: command tx timeout [ 83.998401][ T5827] Bluetooth: hci0: command tx timeout [ 84.005438][ T5829] Bluetooth: hci3: command tx timeout [ 84.125765][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.221246][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.282976][ T5911] ip6gre1: entered promiscuous mode [ 84.535149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.715790][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.738506][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.757857][ T5911] syz.3.4 (5911) used greatest stack depth: 18352 bytes left [ 84.765804][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.800817][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.835618][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.860877][ T5915] mmap: syz.0.1 (5915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.866398][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.890918][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.911125][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.936162][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.962541][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.031709][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.040586][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.041054][ T29] audit: type=1800 audit(1739011957.331:2): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.6" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 85.149874][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.180405][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.198666][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.207022][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.378062][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.417338][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.511931][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.565344][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.763978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.071247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.252688][ T5832] Bluetooth: hci0: command tx timeout [ 86.258142][ T5832] Bluetooth: hci4: command tx timeout [ 86.263640][ T5832] Bluetooth: hci2: command tx timeout [ 86.269047][ T5832] Bluetooth: hci1: command tx timeout [ 86.274491][ T5832] Bluetooth: hci3: command tx timeout [ 86.379988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.812948][ T5936] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 86.890661][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.073846][ T5937] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9'. [ 87.095141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.112286][ T5933] Process accounting resumed [ 87.117743][ T5942] netlink: 'syz.2.11': attribute type 11 has an invalid length. [ 87.126552][ T5942] netlink: 'syz.2.11': attribute type 5 has an invalid length. [ 88.324554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 88.333892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 88.343153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.631713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.629802][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20'. [ 90.323502][ T5979] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 90.327107][ T977] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.512483][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 90.557663][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 90.635309][ T977] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 90.661168][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.827550][ T977] usb 2-1: Product: syz [ 90.842115][ T977] usb 2-1: Manufacturer: syz [ 90.865162][ T977] usb 2-1: SerialNumber: syz [ 90.900508][ T977] usb 2-1: config 0 descriptor?? [ 90.948363][ T977] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 90.967006][ T977] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 91.082501][ T5993] ======================================================= [ 91.082501][ T5993] WARNING: The mand mount option has been deprecated and [ 91.082501][ T5993] and is ignored by this kernel. Remove the mand [ 91.082501][ T5993] option from the mount to silence this warning. [ 91.082501][ T5993] ======================================================= [ 91.123174][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.0.28'. [ 91.133445][ C1] vcan0: j1939_session_tx_dat: 0xffff88801c2a6c00: queue data error: -100 [ 91.668122][ T977] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 92.088625][ T25] cfg80211: failed to load regulatory.db [ 92.520194][ T977] em28xx 2-1:0.0: write to i2c device at 0xa0 failed with unknown error (status=1) [ 92.534770][ T977] em28xx 2-1:0.0: failed to read eeprom (err=-5) [ 92.552317][ T977] em28xx 2-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 92.751266][ T977] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 92.767687][ T977] em28xx 2-1:0.0: dvb set to bulk mode. [ 92.814580][ T9] em28xx 2-1:0.0: Binding DVB extension [ 92.877900][ T977] usb 2-1: USB disconnect, device number 2 [ 92.922799][ T977] em28xx 2-1:0.0: Disconnecting em28xx [ 92.986894][ T6011] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.095427][ T9] em28xx 2-1:0.0: Registering input extension [ 93.134200][ T977] em28xx 2-1:0.0: Closing input extension [ 93.283294][ T977] em28xx 2-1:0.0: Freeing device [ 93.558163][ T6017] uprobe: syz.0.37:6017 failed to unregister, leaking uprobe [ 94.000135][ T6031] syz.0.40 uses obsolete (PF_INET,SOCK_PACKET) [ 95.849412][ T6059] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 96.521880][ T6062] fuse: root generation should be zero [ 96.913699][ T6073] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 97.401917][ T6084] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 98.711078][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.879571][ T5872] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 98.940802][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.992239][ T5872] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 99.022521][ T5872] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 99.030579][ T5872] usb 2-1: Manufacturer: syz [ 99.126172][ T5872] usb 2-1: config 0 descriptor?? [ 99.242097][ T6118] netlink: 'syz.2.66': attribute type 10 has an invalid length. [ 99.268727][ T6118] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 99.310186][ T6118] team0: Failed to send options change via netlink (err -105) [ 99.317945][ T5872] rc_core: IR keymap rc-hauppauge not found [ 99.317983][ T5872] Registered IR keymap rc-empty [ 99.322998][ T5872] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 99.346349][ T6118] team0: Port device dummy0 added [ 99.397088][ T5872] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 99.421953][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 99.541713][ T6118] syz.2.66 (6118) used greatest stack depth: 17752 bytes left [ 99.657800][ T9] usb 2-1: USB disconnect, device number 3 [ 100.071617][ T6141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 100.080804][ T6141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 100.091890][ T6141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.74'. [ 103.450629][ T6205] overlayfs: failed to clone upperpath [ 104.065741][ T6226] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.383918][ T6234] warning: `syz.0.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.769138][ T977] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.141833][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 105.282963][ T977] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 105.305580][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.339631][ T977] usb 1-1: config 0 descriptor?? [ 105.500606][ T6247] netlink: 6 bytes leftover after parsing attributes in process `syz.1.112'. [ 105.516521][ T6247] bridge_slave_0: default FDB implementation only supports local addresses [ 105.537927][ T6247] netlink: 6 bytes leftover after parsing attributes in process `syz.1.112'. [ 105.547195][ T6247] bridge_slave_0: default FDB implementation only supports local addresses [ 108.255688][ T977] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 108.290099][ T977] asix 1-1:0.0: probe with driver asix failed with error -71 [ 108.420746][ T977] usb 1-1: USB disconnect, device number 2 [ 108.793319][ T5834] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.091081][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 109.176426][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.235892][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.246387][ T5834] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.261096][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.276149][ T5834] usb 2-1: config 0 descriptor?? [ 109.285306][ T5834] hub 2-1:0.0: USB hub found [ 109.512104][ T5834] hub 2-1:0.0: 1 port detected [ 110.019922][ T6300] evm: overlay not supported [ 110.444424][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 110.518350][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 111.502130][ T5834] hub 2-1:0.0: activate --> -90 [ 111.518827][ T29] audit: type=1804 audit(1739011983.811:3): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.136" name="/newroot/29/file0" dev="tmpfs" ino=177 res=1 errno=0 [ 111.575643][ T6323] overlayfs: failed to clone upperpath [ 111.714084][ T8] usb 2-1: USB disconnect, device number 4 [ 112.385043][ T5834] libceph: connect (1)[c::]:6789 error -101 [ 112.430521][ T5834] libceph: mon0 (1)[c::]:6789 connect error [ 112.478346][ T6334] ceph: No mds server is up or the cluster is laggy [ 113.121607][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 113.145837][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 113.159565][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 113.172494][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 113.186637][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 113.195425][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 113.762005][ T6361] ref_ctr increment failed for inode: 0xae offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802d7a9d40 [ 113.786935][ T29] audit: type=1804 audit(1739011986.061:4): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.149" name="file0" dev="tmpfs" ino=174 res=1 errno=0 [ 113.918479][ T6359] uprobe: syz.2.149:6359 failed to unregister, leaking uprobe [ 114.074088][ T6349] chnl_net:caif_netlink_parms(): no params data found [ 114.523559][ T6349] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.551293][ T6349] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.558587][ T6349] bridge_slave_0: entered allmulticast mode [ 114.667923][ T6349] bridge_slave_0: entered promiscuous mode [ 114.730732][ T6349] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.772990][ T6349] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.860811][ T6372] overlayfs: failed to clone upperpath [ 114.886556][ T6349] bridge_slave_1: entered allmulticast mode [ 114.938496][ T6349] bridge_slave_1: entered promiscuous mode [ 115.271244][ T5829] Bluetooth: hci1: command tx timeout [ 115.382380][ T6349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.445410][ T6349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.617470][ T6349] team0: Port device team_slave_0 added [ 115.653105][ T6349] team0: Port device team_slave_1 added [ 115.789726][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.806215][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.824933][ T6390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.891833][ T6349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.909584][ T6349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.924261][ T6349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.961280][ T6349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.975580][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.049902][ T6349] hsr_slave_0: entered promiscuous mode [ 116.062356][ T6349] hsr_slave_1: entered promiscuous mode [ 116.072637][ T6383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.087269][ T6349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.124392][ T6349] Cannot create hsr debugfs directory [ 116.474402][ T6349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.723555][ T6349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.865119][ T6349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.919091][ T6349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 117.244004][ T6349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.306997][ T6349] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.341201][ T5829] Bluetooth: hci1: command tx timeout [ 117.344531][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.353785][ T5889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.428919][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.436237][ T5889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.808327][ T6349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.307296][ T6349] veth0_vlan: entered promiscuous mode [ 119.325093][ T6349] veth1_vlan: entered promiscuous mode [ 119.390718][ T6349] veth0_macvtap: entered promiscuous mode [ 119.410340][ T6349] veth1_macvtap: entered promiscuous mode [ 119.421350][ T5829] Bluetooth: hci1: command tx timeout [ 119.457506][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.477646][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.500175][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.521771][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.537619][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.548169][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.558970][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.569504][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.579573][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.590621][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.604952][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.623813][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.634609][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.644591][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.656691][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.667512][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.678387][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.688892][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.699958][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.710143][ T6349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.727309][ T6349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.739364][ T6349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.758638][ T6349] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.781066][ T6349] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.790395][ T6349] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.804001][ T6349] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.937501][ T5880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.968028][ T5880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.071261][ T5889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.096654][ T5889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.501787][ T5829] Bluetooth: hci1: command tx timeout [ 122.761080][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.092124][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 123.106516][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.116236][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.128183][ T8] usb 2-1: Product: syz [ 123.138388][ T8] usb 2-1: Manufacturer: syz [ 123.153250][ T8] usb 2-1: SerialNumber: syz [ 123.166933][ T8] usb 2-1: config 0 descriptor?? [ 123.394216][ T8] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.660894][ T6547] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 123.687316][ T6547] kvm: pic: non byte write [ 123.990644][ T6553] netlink: 'syz.5.211': attribute type 1 has an invalid length. [ 124.538133][ T6554] Zero length message leads to an empty skb [ 124.796274][ T6560] netlink: 'syz.5.213': attribute type 1 has an invalid length. [ 124.808052][ T8] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 124.838404][ T6560] bridge1: entered promiscuous mode [ 124.851178][ T8] usb 2-1: USB disconnect, device number 5 [ 125.640738][ T6585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.224'. [ 126.976625][ T6603] netlink: 'syz.2.232': attribute type 10 has an invalid length. [ 127.102841][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.5.230'. [ 128.112138][ T6618] 9pnet: Found fid 0 not clunked [ 128.331756][ T6624] process 'syz.5.238' launched './file1' with NULL argv: empty string added [ 129.257832][ T29] audit: type=1326 audit(1739012001.551:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6648 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f564b18cde9 code=0x7fc00000 [ 129.951481][ T29] audit: type=1326 audit(1739012002.241:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6648 comm="syz.3.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f564b18cde9 code=0x7fc00000 [ 130.261682][ T6674] loop0: detected capacity change from 0 to 7 [ 130.365289][ T6674] Dev loop0: unable to read RDB block 7 [ 130.436696][ T6674] loop0: AHDI p2 [ 130.473073][ T6674] loop0: partition table partially beyond EOD, truncated [ 131.957635][ T6701] Invalid ELF header len 8 [ 132.220629][ T6703] overlayfs: failed to clone upperpath [ 132.782001][ T6709] netlink: 'syz.5.269': attribute type 1 has an invalid length. [ 132.862132][ T6709] netlink: 3 bytes leftover after parsing attributes in process `syz.5.269'. [ 133.069613][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.220179][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.291468][ T6716] netlink: 3 bytes leftover after parsing attributes in process `syz.5.269'. [ 133.304157][ T6716] batadv1: entered promiscuous mode [ 133.309387][ T6716] batadv1: entered allmulticast mode [ 133.401440][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.271'. [ 133.555961][ T6709] batadv1: entered promiscuous mode [ 133.565988][ T6709] batadv1: entered allmulticast mode [ 133.901266][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 134.356711][ T6731] tipc: Failed to remove unknown binding: 66,1,1/0:4024629231/4024629233 [ 134.402055][ T6731] tipc: Failed to remove unknown binding: 66,1,1/0:4024629231/4024629233 [ 134.811841][ T6741] 9pnet: p9_errstr2errno: server reported unknown error loc_percpu [ 135.651073][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 135.712821][ T6769] xt_hashlimit: max too large, truncated to 1048576 [ 137.111192][ T5872] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.272329][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 137.291176][ T5872] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 137.304772][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.342186][ T5872] usb 2-1: config 0 descriptor?? [ 138.806596][ T6811] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 138.833755][ T6811] CIFS mount error: No usable UNC path provided in device string! [ 138.833755][ T6811] [ 138.843996][ T6811] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 139.147371][ T6818] netlink: 220 bytes leftover after parsing attributes in process `syz.2.307'. [ 139.257032][ T6821] netlink: 'syz.0.308': attribute type 10 has an invalid length. [ 139.282166][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.292162][ T6821] bond0: (slave team0): Enslaving as an active interface with an up link [ 139.323960][ T6827] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 139.412265][ T6827] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.447173][ T6829] bond1: (slave bridge1): making interface the new active one [ 139.473467][ T6829] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 139.534973][ T6827] vlan2: entered promiscuous mode [ 139.540079][ T6827] bond1: entered promiscuous mode [ 139.564093][ T6827] bridge1: entered promiscuous mode [ 139.569938][ T6827] vlan2: entered allmulticast mode [ 139.577983][ T6827] bond1: entered allmulticast mode [ 139.583646][ T6827] bridge1: entered allmulticast mode [ 139.935954][ T5872] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 139.974484][ T5872] asix 2-1:0.0: probe with driver asix failed with error -71 [ 140.011541][ T5872] usb 2-1: USB disconnect, device number 6 [ 141.636664][ T6846] tipc: Started in network mode [ 141.651211][ T6846] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 141.673019][ T6846] tipc: Enabled bearer , priority 0 [ 142.673766][ T47] tipc: Node number set to 11578026 [ 144.535263][ T6913] netlink: 72 bytes leftover after parsing attributes in process `syz.0.339'. [ 145.170792][ T6905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 145.196786][ T6905] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 145.252576][ T6905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 145.282012][ T6905] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 145.343158][ T6905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 145.349136][ T6905] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 145.453299][ T6905] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 145.473590][ T6905] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 145.542585][ T6905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 145.548546][ T6905] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 145.934351][ T6935] Invalid ELF header type: 0 != 1 [ 147.575228][ T5889] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000023: 0000 [#1] PREEMPT SMP KASAN PTI [ 147.587871][ T5889] KASAN: null-ptr-deref in range [0x0000000000000118-0x000000000000011f] [ 147.596305][ T5889] CPU: 1 UID: 0 PID: 5889 Comm: kworker/u8:8 Not tainted 6.14.0-rc1-syzkaller-00187-g8f6629c004b1 #0 [ 147.607162][ T5889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 147.617234][ T5889] Workqueue: events_unbound netfs_write_collection_worker [ 147.624387][ T5889] RIP: 0010:iov_iter_revert+0x2da/0x590 [ 147.629946][ T5889] Code: 20 00 74 08 4c 89 ef e8 d4 14 44 fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 fd [ 147.649574][ T5889] RSP: 0018:ffffc90004307630 EFLAGS: 00010203 [ 147.655657][ T5889] RAX: 0000000000000023 RBX: ffffc900043077c0 RCX: ffff8880259dda00 [ 147.663638][ T5889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.671614][ T5889] RBP: 000000000000011e R08: ffffffff84df5a45 R09: ffffffff84df58d4 [ 147.679619][ T5889] R10: 0000000000000004 R11: ffff8880259dda00 R12: dffffc0000000000 [ 147.687710][ T5889] R13: 0000000000000000 R14: 000000000000004d R15: 000000000000001e [ 147.695704][ T5889] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 147.704662][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.711344][ T5889] CR2: 00007feafb6fe987 CR3: 0000000028406000 CR4: 00000000003526f0 [ 147.719324][ T5889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.727300][ T5889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.735281][ T5889] Call Trace: [ 147.738641][ T5889] [ 147.741583][ T5889] ? __die_body+0x5f/0xb0 [ 147.745940][ T5889] ? die_addr+0xb0/0xe0 [ 147.750105][ T5889] ? exc_general_protection+0x3dd/0x5d0 [ 147.755675][ T5889] ? asm_exc_general_protection+0x26/0x30 [ 147.761409][ T5889] ? iov_iter_revert+0x104/0x590 [ 147.766348][ T5889] ? iov_iter_revert+0x275/0x590 [ 147.771293][ T5889] ? iov_iter_revert+0x2da/0x590 [ 147.776241][ T5889] netfs_retry_writes+0x17db/0x19b0 [ 147.781446][ T5889] ? __pfx_validate_chain+0x10/0x10 [ 147.786650][ T5889] ? mark_lock+0x9a/0x360 [ 147.790993][ T5889] ? mark_lock+0x9a/0x360 [ 147.795336][ T5889] ? __lock_acquire+0x1397/0x2100 [ 147.800367][ T5889] ? __pfx_netfs_retry_writes+0x10/0x10 [ 147.805931][ T5889] ? register_lock_class+0x102/0x980 [ 147.811223][ T5889] ? __pfx_register_lock_class+0x10/0x10 [ 147.816866][ T5889] netfs_write_collection_worker+0x2f90/0x3bb0 [ 147.823046][ T5889] ? process_scheduled_works+0x976/0x1840 [ 147.828771][ T5889] process_scheduled_works+0xa66/0x1840 [ 147.834419][ T5889] ? __pfx_process_scheduled_works+0x10/0x10 [ 147.840405][ T5889] ? assign_work+0x364/0x3d0 [ 147.844999][ T5889] worker_thread+0x870/0xd30 [ 147.849598][ T5889] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 147.855502][ T5889] ? __kthread_parkme+0x169/0x1d0 [ 147.860534][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 147.865648][ T5889] kthread+0x7a9/0x920 [ 147.869721][ T5889] ? __pfx_kthread+0x10/0x10 [ 147.874329][ T5889] ? __pfx_worker_thread+0x10/0x10 [ 147.879455][ T5889] ? __pfx_kthread+0x10/0x10 [ 147.884058][ T5889] ? __pfx_kthread+0x10/0x10 [ 147.888666][ T5889] ? __pfx_kthread+0x10/0x10 [ 147.893282][ T5889] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.898518][ T5889] ? lockdep_hardirqs_on+0x99/0x150 [ 147.903724][ T5889] ? __pfx_kthread+0x10/0x10 [ 147.908324][ T5889] ret_from_fork+0x4b/0x80 [ 147.912746][ T5889] ? __pfx_kthread+0x10/0x10 [ 147.917344][ T5889] ret_from_fork_asm+0x1a/0x30 [ 147.922122][ T5889] [ 147.925161][ T5889] Modules linked in: [ 147.931428][ T5889] ---[ end trace 0000000000000000 ]--- [ 147.946439][ T5889] RIP: 0010:iov_iter_revert+0x2da/0x590 [ 147.953880][ T5889] Code: 20 00 74 08 4c 89 ef e8 d4 14 44 fd 4d 8b 6d 00 41 bf 1e 00 00 00 bd 1e 00 00 00 49 8d ac 2d 00 01 00 00 48 89 e8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 75 40 0f b6 6d 00 bf 40 00 00 00 89 ee e8 fd [ 147.974261][ T5889] RSP: 0018:ffffc90004307630 EFLAGS: 00010203 [ 147.980464][ T5889] RAX: 0000000000000023 RBX: ffffc900043077c0 RCX: ffff8880259dda00 [ 147.989177][ T5889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.997606][ T5889] RBP: 000000000000011e R08: ffffffff84df5a45 R09: ffffffff84df58d4 [ 148.014262][ T5889] R10: 0000000000000004 R11: ffff8880259dda00 R12: dffffc0000000000 [ 148.027564][ T5889] R13: 0000000000000000 R14: 000000000000004d R15: 000000000000001e [ 148.036113][ T5889] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 148.045500][ T5889] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.055092][ T5889] CR2: 0000001b2f718ff8 CR3: 0000000028406000 CR4: 00000000003526f0 [ 148.063671][ T5889] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 148.072812][ T5889] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 148.080896][ T5889] Kernel panic - not syncing: Fatal exception [ 148.087361][ T5889] Kernel Offset: disabled [ 148.091689][ T5889] Rebooting in 86400 seconds..