last executing test programs: 13.42279266s ago: executing program 0 (id=75): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x8003}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000630002000000000095"], &(0x7f0000000100)='GPL\x00', 0x5, 0xcd, &(0x7f0000000140)=""/205, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r7, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x18, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x4850) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x24000040) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) close(0x3) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xa, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0xffff000000000000) 12.250557507s ago: executing program 3 (id=78): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(0xffffffffffffffff, 0x400021) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x810) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x35, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x5, 0x4, 0x20, @dev={0xfe, 0x80, '\x00', 0x16}, @empty, 0x80, 0x20, 0x4, 0x1}}) gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r4, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) r5 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 10.029847069s ago: executing program 3 (id=81): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b20, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x80001) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0xa3, 0x0) dup3(r0, r1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, 0x0, 0x0) sendmmsg$inet6(r2, 0x0, 0x0, 0x2000c8c0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x20, @remote}, 0x10) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x4000000000010046) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c93012000e000500"], 0x17) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000808, &(0x7f0000000240)=ANY=[@ANYBLOB='nobarrier,nls=cp1250,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c747970653dc357540e2c6e6f6465636f6d706f7305000000000000006965722c00"], 0x2, 0x5f9, &(0x7f0000002a00)="$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") ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000180)={0x0, 0x1, 0x2, 0xffe}) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x6, 0x3a, '', 0x3a, 'hfsplus\x00', 0x3a, './file0', 0x3a, [0x50, 0x16, 0x50, 0x43, 0x46, 0x50, 0x43]}, 0x36) 9.622027368s ago: executing program 0 (id=82): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) chdir(&(0x7f0000000480)='./cgroup\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x10) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e6551b5d99f85", 0x0, 0x15}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000019700)={0x10000, 0x240, 0x380, &(0x7f0000019300)=[0x5, 0x400, 0xfc, 0x2, 0xfffffffffffffff8, 0x7, 0x44, 0xa862, 0x1, 0x0, 0x1, 0xfffffffffffffffe, 0x8, 0x7, 0x1, 0x6a26, 0xc6f6, 0x8, 0x3, 0x8000000000000000, 0x5, 0x5, 0x795, 0x1, 0x4, 0xfc, 0x5, 0xfffffffffffffffd, 0x4, 0x4, 0x400, 0x7, 0x5, 0x5, 0x9, 0x9, 0x10, 0xffffffffffffffff, 0x6, 0x0, 0x9, 0x9, 0x4, 0xc3b, 0x8000000000000001, 0x1, 0x3, 0xa9bd, 0x16, 0x1, 0xffffffff80000001, 0x6, 0xc4, 0x0, 0x0, 0x9, 0xffffffffffffff74, 0x6, 0xba, 0x8, 0x7, 0xf, 0x1, 0xdf1, 0x101, 0x40, 0x5, 0xa12f, 0x2, 0x8, 0x0, 0x2, 0xfffffffffffffffe, 0x80, 0xb, 0x7ff, 0x1000, 0x200, 0x7, 0x400, 0x986, 0x6, 0x9, 0x4, 0x100000000000000, 0x1, 0x86db, 0x15, 0x8000, 0x6, 0x7, 0xa6, 0x8000000000000000, 0x6, 0xfffffffffffffff8, 0x7, 0x40, 0x4800000000000, 0x67c, 0x5, 0x4, 0x8, 0x200, 0x8, 0x0, 0x1, 0x2, 0x6, 0xa, 0x8, 0x2, 0x4, 0xfffffffffffffffe, 0x3, 0xe, 0x6, 0x1000, 0x800, 0x0, 0x80, 0x9, 0x800, 0xc, 0x0, 0x6, 0xc9, 0x4, 0x3]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.229835827s ago: executing program 1 (id=85): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e22, 0x9, 0x4e22, 0x1000, 0x2, 0x20, 0x0, 0x88}, {0x80, 0x0, 0x9a11, 0x7, 0x4, 0x2, 0x7, 0x5}, {0x1000, 0xff, 0x1000, 0x353bac47}, 0x200, 0x6e6bb4, 0x3, 0x0, 0x3, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x3504, 0x0, 0x0, 0x5a, 0x9, 0xb4f5, 0xffffffff}}, 0xe8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_DELOBJ={0x70, 0x14, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_OBJ_USERDATA={0x5b, 0x8, "089ebadc483e150a3523fedac60e5ac9e105c1392737b46a784f75c878775f0f84ef61dea491ec47bdca05cf31dacf74d459493620028ad127c493b14a71d65ed0b849f78b6e33f7a69e3924b7bd97521358e7cb12d1a9"}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}}, 0x80) write(r3, &(0x7f0000000000), 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x401, 0x10}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000800)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 8.436437775s ago: executing program 3 (id=86): mprotect(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0) 8.279949249s ago: executing program 3 (id=87): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file1\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@unhide}]}, 0xff, 0x544, &(0x7f0000001000)="$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") r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000600)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_restrict_self(r4, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r5 = creat(0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0xff3c, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x30, r7, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x40, 0x0) ioctl$COMEDI_INSNLIST(r9, 0x8010640b, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4000000, 0xff92, 0x0, 0x0, 0x5}]}) 8.22828809s ago: executing program 1 (id=88): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) close(0xffffffffffffffff) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x2000, 0x8) lseek(r1, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000280)={0xdb2, 0x7, 0x7}) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x80) fstat(r1, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f00000004c0)) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) waitid(0x2, r5, 0x0, 0x4, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b1a, &(0x7f0000000100)={'wlan0\x00'}) 7.852913119s ago: executing program 0 (id=89): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) listen(0xffffffffffffffff, 0x400021) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x810) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x40480c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(0x0, 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a732bb73fce5f8dc9af0", 0x20}, {0x0}, {&(0x7f0000000300)="900a3e8bb88475e76452c3a89000947c727ccf23b02c19c60472da326881b7603f0349c41da8fe68b2a95d4ce55ac51d326eb2c27813e189f3e16a5b950ee7e7f9090138db02dabe29d8d2a13bb0a41b79dd09deac2f3da8fe2d416d8179bd700680954bf641268d635d66a3cd93f806728228478f0fcc0b25a39cc0cf6f784567a6a5e466cc8a3089dfc1bc1a9a4293295a2a1a106df2fb4f2480163cbb97fab5e5c51b9fb1ff8ad292f054790e", 0xae}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a", 0x5d}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a51397f747b14dec18c5", 0x9e}, {&(0x7f0000000140)}, {0x0}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x8) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1003, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x800005}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) syz_emit_vhci(&(0x7f00000039c0)=ANY=[@ANYBLOB="040f04ff000104"], 0x7) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)) 4.196760503s ago: executing program 0 (id=93): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x200000) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0xa00) syz_open_dev$ttys(0xc, 0x2, 0x1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000000)) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000004180)={"23a7031d", 0x4, 0x5, 0x2, 0x88, 0x5, "000064640000001503fe00", "037ec42b", "7d0a5782", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) syz_clone3(&(0x7f0000000580)={0x40000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, &(0x7f0000000500)=""/44, 0x0}, 0x58) syz_clone3(&(0x7f0000000840)={0x134202400, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x1c}, &(0x7f0000000c00)=""/4096, 0x1000, 0x0, 0x0}, 0x58) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000380)="00a10010898692ba0000000010800000000000000000", 0x16, 0x4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f0000000900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x53}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/25, 0x19}], 0x8, &(0x7f0000000600)=""/188, 0xbc, 0xa1}}], 0x59, 0x2040000, &(0x7f00000003c0)={0x77359400}) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000300), &(0x7f0000000340)=0x4) io_setup(0x9, &(0x7f0000000040)) eventfd(0xffff) eventfd2(0xff, 0x1) eventfd2(0x7, 0x801) syz_usbip_server_init(0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, &(0x7f0000000d80)=0x9, 0xffffffffffffffff, 0x0, 0x101, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000002540)={'ip6_vti0\x00', &(0x7f00000024c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x3c, 0xb0, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, 0x8027, 0x10, 0x6}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 4.193364773s ago: executing program 2 (id=94): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000000600)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000a80)={0x1, 0x1, 0x1d, 0x14, 0x174, &(0x7f0000000680)}) ioctl$DRM_IOCTL_GET_CAP(r5, 0xc010640c, &(0x7f0000000180)={0x13}) socket(0x2d, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xffff, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xbf, 0x7, 0x8, 0x400, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x800) 3.660374006s ago: executing program 1 (id=95): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000001200)=""/4093, 0xffd}, {&(0x7f0000003200)=""/4099, 0x1003}], 0x2, 0x0, 0x0, 0x1) 3.660011576s ago: executing program 3 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, 0x0, 0x24008004) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) clock_gettime(0x17, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x7, 0x6661, 0x6d, @loopback, @mcast1, 0x20, 0x7800, 0x2, 0x81}}) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 3.336571643s ago: executing program 1 (id=97): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) chdir(&(0x7f0000000480)='./cgroup\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x10) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000300)={0x2, 0x86e, 0x0, &(0x7f0000000340)="0000040000cf3b2ba333ffff956e6e6551b5d99f85", 0x0, 0x15}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x94) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000019700)={0x10000, 0x240, 0x380, &(0x7f0000019300)=[0x5, 0x400, 0xfc, 0x2, 0xfffffffffffffff8, 0x7, 0x44, 0xa862, 0x1, 0x0, 0x1, 0xfffffffffffffffe, 0x8, 0x7, 0x1, 0x6a26, 0xc6f6, 0x8, 0x3, 0x8000000000000000, 0x5, 0x5, 0x795, 0x1, 0x4, 0xfc, 0x5, 0xfffffffffffffffd, 0x4, 0x4, 0x400, 0x7, 0x5, 0x5, 0x9, 0x9, 0x10, 0xffffffffffffffff, 0x6, 0x0, 0x9, 0x9, 0x4, 0xc3b, 0x8000000000000001, 0x1, 0x3, 0xa9bd, 0x16, 0x1, 0xffffffff80000001, 0x6, 0xc4, 0x0, 0x0, 0x9, 0xffffffffffffff74, 0x6, 0xba, 0x8, 0x7, 0xf, 0x1, 0xdf1, 0x101, 0x40, 0x5, 0xa12f, 0x2, 0x8, 0x0, 0x2, 0xfffffffffffffffe, 0x80, 0xb, 0x7ff, 0x1000, 0x200, 0x7, 0x400, 0x986, 0x6, 0x9, 0x4, 0x100000000000000, 0x1, 0x86db, 0x15, 0x8000, 0x6, 0x7, 0xa6, 0x8000000000000000, 0x6, 0xfffffffffffffff8, 0x7, 0x40, 0x4800000000000, 0x67c, 0x5, 0x4, 0x8, 0x200, 0x8, 0x0, 0x1, 0x2, 0x6, 0xa, 0x8, 0x2, 0x4, 0xfffffffffffffffe, 0x3, 0xe, 0x6, 0x1000, 0x800, 0x0, 0x80, 0x9, 0x800, 0xc, 0x0, 0x6, 0xc9, 0x4, 0x3]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, 0x1c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.632988799s ago: executing program 2 (id=98): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x593b]}, 0x8, 0x80800) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, r2, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="08000100ac1414aa08001e00439f000008000100ac1414bb0c00"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = getpgid(0x0) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0)=[0x4], 0x0, 0x2, 0x1, r6}}, 0x40) r8 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r9, 0x0) r10 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) close_range(r7, r10, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0xa68c1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4880) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'macvlan1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x101, 0xba}}, './file0\x00'}) unlinkat(r12, &(0x7f0000000340)='./file0\x00', 0x200) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r13, 0x5452, &(0x7f00000013c0)) sendmsg$NFT_BATCH(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31090000000900020073797a32000000001c0004801800018008000100666962000c00028008000240000000021400000011000100000000000000f2f66d33629da55f291e25ff5300000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) 1.876194997s ago: executing program 2 (id=99): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwritev(r1, 0x0, 0x0, 0x9, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000400)={r3, 0x1, 0xfffe}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x4, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40010) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r7, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_inet_SIOCGIFADDR(r5, 0x8915, 0x0) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) 1.875885067s ago: executing program 1 (id=100): socket$inet6(0xa, 0x80000, 0x16d) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) r1 = socket$netlink(0x10, 0x3, 0x8) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) bind$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x305000, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$setregset(0x4205, r0, 0x6, &(0x7f00000003c0)={0x0}) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f4000000107f2225accaab14c78dc75100db52538416dc22835a83b96fcc00c3899756347fcc801476e2712c1e86e5f6a44b5413ff9e40f4df34151d316458f24f29b3bfaced9095db4b1af907c2afcb25c07f8a66c1ecbd4f215a838933", @ANYRES16=0x0, @ANYBLOB="040025bd7000fddbdf250a0000004c000380080003000900000008000300f500000008000200010000000800020001000000080003000900000008000300faffffff080002000100000008000300f8fffeff08000100000000005000048034000780080002006d00000008000200000000000800020001000000080004000900000008000400425fe51608000400050000000900010073797a30000000000900010073797a3000000000440004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000900010073797a31000000000900010073797a3100000000"], 0xf4}, 0x1, 0x0, 0x0, 0x24008004}, 0x4028004) setitimer(0x0, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, 0x0, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040004}, 0x40000) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/66, 0x42}], 0x1) close(r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) 1.760367889s ago: executing program 2 (id=101): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x118, 0x1170, 0x1170, 0x0, 0x1170, 0x208, 0x1398, 0x1398, 0x208, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffffff], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, 0x0, 0x0) listen(r1, 0x400021) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x810) mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) prctl$PR_SET_IO_FLUSHER(0x50, 0xfffffffffffffffd) setpgid(r0, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc3}, 0x0, 0x0, 0xffffffffffffffff) unshare(0x2c020400) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r5, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0x80000a) 0s ago: executing program 0 (id=103): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0xa03, 0x2}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x810000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x80000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. [ 71.593012][ T5762] cgroup: Unknown subsys name 'net' [ 71.721439][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.040256][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.056708][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.067208][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.077396][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.084791][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.085308][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.099667][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.110375][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.116354][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.118696][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.132744][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.133646][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.148025][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.156883][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.164347][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.170385][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.172680][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.186781][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.187106][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.194041][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.202004][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.215985][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.216657][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.230313][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.231708][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.623294][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 75.698621][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 75.740398][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 75.785780][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.792984][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.800395][ T5774] bridge_slave_0: entered allmulticast mode [ 75.807273][ T5774] bridge_slave_0: entered promiscuous mode [ 75.836935][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.844081][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.851561][ T5774] bridge_slave_1: entered allmulticast mode [ 75.858977][ T5774] bridge_slave_1: entered promiscuous mode [ 75.873476][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 75.918607][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.930791][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.000374][ T5774] team0: Port device team_slave_0 added [ 76.029920][ T5774] team0: Port device team_slave_1 added [ 76.040208][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.047606][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.055083][ T5775] bridge_slave_0: entered allmulticast mode [ 76.061679][ T5775] bridge_slave_0: entered promiscuous mode [ 76.091126][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.098348][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.105799][ T5775] bridge_slave_1: entered allmulticast mode [ 76.112444][ T5775] bridge_slave_1: entered promiscuous mode [ 76.119143][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.128607][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.135929][ T5776] bridge_slave_0: entered allmulticast mode [ 76.142596][ T5776] bridge_slave_0: entered promiscuous mode [ 76.152179][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.159376][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.167581][ T5776] bridge_slave_1: entered allmulticast mode [ 76.174260][ T5776] bridge_slave_1: entered promiscuous mode [ 76.221420][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.241252][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.248769][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.274955][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.298165][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.323865][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.332252][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.358408][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.376779][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.384013][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.392736][ T5778] bridge_slave_0: entered allmulticast mode [ 76.400079][ T5778] bridge_slave_0: entered promiscuous mode [ 76.419187][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.432726][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.458236][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.467301][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.474409][ T5778] bridge_slave_1: entered allmulticast mode [ 76.481894][ T5778] bridge_slave_1: entered promiscuous mode [ 76.499507][ T5776] team0: Port device team_slave_0 added [ 76.508764][ T5776] team0: Port device team_slave_1 added [ 76.526140][ T5774] hsr_slave_0: entered promiscuous mode [ 76.532406][ T5774] hsr_slave_1: entered promiscuous mode [ 76.551636][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.587449][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.620447][ T5775] team0: Port device team_slave_0 added [ 76.641505][ T5778] team0: Port device team_slave_0 added [ 76.648517][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.655760][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.682524][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.695535][ T5775] team0: Port device team_slave_1 added [ 76.702039][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.711075][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.741856][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.769067][ T5778] team0: Port device team_slave_1 added [ 76.831043][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.838159][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.864676][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.876461][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.883428][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.910835][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.932026][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.939377][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.965614][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.987566][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.996866][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.023919][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.039088][ T5776] hsr_slave_0: entered promiscuous mode [ 77.045854][ T5776] hsr_slave_1: entered promiscuous mode [ 77.052026][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.059826][ T5776] Cannot create hsr debugfs directory [ 77.150563][ T5778] hsr_slave_0: entered promiscuous mode [ 77.157346][ T5778] hsr_slave_1: entered promiscuous mode [ 77.163444][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.171065][ T5778] Cannot create hsr debugfs directory [ 77.212179][ T5775] hsr_slave_0: entered promiscuous mode [ 77.218755][ T5790] Bluetooth: hci1: command tx timeout [ 77.225827][ T5775] hsr_slave_1: entered promiscuous mode [ 77.231894][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.240091][ T5775] Cannot create hsr debugfs directory [ 77.295144][ T5790] Bluetooth: hci0: command tx timeout [ 77.295169][ T5786] Bluetooth: hci3: command tx timeout [ 77.295295][ T5786] Bluetooth: hci2: command tx timeout [ 77.514397][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.540355][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.549850][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.586842][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.634248][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.644649][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.656381][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.685570][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.731477][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.742527][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.767376][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.781928][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.876695][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.887528][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.906980][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.920467][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.954351][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.019099][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.057533][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.064836][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.098796][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.105933][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.133003][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.154461][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.177900][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.210936][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.220908][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.237895][ T3499] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.244994][ T3499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.268076][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.275205][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.292066][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.306465][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.313590][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.340308][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.347420][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.365697][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.372775][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.416133][ T3499] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.423281][ T3499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.467868][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.561375][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.572235][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.809011][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.919036][ T5774] veth0_vlan: entered promiscuous mode [ 78.968120][ T5774] veth1_vlan: entered promiscuous mode [ 79.001282][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.059761][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.071854][ T5774] veth0_macvtap: entered promiscuous mode [ 79.089682][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.102481][ T5774] veth1_macvtap: entered promiscuous mode [ 79.155559][ T5775] veth0_vlan: entered promiscuous mode [ 79.170768][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.182681][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.202086][ T5775] veth1_vlan: entered promiscuous mode [ 79.211837][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.223563][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.232801][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.241757][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.261416][ T5778] veth0_vlan: entered promiscuous mode [ 79.288949][ T5778] veth1_vlan: entered promiscuous mode [ 79.298410][ T5786] Bluetooth: hci1: command tx timeout [ 79.353978][ T5776] veth0_vlan: entered promiscuous mode [ 79.375478][ T5786] Bluetooth: hci2: command tx timeout [ 79.375677][ T51] Bluetooth: hci0: command tx timeout [ 79.380894][ T5786] Bluetooth: hci3: command tx timeout [ 79.424364][ T5776] veth1_vlan: entered promiscuous mode [ 79.440299][ T5775] veth0_macvtap: entered promiscuous mode [ 79.448082][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.468474][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.509953][ T5775] veth1_macvtap: entered promiscuous mode [ 79.532848][ T5778] veth0_macvtap: entered promiscuous mode [ 79.542298][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.550092][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.550171][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.551541][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.578566][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.594445][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.611291][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.627869][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.648082][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.657575][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.666602][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.675584][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.688207][ T5778] veth1_macvtap: entered promiscuous mode [ 79.748485][ T5776] veth0_macvtap: entered promiscuous mode [ 79.800293][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.813560][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.823654][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.834504][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.846974][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.866755][ T5776] veth1_macvtap: entered promiscuous mode [ 79.884301][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.052954][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.152123][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.185300][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.300808][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.461559][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.470369][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.479425][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.492226][ T5839] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 80.508137][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.522029][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.528250][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.547048][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.167057][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.169559][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.204573][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.224620][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.235802][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.261331][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.339573][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.351170][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.362718][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.373882][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.385625][ T5786] Bluetooth: hci1: command tx timeout [ 81.389379][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.401934][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.426225][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.448199][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.456338][ T5786] Bluetooth: hci0: command tx timeout [ 81.456367][ T5786] Bluetooth: hci2: command tx timeout [ 81.465212][ T5786] Bluetooth: hci3: command tx timeout [ 81.474429][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.477751][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.504626][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.513371][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.538817][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.664085][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.681118][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.965237][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.973104][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.218172][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.373337][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.651023][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.689874][ T5858] Zero length message leads to an empty skb [ 82.696526][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.706146][ T5786] Bluetooth: hci1: command tx timeout [ 83.706248][ T5790] Bluetooth: hci3: command tx timeout [ 83.713618][ T5786] Bluetooth: hci2: command tx timeout [ 83.718197][ T51] Bluetooth: hci0: command tx timeout [ 84.105013][ T5867] program syz.3.7 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.462193][ T5874] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.764787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.774631][ T5790] Bluetooth: hci3: command tx timeout [ 86.404087][ T5877] syz.1.2[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.467065][ T5877] loop1: detected capacity change from 0 to 512 [ 86.501103][ T5877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.531008][ T5877] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.2: iget: bad i_size value: 38620345925642 [ 86.579312][ T5877] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.2: couldn't read orphan inode 15 (err -117) [ 86.711696][ T5877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.265003][ T5820] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.598002][ T174] cfg80211: failed to load regulatory.db [ 87.728724][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.760739][ T5820] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 87.926080][ T5820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.138848][ T5820] usb 4-1: config 0 descriptor?? [ 88.805058][ T5878] batman_adv: batadv0: Adding interface: macvtap1 [ 88.818249][ T5878] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.999448][ T5878] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 89.599310][ T5908] warning: `syz.1.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.291755][ T5820] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 90.309751][ T5820] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 90.320013][ T5820] [drm:udl_init] *ERROR* Selecting channel failed [ 90.461631][ T5820] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 90.469355][ T5820] [drm] Initialized udl on minor 2 [ 90.489077][ T5820] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 90.521363][ T5820] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 90.562441][ T27] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 90.604386][ T5912] loop0: detected capacity change from 0 to 128 [ 90.611555][ T5820] usb 4-1: USB disconnect, device number 2 [ 90.620451][ T27] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 91.181378][ T5918] netlink: 80 bytes leftover after parsing attributes in process `syz.1.15'. [ 91.664895][ T28] audit: type=1800 audit(1783516413.158:2): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14" name="file1" dev="loop0" ino=1048592 res=0 errno=0 [ 92.115063][ T5924] loop1: detected capacity change from 0 to 256 [ 92.212190][ T5928] Device name cannot be null; rc = [-22] [ 92.291793][ T5929] loop3: detected capacity change from 0 to 64 [ 92.921637][ T5924] ======================================================= [ 92.921637][ T5924] WARNING: The mand mount option has been deprecated and [ 92.921637][ T5924] and is ignored by this kernel. Remove the mand [ 92.921637][ T5924] option from the mount to silence this warning. [ 92.921637][ T5924] ======================================================= [ 92.956602][ C0] vkms_vblank_simulate: vblank timer overrun [ 93.384482][ T5935] loop2: detected capacity change from 0 to 128 [ 93.941928][ T5935] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 93.994926][ T5934] ipip0: entered promiscuous mode [ 94.000002][ T5934] ipip0: entered allmulticast mode [ 94.257535][ T5924] FAT-fs (loop1): Directory bread(block 64) failed [ 94.337746][ T5924] FAT-fs (loop1): Directory bread(block 65) failed [ 94.344428][ T5924] FAT-fs (loop1): Directory bread(block 66) failed [ 94.356478][ T5924] FAT-fs (loop1): Directory bread(block 67) failed [ 94.399918][ T5924] FAT-fs (loop1): Directory bread(block 68) failed [ 94.424265][ T5924] FAT-fs (loop1): Directory bread(block 69) failed [ 94.449117][ T5924] FAT-fs (loop1): Directory bread(block 70) failed [ 94.467782][ T5924] FAT-fs (loop1): Directory bread(block 71) failed [ 94.540582][ T5924] FAT-fs (loop1): Directory bread(block 72) failed [ 94.547257][ T5924] FAT-fs (loop1): Directory bread(block 73) failed [ 94.581949][ T5924] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.415821][ T5926] loop0: detected capacity change from 0 to 512 [ 95.437047][ T5926] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 95.444684][ T5926] UDF-fs: Scanning with blocksize 512 failed [ 95.452191][ T5926] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 95.459774][ T5926] UDF-fs: Scanning with blocksize 1024 failed [ 95.466607][ T5926] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 95.473990][ T5926] UDF-fs: Scanning with blocksize 2048 failed [ 95.481386][ T5926] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 95.493573][ T5926] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.945845][ T5952] sctp: [Deprecated]: syz.3.23 (pid 5952) Use of int in maxseg socket option. [ 96.945845][ T5952] Use struct sctp_assoc_value instead [ 97.855133][ T5910] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.266307][ T5962] netlink: 200 bytes leftover after parsing attributes in process `syz.2.28'. [ 99.190924][ T5910] usb 2-1: device descriptor read/all, error -71 [ 99.808413][ T5969] loop0: detected capacity change from 0 to 32768 [ 99.838829][ T5972] netlink: 277 bytes leftover after parsing attributes in process `syz.2.29'. [ 100.605526][ T5969] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.711408][ T5969] XFS (loop0): Ending clean mount [ 101.541108][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 102.018737][ T5993] wlan0 speed is unknown, defaulting to 1000 [ 102.025457][ T5993] wlan0 speed is unknown, defaulting to 1000 [ 102.044486][ T5993] wlan0 speed is unknown, defaulting to 1000 [ 102.088989][ T5993] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.141744][ T5993] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 102.354436][ T5993] wlan0 speed is unknown, defaulting to 1000 [ 102.369797][ T5993] wlan0 speed is unknown, defaulting to 1000 [ 102.383636][ T5993] wlan0 speed is unknown, defaulting to 1000 [ 102.397462][ T5993] wlan0 speed is unknown, defaulting to 1000 [ 102.830890][ T5998] loop1: detected capacity change from 0 to 512 [ 102.847251][ T5774] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.857548][ T5998] EXT4-fs: Ignoring removed oldalloc option [ 102.933856][ T6002] Device name cannot be null; rc = [-22] [ 102.967382][ T6002] loop2: detected capacity change from 0 to 64 [ 103.572800][ T6003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.26'. [ 103.684713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.921729][ T5998] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.957791][ T6004] netlink: 'syz.3.26': attribute type 3 has an invalid length. [ 104.412138][ T5998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.444817][ T5998] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.491239][ T6012] dns_resolver: Unsupported server list version (0) [ 106.965785][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.215764][ T6054] loop2: detected capacity change from 0 to 256 [ 109.338034][ T6054] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x196362d4, utbl_chksum : 0xe619d30d) [ 109.690852][ T6054] syz.2.43: attempt to access beyond end of device [ 109.690852][ T6054] loop2: rw=0, sector=184, nr_sectors = 2088 limit=256 [ 109.710601][ T6054] syz.2.43: attempt to access beyond end of device [ 109.710601][ T6054] loop2: rw=0, sector=2272, nr_sectors = 2013 limit=256 [ 109.779838][ T6054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.866753][ T28] audit: type=1800 audit(1783516431.388:3): pid=6054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.43" name="file1" dev="loop2" ino=1048594 res=0 errno=0 [ 111.044087][ T6062] loop1: detected capacity change from 0 to 64 [ 113.492017][ T6074] loop9: detected capacity change from 0 to 524287999 [ 116.514736][ T6095] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.577942][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 116.591898][ T6096] tmpfs: Bad value for 'mpol' [ 117.054838][ T6093] netlink: 'syz.1.52': attribute type 4 has an invalid length. [ 117.235087][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.581883][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 117.686608][ T5840] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 117.928826][ T5840] usb 3-1: config 0 has no interface number 0 [ 117.998372][ T5840] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 118.087433][ T5840] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 118.137531][ T5840] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 118.158769][ T5840] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.194926][ T5840] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 118.214430][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.222909][ T5840] usb 3-1: Product: syz [ 118.234697][ T5840] usb 3-1: Manufacturer: syz [ 118.243146][ T5840] usb 3-1: SerialNumber: syz [ 118.261874][ T5840] usb 3-1: config 0 descriptor?? [ 118.274109][ T6121] loop3: detected capacity change from 0 to 4096 [ 118.281841][ T6106] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 118.293916][ T5840] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 118.302402][ T6121] ntfs: (device loop3): parse_options(): Invalid umask option argument: 000000000000p00000000100000000000000401 [ 118.406251][ T5777] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.369030][ T6129] netlink: 76 bytes leftover after parsing attributes in process `syz.3.57'. [ 122.779695][ T6143] sched: RT throttling activated [ 123.680944][ T5840] usb 3-1: USB disconnect, device number 2 [ 123.754681][ T5910] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 124.132123][ T6153] loop1: detected capacity change from 0 to 40427 [ 124.258433][ T5910] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 124.274601][ T5910] usb 1-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 124.295172][ T5910] usb 1-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 124.336668][ T5910] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.347371][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.442523][ T6153] F2FS-fs (loop1): heap/no_heap options were deprecated [ 124.449880][ T6153] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff [ 124.685196][ T5764] usb 1-1: USB disconnect, device number 2 [ 124.928112][ T6160] batman_adv: batadv0: Adding interface: dummy0 [ 124.934421][ T6160] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.979939][ T6160] batman_adv: batadv0: Interface activated: dummy0 [ 125.985648][ T6171] Cannot find set identified by id 0 to match [ 126.696016][ T6164] batadv0: mtu less than device minimum [ 126.703716][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.716436][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.728885][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.741309][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.753589][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.766013][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.777437][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.788815][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.800304][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 129.048943][ T6241] kernel profiling enabled (shift: 9) [ 129.106955][ T6242] nfs4: Unknown parameter 'no' [ 130.831551][ T6246] loop1: detected capacity change from 0 to 1024 [ 130.854307][ T6246] EXT4-fs: inline encryption not supported [ 130.871111][ T6246] EXT4-fs: inline encryption not supported [ 130.919706][ T6246] EXT4-fs: Ignoring removed bh option [ 130.958325][ T6246] EXT4-fs: Mount option(s) incompatible with ext3 [ 131.141021][ T6253] loop0: detected capacity change from 0 to 1024 [ 132.254884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.664667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 132.899556][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.624936][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.088221][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 135.141380][ T6273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 135.148183][ T6273] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 135.181657][ T6276] hsr_slave_0: left promiscuous mode [ 135.189566][ T6273] vhci_hcd vhci_hcd.0: Device attached [ 135.430199][ T6276] hsr_slave_1: left promiscuous mode [ 135.587034][ T5817] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 135.603699][ T6275] vhci_hcd: connection reset by peer [ 135.620629][ T2940] vhci_hcd: stop threads [ 135.629489][ T2940] vhci_hcd: release socket [ 135.648944][ T2940] vhci_hcd: disconnect device [ 135.710483][ T6283] process 'syz.2.77' launched './file0' with NULL argv: empty string added [ 136.030794][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 136.040774][ T5790] CPU: 1 PID: 5790 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 136.048372][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 136.058445][ T5790] Workqueue: hci2 hci_rx_work [ 136.063170][ T5790] Call Trace: [ 136.066461][ T5790] [ 136.069401][ T5790] dump_stack_lvl+0x18c/0x250 [ 136.074105][ T5790] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 136.079853][ T5790] ? show_regs_print_info+0x20/0x20 [ 136.085078][ T5790] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 136.090750][ T5790] sysfs_create_dir_ns+0x26e/0x2a0 [ 136.095886][ T5790] ? __lock_acquire+0x7d80/0x7d80 [ 136.100934][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 136.105633][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 136.110860][ T5790] kobject_add_internal+0x617/0xc90 [ 136.116089][ T5790] kobject_add+0x164/0x240 [ 136.120525][ T5790] ? preempt_schedule_thunk+0x1a/0x30 [ 136.125929][ T5790] ? kobject_init+0x1d0/0x1d0 [ 136.130632][ T5790] ? get_device_parent+0x366/0x390 [ 136.135769][ T5790] device_add+0x3fa/0xc40 [ 136.140128][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 136.145087][ T5790] le_conn_complete_evt+0xe9f/0x1480 [ 136.150419][ T5790] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 136.156689][ T5790] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 136.162350][ T5790] ? mutex_unlock+0x10/0x10 [ 136.166885][ T5790] ? skb_pull_data+0xf0/0x1f0 [ 136.171598][ T5790] hci_le_conn_complete_evt+0x187/0x440 [ 136.177190][ T5790] ? hci_remote_host_features_evt+0x150/0x150 [ 136.183293][ T5790] hci_event_packet+0x7b4/0x1280 [ 136.188275][ T5790] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 136.193919][ T5790] ? bis_list+0x290/0x290 [ 136.198254][ T5790] ? kcov_remote_start+0x1b5/0x7e0 [ 136.203366][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 136.208562][ T5790] hci_rx_work+0x43a/0xd60 [ 136.212989][ T5790] ? process_scheduled_works+0x975/0x1600 [ 136.218709][ T5790] process_scheduled_works+0xa60/0x1600 [ 136.224273][ T5790] ? worker_attach_to_pool+0x370/0x370 [ 136.229734][ T5790] ? assign_work+0x3cc/0x5d0 [ 136.234330][ T5790] worker_thread+0xa5e/0xfe0 [ 136.238931][ T5790] ? _raw_spin_unlock+0x40/0x40 [ 136.243790][ T5790] ? __kthread_parkme+0x71/0x1c0 [ 136.248741][ T5790] kthread+0x2fa/0x390 [ 136.252809][ T5790] ? pr_cont_work+0x550/0x550 [ 136.257489][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 136.262077][ T5790] ret_from_fork+0x48/0x80 [ 136.266532][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 136.271209][ T5790] ret_from_fork_asm+0x11/0x20 [ 136.275984][ T5790] [ 136.296089][ T5790] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 136.310208][ T5790] Bluetooth: hci2: failed to register connection device [ 136.443306][ T6287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 136.452157][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.79'. [ 136.584019][ T6287] geneve2: entered promiscuous mode [ 136.590421][ T6287] geneve2: entered allmulticast mode [ 137.211803][ T6293] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 138.360371][ T6298] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.407610][ T6301] loop2: detected capacity change from 0 to 512 [ 138.547486][ T6301] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 138.593702][ T6301] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 138.624404][ T6301] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 138.852277][ T6310] loop3: detected capacity change from 0 to 1024 [ 138.872327][ T6310] hfsplus: unable to parse mount options [ 140.126412][ T6319] loop3: detected capacity change from 0 to 164 [ 140.846471][ T5817] vhci_hcd: vhci_device speed not set [ 141.631095][ T6335] __vm_enough_memory: pid: 6335, comm: syz.2.90, not enough memory for the allocation [ 142.606065][ T6338] syz.3.91(6338): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 142.944315][ T6343] (null): rxe_set_mtu: Set mtu to 256 [ 142.954039][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 142.973903][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 142.983761][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 143.253581][ T6343] infiniband syz2: set active [ 143.258496][ T6343] infiniband syz2: added vxcan1 [ 143.264253][ T6343] syz2: rxe_create_cq: returned err = -12 [ 143.270206][ T6343] infiniband syz2: Couldn't create ib_mad CQ [ 143.276370][ T6343] infiniband syz2: Couldn't open port 1 [ 143.308725][ T5820] vxcan1 speed is unknown, defaulting to 1000 [ 143.529548][ T28] audit: type=1326 audit(1783516464.728:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 143.709762][ T6343] RDS/IB: syz2: added [ 143.714757][ T6343] smc: adding ib device syz2 with port count 1 [ 143.721136][ T6343] smc: ib device syz2 port 1 has pnetid [ 143.729371][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 143.824810][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 143.911397][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 143.998380][ T6343] vxcan1 speed is unknown, defaulting to 1000 [ 144.135284][ T27] vxcan1 speed is unknown, defaulting to 1000 [ 144.164996][ T28] audit: type=1326 audit(1783516464.728:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 144.286832][ T28] audit: type=1326 audit(1783516464.728:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 144.518419][ T28] audit: type=1326 audit(1783516464.728:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 144.542262][ T28] audit: type=1326 audit(1783516464.728:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 144.576241][ T28] audit: type=1326 audit(1783516464.728:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 144.798771][ T28] audit: type=1326 audit(1783516464.728:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 144.986981][ T6353] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 144.993650][ T6353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.148938][ T28] audit: type=1326 audit(1783516464.728:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 145.172711][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.261825][ T6353] vhci_hcd vhci_hcd.0: Device attached [ 145.268982][ T6355] vhci_hcd: connection closed [ 145.277685][ T6209] vhci_hcd: stop threads [ 145.278455][ T6349] wlan0 speed is unknown, defaulting to 1000 [ 145.282391][ T6209] vhci_hcd: release socket [ 145.299596][ T6349] vxcan1 speed is unknown, defaulting to 1000 [ 145.310991][ T28] audit: type=1326 audit(1783516464.728:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 145.394679][ T28] audit: type=1326 audit(1783516464.728:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.1.92" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8d59de59 code=0x7ffc0000 [ 145.429716][ T6209] vhci_hcd: disconnect device [ 145.489766][ T10] vhci_hcd: vhci_device speed not set [ 146.222673][ T6374] syz.1.100 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 146.955659][ T6381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 147.617463][ T5790] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 147.627528][ T5790] Bluetooth: hci3: Injecting HCI hardware error event [ 147.637223][ T5790] Bluetooth: hci3: hardware error 0x00 [ 147.954983][ T6389] NILFS (nullb0): couldn't find nilfs on the device [ 149.146332][ T6373] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 149.158102][ T6373] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 149.166525][ T6373] CPU: 1 PID: 6373 Comm: kbnepd bnep0 Not tainted syzkaller #0 [ 149.174086][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.184161][ T6373] RIP: 0010:klist_del+0x49/0x110 [ 149.189122][ T6373] Code: 0f f7 49 89 dc 49 c1 ec 03 43 80 3c 3c 00 74 08 48 89 df e8 d9 f2 67 f7 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 bb f2 67 f7 49 8b 46 58 48 89 04 24 4c 89 [ 149.208746][ T6373] RSP: 0018:ffffc9000c1778e0 EFLAGS: 00010202 [ 149.214833][ T6373] RAX: 000000000000000b RBX: ffff888022c3d460 RCX: ffff88801becda00 [ 149.222821][ T6373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 149.230805][ T6373] RBP: ffffc9000c177a10 R08: ffff8880260e17c3 R09: 1ffff11004c1c2f8 [ 149.238802][ T6373] R10: dffffc0000000000 R11: ffffed1004c1c2f9 R12: 1ffff11004587a8c [ 149.246789][ T6373] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 149.254773][ T6373] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 149.263714][ T6373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.270308][ T6373] CR2: 0000200000238030 CR3: 00000000605df000 CR4: 00000000003506e0 [ 149.278294][ T6373] Call Trace: [ 149.281585][ T6373] [ 149.284528][ T6373] device_del+0x280/0x910 [ 149.288876][ T6373] ? lockdep_hardirqs_on+0x98/0x150 [ 149.294233][ T6373] ? kill_device+0x160/0x160 [ 149.298873][ T6373] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 149.304991][ T6373] ? netdev_unregister_kobject+0x168/0x250 [ 149.310823][ T6373] unregister_netdevice_many_notify+0x1449/0x1910 [ 149.317272][ T6373] ? unregister_netdevice_many+0x20/0x20 [ 149.322943][ T6373] ? mutex_lock_nested+0x20/0x20 [ 149.327898][ T6373] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 149.333895][ T6373] ? read_lock_is_recursive+0x20/0x20 [ 149.339288][ T6373] ? lock_chain_count+0x20/0x20 [ 149.344163][ T6373] unregister_netdev+0x150/0x1c0 [ 149.349126][ T6373] ? unlist_netdevice+0x740/0x740 [ 149.354170][ T6373] ? remove_wait_queue+0x33/0x120 [ 149.359211][ T6373] bnep_session+0x29a4/0x2b90 [ 149.363916][ T6373] ? bnep_add_connection+0xbe0/0xbe0 [ 149.369230][ T6373] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 149.375144][ T6373] ? lockdep_hardirqs_on+0x98/0x150 [ 149.380361][ T6373] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 149.386272][ T6373] ? _raw_spin_unlock+0x40/0x40 [ 149.391146][ T6373] ? wait_woken+0x180/0x180 [ 149.395668][ T6373] ? _raw_spin_unlock+0x40/0x40 [ 149.400534][ T6373] ? __kthread_parkme+0x71/0x1c0 [ 149.405486][ T6373] ? __kthread_parkme+0x15b/0x1c0 [ 149.410523][ T6373] kthread+0x2fa/0x390 [ 149.414603][ T6373] ? bnep_add_connection+0xbe0/0xbe0 [ 149.419907][ T6373] ? kthread_blkcg+0xd0/0xd0 [ 149.424508][ T6373] ret_from_fork+0x48/0x80 [ 149.428938][ T6373] ? kthread_blkcg+0xd0/0xd0 [ 149.433551][ T6373] ret_from_fork_asm+0x11/0x20 [ 149.438347][ T6373] [ 149.441391][ T6373] Modules linked in: [ 149.445328][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.461327][ T6373] ---[ end trace 0000000000000000 ]--- [ 149.468093][ T6373] RIP: 0010:klist_del+0x49/0x110 [ 149.474131][ T6373] Code: 0f f7 49 89 dc 49 c1 ec 03 43 80 3c 3c 00 74 08 48 89 df e8 d9 f2 67 f7 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 bb f2 67 f7 49 8b 46 58 48 89 04 24 4c 89 [ 149.493955][ T6373] RSP: 0018:ffffc9000c1778e0 EFLAGS: 00010202 [ 149.500230][ T6373] RAX: 000000000000000b RBX: ffff888022c3d460 RCX: ffff88801becda00 [ 149.508419][ T6373] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 149.516490][ T6373] RBP: ffffc9000c177a10 R08: ffff8880260e17c3 R09: 1ffff11004c1c2f8 [ 149.524745][ T6373] R10: dffffc0000000000 R11: ffffed1004c1c2f9 R12: 1ffff11004587a8c [ 149.532836][ T6373] R13: 0000000000000001 R14: 0000000000000000 R15: dffffc0000000000 [ 149.542227][ T6373] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 149.551547][ T6373] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.558379][ T6373] CR2: 0000200000238030 CR3: 00000000605df000 CR4: 00000000003506e0 [ 149.572509][ T6373] Kernel panic - not syncing: Fatal exception [ 149.578854][ T6373] Kernel Offset: disabled [ 149.583166][ T6373] Rebooting in 86400 seconds..