last executing test programs: 18m22.551633828s ago: executing program 32 (id=41): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 14m55.140555503s ago: executing program 33 (id=910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0xc, 0x0, 0x0, 0xfffffffc, 0xf}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0xe) 12m44.924857568s ago: executing program 0 (id=1383): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0xf08, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x3, 0x5002) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}}, 0x0) 12m43.717217907s ago: executing program 0 (id=1385): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902"], 0x0) socket$vsock_stream(0x28, 0x1, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$rxrpc(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 12m42.672913756s ago: executing program 0 (id=1387): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x3126, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x154c, 0xef91, 0x48, 0x0, 0x0) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r5, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000340), 0x4) 12m42.413351751s ago: executing program 0 (id=1389): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000080)=r3, 0x12) 12m40.889186176s ago: executing program 0 (id=1395): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m40.631128275s ago: executing program 0 (id=1398): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_open_dev$sndpcmp(0x0, 0x3, 0x800) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 12m25.386170926s ago: executing program 34 (id=1398): connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_open_dev$sndpcmp(0x0, 0x3, 0x800) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 11m39.088619918s ago: executing program 4 (id=1551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r3, &(0x7f0000008880), 0x483, 0x44000102, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 11m35.740552839s ago: executing program 4 (id=1557): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000840)={r1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xae5b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m34.166833151s ago: executing program 4 (id=1562): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 11m33.037272921s ago: executing program 4 (id=1565): r0 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='vm_unmapped_area\x00'}, 0x10) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="02", 0x33fe0}], 0x1}, 0x0) 11m31.937892201s ago: executing program 4 (id=1567): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) utimes(&(0x7f0000000000)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 11m30.603653711s ago: executing program 4 (id=1569): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 11m15.212171273s ago: executing program 35 (id=1569): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000080)=0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 9m28.404020083s ago: executing program 6 (id=1888): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 9m27.869944162s ago: executing program 6 (id=1890): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) read$FUSE(r2, &(0x7f0000002600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0x0, r3, {0xfffffffffffffffc}}, 0x18) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 9m25.818514714s ago: executing program 6 (id=1895): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) memfd_secret(0x0) pipe2$9p(&(0x7f0000000140), 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 9m23.568058039s ago: executing program 6 (id=1900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpgrp(r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 9m21.12278979s ago: executing program 6 (id=1905): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 9m17.841777094s ago: executing program 6 (id=1912): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x4040040) listen(0xffffffffffffffff, 0x0) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 9m2.15350272s ago: executing program 36 (id=1912): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x4040040) listen(0xffffffffffffffff, 0x0) gettid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x100}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a00000405000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 8m33.359983599s ago: executing program 9 (id=2011): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000c00)='_', 0x1}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 8m32.110982s ago: executing program 9 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) 8m29.423058584s ago: executing program 9 (id=2028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 8m23.884746387s ago: executing program 9 (id=2037): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 8m22.774078998s ago: executing program 9 (id=2038): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x1, 0x101801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) 8m21.18228156s ago: executing program 9 (id=2043): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a20fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000040bf9800000000000056080100000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m5.814472789s ago: executing program 37 (id=2043): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a20fe00000000b6090800000000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000040bf9800000000000056080100000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m59.066321136s ago: executing program 7 (id=2683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x4, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r3, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r3, 0x407, 0xc000) get_robust_list(0x0, 0x0, &(0x7f00000005c0)) 2m56.66835973s ago: executing program 7 (id=2686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000340)={@random="d803f32e4445", @broadcast, @val={@void, {0x8100, 0x7, 0x1, 0x4}}, {@canfd={0xd, {{0x2, 0x0, 0x0, 0x1}, 0x35, 0x2, 0x0, 0x0, "fa626a5a1a5ede3b512453729ca4fa7fabc7d57ca50df4c4c4325d809a22848207ee42dee687e007c56604ea233439405a84a7336808c56b9be7538386b8a698"}}}}, &(0x7f0000000040)={0x0, 0x3, [0xd4e, 0xe19, 0x5d9, 0x611]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 2m53.767645962s ago: executing program 7 (id=2691): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x6c, 0xff, 0x4, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0xff, 0x1, 0x0, 0x93}, 0xe) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000440)={{0x5, 0x5, 0x7f, 0x6, 'syz0\x00', 0x9}, 0x0, [0xffffffffffffffaf, 0xcc, 0x7, 0x2, 0x2, 0x9, 0x8, 0x4, 0x7a9a, 0x3, 0x1ff, 0x80000001, 0x8, 0x9, 0xec00000000, 0x0, 0x9, 0x7, 0x0, 0x7, 0xffff, 0x8, 0x5, 0x0, 0x2, 0x7fff, 0x2, 0x6, 0x6, 0x1, 0x1, 0x2, 0x87, 0xc5c, 0x8, 0x5, 0x8000, 0x941e, 0x0, 0x100000001, 0x8, 0x3, 0xffffffffffffffff, 0x3, 0x81, 0x5, 0x9, 0x7, 0x3, 0x4, 0x6, 0xf, 0xe44, 0x0, 0x40, 0xfffffffffffffff7, 0x4000000, 0x0, 0xfffffffffffffffb, 0x1, 0x5, 0xffff, 0xffffffffffff6efb, 0x2, 0x9, 0x9, 0x6, 0x1, 0x1d49cf6d, 0x4, 0x1, 0x267d, 0x7, 0x2, 0xdf, 0xfffffffffffffffd, 0xb, 0x6, 0x6, 0x4000000000000000, 0xd, 0x610d, 0x4222, 0x800, 0x1ff, 0x0, 0x6, 0xc, 0x0, 0x9, 0x9, 0x9, 0x8, 0x6, 0x2, 0x2, 0x1000, 0x3, 0x48, 0x29b, 0x2, 0x2000000000e, 0xffff, 0x23ef, 0x8, 0x5, 0x774, 0x0, 0x81, 0x7fffffff, 0x33, 0xb, 0x6, 0x10, 0x100000000000000, 0x7ff, 0x8001, 0xf9, 0x6, 0xfffffffffffffff8, 0x1, 0x6, 0x5, 0x1, 0x8, 0x101, 0x800, 0xe8]}) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r3, 0x1) 2m50.852009588s ago: executing program 7 (id=2696): arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ptrace(0x10, r0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x1, 0x5002) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) ptrace$getregset(0x4204, r0, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8}) ptrace$setregset(0x4205, r0, 0x204, &(0x7f00000000c0)={&(0x7f0000000100)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x8}) ptrace(0x11, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0x0, 0x0) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1) 2m48.230378266s ago: executing program 7 (id=2702): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27", 0x1a}], 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x3c}}, 0x400c084) 2m42.443559064s ago: executing program 7 (id=2709): fanotify_init(0x2972bf0627f51a4a, 0x2) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1) syz_usb_control_io$printer(r0, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x40, 0x31, 0xfd, {0xfd, 0x6, "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"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000880)={0x34, &(0x7f0000000640)={0x0, 0x16, 0x93, "1ae0661a3c9d5fcb63f8466f951b34e89ddf7cf13da584eac42967aad0602d26997fbc0b28934b8f6d0833b21daa93abd6466d0af426e1ca17818f56718d60fd04734469df5ca2b9275969a5bb1720d2a4fc8afc218bc113398defb8c2215397fbb204c5d3ad90bc10491d100b72047b6c872e812629742d49f4668d574ca1c830209ffac0960878173137d9183af379df6a41"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000780)=ANY=[@ANYBLOB="2000590000000057c2fe6c4cddb395a56aa2805db60dc92c83a967539c09000000a28be01d99202bb3ba1f2c747d34c2bb936f8f210ac15a7f5c6bdb2f29c4469e3f60f99889f52ab1f0cc5b1611575c79d529f240f52106eefa4378000000"], 0x0, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4044004) recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)}, 0x80000000}, {{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)=0xfffff801, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000000c0)=0xffffffff) syz_io_uring_setup(0x8ed, 0x0, 0x0, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x73f7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xb0, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0xe5, {0x9, 0x21, 0x9, 0xfa, 0x1, {0x22, 0xca1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x77, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0xff, 0x8}}]}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000180)=ANY=[]}) 2m27.108621119s ago: executing program 38 (id=2709): fanotify_init(0x2972bf0627f51a4a, 0x2) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1) syz_usb_control_io$printer(r0, &(0x7f0000000600)={0x14, &(0x7f0000000480)={0x40, 0x31, 0xfd, {0xfd, 0x6, "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"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000880)={0x34, &(0x7f0000000640)={0x0, 0x16, 0x93, "1ae0661a3c9d5fcb63f8466f951b34e89ddf7cf13da584eac42967aad0602d26997fbc0b28934b8f6d0833b21daa93abd6466d0af426e1ca17818f56718d60fd04734469df5ca2b9275969a5bb1720d2a4fc8afc218bc113398defb8c2215397fbb204c5d3ad90bc10491d100b72047b6c872e812629742d49f4668d574ca1c830209ffac0960878173137d9183af379df6a41"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000780)=ANY=[@ANYBLOB="2000590000000057c2fe6c4cddb395a56aa2805db60dc92c83a967539c09000000a28be01d99202bb3ba1f2c747d34c2bb936f8f210ac15a7f5c6bdb2f29c4469e3f60f99889f52ab1f0cc5b1611575c79d529f240f52106eefa4378000000"], 0x0, &(0x7f0000000840)={0x20, 0x0, 0x1, 0x2}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000200)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4044004) recvmmsg(r3, &(0x7f00000015c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)}, 0x80000000}, {{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x8, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)=0xfffff801, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r4, 0x4004551e, &(0x7f00000000c0)=0xffffffff) syz_io_uring_setup(0x8ed, 0x0, 0x0, 0x0) ioctl$USBDEVFS_RESET(r4, 0x5514) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x73f7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0xb0, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0xe5, {0x9, 0x21, 0x9, 0xfa, 0x1, {0x22, 0xca1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0x77, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0xff, 0x8}}]}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000180)=ANY=[]}) 17.025432056s ago: executing program 3 (id=2999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000410000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) unshare(0x2a020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x50) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r3, 0x0}, 0x20) dup3(r1, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/156, 0x9c}], 0x1}, 0x22) 14.745810194s ago: executing program 3 (id=3006): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r7 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$inet(0x2, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) syz_emit_ethernet(0xe6, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) io_uring_enter(r4, 0x3516, 0x77e, 0x0, 0x0, 0x0) 12.873290007s ago: executing program 2 (id=3009): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x77359400}, {0x77359400}}, 0x0) r4 = mq_open(&(0x7f0000000180)='eth0\x00', 0x40, 0x59, 0x0) mq_notify(r4, &(0x7f00000000c0)={0x0, 0xc, 0x1}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) 10.245364165s ago: executing program 5 (id=3012): r0 = io_uring_setup(0x1612, &(0x7f0000000100)={0x0, 0x77e3, 0x80, 0x0, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}], &(0x7f0000001540)=[0x2, 0xfffffffffffffffc]}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x409c884, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x6d91fb6102d8d9cc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x8, 0x40400) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000240)=0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7, 0x200, 0x6, 0x5, 0x400000, r5}) sendfile(r3, r3, 0x0, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 10.124267178s ago: executing program 8 (id=3013): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) keyctl$setperm(0x5, 0x0, 0x1082010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 9.155564248s ago: executing program 1 (id=3014): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) symlink(0x0, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000280)=ANY=[], 0xe01, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) keyctl$chown(0x4, r0, 0xee01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) rename(0x0, &(0x7f0000000040)='./file1\x00') socket$packet(0x11, 0x2, 0x300) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x40}}}, 0x10, 0x0}, 0x10) 8.851830788s ago: executing program 5 (id=3015): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r0) r1 = fsopen(&(0x7f0000000300)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000500)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r3 = epoll_create(0xbff0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, 0x0, 0x0, r3) fcntl$setstatus(r0, 0x4, 0x2c00) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) lstat(0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000004c0)={0x10000, 0x6, {}, {}, 0x8, 0x1}) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x6, 0x8000, 0x1, 0x0, 0x5, 0x3, 0x101, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={r7, 0xf, 0x10}, &(0x7f00000003c0)=0xc) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x5644, 0x4, 0x7, 0x0, 0x0) 8.69402827s ago: executing program 3 (id=3016): fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 8.444752505s ago: executing program 8 (id=3017): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = io_uring_setup(0x26cd, &(0x7f0000000080)={0x0, 0x825e, 0x40, 0x0, 0x106}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000480), 0x61) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x8002, 0x0) semget$private(0x0, 0x4000, 0x555) fsopen(0x0, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 8.407427528s ago: executing program 5 (id=3018): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, 0x0) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000002000)}], 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000) socketpair$unix(0x1, 0x5, 0x0, 0x0) epoll_create1(0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 7.460956533s ago: executing program 8 (id=3019): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x0, 0x2, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240), 0x0, 0x1, 0x1, 0x0, 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x2710, @host}, 0x10) socket$inet6(0x10, 0x80000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 6.940538147s ago: executing program 1 (id=3020): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x7}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) poll(0x0, 0x0, 0x5) socket(0x10, 0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) 6.764791262s ago: executing program 5 (id=3021): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020}, 0x2020) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 6.749761659s ago: executing program 2 (id=3022): r0 = epoll_create(0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x8, 0x8, 0xffffffff, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @empty}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) unshare(0x2040600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x9}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r2, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1000}) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x60000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000080)={0x8}) 5.814155657s ago: executing program 3 (id=3023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) r3 = io_uring_setup(0x425, &(0x7f0000000080)={0x0, 0xcc32, 0x800, 0x0, 0x2ea}) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) fanotify_mark(r4, 0x1, 0x4000003e, r5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000e02000/0x3000)=nil, 0x3000, &(0x7f0000000000)='/dev/adsp1\x00') mmap(&(0x7f0000e01000/0x1000)=nil, 0x1000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x8) bind$alg(r6, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000024c0)={0x14, 0x69, 0x0, 0x401}, 0x14}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10ffff) socket$l2tp6(0xa, 0x2, 0x73) close_range(r3, 0xffffffffffffffff, 0x0) 5.316203718s ago: executing program 2 (id=3024): io_submit(0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 5.211284193s ago: executing program 1 (id=3025): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 4.162782548s ago: executing program 2 (id=3026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@hopopts={{0x18, 0x29, 0x36, {0x1}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x40}, 0x40) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd57087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155934378491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afebc369ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e7fa095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) 4.030340339s ago: executing program 1 (id=3027): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@sack={0x1d, 0x2, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xdc}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.812405661s ago: executing program 8 (id=3028): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x10) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 3.018056731s ago: executing program 5 (id=3029): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[], 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.014024512s ago: executing program 3 (id=3030): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = syz_io_uring_setup(0x2e4f, 0x0, &(0x7f0000000280), &(0x7f0000000500)) sendfile(r2, r1, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, 0x0, 0x0) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_genetlink_get_family_id$nfc(&(0x7f0000004380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xb, &(0x7f0000000100)={0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.904700233s ago: executing program 8 (id=3031): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x1082010) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x1, 0xffffffff, {}, {}, {}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x5, 0x2, 0x0, 0x0, "001bd300058edb7c"}}, 0x48}, 0x1, 0x0, 0x0, 0x881}, 0x0) 2.886310266s ago: executing program 2 (id=3032): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}, 0x1, 0xf00000000000000}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x15, 0x0, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.872586009s ago: executing program 1 (id=3033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.599879191s ago: executing program 5 (id=3034): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x400004, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6821, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40044) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r4) 990.57194ms ago: executing program 8 (id=3035): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x300, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = dup3(0xffffffffffffffff, r2, 0x0) r5 = socket$inet(0x2, 0x80000, 0x4) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048840}, 0x20040010) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="400000001200050100000000ffdbdf2505001900ff00080028001a000a010102008000000000000000000000fe80"], 0x40}}, 0x20040810) 989.106287ms ago: executing program 2 (id=3036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) 769.461489ms ago: executing program 3 (id=3037): syz_open_dev$vim2m(0x0, 0x3, 0x2) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, 0x0, 0x0, 0x9200000000000000) memfd_create(&(0x7f0000000480)='!.\x00', 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xf}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}}, 0x40004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newsa={0x154, 0x10, 0x1, 0x0, 0xfffffffc, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@broadcast, 0x0, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x9, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e22, 0x4e23, @in6=@private1}}]}, 0x154}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xe8, 0x180, 0xfeffffff, 0x2a0, 0x180, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@uncond, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@dev, @empty, 0x0, 0x0, 'vlan1\x00', 'veth0\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}, @common=@inet=@ecn={{0x28}}]}, @common=@SET={0x60}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_virt_wifi\x00'}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x3b00, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) 0s ago: executing program 1 (id=3038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, 0x0, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_open_dev$sg(0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323ca46, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r4 = dup3(r2, r3, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000001c0)={&(0x7f00000012c0), &(0x7f0000002940)=""/4083, 0xff3}) kernel console output (not intermixed with test programs): 7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 379.544945][ T9779] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 380.038346][ T9779] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 380.288828][ T9779] [U] 22Ʃx?0;3u [ 380.317390][ T9779] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 380.442421][ T9779] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 380.539290][ T9779] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 380.569274][ T9779] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 380.576288][ T9779] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 380.589284][ T9779] [U] ec [ 380.592458][ T9779] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 380.605033][ T9779] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 380.720346][ T30] kauditd_printk_skb: 752 callbacks suppressed [ 380.726851][ T30] audit: type=1326 audit(1752503652.647:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9798 comm="syz.0.1174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b0ab8e929 code=0x0 [ 381.086229][ T5847] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 383.016741][ T9847] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 383.043185][ T9847] CIFS mount error: No usable UNC path provided in device string! [ 383.043185][ T9847] [ 383.053582][ T9847] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 385.365619][ T9861] Invalid source name [ 385.369737][ T9861] UBIFS error (pid: 9861): cannot open "/dev/sg0", error -22 [ 389.504189][ T9907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1204'. [ 397.376300][T10045] xt_connbytes: Forcing CT accounting to be enabled [ 397.383333][T10045] Cannot find set identified by id 0 to match [ 399.073449][T10066] overlayfs: failed to clone upperpath [ 400.840383][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.849752][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.859004][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.868266][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.877529][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.886735][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.897128][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.906400][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.915636][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 400.924801][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 403.209406][T10107] netlink: 'syz.6.1258': attribute type 10 has an invalid length. [ 403.239047][T10107] team0: Failed to send port change of device geneve0 via netlink (err -105) [ 403.251184][T10107] team0: Failed to send options change via netlink (err -105) [ 403.269805][T10107] team0: Port device geneve0 added [ 407.812167][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 408.215025][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 408.393492][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 408.399905][T10141] ceph: No mds server is up or the cluster is laggy [ 408.429720][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 408.532437][T10139] wg1 speed is unknown, defaulting to 1000 [ 408.830724][T10158] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.244462][T10220] __nla_validate_parse: 43 callbacks suppressed [ 415.244479][T10220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1293'. [ 415.262553][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 415.811550][T10229] xt_nat: multiple ranges no longer supported [ 417.471633][T10242] netlink: 'syz.6.1302': attribute type 1 has an invalid length. [ 417.513657][T10242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 417.558753][T10242] bond2: (slave veth0_to_bond): making interface the new active one [ 417.597799][T10242] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 417.942781][T10250] vlan3: entered allmulticast mode [ 417.948198][T10250] veth0_to_bond: entered allmulticast mode [ 417.955623][T10250] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 418.489168][T10258] fuse: Bad value for 'fd' [ 420.431212][T10269] kvm: pic: single mode not supported [ 420.431387][T10269] kvm: pic: level sensitive irq not supported [ 420.490775][T10269] kvm: pic: single mode not supported [ 420.562686][T10269] kvm: pic: single mode not supported [ 420.644353][T10269] kvm: pic: single mode not supported [ 420.656161][T10260] netlink: 161716 bytes leftover after parsing attributes in process `syz.1.1305'. [ 420.930053][T10260] netlink: zone id is out of range [ 420.948271][T10260] netlink: zone id is out of range [ 420.960471][T10260] netlink: zone id is out of range [ 423.447507][T10300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1317'. [ 424.778909][T10315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 424.824474][T10315] vlan1: entered promiscuous mode [ 424.834458][T10315] syz_tun: entered promiscuous mode [ 425.714283][T10329] wg1 speed is unknown, defaulting to 1000 [ 426.561455][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1329'. [ 428.182177][T10349] overlayfs: failed to clone upperpath [ 430.914765][ T889] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 431.846256][ T889] usb 5-1: Using ep0 maxpacket: 8 [ 431.866648][ T889] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 431.897132][ T889] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 431.907815][ T889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 431.931005][ T889] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.035281][ T889] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.184470][ T889] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.193687][ T889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.990502][ T889] usb 5-1: usb_control_msg returned -32 [ 432.999008][ T889] usbtmc 5-1:16.0: can't read capabilities [ 434.174747][ T889] usb 5-1: USB disconnect, device number 11 [ 434.234493][T10405] gtp0: entered promiscuous mode [ 435.695850][T10419] xt_connbytes: Forcing CT accounting to be enabled [ 435.702602][T10419] Cannot find set identified by id 768 to match [ 440.118679][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.134999][ T43] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 440.142851][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.026592][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 441.953238][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 442.218718][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 442.247463][ T43] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 442.256707][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.265032][ T43] usb 5-1: Product: syz [ 442.269267][ T43] usb 5-1: Manufacturer: syz [ 442.273871][ T43] usb 5-1: SerialNumber: syz [ 442.323558][ T43] usb 5-1: config 0 descriptor?? [ 442.350099][ T43] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 442.387641][ T43] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 442.965716][ T43] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 442.973713][ T43] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 443.626275][ T43] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 443.699831][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 443.717009][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 443.945960][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 443.982921][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 444.050274][ T43] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 444.118748][ T43] usb 5-1: USB disconnect, device number 12 [ 444.551660][T10479] wg1 speed is unknown, defaulting to 1000 [ 444.575065][ T30] audit: type=1326 audit(1752503716.497:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10482 comm="syz.2.1371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe26978e929 code=0x0 [ 447.411515][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 449.110042][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'. [ 450.524937][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 450.704988][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 450.719750][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.743949][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 450.968658][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 451.738933][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 451.749226][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 451.763820][ T5904] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 451.814711][ T5904] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 451.822748][ T5904] usb 5-1: Manufacturer: syz [ 451.873066][ T5904] usb 5-1: config 0 descriptor?? [ 452.228797][ T5904] rc_core: IR keymap rc-hauppauge not found [ 452.248888][ T5904] Registered IR keymap rc-empty [ 452.253948][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.295080][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.335809][ T5904] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 452.363294][ T5904] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 452.407825][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.467501][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.517195][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.554769][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.640434][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.665362][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.707824][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.735909][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.767500][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.824835][ T5904] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 452.966630][ T5904] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 452.981930][ T5904] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 453.024189][ T5904] usb 5-1: USB disconnect, device number 13 [ 455.740498][T10622] tipc: Started in network mode [ 455.745617][T10622] tipc: Node identity 7f000001, cluster identity 4711 [ 455.763564][T10622] tipc: Enabled bearer , priority 10 [ 456.887898][ T5904] tipc: Node number set to 2130706433 [ 460.406723][T10658] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 460.414972][T10658] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 461.115975][T10658] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 461.123780][T10658] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 470.284818][ T30] audit: type=1800 audit(1752503742.187:895): pid=10719 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1438" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 471.831702][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 471.846143][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1445'. [ 471.856601][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 471.874041][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 472.021183][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 472.033426][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 472.829221][T10735] wg1 speed is unknown, defaulting to 1000 [ 474.132876][ T5845] Bluetooth: hci5: command tx timeout [ 474.226672][T10750] can0: slcan on ttyS3. [ 474.754961][T10754] can0 (unregistered): slcan off ttyS3. [ 476.170468][T10586] Set syz1 is full, maxelem 65536 reached [ 476.204707][ T5845] Bluetooth: hci5: command tx timeout [ 476.293764][T10735] chnl_net:caif_netlink_parms(): no params data found [ 477.279001][T10791] netlink: 'syz.4.1457': attribute type 10 has an invalid length. [ 477.290382][T10791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1457'. [ 477.411726][T10791] team0: Port device geneve0 added [ 477.802381][T10735] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.071792][T10735] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.275972][ T5845] Bluetooth: hci5: command tx timeout [ 478.634878][T10735] bridge_slave_0: entered allmulticast mode [ 478.678233][T10735] bridge_slave_0: entered promiscuous mode [ 479.985005][T10735] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.992228][T10735] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.069588][T10735] bridge_slave_1: entered allmulticast mode [ 480.086829][T10735] bridge_slave_1: entered promiscuous mode [ 480.270857][ T1082] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.384840][ T5845] Bluetooth: hci5: command tx timeout [ 480.479885][T10735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.551288][T10735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.622952][ T1082] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.244828][T10811] netlink: 'syz.6.1464': attribute type 13 has an invalid length. [ 481.546060][ T1082] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.673002][T10735] team0: Port device team_slave_0 added [ 481.726917][T10735] team0: Port device team_slave_1 added [ 481.940631][ T1082] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.109513][T10735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.142744][T10735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.189729][T10735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.226334][T10735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.265146][T10735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.291140][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.313668][T10735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.634071][T10735] hsr_slave_0: entered promiscuous mode [ 483.747330][T10735] hsr_slave_1: entered promiscuous mode [ 483.753731][T10735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.800146][T10735] Cannot create hsr debugfs directory [ 483.924590][ T30] audit: type=1326 audit(1752503755.847:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10843 comm="syz.4.1475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefaf18e929 code=0x7fc00000 [ 484.945954][ T1082] bridge_slave_1: left allmulticast mode [ 484.951657][ T1082] bridge_slave_1: left promiscuous mode [ 485.695147][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.850507][ T1082] bridge_slave_0: left allmulticast mode [ 485.884840][ T1082] bridge_slave_0: left promiscuous mode [ 485.890706][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.164665][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.181881][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.213372][ T1082] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 490.304817][ T1082] bond0 (unregistering): Released all slaves [ 490.325230][ T1082] bond1 (unregistering): Released all slaves [ 490.714613][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1497'. [ 492.546451][T10935] Set syz0 is full, maxelem 0 reached [ 492.604789][ T1082] hsr_slave_0: left promiscuous mode [ 492.621870][ T1082] hsr_slave_1: left promiscuous mode [ 492.640886][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.658403][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.878467][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.897727][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 493.038343][ T1082] veth1_macvtap: left promiscuous mode [ 493.050133][ T1082] veth0_macvtap: left promiscuous mode [ 493.058443][ T1082] veth1_vlan: left promiscuous mode [ 493.064049][ T1082] veth0_vlan: left promiscuous mode [ 493.125702][T10953] netlink: 'syz.2.1504': attribute type 16 has an invalid length. [ 493.225379][T10953] netlink: 'syz.2.1504': attribute type 17 has an invalid length. [ 493.323174][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1506'. [ 493.333691][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1506'. [ 496.644267][T10971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1511'. [ 496.653377][T10971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1511'. [ 497.866192][T10974] delete_channel: no stack [ 498.023519][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 498.334144][ T1082] team0 (unregistering): Port device team_slave_0 removed [ 499.154843][T10735] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 499.178249][T10735] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 499.210107][T10735] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 499.316353][T10735] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 500.205800][T11006] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 501.438637][T11021] netlink: zone id is out of range [ 501.459825][T11021] netlink: zone id is out of range [ 501.530892][T10735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.538024][T11021] netlink: zone id is out of range [ 501.639250][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.649079][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.680141][T11021] netlink: zone id is out of range [ 501.685445][T11021] netlink: zone id is out of range [ 501.727592][T11021] team_slave_1: mtu greater than device maximum [ 501.733906][T11021] team0: Device team_slave_1 failed to change mtu [ 502.433662][T10735] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.513305][ T8765] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.520605][ T8765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.633287][ T8765] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.640558][ T8765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.820197][T11034] binder: 11033:11034 ioctl c0306201 0 returned -14 [ 506.376427][T10735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.780478][T10735] veth0_vlan: entered promiscuous mode [ 508.849610][T10735] veth1_vlan: entered promiscuous mode [ 509.012250][T10735] veth0_macvtap: entered promiscuous mode [ 509.032707][T10735] veth1_macvtap: entered promiscuous mode [ 509.078796][T10735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.129004][T10735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.277085][T11099] syz_tun: entered allmulticast mode [ 510.631952][T10735] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.664327][T10735] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.686013][T10735] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.872398][T10735] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.908082][T11099] dvmrp1: entered allmulticast mode [ 512.038114][T11092] syz_tun: left allmulticast mode [ 512.442518][ T8762] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.451916][ T8762] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.820405][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.833532][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.801025][T11172] syz_tun: entered allmulticast mode [ 518.840009][T11170] syz_tun: left allmulticast mode [ 519.543821][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1564'. [ 519.924473][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1564'. [ 521.264085][T11196] netlink: 'syz.6.1568': attribute type 1 has an invalid length. [ 522.451628][T11186] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.552175][T11186] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.619870][T11186] bond0 (unregistering): Released all slaves [ 522.768435][T11196] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 523.237522][T11212] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1572'. [ 524.499517][T11235] xt_nat: multiple ranges no longer supported [ 524.614156][T11238] netlink: 'syz.2.1583': attribute type 83 has an invalid length. [ 525.156068][T11240] delete_channel: no stack [ 525.327435][T11256] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.646311][T11267] bridge1: entered allmulticast mode [ 531.848368][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1603'. [ 532.144999][T11309] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 532.442331][T11307] macvtap1: entered promiscuous mode [ 532.475319][T11307] macvtap1: entered allmulticast mode [ 532.492852][T11307] syz_tun: entered allmulticast mode [ 532.644818][T11310] syz_tun: left allmulticast mode [ 534.146324][ T9469] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 534.304644][ T9469] usb 8-1: Using ep0 maxpacket: 32 [ 534.312967][ T9469] usb 8-1: config 0 has no interfaces? [ 534.342291][ T9469] usb 8-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 534.354919][ T9469] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.365538][ T9469] usb 8-1: Product: syz [ 534.369749][ T9469] usb 8-1: Manufacturer: syz [ 534.374451][ T9469] usb 8-1: SerialNumber: syz [ 534.382700][ T9469] usb 8-1: config 0 descriptor?? [ 536.488534][ T5924] usb 8-1: USB disconnect, device number 2 [ 536.823397][ T9469] libceph: connect (1)[c::]:6789 error -101 [ 536.829774][ T9469] libceph: mon0 (1)[c::]:6789 connect error [ 536.872674][T11351] ceph: No mds server is up or the cluster is laggy [ 536.884728][T11358] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 536.891513][T11358] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 536.970366][T11358] vhci_hcd vhci_hcd.0: Device attached [ 536.989350][T11362] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(11) [ 536.996370][T11362] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 537.029398][T11362] vhci_hcd vhci_hcd.0: Device attached [ 537.093592][T11358] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(15) [ 537.100245][T11358] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 537.110880][T11365] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(10) [ 537.117541][T11365] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 537.159607][ T5936] vhci_hcd: vhci_device speed not set [ 537.182606][ T5845] Bluetooth: Wrong link type (-71) [ 537.208665][T11358] vhci_hcd vhci_hcd.0: Device attached [ 537.221653][T11365] vhci_hcd vhci_hcd.0: Device attached [ 537.224852][ T5936] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 537.414628][T11363] vhci_hcd: connection closed [ 537.415193][T11359] vhci_hcd: connection reset by peer [ 537.418597][T11366] vhci_hcd: connection closed [ 537.452355][T11367] vhci_hcd: connection closed [ 537.533636][ T6936] vhci_hcd: stop threads [ 537.663142][ T6936] vhci_hcd: release socket [ 537.761486][T11376] xt_NFQUEUE: number of total queues is 0 [ 538.554941][ T6936] vhci_hcd: disconnect device [ 538.604747][ T6936] vhci_hcd: stop threads [ 538.609103][ T6936] vhci_hcd: release socket [ 538.684928][ T6936] vhci_hcd: disconnect device [ 538.704339][ T6936] vhci_hcd: stop threads [ 538.853272][ T6936] vhci_hcd: release socket [ 538.884021][ T6936] vhci_hcd: disconnect device [ 539.235464][ T6936] vhci_hcd: stop threads [ 539.674393][ T6936] vhci_hcd: release socket [ 539.701736][ T6936] vhci_hcd: disconnect device [ 541.127413][T11397] IPv6: Can't replace route, no match found [ 542.319410][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 542.332113][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 542.345470][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 542.355025][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 542.363007][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 542.600240][ T5936] vhci_hcd: vhci_device speed not set [ 543.200719][T11406] wg1 speed is unknown, defaulting to 1000 [ 543.333073][ T8762] bridge_slave_1: left allmulticast mode [ 543.353479][ T8762] bridge_slave_1: left promiscuous mode [ 543.384101][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.816613][ T8762] bridge_slave_0: left allmulticast mode [ 543.918206][ T8762] bridge_slave_0: left promiscuous mode [ 543.950717][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.834772][ T5847] Bluetooth: hci1: command tx timeout [ 546.916139][ T5847] Bluetooth: hci1: command tx timeout [ 547.592711][T11449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 548.674644][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.014705][ T5847] Bluetooth: hci1: command tx timeout [ 549.714652][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 550.209309][ T8762] team0: Port device geneve0 removed [ 550.619656][ T8762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.657257][ T8762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.678487][ T8762] bond0 (unregistering): Released all slaves [ 551.078887][ T5847] Bluetooth: hci1: command tx timeout [ 552.011851][T11486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.019199][T11486] IPv6: NLM_F_CREATE should be set when creating new route [ 552.265114][T11486] lo: entered allmulticast mode [ 552.300147][T11486] tunl0: entered allmulticast mode [ 552.311098][T11486] gre0: entered allmulticast mode [ 552.360601][T11486] gretap0: entered allmulticast mode [ 552.405834][T11486] erspan0: entered allmulticast mode [ 552.425680][T11486] ip_vti0: entered allmulticast mode [ 552.448342][T11486] ip6_vti0: entered allmulticast mode [ 552.484210][T11486] sit0: entered allmulticast mode [ 552.500036][T11486] ip6tnl0: entered allmulticast mode [ 552.516523][T11486] ip6gre0: entered allmulticast mode [ 552.538344][T11486] syz_tun: entered allmulticast mode [ 552.558436][T11486] ip6gretap0: entered allmulticast mode [ 552.572403][T11486] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.581180][T11486] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.593635][T11486] bridge0: entered allmulticast mode [ 552.629219][T11486] vcan0: entered allmulticast mode [ 552.640114][T11486] team0: entered allmulticast mode [ 552.651216][T11486] team_slave_0: entered allmulticast mode [ 552.657519][T11486] team_slave_1: entered allmulticast mode [ 552.670158][T11486] dummy0: entered allmulticast mode [ 552.700127][T11486] nlmon0: entered allmulticast mode [ 552.731005][T11486] caif0: entered allmulticast mode [ 552.736897][T11486] batadv0: entered allmulticast mode [ 552.764288][T11486] vxcan0: entered allmulticast mode [ 552.822140][T11486] vxcan1: entered allmulticast mode [ 552.971700][T11486] veth0: entered allmulticast mode [ 553.018941][T11486] veth1: entered allmulticast mode [ 553.250392][T11486] wg0: entered allmulticast mode [ 554.035081][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 554.064256][T11486] wg1: entered allmulticast mode [ 554.166343][T11486] wg2: entered allmulticast mode [ 554.786414][T11486] veth0_to_bridge: entered allmulticast mode [ 554.813320][T11486] veth1_to_bridge: entered allmulticast mode [ 554.850435][T11505] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1657'. [ 554.899744][T11486] veth0_to_bond: entered allmulticast mode [ 554.920891][T11486] bond_slave_0: entered allmulticast mode [ 554.932747][T11486] veth1_to_bond: entered allmulticast mode [ 554.947691][T11486] bond_slave_1: entered allmulticast mode [ 554.956606][T11486] veth0_to_team: entered allmulticast mode [ 554.970796][T11486] veth1_to_team: entered allmulticast mode [ 555.037883][T11486] veth0_to_batadv: entered allmulticast mode [ 555.089641][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.128985][T11486] batadv_slave_0: entered allmulticast mode [ 555.140733][T11486] veth1_to_batadv: entered allmulticast mode [ 555.172338][T11486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.248362][T11486] batadv_slave_1: entered allmulticast mode [ 555.286645][T11486] xfrm0: entered allmulticast mode [ 555.317726][T11486] veth0_to_hsr: entered allmulticast mode [ 555.366295][T11486] hsr_slave_0: entered allmulticast mode [ 555.397036][T11486] veth1_to_hsr: entered allmulticast mode [ 555.430632][T11486] hsr_slave_1: entered allmulticast mode [ 555.461761][T11486] hsr0: entered allmulticast mode [ 555.496459][T11486] veth1_virt_wifi: entered allmulticast mode [ 555.517817][T11486] veth0_virt_wifi: entered allmulticast mode [ 555.550134][T11486] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 555.588421][T11486] veth1_vlan: entered allmulticast mode [ 555.600657][T11518] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.607972][T11518] IPv6: NLM_F_CREATE should be set when creating new route [ 555.631074][T11486] veth0_vlan: entered allmulticast mode [ 555.684177][T11486] vlan0: entered allmulticast mode [ 555.705013][T11486] vlan1: entered allmulticast mode [ 555.724713][T11486] macvlan0: entered allmulticast mode [ 555.748466][T11486] macvlan1: entered allmulticast mode [ 555.768793][T11486] ipvlan0: entered allmulticast mode [ 555.774364][T11486] ipvlan1: entered allmulticast mode [ 555.790655][T11486] veth1_macvtap: entered allmulticast mode [ 555.806370][T11486] veth0_macvtap: entered allmulticast mode [ 555.824856][T11486] macvtap0: entered allmulticast mode [ 555.852290][T11486] macsec0: entered allmulticast mode [ 555.875221][T11486] geneve0: entered allmulticast mode [ 555.891856][T11486] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.922670][T11486] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.974748][T11486] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.994830][T11486] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.014632][T11486] geneve1: entered allmulticast mode [ 556.044725][T11486] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 556.143742][T11486] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 556.153658][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'. [ 556.162742][T11523] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 556.170355][T11523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.191764][T11486] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 556.203641][T11486] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 556.225315][T11486] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 556.258191][T11486] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 556.283299][ T8762] tipc: Disabling bearer [ 556.292730][ T8762] tipc: Disabling bearer [ 556.308294][ T8762] tipc: Left network mode [ 556.313013][T11518] lo: entered allmulticast mode [ 556.349367][T11518] tunl0: entered allmulticast mode [ 556.383211][T11518] gre0: entered allmulticast mode [ 556.424477][T11518] gretap0: entered allmulticast mode [ 556.450202][T11518] erspan0: entered allmulticast mode [ 556.487283][T11518] ip_vti0: entered allmulticast mode [ 556.508024][T11518] ip6_vti0: entered allmulticast mode [ 556.533751][T11518] sit0: entered allmulticast mode [ 556.557023][T11518] ip6tnl0: entered allmulticast mode [ 556.575015][T11518] ip6gre0: entered allmulticast mode [ 556.593181][T11518] ip6gretap0: entered allmulticast mode [ 556.621079][T11518] bridge0: entered allmulticast mode [ 556.638893][T11518] vcan0: entered allmulticast mode [ 556.654299][T11518] bond0: entered allmulticast mode [ 556.673234][T11518] team0: entered allmulticast mode [ 556.960488][T11518] dummy0: entered allmulticast mode [ 557.417921][T11518] nlmon0: entered allmulticast mode [ 557.442280][T11518] caif0: entered allmulticast mode [ 557.486660][T11518] batadv0: entered allmulticast mode [ 557.557868][T11518] vxcan0: entered allmulticast mode [ 557.630940][T11518] vxcan1: entered allmulticast mode [ 557.654837][T11518] veth0: entered allmulticast mode [ 558.115068][T11536] overlayfs: failed to resolve './file0': -2 [ 558.188701][T11518] veth1: entered allmulticast mode [ 558.295999][T11518] wg0: entered allmulticast mode [ 558.323991][T11518] wg1: entered allmulticast mode [ 558.347151][T11518] wg2: entered allmulticast mode [ 558.369559][T11518] veth0_to_bridge: entered allmulticast mode [ 558.421208][T11518] bridge_slave_0: entered allmulticast mode [ 558.617947][T11518] veth1_to_bridge: entered allmulticast mode [ 558.804340][T11518] bridge_slave_1: entered allmulticast mode [ 559.145797][T11518] veth0_to_bond: entered allmulticast mode [ 559.158975][T11518] bond_slave_0: entered allmulticast mode [ 559.231089][T11518] veth1_to_bond: entered allmulticast mode [ 560.196757][T11518] bond_slave_1: entered allmulticast mode [ 560.460299][T11518] veth0_to_team: entered allmulticast mode [ 560.532282][T11518] team_slave_0: entered allmulticast mode [ 560.637683][T11518] veth1_to_team: entered allmulticast mode [ 561.177166][T11518] team_slave_1: entered allmulticast mode [ 561.255646][T11518] veth0_to_batadv: entered allmulticast mode [ 561.371272][T11518] batadv_slave_0: entered allmulticast mode [ 561.478449][T11518] veth1_to_batadv: entered allmulticast mode [ 561.501655][T11518] batadv_slave_1: entered allmulticast mode [ 561.668543][T11518] xfrm0: entered allmulticast mode [ 561.677388][T11518] veth0_to_hsr: entered allmulticast mode [ 561.696084][T11518] hsr_slave_0: entered allmulticast mode [ 562.173538][T11518] veth1_to_hsr: entered allmulticast mode [ 562.210533][T11518] hsr_slave_1: entered allmulticast mode [ 562.443110][T11518] hsr0: entered allmulticast mode [ 562.908055][T11518] veth1_virt_wifi: entered allmulticast mode [ 563.122835][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.130585][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.139493][T11518] veth0_virt_wifi: entered allmulticast mode [ 563.165500][T11518] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 563.213408][T11518] veth1_vlan: entered allmulticast mode [ 563.231317][T11518] veth0_vlan: entered allmulticast mode [ 563.547079][T11518] vlan0: entered allmulticast mode [ 563.718554][T11518] macvlan0: entered allmulticast mode [ 563.895759][T11518] macvlan1: entered allmulticast mode [ 563.935333][T11518] ipvlan0: entered allmulticast mode [ 563.941071][T11518] ipvlan1: entered allmulticast mode [ 563.969514][T11518] veth1_macvtap: entered allmulticast mode [ 563.987199][T11518] veth0_macvtap: entered allmulticast mode [ 564.031564][T11518] macvtap0: entered allmulticast mode [ 564.059451][T11518] macsec0: entered allmulticast mode [ 564.107679][T11518] geneve0: entered allmulticast mode [ 564.148731][T11518] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.164380][T11518] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.173451][T11518] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.183349][T11518] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.192759][T11518] geneve1: entered allmulticast mode [ 564.206272][T11518] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 564.217149][T11518] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 564.228881][T11518] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 564.243897][T11518] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 564.259979][T11518] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 564.276162][T11518] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 564.286002][T11518] veth2: entered allmulticast mode [ 564.291416][T11518] veth3: entered allmulticast mode [ 564.297247][T11518] veth4: entered allmulticast mode [ 564.302699][T11518] veth5: entered allmulticast mode [ 564.344062][ T5839] wg1 speed is unknown, defaulting to 1000 [ 564.350371][ T5839] syz0: Port: 1 Link DOWN [ 564.388351][T11578] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 564.637531][T11587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 565.045110][T11597] x_tables: unsorted entry at hook 1 [ 565.098853][ T5904] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 565.123779][ T5904] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 565.140829][T11406] chnl_net:caif_netlink_parms(): no params data found [ 566.754962][ T8762] hsr_slave_0: left promiscuous mode [ 566.795880][ T8762] hsr_slave_1: left promiscuous mode [ 566.814901][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.836489][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.041219][ T8762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.048810][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.119798][ T8762] veth1_macvtap: left promiscuous mode [ 567.485115][ T30] audit: type=1326 audit(1752503839.367:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11614 comm="syz.6.1689" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2f9f8e929 code=0x0 [ 567.894533][ T8762] veth0_macvtap: left promiscuous mode [ 567.900550][ T8762] veth1_vlan: left promiscuous mode [ 567.907835][ T8762] veth0_vlan: left promiscuous mode [ 568.160122][ T30] audit: type=1804 audit(1752503840.087:898): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.1691" name="/newroot/27/file1" dev="fuse" ino=1 res=1 errno=0 [ 568.214990][ T30] audit: type=1800 audit(1752503840.087:899): pid=11627 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1691" name="/" dev="fuse" ino=1 res=0 errno=0 [ 570.840501][T11652] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 571.187331][ T8762] team0 (unregistering): Port device team_slave_1 removed [ 571.265898][T11657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1700'. [ 571.276574][ T8762] team0 (unregistering): Port device team_slave_0 removed [ 572.673879][T11652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 572.886211][T11653] bond1: (slave veth7): Enslaving as an active interface with a down link [ 572.969275][T11654] vlan1: entered allmulticast mode [ 572.977256][T11654] bond1: (slave vlan1): Opening slave failed [ 573.848539][T11681] netlink: 384 bytes leftover after parsing attributes in process `syz.6.1706'. [ 573.857870][T11681] netlink: 'syz.6.1706': attribute type 2 has an invalid length. [ 575.917245][ T30] audit: type=1326 audit(1752503847.847:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.040620][ T30] audit: type=1326 audit(1752503847.847:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.487746][ T30] audit: type=1326 audit(1752503847.847:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.509497][ T30] audit: type=1326 audit(1752503847.847:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.544798][ T30] audit: type=1326 audit(1752503847.847:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.585547][T11406] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.593059][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 576.603037][T11406] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.613867][T11406] bridge_slave_0: entered allmulticast mode [ 576.629507][ T30] audit: type=1326 audit(1752503847.847:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.631742][T11406] bridge_slave_0: entered promiscuous mode [ 576.685051][ T30] audit: type=1326 audit(1752503847.847:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.707636][ T30] audit: type=1326 audit(1752503847.847:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.731004][T11406] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.738906][T11406] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.752189][ T30] audit: type=1326 audit(1752503847.847:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 576.783686][T11406] bridge_slave_1: entered allmulticast mode [ 576.803067][T11406] bridge_slave_1: entered promiscuous mode [ 576.868616][ T30] audit: type=1326 audit(1752503847.847:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11692 comm="syz.6.1709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff2f9f8e929 code=0x7ffc0000 [ 577.077181][T11406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.117902][T11406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.176475][T11406] team0: Port device team_slave_0 added [ 578.197747][T11406] team0: Port device team_slave_1 added [ 579.230722][T11406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.253659][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.241878][T11406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.810505][T11406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.821401][T11406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.071423][T11406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.379555][T11406] hsr_slave_0: entered promiscuous mode [ 582.583061][T11406] hsr_slave_1: entered promiscuous mode [ 582.590707][T11406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 582.598773][T11406] Cannot create hsr debugfs directory [ 584.805280][T11772] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 586.061966][T11780] bio_check_eod: 2 callbacks suppressed [ 586.062010][T11780] syz.7.1731: attempt to access beyond end of device [ 586.062010][T11780] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 586.081300][T11780] gfs2: error -5 reading superblock [ 586.100022][T11406] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 586.798896][T11406] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 586.831976][T11406] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 586.955358][T11406] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 587.215790][T11406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.438439][T11406] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.453182][ T6936] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.460372][ T6936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.258154][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.265396][ T8762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.664146][T11820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input18 [ 591.442135][T11837] vlan0: entered promiscuous mode [ 591.447415][T11837] team0: entered promiscuous mode [ 591.452724][T11837] team_slave_0: entered promiscuous mode [ 591.532148][T11837] team_slave_1: entered promiscuous mode [ 591.662405][T11406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.755450][ T6920] kworker/u8:13 (6920) used greatest stack depth: 19912 bytes left [ 593.872627][T11406] veth0_vlan: entered promiscuous mode [ 593.915374][T11406] veth1_vlan: entered promiscuous mode [ 593.992055][T11406] veth0_macvtap: entered promiscuous mode [ 594.020640][T11406] veth1_macvtap: entered promiscuous mode [ 594.065733][T11406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.098926][T11406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.148106][T11406] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.026590][T11406] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.036358][T11406] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.046576][T11406] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.208038][T11877] wg1 speed is unknown, defaulting to 1000 [ 596.170566][T11887] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 596.190846][ T8768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.202335][ T8768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.434219][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.166711][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 599.012530][T11912] pimreg: entered allmulticast mode [ 599.059897][T11912] pimreg: left allmulticast mode [ 599.225586][T11916] syz.8.1766: attempt to access beyond end of device [ 599.225586][T11916] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 599.240202][T11916] gfs2: error -5 reading superblock [ 604.158153][T11966] overlayfs: failed to clone upperpath [ 604.586001][ T9470] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 605.365917][ T9470] usb 8-1: unable to get BOS descriptor or descriptor too short [ 605.376676][ T9470] usb 8-1: not running at top speed; connect to a high speed hub [ 605.388843][ T9470] usb 8-1: config 3 has an invalid interface number: 1 but max is 0 [ 605.397355][ T9470] usb 8-1: config 3 has no interface number 0 [ 605.403494][ T9470] usb 8-1: config 3 interface 1 has no altsetting 0 [ 605.414743][ T9470] usb 8-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d [ 605.424035][ T9470] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.432111][ T9470] usb 8-1: Product: syz [ 605.436537][ T9470] usb 8-1: Manufacturer: syz [ 605.441166][ T9470] usb 8-1: SerialNumber: syz [ 606.622864][ T9470] cx231xx 8-1:3.1: New device syz syz @ 12 Mbps (1b80:e421) with 1 interfaces [ 606.746097][ T9470] cx231xx 8-1:3.1: Not found matching IAD interface [ 606.765598][ T9470] usb 8-1: USB disconnect, device number 3 [ 609.904931][T12014] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.912746][T12014] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.917812][T12014] bridge0: entered allmulticast mode [ 611.154041][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1801'. [ 611.174696][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1801'. [ 612.464074][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 612.464116][ T30] audit: type=1107 audit(1752503884.109:934): pid=12036 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 613.213612][ T30] audit: type=1326 audit(1752503885.139:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.274597][ T30] audit: type=1326 audit(1752503885.139:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.299254][ T30] audit: type=1326 audit(1752503885.169:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.321932][ T30] audit: type=1326 audit(1752503885.169:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.344356][ T9471] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 613.344555][ T30] audit: type=1326 audit(1752503885.169:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.377543][ T30] audit: type=1326 audit(1752503885.169:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.399459][ T30] audit: type=1326 audit(1752503885.169:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.432023][ T30] audit: type=1326 audit(1752503885.169:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.455411][ T30] audit: type=1326 audit(1752503885.169:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12053 comm="syz.8.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f721ad8e929 code=0x7ffc0000 [ 613.508748][T12063] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad) [ 613.515704][T12063] PKCS7: Only support pkcs7_signedData type [ 613.526349][ T9471] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.571716][ T9471] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 613.601441][ T9471] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.623927][ T9471] usb 8-1: Product: syz [ 613.631823][ T9471] usb 8-1: Manufacturer: syz [ 613.637285][ T9471] usb 8-1: SerialNumber: syz [ 613.644124][T12067] syz.2.1817(12067): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 613.653440][ T9471] usb 8-1: config 0 descriptor?? [ 613.692793][ T9471] pegasus_notetaker 8-1:0.0: Invalid number of endpoints [ 613.704056][ T9471] pegasus_notetaker 8-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 614.012776][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1819'. [ 615.169904][ T5924] usb 8-1: USB disconnect, device number 4 [ 618.302561][T12097] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1826'. [ 624.442750][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.450019][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.488135][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 624.488157][ T30] audit: type=1800 audit(1752503896.408:963): pid=12148 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.1838" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 627.303358][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 636.770302][T12225] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 637.013722][T12230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1862'. [ 638.851335][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1867'. [ 639.120071][ T7142] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 639.280120][ T7142] usb 9-1: Using ep0 maxpacket: 32 [ 639.306414][ T7142] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 639.329827][ T7142] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.353707][ T7142] usb 9-1: Product: syz [ 639.357944][ T7142] usb 9-1: Manufacturer: syz [ 639.372232][ T7142] usb 9-1: SerialNumber: syz [ 639.403937][ T7142] usb 9-1: config 0 descriptor?? [ 639.441122][ T7142] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 640.194922][T12269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 640.226012][ T7142] gspca_stk1135: reg_w 0x0 err -110 [ 640.251774][ T7142] gspca_stk1135: serial bus timeout: status=0x00 [ 640.743112][ T7142] gspca_stk1135: Sensor write failed [ 640.748503][ T7142] gspca_stk1135: serial bus timeout: status=0x00 [ 640.840720][ T7142] gspca_stk1135: Sensor write failed [ 640.846114][ T7142] gspca_stk1135: serial bus timeout: status=0x00 [ 640.977578][ T7142] gspca_stk1135: Sensor read failed [ 640.983301][ T7142] gspca_stk1135: serial bus timeout: status=0x00 [ 640.989684][ T7142] gspca_stk1135: Sensor read failed [ 641.000690][ T7142] gspca_stk1135: Detected sensor type unknown (0x0) [ 641.007548][ T7142] gspca_stk1135: serial bus timeout: status=0x00 [ 641.015341][ T7142] gspca_stk1135: Sensor read failed [ 641.030286][ T7142] gspca_stk1135: serial bus timeout: status=0x00 [ 641.043130][ T7142] gspca_stk1135: Sensor read failed [ 641.048624][ T7142] gspca_stk1135: serial bus timeout: status=0x00 [ 641.065577][ T7142] gspca_stk1135: Sensor write failed [ 641.075779][ T7142] gspca_stk1135: serial bus timeout: status=0x00 [ 641.103396][ T7142] gspca_stk1135: Sensor write failed [ 641.120020][ T7142] stk1135 9-1:0.0: probe with driver stk1135 failed with error -110 [ 641.515608][T12281] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1875'. [ 643.111728][ T7142] usb 9-1: USB disconnect, device number 2 [ 643.221309][T12297] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1882'. [ 643.312222][T12297] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1882'. [ 643.663430][ T30] audit: type=1326 audit(1752503915.586:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12304 comm="syz.8.1886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f721ad8e929 code=0x0 [ 649.423313][T12355] overlay: Unknown parameter 'fowner<00000000000000000000' [ 655.845281][T12406] netlink: 'syz.8.1915': attribute type 12 has an invalid length. [ 657.988272][T12426] netlink: 'syz.2.1921': attribute type 10 has an invalid length. [ 658.012690][T12426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1921'. [ 658.096141][T12428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 658.486867][T12426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.016004][T12426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.043806][T12426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.059310][T12426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.124810][T12426] team0: Port device geneve0 added [ 659.223831][T12431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 659.261502][T12431] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 659.458299][T12448] overlay: filesystem on ./file1 not supported [ 660.035303][T12458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.604500][T12469] xt_hashlimit: max too large, truncated to 1048576 [ 662.702350][T12472] Invalid source name [ 662.706586][T12472] UBIFS error (pid: 12472): cannot open "/dev/sg0", error -22 [ 663.096909][T12475] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 663.197500][T12476] netlink: 'syz.1.1935': attribute type 16 has an invalid length. [ 663.228013][T12476] netlink: 'syz.1.1935': attribute type 3 has an invalid length. [ 663.258379][T12476] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1935'. [ 664.692134][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'. [ 664.729971][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1942'. [ 664.739490][T12494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1942'. [ 664.752554][T12494] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1942'. [ 664.923400][ T5924] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 665.104166][ T5924] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 665.117577][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.125653][ T5924] usb 9-1: Product: syz [ 665.130199][ T5924] usb 9-1: Manufacturer: syz [ 665.147539][ T5924] usb 9-1: SerialNumber: syz [ 665.166345][ T5924] usb 9-1: config 0 descriptor?? [ 666.001240][ T5924] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 667.316851][T12516] NILFS (nullb0): couldn't find nilfs on the device [ 668.841281][ T5924] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 668.863988][ T5924] usb 9-1: USB disconnect, device number 3 [ 672.222688][T12553] bridge_slave_0: left allmulticast mode [ 672.490669][T12553] bridge_slave_0: left promiscuous mode [ 672.507426][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.276093][T12553] bridge_slave_1: left allmulticast mode [ 674.281769][T12553] bridge_slave_1: left promiscuous mode [ 674.338717][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.427463][T11408] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.437677][T11408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.445637][T11408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.456140][T11408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.465465][T11408] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.498628][T12553] bond0: (slave bond_slave_0): Releasing backup interface [ 674.535481][T12553] bond0: (slave bond_slave_1): Releasing backup interface [ 674.569857][T12553] team0: Port device team_slave_0 removed [ 674.584802][T12553] team0: Port device team_slave_1 removed [ 674.590981][T12553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.611169][T12553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.623102][T12553] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.681940][T12553] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.695742][T12553] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.707638][T12553] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.730746][T12553] team0: Port device geneve0 removed [ 674.763032][T12566] team0: Mode changed to "loadbalance" [ 674.809673][T12582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1963'. [ 675.126874][ T8768] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.447278][ T8768] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.107734][T12580] wg1 speed is unknown, defaulting to 1000 [ 676.363958][ T8768] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.229772][T11408] Bluetooth: hci3: command tx timeout [ 677.442206][ T8768] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.468551][T12611] 9pnet_fd: Insufficient options for proto=fd [ 677.725897][T12617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1976'. [ 679.254755][T11408] Bluetooth: hci3: command tx timeout [ 679.605523][ T8768] bridge_slave_1: left allmulticast mode [ 679.616964][ T8768] bridge_slave_1: left promiscuous mode [ 679.622721][ T8768] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.697098][T12637] syz.7.1980: attempt to access beyond end of device [ 679.697098][T12637] loop15: rw=0, sector=0, nr_sectors = 1 limit=0 [ 679.710784][T12637] FAT-fs (loop15): unable to read boot sector [ 680.464088][ T8768] bridge_slave_0: left allmulticast mode [ 680.475067][ T8768] bridge_slave_0: left promiscuous mode [ 680.480917][ T8768] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.481734][T11408] Bluetooth: hci3: command tx timeout [ 683.565634][T11408] Bluetooth: hci3: command tx timeout [ 683.571799][T12658] overlayfs: failed to clone upperpath [ 684.888500][ T8768] bond1 (unregistering): (slave vlan2): Releasing active interface [ 684.939542][ T8768] team0: Port device geneve0 removed [ 685.131965][ T8768] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.142892][ T8768] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.154769][ T8768] bond0 (unregistering): Released all slaves [ 685.273076][ T8768] bond1 (unregistering): Released all slaves [ 685.391092][ T8768] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 685.402377][ T8768] bond2 (unregistering): Released all slaves [ 685.424610][T12668] netlink: 176 bytes leftover after parsing attributes in process `syz.8.1986'. [ 685.454058][T12580] chnl_net:caif_netlink_parms(): no params data found [ 685.964888][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.983788][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.157959][T12580] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.165611][T12580] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.173259][T12580] bridge_slave_0: entered allmulticast mode [ 686.182341][T12580] bridge_slave_0: entered promiscuous mode [ 686.192417][T12580] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.200190][T12580] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.207793][T12580] bridge_slave_1: entered allmulticast mode [ 686.216652][T12580] bridge_slave_1: entered promiscuous mode [ 686.634332][T12688] xt_connbytes: Forcing CT accounting to be enabled [ 686.641141][T12688] Cannot find set identified by id 0 to match [ 686.864704][T12580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.899505][T12580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.132616][T12693] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1994'. [ 687.147293][T12580] team0: Port device team_slave_0 added [ 687.257424][T12580] team0: Port device team_slave_1 added [ 687.301910][T12693] netlink: 129704 bytes leftover after parsing attributes in process `syz.2.1994'. [ 687.376014][T12690] kvm: kvm [12689]: vcpu1, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80 [ 687.479992][T12690] kvm: kvm [12689]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x80 [ 688.391503][T12580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.398657][T12580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 688.424768][T12580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.456842][T12580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.463852][T12580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 689.335945][T12580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.714924][T12580] hsr_slave_0: entered promiscuous mode [ 690.721759][T12580] hsr_slave_1: entered promiscuous mode [ 690.734481][T12580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 690.742608][T12580] Cannot create hsr debugfs directory [ 690.749721][ T8768] tipc: Disabling bearer [ 690.760197][ T8768] tipc: Left network mode [ 690.900556][T12717] trusted_key: syz.1.2002 sent an empty control message without MSG_MORE. [ 692.253399][ T8768] hsr_slave_0: left promiscuous mode [ 692.259642][ T8768] hsr_slave_1: left promiscuous mode [ 692.265495][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.274041][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.282051][ T8768] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.291433][ T8768] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.315067][ T8768] veth1_macvtap: left promiscuous mode [ 692.320951][ T8768] veth0_macvtap: left promiscuous mode [ 692.326901][ T8768] veth1_vlan: left promiscuous mode [ 692.332234][ T8768] veth0_vlan: left promiscuous mode [ 692.792217][ T8768] team0 (unregistering): Port device team_slave_1 removed [ 692.835880][ T8768] team0 (unregistering): Port device team_slave_0 removed [ 693.313021][T12580] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 693.325253][T12580] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 693.335664][T12580] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 693.350198][T12580] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 693.505700][T12580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.525713][T12580] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.540414][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.547647][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.570080][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.577325][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.813557][T12580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.040395][T12580] veth0_vlan: entered promiscuous mode [ 694.061285][T12580] veth1_vlan: entered promiscuous mode [ 694.091202][T12580] veth0_macvtap: entered promiscuous mode [ 694.102839][T12580] veth1_macvtap: entered promiscuous mode [ 694.122644][T12580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.140786][T12580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.152842][T12580] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.163681][T12580] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.172589][T12580] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.181336][T12580] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.255768][ T8768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.263996][ T8768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.295031][ T8768] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.303859][ T8768] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.437730][T12740] netfs: Couldn't get user pages (rc=-14) [ 694.446834][T12748] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 696.897814][ T6934] kworker/u8:21 (6934) used greatest stack depth: 19816 bytes left [ 698.379510][ T6926] kworker/u8:15 (6926) used greatest stack depth: 19576 bytes left [ 700.670503][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 700.717450][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2019'. [ 700.875448][T12808] IPVS: set_ctl: invalid protocol: 58 172.20.20.67:20001 [ 700.922155][T12812] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 700.929525][T12812] overlayfs: failed to set xattr on upper [ 700.935307][T12812] overlayfs: ...falling back to redirect_dir=nofollow. [ 700.942975][T12812] overlayfs: ...falling back to index=off. [ 700.949212][T12812] overlayfs: ...falling back to uuid=null. [ 701.640621][T12815] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 703.292299][T11408] Bluetooth: hci3: command tx timeout [ 713.303239][T12899] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 12899 comm: syz.2.2044) [ 713.393179][ T30] audit: type=1800 audit(1752503985.237:965): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2044" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=39017 res=0 errno=0 [ 713.573530][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 721.511568][T12929] Set syz1 is full, maxelem 65536 reached [ 722.008690][T12943] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2055'. [ 729.139448][T12982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.487192][T12990] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2071'. [ 730.210856][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.253410][T12990] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2071'. [ 731.156909][T13006] tipc: Enabling of bearer rejected, failed to enable media [ 731.446134][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 731.458568][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 731.466712][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 731.475359][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 731.484256][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 731.695776][T13015] wg1 speed is unknown, defaulting to 1000 [ 733.235509][ T1165] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.259448][T13041] tipc: Started in network mode [ 733.863194][T11408] Bluetooth: hci4: command tx timeout [ 734.169635][T13041] tipc: Node identity f65296011526, cluster identity 4711 [ 734.307032][T13041] tipc: Enabled bearer , priority 0 [ 734.388510][T13047] ptrace attach of "./syz-executor exec"[11406] was attempted by "./syz-executor exec"[13047] [ 734.399544][T13034] syzkaller0: entered promiscuous mode [ 734.411427][T13034] syzkaller0: entered allmulticast mode [ 734.917651][ T1165] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.136952][T13041] tipc: Resetting bearer [ 735.168308][T13033] tipc: Resetting bearer [ 735.237114][T13033] tipc: Disabling bearer [ 735.319262][ T1165] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.441524][T11408] Bluetooth: hci4: command tx timeout [ 736.803779][ T1165] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.028985][T13015] chnl_net:caif_netlink_parms(): no params data found [ 739.120861][T11408] Bluetooth: hci4: command tx timeout [ 739.565914][T13078] netlink: 'syz.1.2094': attribute type 1 has an invalid length. [ 739.652948][T13087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2094'. [ 740.914613][T13015] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.921819][T13015] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.958087][T13015] bridge_slave_0: entered allmulticast mode [ 740.971000][T13015] bridge_slave_0: entered promiscuous mode [ 741.037031][T13015] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.064328][T13015] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.082977][T13015] bridge_slave_1: entered allmulticast mode [ 741.667891][ T5847] Bluetooth: hci4: command tx timeout [ 741.742714][T13015] bridge_slave_1: entered promiscuous mode [ 743.170387][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 743.224241][ T1165] bridge_slave_1: left allmulticast mode [ 743.233306][ T1165] bridge_slave_1: left promiscuous mode [ 743.239244][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.257056][ T1165] bridge_slave_0: left allmulticast mode [ 743.277249][ T1165] bridge_slave_0: left promiscuous mode [ 743.714630][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.491406][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.519316][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.576857][ T1165] bond0 (unregistering): Released all slaves [ 746.797828][T13015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.811508][T13015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.353855][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.367642][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.524653][ T30] audit: type=1326 audit(1752504019.433:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 747.633088][ T30] audit: type=1326 audit(1752504019.473:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 747.655109][ T30] audit: type=1326 audit(1752504019.503:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 747.684106][ T30] audit: type=1326 audit(1752504019.503:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 747.777925][ T30] audit: type=1326 audit(1752504019.603:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 747.862186][ T30] audit: type=1326 audit(1752504019.603:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 747.887744][ T30] audit: type=1326 audit(1752504019.603:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 747.929758][ T30] audit: type=1326 audit(1752504019.603:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 748.198384][ T30] audit: type=1326 audit(1752504019.633:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 748.230313][ T30] audit: type=1326 audit(1752504019.633:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13157 comm="syz.1.2113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb8938e929 code=0x7ffc0000 [ 749.208061][T13015] team0: Port device team_slave_0 added [ 749.225085][T13015] team0: Port device team_slave_1 added [ 751.202192][T13189] tipc: Started in network mode [ 751.213444][T13189] tipc: Node identity 32fff9782165, cluster identity 4711 [ 751.237056][T13189] tipc: Enabled bearer , priority 0 [ 751.245246][T13015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.252323][T13015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.278886][T13015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.292658][T13191] syzkaller0: entered promiscuous mode [ 751.301884][T13191] syzkaller0: entered allmulticast mode [ 751.401819][T13195] tipc: Resetting bearer [ 751.419243][T13178] tipc: Resetting bearer [ 751.606026][T13178] tipc: Disabling bearer [ 751.716361][T13204] overlayfs: failed to clone upperpath [ 751.739069][ T1165] hsr_slave_0: left promiscuous mode [ 751.760637][ T1165] hsr_slave_1: left promiscuous mode [ 751.794105][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.801602][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.855013][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.863759][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.916915][ T1165] veth1_macvtap: left promiscuous mode [ 751.984217][ T1165] veth0_macvtap: left promiscuous mode [ 751.990592][ T1165] veth1_vlan: left promiscuous mode [ 752.003972][ T1165] veth0_vlan: left promiscuous mode [ 754.018536][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 754.068043][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 754.536877][T13015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.550277][T13015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 754.592514][T13015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.722476][T13015] hsr_slave_0: entered promiscuous mode [ 754.735056][T13015] hsr_slave_1: entered promiscuous mode [ 754.758403][T13015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 754.803185][T13015] Cannot create hsr debugfs directory [ 755.104978][T13226] tipc: Enabled bearer , priority 0 [ 756.408806][ T9471] tipc: Node number set to 3816068609 [ 759.389181][T13233] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 759.398636][T13233] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 759.408294][T13233] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 759.411068][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 759.411088][ T30] audit: type=1800 audit(1752504030.305:983): pid=13233 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2133" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 759.517225][T13233] syz.8.2133 (13233) used greatest stack depth: 18392 bytes left [ 759.586828][T13253] vlan1: entered promiscuous mode [ 759.592238][T13253] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 759.600244][T13253] vlan1: entered allmulticast mode [ 762.854066][T13015] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 763.501650][T13015] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 763.577394][T13015] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 763.729486][T13015] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 764.770084][T13015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.877638][T13015] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.818537][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.825745][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.836049][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.843267][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.878781][T13331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.814684][T13015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 768.142975][T13015] veth0_vlan: entered promiscuous mode [ 768.171974][T13015] veth1_vlan: entered promiscuous mode [ 768.276338][T13359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2154'. [ 769.448732][T13015] veth0_macvtap: entered promiscuous mode [ 769.459860][T13015] veth1_macvtap: entered promiscuous mode [ 769.481763][T13015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.528491][T13015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.570339][T13015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.593679][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2155'. [ 769.619288][T13015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.661250][T13015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.696875][ T9471] IPVS: starting estimator thread 0... [ 769.727561][T13015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.813591][T13371] IPVS: using max 28 ests per chain, 67200 per kthread [ 770.947689][ T8768] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.990021][ T8768] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.073166][ T9466] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 771.107394][ T8765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.133426][ T8765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.257341][ T9466] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 771.296779][ T9466] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 771.331962][ T9466] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 771.363838][ T9466] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 771.421060][ T9466] usb 9-1: SerialNumber: syz [ 772.010385][ T9466] usb 9-1: 0:2 : does not exist [ 772.163942][ T9466] usb 9-1: USB disconnect, device number 4 [ 773.379311][T13417] ptrace attach of "./syz-executor exec"[13418] was attempted by "./syz-executor exec"[13417] [ 778.623449][T13440] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 780.842217][T13460] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 780.849804][ T9466] IPVS: starting estimator thread 0... [ 780.973251][T13471] IPVS: using max 34 ests per chain, 81600 per kthread [ 780.978787][T13474] loop2: detected capacity change from 0 to 7 [ 781.045854][T13474] Dev loop2: unable to read RDB block 7 [ 781.051868][T13474] loop2: AHDI p1 p2 p3 [ 781.056565][T13474] loop2: partition table partially beyond EOD, truncated [ 781.065899][T13474] loop2: p1 start 1601398130 is beyond EOD, truncated [ 781.072884][T13474] loop2: p2 start 1702059890 is beyond EOD, truncated [ 786.094821][T13517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2186'. [ 786.136838][T13516] xt_nat: multiple ranges no longer supported [ 787.173779][T13523] orangefs_mount: mount request failed with -4 [ 788.663584][T13524] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 788.739958][T13517] macvlan3: entered promiscuous mode [ 788.746075][T13517] macvlan3: entered allmulticast mode [ 788.752259][T13517] bond4: entered promiscuous mode [ 788.854154][T13517] bridge3: entered promiscuous mode [ 788.871788][T13517] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 789.097985][T13517] bond4: left promiscuous mode [ 789.102918][T13517] bridge3: left promiscuous mode [ 791.754928][T13555] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 791.815118][T13555] kvm: pic: level sensitive irq not supported [ 791.815236][T13555] kvm: pic: non byte read [ 791.844534][T13555] kvm: pic: level sensitive irq not supported [ 791.847210][T13555] kvm: pic: non byte read [ 791.909829][T13555] kvm: pic: level sensitive irq not supported [ 791.910030][T13555] kvm: pic: non byte read [ 792.014479][T13555] kvm: pic: level sensitive irq not supported [ 792.014611][T13555] kvm: pic: non byte read [ 792.204325][T13555] kvm: pic: level sensitive irq not supported [ 792.204837][T13555] kvm: pic: non byte read [ 792.988834][ T5934] libceph: connect (1)[c::]:6789 error -101 [ 793.011887][ T5934] libceph: mon0 (1)[c::]:6789 connect error [ 793.225787][T13573] ceph: No mds server is up or the cluster is laggy [ 794.191456][ T7142] libceph: connect (1)[c::]:6789 error -101 [ 794.197622][ T7142] libceph: mon0 (1)[c::]:6789 connect error [ 797.321886][T11408] Bluetooth: hci1: command 0x0406 tx timeout [ 799.399555][T13631] tipc: Started in network mode [ 799.426201][T13631] tipc: Node identity 8aecf8a82813, cluster identity 4711 [ 799.443359][T13631] tipc: Enabled bearer , priority 0 [ 799.464652][T13631] syzkaller0: entered promiscuous mode [ 799.480575][T13631] syzkaller0: entered allmulticast mode [ 800.674939][ T5924] tipc: Node number set to 2734684328 [ 801.357814][T13636] tipc: Resetting bearer [ 801.423546][T13629] tipc: Resetting bearer [ 801.620728][T13629] tipc: Disabling bearer [ 801.957876][T13659] (syz.7.2212,13659,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 801.967022][T13659] (syz.7.2212,13659,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 804.176228][T13682] macvtap1: entered allmulticast mode [ 804.224516][T13686] tipc: Enabled bearer , priority 0 [ 804.287822][T13688] vlan2: entered promiscuous mode [ 804.335768][T13688] bond0: entered promiscuous mode [ 804.430819][T13686] syzkaller0: entered promiscuous mode [ 804.446967][T13686] syzkaller0: entered allmulticast mode [ 804.631457][T13686] tipc: Resetting bearer [ 804.701916][T13685] tipc: Resetting bearer [ 804.783557][T13685] tipc: Disabling bearer [ 808.837811][T13739] wg1 speed is unknown, defaulting to 1000 [ 809.423753][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.430145][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.503304][T13756] ptrace attach of "./syz-executor exec"[13757] was attempted by "./syz-executor exec"[13756] [ 814.228308][T13784] overlayfs: failed to clone upperpath [ 814.749177][T13796] program syz.7.2240 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 818.168908][T13821] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 824.927803][T13869] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.2256'. [ 825.610602][T13849] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.619881][T13849] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.628691][T13849] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.637733][T13849] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 825.706454][T13849] vxlan0: entered promiscuous mode [ 825.721924][T13849] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 826.310197][T13882] syz.8.2258: attempt to access beyond end of device [ 826.310197][T13882] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 826.331511][T13882] (syz.8.2258,13882,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 826.340799][T13882] (syz.8.2258,13882,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 826.348622][T13882] (syz.8.2258,13882,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 826.358860][T13882] (syz.8.2258,13882,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 829.308453][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2263'. [ 830.653164][ T5924] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 831.349531][ T5924] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 832.829065][ T5924] usb 9-1: string descriptor 0 read error: -71 [ 832.864523][ T5924] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 833.036662][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 833.073331][ T5924] usb 9-1: can't set config #1, error -71 [ 833.123201][ T5924] usb 9-1: USB disconnect, device number 5 [ 839.213592][T13976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 839.213598][T13965] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 843.802896][T14017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 844.498473][T14017] ipvlan2: entered promiscuous mode [ 848.566227][T14052] binder: 14050:14052 ioctl c0306201 0 returned -14 [ 848.599042][T14052] binder: 14050:14052 ioctl 4018620d 0 returned -22 [ 848.715015][T14052] binder: 14050:14052 ioctl c0306201 0 returned -14 [ 849.984142][T14069] tipc: Enabled bearer , priority 0 [ 850.002476][T14069] syzkaller0: entered promiscuous mode [ 850.043193][T14069] syzkaller0: entered allmulticast mode [ 850.157085][T14069] tipc: Resetting bearer [ 850.585711][T14068] tipc: Resetting bearer [ 850.838580][T14068] tipc: Disabling bearer [ 853.576910][T14107] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 857.033190][T11408] Bluetooth: hci4: command 0x0406 tx timeout [ 857.116116][T14152] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2320'. [ 857.203321][ T9470] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 857.930405][T14152] netlink: 'syz.7.2320': attribute type 13 has an invalid length. [ 857.943346][ T9470] usb 4-1: config index 0 descriptor too short (expected 31, got 27) [ 857.970513][ T9470] usb 4-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 858.031955][ T9470] usb 4-1: config 1 interface 0 has no altsetting 0 [ 858.051637][T14152] gretap0: refused to change device tx_queue_len [ 858.059354][T14152] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 858.060770][ T9470] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 858.218650][ T9470] usb 4-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 858.304610][ T9470] usb 4-1: Product: syz [ 858.308862][ T9470] usb 4-1: Manufacturer: syz [ 858.360067][ T9470] usb 4-1: SerialNumber: syz [ 859.895614][ T9470] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 860.017237][ T9470] usb 4-1: USB disconnect, device number 3 [ 860.027039][ T9470] usblp0: removed [ 863.632730][T14207] ipvlan2: entered promiscuous mode [ 863.641858][T14207] bridge0: port 2(ipvlan2) entered blocking state [ 863.649165][T14207] bridge0: port 2(ipvlan2) entered disabled state [ 863.657582][T14207] ipvlan2: entered allmulticast mode [ 863.678994][T14207] ipvlan2: left allmulticast mode [ 864.155377][T14209] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2331'. [ 865.488558][T14220] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 867.104546][T14235] wg1 speed is unknown, defaulting to 1000 [ 870.217136][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.223834][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.011936][T14305] pimreg: entered allmulticast mode [ 875.043617][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2361'. [ 875.445413][T14327] [U] M٭Q& K4 [ 875.479425][ T5847] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 876.058825][T14322] [U] [)U}ǔJϬ}NSEF* NZF[F_H'W"X~;VA)^`1C':ZFOB *?۟CZS<8ZNѷјEY TT<$CRƖ/VG {Y~Y5\;ƃZDXYA"XIF{`T%`RZTA 5ֲڞFJ՘M_ϖ~ 2L1 ]ү$R0-<`* ܠ̎K}2 rejected, failed to enable media [ 893.294479][T14439] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 899.022523][ T7142] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 901.033619][ T7142] usb 9-1: Using ep0 maxpacket: 8 [ 901.048069][ T7142] usb 9-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 901.198117][ T7142] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 901.393253][ T7142] usb 9-1: Product: syz [ 901.400902][ T7142] usb 9-1: Manufacturer: syz [ 901.431278][ T7142] usb 9-1: SerialNumber: syz [ 901.465532][ T7142] usb 9-1: config 0 descriptor?? [ 902.534465][ T7142] usb 9-1: USB disconnect, device number 6 [ 904.339501][T14522] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 904.348538][ T30] audit: type=1804 audit(1752504175.255:985): pid=14522 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2419" name="file0" dev="tmpfs" ino=2879 res=1 errno=0 [ 904.447763][T14522] ref_ctr increment failed for inode: 0xb3f offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88804407da00 [ 905.341292][T14539] tipc: Enabling of bearer rejected, failed to enable media [ 909.723530][ T7142] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 910.328801][T14594] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.844913][ T7142] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 910.919778][ T7142] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 910.943700][ T7142] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 910.958071][ T7142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 910.992396][ T7142] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 911.231081][ T7142] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 911.240556][ T7142] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 911.452614][T14608] MTD: Couldn't look up '/dev/nullb0': -15 [ 911.459772][T14608] /dev/nullb0: Can't lookup blockdev [ 912.233404][ T7142] usb 4-1: Product: syz [ 912.241642][ T7142] usb 4-1: Manufacturer: syz [ 912.256342][ T7142] usb 4-1: can't set config #1, error -71 [ 912.268109][ T7142] usb 4-1: USB disconnect, device number 4 [ 927.951745][T14756] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 931.340922][T14783] ptrace attach of "./syz-executor exec"[14784] was attempted by "./syz-executor exec"[14783] [ 931.845029][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.851390][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.975318][T14777] tipc: Enabling of bearer rejected, failed to enable media [ 932.008446][T14785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2476'. [ 932.053401][T14785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2476'. [ 932.062449][T14785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2476'. [ 932.118515][T14785] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2476'. [ 933.827984][T14818] kernel read not supported for file /7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 14818 comm: syz.2.2481) [ 933.845938][ T30] audit: type=1800 audit(1752504204.765:986): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2481" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=43925 res=0 errno=0 [ 933.876935][ C0] vkms_vblank_simulate: vblank timer overrun [ 934.130670][T14819] wg1 speed is unknown, defaulting to 1000 [ 934.942518][T14825] capability: warning: `syz.2.2484' uses 32-bit capabilities (legacy support in use) [ 936.491708][T14831] vlan0: entered promiscuous mode [ 936.606097][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 936.622912][T14831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 940.794425][T14880] overlayfs: failed to clone upperpath [ 943.392457][ T1082] Bluetooth: hci3: Frame reassembly failed (-84) [ 943.400069][ T1082] Bluetooth: hci3: Frame reassembly failed (-84) [ 945.333241][ T5847] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 948.908288][T14931] netlink: 'syz.1.2514': attribute type 10 has an invalid length. [ 949.058144][T14931] bridge0: left allmulticast mode [ 951.046047][T14931] bridge0: entered allmulticast mode [ 951.069213][T14931] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 952.301095][T14960] overlayfs: failed to resolve './file1': -2 [ 953.536402][T14968] veth1_macvtap: left promiscuous mode [ 953.542737][T14968] macsec0: entered allmulticast mode [ 953.641551][T14969] veth1_macvtap: entered promiscuous mode [ 953.647492][T14969] veth1_macvtap: entered allmulticast mode [ 953.653861][T14969] macsec0: left allmulticast mode [ 953.658943][T14969] veth1_macvtap: left allmulticast mode [ 957.531533][T14992] netlink: 'syz.3.2529': attribute type 2 has an invalid length. [ 957.539352][T14992] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2529'. [ 958.366158][ T7142] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 960.293724][ T7142] usb 8-1: Using ep0 maxpacket: 16 [ 960.659131][ T7142] usb 8-1: unable to get BOS descriptor or descriptor too short [ 960.669276][ T7142] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.721407][ T7142] usb 8-1: config 0 has no interfaces? [ 961.277343][ T7142] usb 8-1: New USB device found, idVendor=0c88, idProduct=0021, bcdDevice=19.47 [ 961.440566][T15028] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 961.560605][ T7142] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.568722][ T7142] usb 8-1: Product: syz [ 961.572913][ T7142] usb 8-1: Manufacturer: syz [ 961.577695][ T7142] usb 8-1: SerialNumber: syz [ 961.589040][ T7142] usb 8-1: config 0 descriptor?? [ 961.603519][ T7142] usb 8-1: can't set config #0, error -71 [ 961.626319][ T7142] usb 8-1: USB disconnect, device number 5 [ 966.205844][T15067] tipc: Enabled bearer , priority 0 [ 966.240078][T15067] syzkaller0: entered promiscuous mode [ 966.246661][T15067] syzkaller0: entered allmulticast mode [ 966.322891][T15074] tipc: Resetting bearer [ 966.330814][T15075] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 966.345156][T15075] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.352954][T15075] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.391378][T15075] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.398711][T15075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.406319][T15075] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.413580][T15075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.469130][T15075] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 966.555760][T15065] tipc: Resetting bearer [ 966.579223][T15065] tipc: Disabling bearer [ 967.375710][T15076] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 967.411018][T15076] qnx6: wrong signature (magic) in superblock #1. [ 967.418570][T15076] qnx6: unable to read the first superblock [ 968.703448][T15084] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 969.844112][T15102] netlink: 'syz.8.2561': attribute type 1 has an invalid length. [ 970.465795][T15102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 970.540693][T15104] bond1: (slave veth3): Enslaving as an active interface with a down link [ 970.684170][T15107] bond1: (slave veth0_to_bond): making interface the new active one [ 970.703982][T15107] veth0_to_bond: entered promiscuous mode [ 970.714674][T15107] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 970.833484][T15118] overlayfs: failed to clone lowerpath [ 971.509415][T15110] vlan2: entered allmulticast mode [ 971.623885][T15110] veth1: entered allmulticast mode [ 971.650416][T15110] veth1: entered promiscuous mode [ 971.682428][T15110] veth1: left promiscuous mode [ 971.854318][T15110] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 972.761725][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 972.768213][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 973.800148][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 973.806304][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 974.313705][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 974.331404][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 974.441251][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2572'. [ 974.450917][T15146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2572'. [ 975.226127][T15127] ceph: No mds server is up or the cluster is laggy [ 982.593225][T15192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 984.505818][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2588'. [ 984.573706][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2588'. [ 985.427820][ T30] audit: type=1800 audit(1752504256.335:987): pid=15216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.2590" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 985.457332][T15222] mmap: syz.2.2592 (15222): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 985.534413][T15216] syz.7.2590: attempt to access beyond end of device [ 985.534413][T15216] nbd7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 985.547863][T15216] gfs2: error -5 reading superblock [ 987.057141][T15221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 987.700903][T15235] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 987.965503][T15235] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 988.224314][T15235] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 988.475148][T15235] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 988.564976][T15235] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 988.584382][T15235] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 989.129572][T15246] netlink: 'syz.2.2598': attribute type 10 has an invalid length. [ 989.150349][T15235] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 989.198659][T15235] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 990.349454][T15246] bridge0: entered promiscuous mode [ 990.395896][T15246] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 990.479908][T15253] ntfs3(nullb0): Primary boot signature is not NTFS. [ 990.553746][T15253] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 993.100479][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.107038][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.288563][ T7142] libceph: connect (1)[c::]:6789 error -101 [ 994.295059][ T7142] libceph: mon0 (1)[c::]:6789 connect error [ 994.648854][ T7142] libceph: connect (1)[c::]:6789 error -101 [ 994.770430][ T7142] libceph: mon0 (1)[c::]:6789 connect error [ 994.902437][T15289] xt_ecn: cannot match TCP bits for non-tcp packets [ 995.176838][T15281] ceph: No mds server is up or the cluster is laggy [ 995.962675][ T43] libceph: connect (1)[c::]:6789 error -101 [ 995.977664][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 996.656173][T15305] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 996.664378][T15305] UDF-fs: Scanning with blocksize 512 failed [ 996.720933][T15305] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 996.729018][T15305] UDF-fs: Scanning with blocksize 1024 failed [ 996.763277][T15305] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 996.771056][T15305] UDF-fs: Scanning with blocksize 2048 failed [ 996.823117][T15305] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 996.831094][T15305] UDF-fs: Scanning with blocksize 4096 failed [ 998.379003][ T1165] veth0_to_bond: left promiscuous mode [ 1000.123646][ T30] audit: type=1800 audit(1752504270.985:988): pid=15331 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2618" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=45796 res=0 errno=0 [ 1005.462555][T15361] loop6: detected capacity change from 0 to 524287999 [ 1007.649766][T15375] tipc: Started in network mode [ 1007.654773][T15375] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1007.663766][T15375] tipc: Enabling of bearer rejected, failed to enable media [ 1009.751335][T15390] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1011.408730][T15398] sg_write: data in/out 209/14 bytes for SCSI command 0x0-- guessing data in; [ 1011.408730][T15398] program syz.7.2637 not setting count and/or reply_len properly [ 1019.355545][T15445] batman_adv: batadv0: Adding interface: dummy0 [ 1019.371845][T15445] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.623237][T15445] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1021.683342][ T43] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1022.321161][ T43] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1022.332074][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.340587][ T43] usb 9-1: Product: syz [ 1022.345445][ T43] usb 9-1: Manufacturer: syz [ 1022.350772][ T43] usb 9-1: SerialNumber: syz [ 1022.358607][ T43] usb 9-1: config 0 descriptor?? [ 1024.226264][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2660'. [ 1025.038884][ T43] usb 9-1: f81604_read: reg: 100e failed: -EREMOTEIO [ 1026.353215][ T43] usb 9-1: f81604_read: reg: 200e failed: -EPROTO [ 1026.367724][ T43] usb 9-1: USB disconnect, device number 7 [ 1026.417691][ T43] usb 9-1: f81604_read: reg: 100f failed: -ENODEV [ 1026.774469][ T43] usb 9-1: f81604_read: reg: 200f failed: -ENODEV [ 1027.335427][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1027.355086][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1027.366282][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1027.377065][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1027.387786][T15514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'. [ 1032.250485][T15537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2675'. [ 1032.576529][T15540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2675'. [ 1047.618367][T15668] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1051.823418][ T7142] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1052.248275][ T7142] usb 8-1: Using ep0 maxpacket: 8 [ 1052.259093][T15688] syz.2.2708 (15688) used greatest stack depth: 17992 bytes left [ 1052.277532][ T7142] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1052.298695][ T7142] usb 8-1: config 4 interface 0 has no altsetting 0 [ 1052.567819][ T7142] usb 8-1: string descriptor 0 read error: -22 [ 1052.603547][ T7142] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1052.632340][ T7142] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1052.892192][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2715'. [ 1052.915367][ T7142] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1053.368726][ T7142] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1053.408224][ T7142] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1053.416510][ T7142] usb 8-1: media controller created [ 1053.450595][ T7142] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1054.913922][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.920431][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.933217][ T7142] zl10353_read_register: readreg error (reg=127, ret==0) [ 1061.844503][T15783] xt_socket: unknown flags 0x50 [ 1064.635862][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2738'. [ 1066.953536][T15813] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1067.731907][T15812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1068.710707][T15827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2745'. [ 1068.768712][T15827] vlan3: entered allmulticast mode [ 1070.254547][T11408] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1070.267146][T11408] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1070.295774][T11408] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1070.307647][T11408] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1070.315610][T11408] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1071.997068][T15831] wg1 speed is unknown, defaulting to 1000 [ 1072.376228][ T9471] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1072.376812][T11408] Bluetooth: hci3: command tx timeout [ 1072.415957][ T9471] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1074.889861][T15831] chnl_net:caif_netlink_parms(): no params data found [ 1076.597257][T15884] netlink: 372 bytes leftover after parsing attributes in process `syz.1.2760'. [ 1077.585152][T15882] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2758'. [ 1080.350069][T15831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.365195][T15831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.372542][T15831] bridge_slave_0: entered allmulticast mode [ 1080.380856][T15831] bridge_slave_0: entered promiscuous mode [ 1080.384314][T15902] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.2764'. [ 1080.395425][T15831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.436312][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.586827][T15831] bridge_slave_1: entered allmulticast mode [ 1080.595946][T15831] bridge_slave_1: entered promiscuous mode [ 1080.678685][T15831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.290348][T15831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.584810][T15915] netlink: 632 bytes leftover after parsing attributes in process `syz.1.2769'. [ 1081.608489][T15831] team0: Port device team_slave_0 added [ 1081.812053][T15831] team0: Port device team_slave_1 added [ 1082.706502][T15831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.753553][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.853320][T15831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.875486][T15831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.882497][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.303562][T15831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.509710][T15831] hsr_slave_0: entered promiscuous mode [ 1084.526459][T15831] hsr_slave_1: entered promiscuous mode [ 1084.533206][T15831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1084.541104][T15831] Cannot create hsr debugfs directory [ 1090.515216][T15975] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2785'. [ 1091.883359][T15982] hsr0: entered promiscuous mode [ 1091.903486][T15982] macvtap1: entered promiscuous mode [ 1091.909625][T15982] macvtap1: entered allmulticast mode [ 1091.939942][T15982] hsr0: entered allmulticast mode [ 1091.960289][T15982] hsr_slave_0: entered allmulticast mode [ 1092.001113][T15982] hsr_slave_1: entered allmulticast mode [ 1092.079193][T15982] hsr0: left allmulticast mode [ 1092.098982][T15982] hsr_slave_0: left allmulticast mode [ 1092.108940][T15982] hsr_slave_1: left allmulticast mode [ 1094.350850][T16006] xt_TCPMSS: Only works on TCP SYN packets [ 1095.023609][ T5934] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1095.212171][T15831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1095.270562][T15831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1095.314941][T15831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1095.372678][T15831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1095.948905][T15831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.090149][T15831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1096.177875][T15655] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.185966][T15655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1096.242575][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.250132][T13085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.238659][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 1098.307451][T16045] random: crng reseeded on system resumption [ 1098.317849][T16044] vlan2: entered promiscuous mode [ 1098.364876][T16044] vlan2: entered allmulticast mode [ 1098.390192][T16044] hsr_slave_1: entered allmulticast mode [ 1098.462101][T16044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2801'. [ 1098.486113][T16051] netlink: 892 bytes leftover after parsing attributes in process `syz.8.2803'. [ 1098.891168][T16062] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1099.257913][T15831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.431286][T15831] veth0_vlan: entered promiscuous mode [ 1103.443062][T15831] veth1_vlan: entered promiscuous mode [ 1103.676601][T15831] veth0_macvtap: entered promiscuous mode [ 1103.718445][T15831] veth1_macvtap: entered promiscuous mode [ 1104.857332][T15831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.886546][T15831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.947127][T15831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.958044][T15831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.967179][T15831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1105.009415][T15831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.534177][ T8761] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1107.596996][ T8761] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1107.662368][T16140] netlink: 'syz.3.2822': attribute type 1 has an invalid length. [ 1108.237570][ T6936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.248333][ T6936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.395296][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2825'. [ 1110.951575][ T30] audit: type=1800 audit(1752504381.865:989): pid=16165 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2827" name="nullb0" dev="tmpfs" ino=2586 res=0 errno=0 [ 1112.910922][T16183] netlink: 'syz.2.2831': attribute type 1 has an invalid length. [ 1112.938173][T16183] netlink: 'syz.2.2831': attribute type 12 has an invalid length. [ 1112.981542][T16183] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.2831'. [ 1116.216026][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.723903][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.154478][T16222] Cannot find add_set index 0 as target [ 1120.218500][T16237] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1120.235570][T16237] cramfs: wrong magic [ 1121.331382][T16247] syz.5.2847: attempt to access beyond end of device [ 1121.331382][T16247] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1121.347432][T16247] SQUASHFS error: Failed to read block 0x0: -5 [ 1121.354569][T16247] unable to read squashfs_super_block [ 1122.026075][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2848'. [ 1130.247352][T16308] MTD: Couldn't look up '/dev/nullb0': -15 [ 1130.254605][T16308] /dev/nullb0: Can't lookup blockdev [ 1131.471400][T16315] trusted_key: encrypted_key: insufficient parameters specified [ 1131.919203][T16313] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1131.919203][T16313] The task syz.5.2864 (16313) triggered the difference, watch for misbehavior. [ 1135.935659][T16356] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 1136.015929][T16356] fuse: Bad value for 'fd' [ 1136.068558][T16148] Process accounting resumed [ 1137.198637][T16347] Process accounting resumed [ 1140.602844][T16391] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 1156.187142][T16517] netlink: zone id is out of range [ 1156.312837][T16517] netlink: zone id is out of range [ 1156.330332][T16517] netlink: zone id is out of range [ 1156.338543][T16517] netlink: zone id is out of range [ 1156.350059][T16517] netlink: zone id is out of range [ 1156.355780][T16517] netlink: zone id is out of range [ 1156.361128][T16517] netlink: zone id is out of range [ 1156.366673][T16517] netlink: zone id is out of range [ 1156.372106][T16517] netlink: zone id is out of range [ 1156.405381][T16522] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.2919'. [ 1156.419831][T16517] netlink: zone id is out of range [ 1157.365768][T16524] batadv_slave_0: entered promiscuous mode [ 1157.371697][T16524] batadv_slave_0: left allmulticast mode [ 1157.476362][T16526] netlink: 'syz.8.2921': attribute type 4 has an invalid length. [ 1158.737549][T16526] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1167.092166][T16597] vlan1: entered promiscuous mode [ 1167.098716][T16597] vlan1: entered allmulticast mode [ 1167.103990][T16597] veth0_vlan: entered allmulticast mode [ 1168.515228][T16610] binder: 16600:16610 ioctl c018620c 200000000380 returned -1 [ 1169.349963][T16622] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1177.498033][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.505008][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1190.612467][T16767] binder: 16762:16767 ioctl c0306201 0 returned -14 [ 1191.579042][T16011] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1191.697638][T16786] netlink: 'syz.1.2989': attribute type 10 has an invalid length. [ 1191.793564][T16011] usb 9-1: Using ep0 maxpacket: 8 [ 1191.799441][T16786] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1191.808060][T16011] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1191.821170][T16011] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3 [ 1191.830318][T16011] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.843160][T16011] usb 9-1: Product: syz [ 1191.847483][T16011] usb 9-1: Manufacturer: syz [ 1191.852409][T16011] usb 9-1: SerialNumber: syz [ 1191.864860][T16011] usb 9-1: config 0 descriptor?? [ 1191.950751][T16786] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1191.972173][T16786] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1192.181527][T16774] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2986'. [ 1192.196033][T16011] usb 9-1: USB disconnect, device number 8 [ 1192.386405][T16797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2993'. [ 1193.197008][T16805] mkiss: ax0: crc mode is auto. [ 1193.622141][T16807] netlink: 'syz.3.2995': attribute type 10 has an invalid length. [ 1193.676803][T16807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.684327][T16807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.017792][T16816] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1194.031769][T16816] Error validating options; rc = [-22] [ 1198.811227][T16851] delete_channel: no stack [ 1204.440638][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.447916][T16891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.455439][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.462561][T16891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.564755][T16901] vxfs: WRONG superblock magic 00000000 at 1 [ 1205.577264][T16901] vxfs: WRONG superblock magic 00000000 at 8 [ 1205.583473][T16901] vxfs: can't find superblock. [ 1205.993815][T16891] net_ratelimit: 227 callbacks suppressed [ 1205.993840][T16891] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1207.018504][T16913] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1208.048873][T16928] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1211.323525][T16943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1211.330774][T16943] IPv6: NLM_F_CREATE should be set when creating new route [ 1211.338100][T16943] IPv6: NLM_F_CREATE should be set when creating new route [ 1211.345358][T16943] IPv6: NLM_F_CREATE should be set when creating new route [ 1212.765981][T16958] __vm_enough_memory: pid: 16958, comm: syz.5.3034, bytes: 21200441552896 not enough memory for the allocation [ 1213.255076][ T31] INFO: task kworker/1:18:7142 blocked for more than 143 seconds. [ 1213.283839][ T31] Not tainted 6.16.0-rc6-syzkaller #0 [ 1213.290216][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1213.329408][ T31] task:kworker/1:18 state:D stack:20104 pid:7142 tgid:7142 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1213.506390][T16974] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 1213.697840][ T31] Workqueue: usb_hub_wq hub_event [ 1213.707698][ T31] Call Trace: [ 1213.711293][ T31] [ 1213.723204][ T31] __schedule+0x16a2/0x4cb0 [ 1213.727967][ T31] ? kthread+0x711/0x8a0 [ 1213.735616][ T31] ? schedule+0x165/0x360 [ 1213.744090][ T31] ? __lock_acquire+0xab9/0xd20 [ 1213.753052][ T31] ? __pfx___schedule+0x10/0x10 [ 1213.761141][ T31] ? schedule+0x91/0x360 [ 1213.773920][ T31] schedule+0x165/0x360 [ 1213.797818][ T31] schedule_timeout+0x9a/0x270 [ 1213.803566][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1213.819328][T16974] bond1: entered promiscuous mode [ 1213.824843][T16974] bond1: entered allmulticast mode [ 1213.834987][T16974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1214.107236][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1214.112740][ T31] ? wait_for_completion+0x267/0x5d0 [ 1214.118299][ T31] wait_for_completion+0x2bf/0x5d0 [ 1214.133215][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1214.139199][ T31] i2c_del_adapter+0x581/0x6e0 [ 1214.182292][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1214.223757][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 1214.229313][ T31] ? dvb_usbv2_exit+0x85a/0x9e0 [ 1214.243022][ T31] dvb_usbv2_probe+0x4ae/0x41a0 [ 1214.261822][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 1214.275646][ T31] ? __pm_runtime_set_status+0x785/0xa50 [ 1214.293981][ T31] usb_probe_interface+0x641/0xbc0 [ 1214.310435][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 1214.330092][ T31] really_probe+0x26a/0x9a0 [ 1214.350646][ T31] __driver_probe_device+0x18c/0x2f0 [ 1214.371961][ T31] driver_probe_device+0x4f/0x430 [ 1214.390189][ T31] __device_attach_driver+0x2ce/0x530 [ 1214.407147][ T31] bus_for_each_drv+0x251/0x2e0 [ 1214.421877][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1214.441113][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1214.449750][ T31] __device_attach+0x2b8/0x400 [ 1214.455980][ T31] ? __pfx___device_attach+0x10/0x10 [ 1214.461420][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1214.471232][ T31] bus_probe_device+0x185/0x260 [ 1214.476315][ T31] device_add+0x7b6/0xb50 [ 1214.480791][ T31] usb_set_configuration+0x1a87/0x20e0 [ 1214.490943][ T31] usb_generic_driver_probe+0x8d/0x150 [ 1214.496696][ T31] usb_probe_device+0x1c4/0x390 [ 1214.501681][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 1214.512298][ T31] really_probe+0x26a/0x9a0 [ 1214.517034][ T31] __driver_probe_device+0x18c/0x2f0 [ 1214.522508][ T31] driver_probe_device+0x4f/0x430 [ 1214.528641][ T31] __device_attach_driver+0x2ce/0x530 [ 1214.534286][ T31] bus_for_each_drv+0x251/0x2e0 [ 1214.539198][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 1214.551575][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1214.557956][ T31] __device_attach+0x2b8/0x400 [ 1214.562809][ T31] ? __pfx___device_attach+0x10/0x10 [ 1214.568532][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1214.613676][ T31] bus_probe_device+0x185/0x260 [ 1214.618746][ T31] device_add+0x7b6/0xb50 [ 1214.623330][ T31] usb_new_device+0xa39/0x16c0 [ 1214.628164][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 1214.633671][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1214.638923][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1214.644367][ T31] hub_event+0x2941/0x4a00 [ 1214.648893][ T31] ? __pfx_hub_event+0x10/0x10 [ 1214.654032][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1214.915554][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1214.921007][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1214.927363][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1214.933529][ T31] process_scheduled_works+0xade/0x17b0 [ 1214.939358][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1214.945587][ T31] worker_thread+0x8a0/0xda0 [ 1214.950408][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1214.957093][ T31] ? __kthread_parkme+0x7b/0x200 [ 1214.962764][ T31] kthread+0x711/0x8a0 [ 1214.967117][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1214.972374][ T31] ? __pfx_kthread+0x10/0x10 [ 1214.977297][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1214.982997][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1214.988443][ T31] ? __pfx_kthread+0x10/0x10 [ 1214.993449][ T31] ret_from_fork+0x3fc/0x770 [ 1214.998204][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1215.003608][ T31] ? __switch_to_asm+0x39/0x70 [ 1215.008536][ T31] ? __switch_to_asm+0x33/0x70 [ 1215.013599][ T31] ? __pfx_kthread+0x10/0x10 [ 1215.018426][ T31] ret_from_fork_asm+0x1a/0x30 [ 1215.023697][ T31] [ 1215.026897][ T31] INFO: task syz.7.2709:15714 blocked for more than 145 seconds. [ 1215.034957][ T31] Not tainted 6.16.0-rc6-syzkaller #0 [ 1215.041022][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1215.050006][ T31] task:syz.7.2709 state:D stack:26840 pid:15714 tgid:15683 ppid:10735 task_flags:0x400040 flags:0x00004004 [ 1215.062301][ T31] Call Trace: [ 1215.074035][ T31] [ 1215.077153][ T31] __schedule+0x16a2/0x4cb0 [ 1215.081763][ T31] ? __lock_acquire+0xab9/0xd20 [ 1215.086946][ T31] ? schedule+0x165/0x360 [ 1215.091326][ T31] ? __pfx___schedule+0x10/0x10 [ 1215.096501][ T31] ? schedule+0x91/0x360 [ 1215.100831][ T31] schedule+0x165/0x360 [ 1215.105111][ T31] schedule_preempt_disabled+0x13/0x30 [ 1215.110628][ T31] __mutex_lock+0x724/0xe80 [ 1215.115229][ T31] ? __mutex_lock+0x51b/0xe80 [ 1215.119957][ T31] ? usbdev_open+0x16e/0x760 [ 1215.124693][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1215.129748][ T31] ? bus_find_device+0x273/0x2b0 [ 1215.134956][ T31] ? __pfx_bus_find_device+0x10/0x10 [ 1215.140263][ T31] ? __kasan_kmalloc+0x93/0xb0 [ 1215.145170][ T31] ? usbdev_open+0xa7/0x760 [ 1215.149782][ T31] usbdev_open+0x16e/0x760 [ 1215.154290][ T31] ? __pfx_usbdev_open+0x10/0x10 [ 1215.159272][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1215.164650][ T31] chrdev_open+0x4c9/0x5e0 [ 1215.169843][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1215.181207][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1215.189422][ T31] do_dentry_open+0xdf0/0x1970 [ 1215.194367][ T31] vfs_open+0x3b/0x340 [ 1215.198463][ T31] ? path_openat+0x2ecd/0x3830 [ 1215.203488][ T31] path_openat+0x2ee5/0x3830 [ 1215.208135][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 1215.213603][ T31] ? __kfence_alloc+0x385/0x3b0 [ 1215.218514][ T31] ? getname_flags+0xb8/0x540 [ 1215.223392][ T31] ? __pfx_path_openat+0x10/0x10 [ 1215.228410][ T31] do_filp_open+0x1fa/0x410 [ 1215.233007][ T31] ? __lock_acquire+0xab9/0xd20 [ 1215.237900][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1215.243510][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1215.249243][ T31] ? alloc_fd+0x64c/0x6c0 [ 1215.253914][ T31] do_sys_openat2+0x121/0x1c0 [ 1215.258644][ T31] ? __se_sys_futex+0x36f/0x400 [ 1215.263612][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1215.268864][ T31] ? rcu_is_watching+0x15/0xb0 [ 1215.274325][ T31] __x64_sys_openat+0x138/0x170 [ 1215.279236][ T31] do_syscall_64+0xfa/0x3b0 [ 1215.283955][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.290082][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1215.295911][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1215.300864][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.309461][ T31] RIP: 0033:0x7f82d5d8d290 [ 1215.314461][ T31] RSP: 002b:00007f82d6c32b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1215.325639][ T31] RAX: ffffffffffffffda RBX: 0000000000103381 RCX: 00007f82d5d8d290 [ 1215.334443][ T31] RDX: 0000000000103381 RSI: 00007f82d6c32c10 RDI: 00000000ffffff9c [ 1215.342531][ T31] RBP: 00007f82d6c32c10 R08: 0000000000000000 R09: 0000000000000000 [ 1215.350811][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1215.359264][ T31] R13: 0000000000000000 R14: 00007f82d5fb6080 R15: 00007ffca3ffcef8 [ 1215.367410][ T31] [ 1215.370505][ T31] [ 1215.370505][ T31] Showing all locks held in the system: [ 1215.381204][ T31] 1 lock held by khungtaskd/31: [ 1215.386254][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1215.413541][ T31] 2 locks held by getty/5599: [ 1215.418288][ T31] #0: ffff88803081b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1215.429294][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1215.439803][ T31] 4 locks held by kworker/u8:23/6936: [ 1215.445300][ T31] 5 locks held by kworker/1:18/7142: [ 1215.450711][ T31] #0: ffff8880222e7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1215.466961][ T31] #1: ffffc90010ed7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1215.480589][ T31] #2: ffff8881453b9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1215.494453][ T31] #3: ffff88807f71b198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1215.507541][ T31] #4: ffff888024b6c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1215.520717][ T31] 1 lock held by syz.7.2709/15714: [ 1215.529031][ T31] #0: ffff8881453b9198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x16e/0x760 [ 1215.541039][ T31] 1 lock held by syz.2.3036/16980: [ 1215.549438][ T31] [ 1215.551818][ T31] ============================================= [ 1215.551818][ T31] [ 1215.561979][ T31] NMI backtrace for cpu 1 [ 1215.562001][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1215.562025][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1215.562037][ T31] Call Trace: [ 1215.562045][ T31] [ 1215.562054][ T31] dump_stack_lvl+0x189/0x250 [ 1215.562079][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1215.562110][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1215.562134][ T31] ? __pfx__printk+0x10/0x10 [ 1215.562174][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1215.562205][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1215.562229][ T31] ? _printk+0xcf/0x120 [ 1215.562259][ T31] ? __pfx__printk+0x10/0x10 [ 1215.562288][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1215.562323][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1215.562354][ T31] watchdog+0xfee/0x1030 [ 1215.562386][ T31] ? watchdog+0x1de/0x1030 [ 1215.562425][ T31] kthread+0x711/0x8a0 [ 1215.562456][ T31] ? __pfx_watchdog+0x10/0x10 [ 1215.562485][ T31] ? __pfx_kthread+0x10/0x10 [ 1215.562514][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1215.562543][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1215.562571][ T31] ? __pfx_kthread+0x10/0x10 [ 1215.562599][ T31] ret_from_fork+0x3fc/0x770 [ 1215.562623][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1215.562650][ T31] ? __switch_to_asm+0x39/0x70 [ 1215.562673][ T31] ? __switch_to_asm+0x33/0x70 [ 1215.562696][ T31] ? __pfx_kthread+0x10/0x10 [ 1215.562724][ T31] ret_from_fork_asm+0x1a/0x30 [ 1215.562772][ T31] [ 1215.562780][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1215.721662][ C0] NMI backtrace for cpu 0 [ 1215.721679][ C0] CPU: 0 UID: 0 PID: 16980 Comm: syz.2.3036 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1215.721700][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1215.721711][ C0] RIP: 0010:lock_acquire+0x150/0x360 [ 1215.721733][ C0] Code: c7 0a 21 b7 8d e8 20 18 ca 09 b8 ff ff ff ff 65 0f c1 05 03 15 ff 10 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c <8f> 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 [ 1215.721748][ C0] RSP: 0018:ffffc90010ee6cd0 EFLAGS: 00000046 [ 1215.721764][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: c924514d2fbca500 [ 1215.721783][ C0] RDX: 0000000000000001 RSI: ffffffff8db7210a RDI: ffffffff8be1c9c0 [ 1215.721795][ C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 1215.721807][ C0] R10: ffffc90010ee6e98 R11: ffffffff81acff90 R12: 0000000000000002 [ 1215.721819][ C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 1215.721831][ C0] FS: 0000000000000000(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 1215.721844][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1215.721856][ C0] CR2: 0000001b30813ff8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1215.721871][ C0] Call Trace: [ 1215.721878][ C0] [ 1215.721889][ C0] ? unwind_next_frame+0x19ae/0x2390 [ 1215.721909][ C0] ? stack_trace_save+0x9c/0xe0 [ 1215.721932][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1215.721949][ C0] unwind_next_frame+0xc2/0x2390 [ 1215.721966][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1215.721983][ C0] ? arch_stack_walk+0xe4/0x150 [ 1215.722006][ C0] ? __unwind_start+0x5b9/0x760 [ 1215.722028][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1215.722050][ C0] arch_stack_walk+0x11c/0x150 [ 1215.722073][ C0] ? stack_trace_save+0x9c/0xe0 [ 1215.722097][ C0] stack_trace_save+0x9c/0xe0 [ 1215.722118][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1215.722145][ C0] save_stack+0xf7/0x1f0 [ 1215.722170][ C0] ? __pfx_save_stack+0x10/0x10 [ 1215.722202][ C0] ? page_ext_put+0x97/0xc0 [ 1215.722229][ C0] __reset_page_owner+0x71/0x1f0 [ 1215.722254][ C0] free_unref_folios+0xcd2/0x1570 [ 1215.722290][ C0] folios_put_refs+0x559/0x640 [ 1215.722321][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1215.722347][ C0] ? folio_batch_remove_exceptionals+0x18c/0x1f0 [ 1215.722376][ C0] shmem_undo_range+0x49e/0x14b0 [ 1215.722405][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 1215.722440][ C0] ? kernel_text_address+0xa5/0xe0 [ 1215.722466][ C0] ? __kernel_text_address+0xd/0x40 [ 1215.722511][ C0] ? percpu_counter_add_batch+0xea/0x1e0 [ 1215.722538][ C0] shmem_evict_inode+0x272/0xa70 [ 1215.722568][ C0] ? inode_wait_for_writeback+0xf9/0x290 [ 1215.722587][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1215.722613][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 1215.722638][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1215.722663][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 1215.722688][ C0] evict+0x501/0x9c0 [ 1215.722714][ C0] ? __pfx_evict+0x10/0x10 [ 1215.722733][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1215.722757][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1215.722786][ C0] ? iput+0x6d8/0x9d0 [ 1215.722806][ C0] __dentry_kill+0x209/0x660 [ 1215.722821][ C0] ? dput+0x37/0x2b0 [ 1215.722837][ C0] dput+0x19f/0x2b0 [ 1215.722855][ C0] __fput+0x68e/0xa70 [ 1215.722881][ C0] task_work_run+0x1d4/0x260 [ 1215.722909][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1215.722939][ C0] do_exit+0x6b5/0x22e0 [ 1215.722966][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1215.722990][ C0] ? __pfx_do_exit+0x10/0x10 [ 1215.723022][ C0] do_group_exit+0x21c/0x2d0 [ 1215.723045][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1215.723072][ C0] get_signal+0x125e/0x1310 [ 1215.723102][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1215.723132][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1215.723166][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1215.723185][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1215.723201][ C0] do_syscall_64+0x2bd/0x3b0 [ 1215.723216][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1215.723241][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.723258][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1215.723278][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.723294][ C0] RIP: 0033:0x7fe26978e929 [ 1215.723308][ C0] Code: Unable to access opcode bytes at 0x7fe26978e8ff. [ 1215.723317][ C0] RSP: 002b:00007fe2675f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1215.723334][ C0] RAX: fffffffffffffe00 RBX: 00007fe2699b6168 RCX: 00007fe26978e929 [ 1215.723347][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe2699b6168 [ 1215.723357][ C0] RBP: 00007fe2699b6160 R08: 0000000000000000 R09: 0000000000000000 [ 1215.723368][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe2699b616c [ 1215.723379][ C0] R13: 0000000000000000 R14: 00007ffca0056fa0 R15: 00007ffca0057088 [ 1215.723400][ C0] [ 1216.208685][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1216.216141][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(full) [ 1216.226248][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1216.236338][ T31] Call Trace: [ 1216.239649][ T31] [ 1216.242612][ T31] dump_stack_lvl+0x99/0x250 [ 1216.247241][ T31] ? __asan_memcpy+0x40/0x70 [ 1216.251876][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1216.257120][ T31] ? __pfx__printk+0x10/0x10 [ 1216.261769][ T31] panic+0x2db/0x790 [ 1216.265703][ T31] ? __pfx_panic+0x10/0x10 [ 1216.270149][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1216.274954][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1216.280784][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1216.286194][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1216.292423][ T31] watchdog+0x102d/0x1030 [ 1216.296796][ T31] ? watchdog+0x1de/0x1030 [ 1216.301247][ T31] kthread+0x711/0x8a0 [ 1216.305349][ T31] ? __pfx_watchdog+0x10/0x10 [ 1216.310053][ T31] ? __pfx_kthread+0x10/0x10 [ 1216.314669][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.319899][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1216.325224][ T31] ? __pfx_kthread+0x10/0x10 [ 1216.329838][ T31] ret_from_fork+0x3fc/0x770 [ 1216.334444][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1216.339574][ T31] ? __switch_to_asm+0x39/0x70 [ 1216.344357][ T31] ? __switch_to_asm+0x33/0x70 [ 1216.349155][ T31] ? __pfx_kthread+0x10/0x10 [ 1216.353773][ T31] ret_from_fork_asm+0x1a/0x30 [ 1216.358569][ T31] [ 1216.361892][ T31] Kernel Offset: disabled [ 1216.366222][ T31] Rebooting in 86400 seconds..