last executing test programs: 19.636564818s ago: executing program 0 (id=503): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b63707520189b33db0c160f4cfb4e3914bc0f7475cbaa9a6a5a282c46ee56cbee2f00acb448c33be0619ba730154fc36b8c0615f0656ed2c7ae794fc4405396a03571057830a44748bcc214732977c8ace2b049dfde2c14fd57720fd55f9883558a630ee3b96f93"], 0x5) 14.81071799s ago: executing program 0 (id=524): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b63707520189b33db0c160f4cfb4e3914bc0f7475cbaa9a6a5a282c46ee56cbee2f00acb448c33be0619ba730154fc36b8c0615f0656ed2c7ae794fc4405396a03571057830a44748bcc214732977c8ace2b049dfde2c14fd57720fd55f9883558a630ee3b96f93"], 0x5) 14.809498686s ago: executing program 3 (id=516): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount$bind(&(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000001c0), 0x2140085, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000004c0)={r4, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={r4, @in={{0x2, 0x4e24, @empty}}, 0x100000, 0x7f, 0x0, 0x0, 0x36, 0x200}, 0x9c) 13.750775218s ago: executing program 2 (id=517): syz_open_dev$dri(0x0, 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000000101040000ff0f0000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009"], 0x48}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r4, 0x104, 0x2, &(0x7f0000000040)=0x9, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010161, 0x0) 12.00990809s ago: executing program 2 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.591928291s ago: executing program 0 (id=521): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000280)}, {&(0x7f0000000680)="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", 0x137}, {&(0x7f0000000480)="b6ae74bc9b26f973d11dcf989fff5593a05408418f3766219596b3496f166298fa94641c2bbb3b8ee85c1a41b5c619db83ed3251501b5e941cdc644e99023dd745c33d084e945262a6131970d18fb811da043a175abed72f32e469898ca92a0613ad6c9aae722ae602a34417b3e382f9bc1bc186e6625d661423da9a6122d1350a9c71b015fe55a9a8e377c586de0da69bb5639bafef9fcc1667e277c5c9816831f5d27dc48f3c5d89", 0xa9}], 0x3) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, 0x0, 0x0) write(r1, &(0x7f0000000040)="cb", 0xfffffdef) setsockopt$sock_int(r1, 0x1, 0x49, &(0x7f00000009c0)=0xfefffffb, 0x4) 11.59162155s ago: executing program 3 (id=522): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e22, 0x3, @private1, 0x81}]}, &(0x7f00000004c0)=0x10) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x4040010) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x48) 10.799715914s ago: executing program 1 (id=523): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000001c0)="441f0801000000e8c94ef5", 0xb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 10.731447929s ago: executing program 4 (id=525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000280)=[{0x5, 0x5, 0x40, 0x0, @time={0x8, 0x7}, {0xf7, 0xf}, {0x3, 0x9}, @queue={0x0, {0x17, 0x9}}}, {0x5, 0x9, 0x3, 0x2, @time={0xffffffff, 0x7}, {0xff, 0xb}, {0x6, 0xfc}, @queue={0xe, {0x1, 0x7}}}], 0x38) readv(r3, 0x0, 0x0) 9.562813438s ago: executing program 1 (id=526): io_uring_setup(0x52, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e40)=@newlink={0x44, 0x10, 0x403, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x3, 0x0, 0xa000, 0x830}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x44}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0xdd, 0x0, 0x0, 0x0, r5}) 9.11727039s ago: executing program 3 (id=527): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xb05b, @private1, 0x241}], 0x1c) 8.48824851s ago: executing program 4 (id=529): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x13c, 0x10, 0x713, 0x70bd2a, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x0, 0xfffffffffffffffe}, {}, {0x0, 0x0, 0x8}, 0x0, 0x3502, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x13c}}, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x80002, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, &(0x7f0000000280)={"86ae14b283a1f15116247649100e6fccb76af64f84c933e9856efca32732", 0x5, 0x1, 0x0, 0x1, 0x6c, 0x7f, 0x101, 0x1, [0xf4a5, 0x7, 0x1, 0x5, 0x39, 0xaf80, 0x81, 0x6, 0xac, 0x2, 0x4, 0x6, 0x8000, 0x0, 0x4, 0x9, 0xfffffffd, 0x9, 0x8]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x35}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc0100000000001000000000000000000000000000000000c8e1949d97050a00000000e5000015844cb4062ed2cb0b611dfe790782a3885f763688b238fe85212f6f42eecdf06491c25958aac7791b9b10d5132ab54a172572c2b0ad10ca76720de2f0e2083c7e55c28e8ac5fb67abd86c6cfe2051b8fb5fbef89a005fa1b128208dbb4bc04dc9d7eaf63ac860db19c6f2ccd2ddaac6d7e1f8d2", @ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c0000"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x10) sendto$inet6(r4, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) 8.333693339s ago: executing program 2 (id=530): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9c, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB]) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f0000000cc0)={{0x0, 0x0, 0x80}}) 7.466697773s ago: executing program 1 (id=532): openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0xc}, {0xe, 0x6}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe6, 0x0) r1 = socket(0x22, 0x2, 0x4) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x4000) syz_io_uring_setup(0xbc3, &(0x7f0000000340)={0x0, 0x4abd, 0x80, 0x4, 0x1af}, &(0x7f0000000040), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0xaaa43, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) 6.599113264s ago: executing program 4 (id=533): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xffffffff, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.583708777s ago: executing program 3 (id=534): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b63707520189b33db0c160f4cfb4e3914bc0f7475cbaa9a6a5a282c46ee56cbee2f00acb448c33be0619ba730154fc36b8c0615f0656ed2c7ae794fc4405396a03571057830a44748bcc214732977c8ace2b049dfde2c14fd57720fd55f9883558a630ee3b96f93"], 0x5) 5.697509268s ago: executing program 1 (id=535): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x10040) r1 = socket$inet6(0xa, 0x3, 0x38) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9b", 0x6, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000000380)=[{{&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/144}, {&(0x7f0000000200)=""/230}, {&(0x7f0000000300)=""/86, 0xfffffe94}, {&(0x7f00000003c0)=""/253}, {&(0x7f00000004c0)=""/208}]}, 0x3422a61a}], 0x4000000000003c9, 0x10102, 0x0) 5.630159812s ago: executing program 0 (id=536): pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b63707520189b33db0c160f4cfb4e3914bc0f7475cbaa9a6a5a282c46ee56cbee2f00acb448c33be0619ba730154fc36b8c0615f0656ed2c7ae794fc4405396a03571057830a44748bcc214732977c8ace2b049dfde2c14fd57720fd55f9883558a630ee3b96f93"], 0x5) 5.250813752s ago: executing program 2 (id=537): mkdir(&(0x7f0000000080)='./file0\x00', 0x96628f24a2b36db3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x787ab7c4, 0x4ccc2) syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10000, 0x0, 0x24c}, &(0x7f00000001c0), &(0x7f0000000280)) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 4.584604651s ago: executing program 1 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f00000001c0)="441f0801000000e8c94ef5", 0xb) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 3.959503453s ago: executing program 3 (id=539): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x95d, 0x5, 0x0, 0xffffffff}, {0x40, 0x4, 0x2, 0x6}, {0x5, 0x2, 0x2, 0x2}, {0x5, 0xd0, 0x9, 0x3}, {0x2, 0x2, 0x5, 0xfff}]}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) unshare(0x24020400) unshare(0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 3.854783229s ago: executing program 4 (id=540): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) connect$unix(r0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$sock(r1, 0x0, 0x20008080) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x2) socket(0x1, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES16=r2], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.314378474s ago: executing program 0 (id=541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000280)=[{0x5, 0x5, 0x40, 0x0, @time={0x8, 0x7}, {0xf7, 0xf}, {0x3, 0x9}, @queue={0x0, {0x17, 0x9}}}, {0x5, 0x9, 0x3, 0x2, @time={0xffffffff, 0x7}, {0xff, 0xb}, {0x6, 0xfc}, @queue={0xe, {0x1, 0x7}}}], 0x38) readv(r3, 0x0, 0x0) 2.314115346s ago: executing program 2 (id=542): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x4b5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) llistxattr(0x0, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8922, &(0x7f0000000280)={'dummy0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x4, 0x894f}}, 0x30) 2.313669684s ago: executing program 3 (id=551): pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="2b63707520189b33db0c160f4cfb4e3914bc0f7475cbaa9a6a5a282c46ee56cbee2f00acb448c33be0619ba730154fc36b8c0615f0656ed2c7ae794fc4405396a03571057830a44748bcc214732977c8ace2b049dfde2c14fd57720fd55f9883558a630ee3b96f93"], 0x5) 2.312764704s ago: executing program 4 (id=552): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x5, &(0x7f0000000040)=[{0x95d, 0x5, 0x0, 0xffffffff}, {0x40, 0x4, 0x2, 0x6}, {0x5, 0x2, 0x2, 0x2}, {0x5, 0xd0, 0x9, 0x3}, {0x2, 0x2, 0x5, 0xfff}]}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) unshare(0x24020400) unshare(0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 23.992608ms ago: executing program 0 (id=543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendfile(r3, r2, 0x0, 0x20000023893) 23.585008ms ago: executing program 1 (id=544): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x6f4dad00}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) recvmmsg(r2, &(0x7f000000c440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000009580)=""/19, 0x13}, 0x7}], 0x1, 0x10000, 0x0) setsockopt$sock_int(r2, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7, 0x0, 0x0, 0x7fff0000}]}) listxattr(&(0x7f0000000080)='./cgroup\x00', 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 19.841068ms ago: executing program 2 (id=545): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) socket$inet6(0xa, 0x1, 0xc5) fanotify_init(0xf00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x18}, 0x0, 0x20040000}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=546): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/62, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\'], 0x0) r4 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068", 0x9, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="ebffffffffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.38' (ED25519) to the list of known hosts. [ 73.876833][ T5823] cgroup: Unknown subsys name 'net' [ 74.069875][ T5823] cgroup: Unknown subsys name 'cpuset' [ 74.078580][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.572655][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.377512][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.383938][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.385584][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.395069][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.406586][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.414046][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.421327][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.430435][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.442197][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.450484][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.457989][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.467794][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.468556][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.482698][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.496725][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.499077][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.504771][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.520121][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.520134][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.534816][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.542687][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.550270][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.562545][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.569915][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.577845][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.034639][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 80.131454][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 80.245103][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.252363][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.260094][ T5835] bridge_slave_0: entered allmulticast mode [ 80.267879][ T5835] bridge_slave_0: entered promiscuous mode [ 80.284044][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.291217][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.298403][ T5835] bridge_slave_1: entered allmulticast mode [ 80.305583][ T5835] bridge_slave_1: entered promiscuous mode [ 80.341594][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 80.355391][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.393295][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 80.411161][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.550503][ T5835] team0: Port device team_slave_0 added [ 80.559875][ T5835] team0: Port device team_slave_1 added [ 80.615577][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.623058][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.630398][ T5833] bridge_slave_0: entered allmulticast mode [ 80.637960][ T5833] bridge_slave_0: entered promiscuous mode [ 80.651583][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.659120][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.668484][ T5833] bridge_slave_1: entered allmulticast mode [ 80.675493][ T5833] bridge_slave_1: entered promiscuous mode [ 80.707631][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.714585][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.740778][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.790811][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.797938][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.824927][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.866853][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 80.890446][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.898064][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.905174][ T5834] bridge_slave_0: entered allmulticast mode [ 80.912818][ T5834] bridge_slave_0: entered promiscuous mode [ 80.922502][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.932278][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.939414][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.946794][ T5837] bridge_slave_0: entered allmulticast mode [ 80.953955][ T5837] bridge_slave_0: entered promiscuous mode [ 80.988586][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.995846][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.003007][ T5834] bridge_slave_1: entered allmulticast mode [ 81.011238][ T5834] bridge_slave_1: entered promiscuous mode [ 81.024728][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.034011][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.041680][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.048978][ T5837] bridge_slave_1: entered allmulticast mode [ 81.056394][ T5837] bridge_slave_1: entered promiscuous mode [ 81.159662][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.187863][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.199992][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.226392][ T5835] hsr_slave_0: entered promiscuous mode [ 81.232685][ T5835] hsr_slave_1: entered promiscuous mode [ 81.241332][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.294694][ T5833] team0: Port device team_slave_0 added [ 81.304193][ T5833] team0: Port device team_slave_1 added [ 81.348946][ T5834] team0: Port device team_slave_0 added [ 81.381018][ T5837] team0: Port device team_slave_0 added [ 81.387127][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.394277][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.403775][ T5842] bridge_slave_0: entered allmulticast mode [ 81.418000][ T5842] bridge_slave_0: entered promiscuous mode [ 81.426535][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.433668][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.441269][ T5842] bridge_slave_1: entered allmulticast mode [ 81.448976][ T5842] bridge_slave_1: entered promiscuous mode [ 81.480660][ T5834] team0: Port device team_slave_1 added [ 81.487016][ T5848] Bluetooth: hci2: command tx timeout [ 81.508925][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.516505][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.546074][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.560673][ T5837] team0: Port device team_slave_1 added [ 81.566898][ T5848] Bluetooth: hci1: command tx timeout [ 81.575872][ T5848] Bluetooth: hci0: command tx timeout [ 81.632221][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.639606][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.666165][ T5848] Bluetooth: hci3: command tx timeout [ 81.671794][ T5848] Bluetooth: hci4: command tx timeout [ 81.678638][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.690476][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.697711][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.725540][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.771776][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.778819][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.807781][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.860433][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.877521][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.912922][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.920285][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.946305][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.988146][ T5842] team0: Port device team_slave_0 added [ 82.000077][ T5833] hsr_slave_0: entered promiscuous mode [ 82.006895][ T5833] hsr_slave_1: entered promiscuous mode [ 82.012878][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.020840][ T5833] Cannot create hsr debugfs directory [ 82.027143][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.034080][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.060379][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.097278][ T5842] team0: Port device team_slave_1 added [ 82.134801][ T5834] hsr_slave_0: entered promiscuous mode [ 82.141385][ T5834] hsr_slave_1: entered promiscuous mode [ 82.147615][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.155169][ T5834] Cannot create hsr debugfs directory [ 82.214641][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.222307][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.248628][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.295055][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.302129][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.328732][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.392541][ T5837] hsr_slave_0: entered promiscuous mode [ 82.398978][ T5837] hsr_slave_1: entered promiscuous mode [ 82.405063][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.412728][ T5837] Cannot create hsr debugfs directory [ 82.527960][ T5842] hsr_slave_0: entered promiscuous mode [ 82.534228][ T5842] hsr_slave_1: entered promiscuous mode [ 82.540584][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.549196][ T5842] Cannot create hsr debugfs directory [ 82.793392][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.812929][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.830212][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.880892][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.995696][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.015692][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.038015][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.063232][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.123296][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.137254][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.162150][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.174050][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.253458][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.275574][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.286953][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.298723][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.327429][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.403587][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.442333][ T4783] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.449579][ T4783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.467853][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.485045][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.495225][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.529915][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.551889][ T4783] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.559136][ T4783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.578742][ T5848] Bluetooth: hci2: command tx timeout [ 83.644657][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.652085][ T5843] Bluetooth: hci1: command tx timeout [ 83.658182][ T5848] Bluetooth: hci0: command tx timeout [ 83.687875][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.709117][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.736402][ T5843] Bluetooth: hci3: command tx timeout [ 83.741901][ T5848] Bluetooth: hci4: command tx timeout [ 83.751909][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.759080][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.805620][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.828423][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.835817][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.875228][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.891423][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.898575][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.938406][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.945612][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.023543][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.056801][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.087777][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.095017][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.132689][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.139881][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.154246][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.171464][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.202842][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.210327][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.273877][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.281162][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.383275][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.474906][ T5835] veth0_vlan: entered promiscuous mode [ 84.492743][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.541115][ T5835] veth1_vlan: entered promiscuous mode [ 84.574504][ T5834] veth0_vlan: entered promiscuous mode [ 84.622461][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.632570][ T5834] veth1_vlan: entered promiscuous mode [ 84.651350][ T5835] veth0_macvtap: entered promiscuous mode [ 84.664224][ T5835] veth1_macvtap: entered promiscuous mode [ 84.726730][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.760481][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.827859][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.840451][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.850719][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.859942][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.874101][ T5834] veth0_macvtap: entered promiscuous mode [ 84.929605][ T5834] veth1_macvtap: entered promiscuous mode [ 84.972614][ T5833] veth0_vlan: entered promiscuous mode [ 85.032947][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.061598][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.068506][ T4783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.089588][ T5833] veth1_vlan: entered promiscuous mode [ 85.099304][ T4783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.125520][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.160347][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.188076][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.202143][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.213930][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.225069][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.249390][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.264093][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.369532][ T5833] veth0_macvtap: entered promiscuous mode [ 85.400332][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.412663][ T5833] veth1_macvtap: entered promiscuous mode [ 85.474317][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.508787][ T5837] veth0_vlan: entered promiscuous mode [ 85.521175][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.539085][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.582603][ T5837] veth1_vlan: entered promiscuous mode [ 85.630493][ T5837] veth0_macvtap: entered promiscuous mode [ 85.640504][ T5837] veth1_macvtap: entered promiscuous mode [ 85.670789][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.678914][ T5848] Bluetooth: hci2: command tx timeout [ 85.699602][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.714542][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.725585][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.740276][ T5848] Bluetooth: hci0: command tx timeout [ 85.745712][ T5848] Bluetooth: hci1: command tx timeout [ 85.755007][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.764079][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.778932][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.806307][ T5843] Bluetooth: hci4: command tx timeout [ 85.806419][ T5848] Bluetooth: hci3: command tx timeout [ 85.830470][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.856377][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.865225][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.878301][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.886178][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.894972][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.489512][ T5842] veth0_vlan: entered promiscuous mode [ 86.546509][ T43] cfg80211: failed to load regulatory.db [ 86.567917][ T5963] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.666532][ T5966] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 86.678157][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.700797][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.727114][ T5842] veth1_vlan: entered promiscuous mode [ 86.853555][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.876665][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.954696][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.960223][ T5842] veth0_macvtap: entered promiscuous mode [ 87.049609][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.726158][ T5848] Bluetooth: hci2: command tx timeout [ 87.785721][ T5842] veth1_macvtap: entered promiscuous mode [ 87.928033][ T5843] Bluetooth: hci0: command tx timeout [ 87.958933][ T5853] Bluetooth: hci3: command tx timeout [ 87.959005][ T5846] Bluetooth: hci4: command tx timeout [ 87.971783][ T5848] Bluetooth: hci1: command tx timeout [ 88.564651][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.586714][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.895432][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.935714][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.599672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.628384][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.637008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.639330][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.674613][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.696108][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.798023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.804066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.807190][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 89.826856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.906335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.008834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.008852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 90.111165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.111189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 91.172935][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.184077][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.349648][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.461431][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.488042][ T6017] Bluetooth: MGMT ver 1.23 [ 92.059904][ T6022] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 92.073809][ T6022] Error validating options; rc = [-22] [ 100.947986][ T6071] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.417990][ T6098] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 105.648493][ T6107] vlan2: entered allmulticast mode [ 105.653770][ T6107] bond_slave_1: entered allmulticast mode [ 105.682519][ T6110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.38'. [ 106.857680][ T6114] vlan2: entered allmulticast mode [ 106.884963][ T6114] veth1: entered allmulticast mode [ 107.568979][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.681065][ T6129] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 107.688833][ T6129] netlink: 'syz.2.39': attribute type 2 has an invalid length. [ 107.698179][ T6129] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 107.705820][ T6129] netlink: 'syz.2.39': attribute type 2 has an invalid length. [ 107.910145][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.969501][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 107.985802][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 108.014315][ T24] usb 5-1: Product: syz [ 108.024420][ T24] usb 5-1: Manufacturer: syz [ 108.041150][ T24] usb 5-1: SerialNumber: syz [ 109.047611][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 109.392734][ T24] usb 5-1: USB disconnect, device number 2 [ 110.127879][ T24] usblp0: removed [ 110.617181][ T6151] netlink: 'syz.3.48': attribute type 1 has an invalid length. [ 111.542135][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 112.128580][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.456547][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 112.569813][ T9] usb 1-1: config 0 has no interfaces? [ 112.659567][ T6168] netlink: 'syz.1.52': attribute type 10 has an invalid length. [ 112.668148][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.676379][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.695601][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.716665][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.735788][ T9] usb 1-1: SerialNumber: syz [ 112.744246][ T6168] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.751481][ T6168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.759459][ T6168] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.766672][ T6168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.803226][ T9] usb 1-1: config 0 descriptor?? [ 112.819440][ T6168] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 113.984647][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 113.999987][ T6163] team_slave_0: entered promiscuous mode [ 114.005859][ T6163] team_slave_1: entered promiscuous mode [ 114.189839][ T6185] o2cb: This node has not been configured. [ 114.196129][ T6185] o2cb: Cluster check failed. Fix errors before retrying. [ 114.203582][ T6185] (syz.4.56,6185,0):user_dlm_register:674 ERROR: status = -22 [ 114.211491][ T6185] (syz.4.56,6185,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 114.252262][ T6163] vlan2: entered promiscuous mode [ 114.503164][ T6163] team0: entered promiscuous mode [ 115.541852][ T6168] bridge_slave_1: left allmulticast mode [ 115.556052][ T6168] bridge_slave_1: left promiscuous mode [ 115.561885][ T6168] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.857738][ T6168] bridge_slave_0: left allmulticast mode [ 115.872185][ T6168] bridge_slave_0: left promiscuous mode [ 115.872463][ T5906] usb 1-1: USB disconnect, device number 2 [ 115.878922][ T6168] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.840882][ T6168] bond0: (slave bridge0): Releasing backup interface [ 118.246919][ T6220] ptrace attach of "./syz-executor exec"[5842] was attempted by " [ 121.861002][ T6242] tipc: Started in network mode [ 122.939830][ T6242] tipc: Node identity d6d884e31c79, cluster identity 4711 [ 122.986213][ T6242] tipc: Enabled bearer , priority 0 [ 123.007765][ T6255] syz.2.71: attempt to access beyond end of device [ 123.007765][ T6255] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 123.022831][ T6255] efs: cannot read volume header [ 123.265493][ T6250] syzkaller0: entered promiscuous mode [ 124.194160][ T6250] syzkaller0: entered allmulticast mode [ 124.259447][ T5913] tipc: Node number set to 3399582947 [ 126.889672][ T6269] syz.2.74 (6269): drop_caches: 2 [ 126.909116][ T6269] syz.2.74 (6269): drop_caches: 2 [ 128.147225][ T6242] tipc: Resetting bearer [ 128.821860][ T6242] tipc: Disabling bearer [ 128.859873][ T6273] netlink: 830 bytes leftover after parsing attributes in process `syz.0.75'. [ 129.527116][ T30] audit: type=1326 audit(1751998313.753:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 130.459953][ T30] audit: type=1326 audit(1751998313.753:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 130.481245][ T30] audit: type=1326 audit(1751998313.753:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 130.502472][ T30] audit: type=1326 audit(1751998313.783:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 130.523948][ T30] audit: type=1326 audit(1751998313.783:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 130.552661][ T30] audit: type=1326 audit(1751998313.783:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 130.632578][ T30] audit: type=1326 audit(1751998313.783:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 131.886978][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.82'. [ 131.923721][ T6300] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 131.932673][ T6300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.068803][ T30] audit: type=1326 audit(1751998313.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 132.332478][ T30] audit: type=1326 audit(1751998313.793:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 133.316454][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.323013][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.771411][ T30] audit: type=1326 audit(1751998313.793:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6287 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bd638e929 code=0x7ffc0000 [ 134.024910][ T6316] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 137.013573][ T6340] syz.0.93: attempt to access beyond end of device [ 137.013573][ T6340] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 137.026412][ T6340] efs: cannot read volume header [ 138.635933][ T6355] syz.4.97 uses obsolete (PF_INET,SOCK_PACKET) [ 141.867965][ T6381] capability: warning: `syz.2.104' uses 32-bit capabilities (legacy support in use) [ 143.333762][ T6396] 9pnet_fd: Insufficient options for proto=fd [ 146.481493][ T6423] trusted_key: encrypted_key: master key parameter 'tr?' is invalid [ 148.653082][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 149.566654][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 149.988602][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 150.334670][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 150.403028][ T6428] ceph: No mds server is up or the cluster is laggy [ 151.304666][ T6462] process 'syz.3.126' launched '/dev/fd/5' with NULL argv: empty string added [ 154.336447][ T6483] capability: warning: `syz.4.131' uses deprecated v2 capabilities in a way that may be insecure [ 158.034301][ T6509] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 158.042328][ T6509] UDF-fs: Scanning with blocksize 512 failed [ 158.057821][ T6509] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 158.065458][ T6509] UDF-fs: Scanning with blocksize 1024 failed [ 158.082336][ T6509] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 158.090243][ T6509] UDF-fs: Scanning with blocksize 2048 failed [ 158.125342][ T6509] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 158.133345][ T6509] UDF-fs: Scanning with blocksize 4096 failed [ 158.624892][ T6512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.542187][ T6553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.150'. [ 165.279064][ T6577] vivid-002: disconnect [ 165.803520][ T6572] vivid-002: reconnect [ 166.475445][ T5939] kernel write not supported for file /snd/seq (pid: 5939 comm: kworker/1:5) [ 167.167708][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.944653][ T6605] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 169.985918][ T6605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.993439][ T6605] IPv6: NLM_F_CREATE should be set when creating new route [ 170.000752][ T6605] IPv6: NLM_F_CREATE should be set when creating new route [ 170.052029][ T6608] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 170.087736][ T6608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.199392][ T6608] Zero length message leads to an empty skb [ 177.955027][ T6659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 180.853104][ T6686] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.899888][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 188.165444][ T6734] bond0: entered promiscuous mode [ 188.173649][ T6734] bond_slave_0: entered promiscuous mode [ 188.186097][ T6734] bond_slave_1: entered promiscuous mode [ 188.208216][ T6734] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.238183][ T6734] bond0: left promiscuous mode [ 188.242995][ T6734] bond_slave_0: left promiscuous mode [ 188.257311][ T6734] bond_slave_1: left promiscuous mode [ 190.226019][ T6756] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 190.337907][ T6756] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 190.599569][ T6756] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 190.621089][ T6760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 190.650883][ T6760] bond_slave_0: entered promiscuous mode [ 190.656699][ T6760] bond_slave_1: entered promiscuous mode [ 190.663865][ T6756] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 190.706267][ T6760] macvtap1: entered promiscuous mode [ 190.711606][ T6760] bond0: entered promiscuous mode [ 190.713868][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.724975][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.740681][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.748724][ T6760] macvtap1: entered allmulticast mode [ 190.748756][ T6760] bond0: entered allmulticast mode [ 190.748769][ T6760] bond_slave_0: entered allmulticast mode [ 190.748782][ T6760] bond_slave_1: entered allmulticast mode [ 190.752473][ T6760] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 190.783651][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.794992][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.810477][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.825052][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.834686][ T6756] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 190.857255][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.866849][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.868608][ T6756] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 190.877202][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.894549][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 190.903146][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.116384][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.124191][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.132755][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.140546][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.148372][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.152871][ T6756] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 191.156316][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.170391][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.183481][ T6756] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 191.201190][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.561594][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.603938][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.624730][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.653814][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.682109][ T6756] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 191.724682][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.737248][ T6756] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 191.770371][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.809261][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.862763][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.918616][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 191.966297][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 192.171811][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 192.171828][ T30] audit: type=1326 audit(1751998376.383:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6757 comm="syz.4.207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f248258e929 code=0x0 [ 192.199026][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 192.208300][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 192.216339][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 192.225287][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 192.233506][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 192.262279][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 192.349877][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 192.473289][ T6786] usb usb1: check_ctrlrecip: process 6786 (syz.1.211) requesting ep 01 but needs 81 [ 192.755795][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 193.399363][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 193.407409][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 193.415254][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 193.423374][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 193.431248][ T9] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 193.548657][ T9] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.786003][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 193.794550][ T6792] fido_id[6792]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.989654][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 194.064129][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.072108][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.082253][ T5906] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 194.455753][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.524501][ T5906] usb 2-1: Product: syz [ 194.528867][ T5906] usb 2-1: Manufacturer: syz [ 194.533487][ T5906] usb 2-1: SerialNumber: syz [ 194.600161][ T5906] r8152-cfgselector 2-1: Unknown version 0x0000 [ 194.643081][ T5906] r8152-cfgselector 2-1: config 0 descriptor?? [ 194.690005][ T6795] syz.3.214 (6795) used greatest stack depth: 16672 bytes left [ 195.286102][ T5906] r8152-cfgselector 2-1: Unknown version 0x0000 [ 195.292574][ T5906] r8152-cfgselector 2-1: bad CDC descriptors [ 195.747315][ T5906] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 196.822956][ T6825] blkio.reset_stats is deprecated [ 198.416976][ T6827] sctp: failed to load transform for md5: -2 [ 203.288906][ T6846] ubi31: attaching mtd0 [ 203.414092][ T6846] ubi31: scanning is finished [ 203.509824][ T6846] ubi31: empty MTD device detected [ 203.822483][ T6846] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 207.909818][ T6004] libceph: connect (1)[c::]:6789 error -101 [ 207.948727][ T6004] libceph: mon0 (1)[c::]:6789 connect error [ 208.188361][ T6885] ceph: No mds server is up or the cluster is laggy [ 208.226172][ T6004] libceph: connect (1)[c::]:6789 error -101 [ 208.232301][ T6004] libceph: mon0 (1)[c::]:6789 connect error [ 209.111832][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 209.118226][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 214.125308][ T6948] xt_ecn: cannot match TCP bits for non-tcp packets [ 215.071856][ T6956] overlay: Unknown parameter 'fsuuid' [ 220.471583][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 220.481173][ T7000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 222.288501][ T30] audit: type=1326 audit(1751998405.723:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7005 comm="syz.2.270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52dd38e929 code=0x0 [ 222.376757][ T7013] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 222.444621][ T7013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.519634][ T7016] loop6: detected capacity change from 0 to 2560 [ 222.539828][ T7013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.546931][ T7013] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.559536][ T7013] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 222.582675][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.591328][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.602880][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.614357][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.623747][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.635132][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.673999][ T7017] gretap1: entered promiscuous mode [ 222.677073][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.723236][ T7017] bond1: (slave gretap1): making interface the new active one [ 222.738881][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.757417][ T7016] ldm_validate_partition_table(): Disk read failed. [ 222.770526][ T7017] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 222.968009][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.102183][ T7016] Buffer I/O error on dev loop6, logical block 0, async page read [ 223.137569][ T7016] Dev loop6: unable to read RDB block 0 [ 223.199746][ T7020] macvlan2: entered promiscuous mode [ 223.209655][ T7020] macvlan2: entered allmulticast mode [ 223.217167][ T7016] loop6: unable to read partition table [ 223.229174][ T7020] bond1: entered promiscuous mode [ 223.250810][ T7020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.265939][ T7016] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 223.486652][ T7020] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 223.559862][ T7032] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 223.572130][ T7032] /dev/nullb0: Can't open blockdev [ 224.053864][ T7020] bond1: left promiscuous mode [ 225.301221][ T7038] netlink: 'syz.4.277': attribute type 32 has an invalid length. [ 225.496680][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.519026][ T7031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.885127][ T7031] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.043741][ T7031] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.178719][ T7031] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.264993][ T7031] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.805522][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 231.366138][ T7093] bond_slave_0: entered promiscuous mode [ 231.371874][ T7093] bond_slave_1: entered promiscuous mode [ 231.430020][ T7093] macvtap1: entered promiscuous mode [ 231.463640][ T7093] bond0: entered promiscuous mode [ 231.509518][ T7093] macvtap1: entered allmulticast mode [ 231.539020][ T7093] bond0: entered allmulticast mode [ 231.589073][ T7093] bond_slave_0: entered allmulticast mode [ 233.127223][ T7093] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 235.227932][ T7118] vlan0: entered promiscuous mode [ 235.313006][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 235.327221][ T7118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.297'. [ 235.534569][ T7122] dummy0: entered promiscuous mode [ 235.559613][ T7122] vlan2: entered promiscuous mode [ 237.241621][ T7130] netlink: 'syz.3.302': attribute type 3 has an invalid length. [ 237.249644][ T7130] netlink: 'syz.3.302': attribute type 3 has an invalid length. [ 237.317750][ T7130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.302'. [ 239.753073][ T7144] sctp: failed to load transform for md5: -2 [ 246.291867][ T7195] ubi31: attaching mtd0 [ 246.509578][ T7195] ubi31: scanning is finished [ 246.535830][ T5931] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 246.693704][ T7195] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 246.707828][ T5931] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.734057][ T7195] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 246.744945][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 246.795550][ T7195] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 246.805289][ T5931] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 246.836209][ T7195] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 246.846772][ T5931] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 246.861681][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.869948][ T7195] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 246.887175][ T5931] usb 4-1: Product: syz [ 246.895771][ T7195] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 246.906783][ T5931] usb 4-1: Manufacturer: syz [ 246.911420][ T5931] usb 4-1: SerialNumber: syz [ 246.927068][ T7195] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2034615536 [ 246.947331][ T5931] usb 4-1: config 0 descriptor?? [ 247.139015][ T5931] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 247.155773][ T7195] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 248.481231][ T7202] ubi31: background thread "ubi_bgt31d" started, PID 7202 [ 250.608237][ T7221] tipc: Failed to obtain node identity [ 250.613788][ T7221] tipc: Enabling of bearer rejected, failed to enable media [ 250.666424][ T5905] usb 4-1: USB disconnect, device number 2 [ 251.113306][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'. [ 251.825224][ T7234] bond_slave_0: entered promiscuous mode [ 251.831027][ T7234] bond_slave_1: entered promiscuous mode [ 251.886272][ T7234] macvtap1: entered promiscuous mode [ 251.891714][ T7234] bond0: entered promiscuous mode [ 251.900843][ T7234] macvtap1: entered allmulticast mode [ 251.908187][ T7234] bond0: entered allmulticast mode [ 251.913333][ T7234] bond_slave_0: entered allmulticast mode [ 251.922996][ T7234] bond_slave_1: entered allmulticast mode [ 251.931421][ T7234] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 253.106936][ T7252] tipc: Failed to obtain node identity [ 253.114997][ T7252] tipc: Enabling of bearer rejected, failed to enable media [ 254.396789][ T7259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.495002][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.501791][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.588683][ T7318] usb usb1: check_ctrlrecip: process 7318 (syz.3.347) requesting ep 01 but needs 81 [ 262.159994][ T7324] --map-set only usable from mangle table [ 262.926255][ T7333] tipc: Started in network mode [ 262.939987][ T7333] tipc: Node identity dad8e4c13db9, cluster identity 4711 [ 262.955923][ T7333] tipc: Enabled bearer , priority 0 [ 263.061711][ T7333] syzkaller0: entered promiscuous mode [ 263.068288][ T7333] syzkaller0: entered allmulticast mode [ 263.709117][ T7332] tipc: Resetting bearer [ 263.748256][ T7332] tipc: Disabling bearer [ 266.144409][ T7357] tipc: Enabled bearer , priority 0 [ 266.155877][ T7357] syzkaller0: entered promiscuous mode [ 266.161477][ T7357] syzkaller0: entered allmulticast mode [ 266.198636][ T7357] tipc: Resetting bearer [ 266.211887][ T7353] tipc: Resetting bearer [ 266.242642][ T7353] tipc: Disabling bearer [ 267.912496][ T7375] tipc: Enabled bearer , priority 0 [ 267.921347][ T7375] syzkaller0: entered promiscuous mode [ 267.927838][ T7375] syzkaller0: entered allmulticast mode [ 267.981588][ T7374] tipc: Resetting bearer [ 268.032967][ T7374] tipc: Disabling bearer [ 268.241577][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.4.366'. [ 269.322750][ T7391] tipc: Started in network mode [ 269.343054][ T7391] tipc: Node identity aeb8a4e4fed, cluster identity 4711 [ 269.426469][ T7391] tipc: Enabled bearer , priority 0 [ 269.433815][ T7395] syzkaller0: entered promiscuous mode [ 269.495933][ T7395] syzkaller0: entered allmulticast mode [ 269.824582][ T7398] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.854032][ T7390] tipc: Resetting bearer [ 269.871624][ T7390] tipc: Disabling bearer [ 270.076915][ T7402] tipc: Started in network mode [ 270.092203][ T7402] tipc: Node identity aab0ffebfeac, cluster identity 4711 [ 270.113946][ T7402] tipc: Enabled bearer , priority 0 [ 270.181350][ T7405] syzkaller0: entered promiscuous mode [ 270.618807][ T7405] syzkaller0: entered allmulticast mode [ 270.638867][ T7402] tipc: Resetting bearer [ 270.660600][ T7401] tipc: Resetting bearer [ 270.880987][ T7401] tipc: Disabling bearer [ 273.696285][ T7442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.784952][ T7448] netlink: 32 bytes leftover after parsing attributes in process `syz.2.383'. [ 273.872367][ T7445] tipc: Enabled bearer , priority 0 [ 273.884532][ T7445] syzkaller0: entered promiscuous mode [ 273.930330][ T7445] syzkaller0: entered allmulticast mode [ 275.101972][ T5939] tipc: Node number set to 1411186667 [ 276.009189][ T7444] tipc: Resetting bearer [ 276.091040][ T7444] tipc: Disabling bearer [ 276.193061][ T7467] tipc: Enabled bearer , priority 0 [ 276.196026][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 276.224066][ T7467] syzkaller0: entered promiscuous mode [ 276.264489][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 276.273342][ T7467] syzkaller0: entered allmulticast mode [ 276.333361][ T7465] tipc: Resetting bearer [ 276.372813][ T7465] tipc: Disabling bearer [ 276.429208][ T7472] tipc: Enabled bearer , priority 0 [ 276.438116][ T7472] syzkaller0: entered promiscuous mode [ 276.443601][ T7472] syzkaller0: entered allmulticast mode [ 276.452769][ T7472] tipc: Resetting bearer [ 276.459553][ T7471] tipc: Resetting bearer [ 276.481071][ T7471] tipc: Disabling bearer [ 277.448461][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 278.354959][ T7490] overlayfs: failed to resolve './file1': -2 [ 279.421052][ T7495] overlayfs: missing 'lowerdir' [ 281.613771][ T7516] tipc: Enabled bearer , priority 0 [ 281.787679][ T7513] syzkaller0: entered promiscuous mode [ 281.887611][ T7513] syzkaller0: entered allmulticast mode [ 282.409750][ T7519] tipc: Resetting bearer [ 283.447385][ T7510] tipc: Resetting bearer [ 284.026575][ T7510] tipc: Disabling bearer [ 285.010117][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 285.178204][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.408'. [ 285.949396][ T5906] kernel write not supported for file /snd/seq (pid: 5906 comm: kworker/0:5) [ 292.171991][ T7658] syz.0.423 (7658): drop_caches: 2 [ 292.178557][ T7658] syz.0.423 (7658): drop_caches: 2 [ 296.056680][ T7681] tipc: Started in network mode [ 296.065933][ T7681] tipc: Node identity 124d6b3d8789, cluster identity 4711 [ 296.141223][ T7681] tipc: Enabled bearer , priority 0 [ 296.574825][ T7686] macvtap1: left allmulticast mode [ 296.590187][ T7686] bond0: left allmulticast mode [ 296.602502][ T7686] bond_slave_0: left allmulticast mode [ 296.613213][ T7687] syzkaller0: entered promiscuous mode [ 296.620092][ T7687] syzkaller0: entered allmulticast mode [ 296.639312][ T7692] tipc: Resetting bearer [ 297.117196][ T7679] tipc: Resetting bearer [ 297.231220][ T7679] tipc: Disabling bearer [ 297.719942][ T7699] tipc: Enabled bearer , priority 0 [ 297.889257][ T7705] syzkaller0: entered promiscuous mode [ 297.894790][ T7705] syzkaller0: entered allmulticast mode [ 297.904193][ T7699] tipc: Resetting bearer [ 297.925950][ T7697] tipc: Resetting bearer [ 298.031190][ T7697] tipc: Disabling bearer [ 298.692038][ T7720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 305.567108][ T7764] tipc: Enabled bearer , priority 0 [ 305.574339][ T7764] syzkaller0: entered promiscuous mode [ 305.582443][ T7764] syzkaller0: entered allmulticast mode [ 305.592229][ T7764] tipc: Resetting bearer [ 305.602127][ T7763] tipc: Resetting bearer [ 305.622004][ T7763] tipc: Disabling bearer [ 306.726355][ T7778] vivid-003: disconnect [ 307.526271][ T7775] vivid-003: reconnect [ 307.870498][ T7784] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 310.739737][ T7803] usb usb1: check_ctrlrecip: process 7803 (syz.0.460) requesting ep 01 but needs 81 [ 311.721142][ T7812] veth1_macvtap: left promiscuous mode [ 311.728069][ T7812] macsec0: entered allmulticast mode [ 312.568496][ T7815] veth1_macvtap: entered promiscuous mode [ 312.574572][ T7815] veth1_macvtap: entered allmulticast mode [ 312.580818][ T7815] macsec0: left allmulticast mode [ 312.585910][ T7815] veth1_macvtap: left allmulticast mode [ 313.032991][ T7825] tipc: Enabled bearer , priority 0 [ 313.078489][ T7825] syzkaller0: entered promiscuous mode [ 313.158453][ T7825] syzkaller0: entered allmulticast mode [ 313.253677][ T7825] tipc: Resetting bearer [ 313.302077][ T7824] tipc: Resetting bearer [ 313.376855][ T7824] tipc: Disabling bearer [ 315.004936][ T7845] tipc: Enabled bearer , priority 0 [ 315.032334][ T7845] syzkaller0: entered promiscuous mode [ 315.045798][ T7845] syzkaller0: entered allmulticast mode [ 315.097577][ T7845] tipc: Resetting bearer [ 315.117138][ T7842] kvm: kvm [7841]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x9a4d [ 315.126718][ T7844] tipc: Resetting bearer [ 315.145305][ T7842] kvm_intel: kvm [7841]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x6e45 [ 315.165197][ T7842] kvm_intel: kvm [7841]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x9e21 [ 315.179923][ T7844] tipc: Disabling bearer [ 315.706339][ T7854] tipc: Enabled bearer , priority 0 [ 316.521215][ T7860] syzkaller0: entered promiscuous mode [ 316.546165][ T7860] syzkaller0: entered allmulticast mode [ 316.854216][ T7855] usb usb1: check_ctrlrecip: process 7855 (syz.4.474) requesting ep 01 but needs 81 [ 316.856985][ T7861] tipc: Resetting bearer [ 316.953675][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.960866][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.236358][ T7852] tipc: Resetting bearer [ 317.505591][ T7852] tipc: Disabling bearer [ 317.863001][ T7869] o2cb: This node has not been configured. [ 317.869221][ T7869] o2cb: Cluster check failed. Fix errors before retrying. [ 317.877926][ T7869] (syz.2.476,7869,0):user_dlm_register:674 ERROR: status = -22 [ 317.885768][ T7869] (syz.2.476,7869,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 323.560341][ T7909] --map-set only usable from mangle table [ 324.341442][ T7912] tipc: Enabled bearer , priority 0 [ 324.371799][ T7912] syzkaller0: entered promiscuous mode [ 324.390713][ T7912] syzkaller0: entered allmulticast mode [ 324.595755][ T7915] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 324.608290][ T7915] overlayfs: missing 'lowerdir' [ 324.638582][ T7916] tipc: Resetting bearer [ 324.899183][ T7911] tipc: Resetting bearer [ 324.957006][ T7911] tipc: Disabling bearer [ 325.186980][ T7923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.496'. [ 325.438177][ T7923] netlink: 16 bytes leftover after parsing attributes in process `syz.4.496'. [ 325.449914][ T7923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.496'. [ 325.487899][ T7923] netlink: 36 bytes leftover after parsing attributes in process `syz.4.496'. [ 328.790091][ T7945] netlink: 'syz.4.501': attribute type 39 has an invalid length. [ 329.111857][ T7950] tipc: Enabled bearer , priority 0 [ 329.149519][ T7950] syzkaller0: entered promiscuous mode [ 329.158759][ T7950] syzkaller0: entered allmulticast mode [ 329.300830][ T7953] vivid-000: disconnect [ 329.329688][ T7950] tipc: Resetting bearer [ 329.467805][ T7948] tipc: Resetting bearer [ 329.886812][ T7948] tipc: Disabling bearer [ 330.114700][ T7947] vivid-000: reconnect [ 333.035267][ T7987] syz.3.512: attempt to access beyond end of device [ 333.035267][ T7987] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 333.048896][ T7987] SQUASHFS error: Failed to read block 0x0: -5 [ 333.055486][ T7987] unable to read squashfs_super_block [ 335.889438][ T8010] SET target dimension over the limit! [ 337.210111][ T8023] vivid-004: disconnect [ 337.350205][ T8022] syzkaller0: entered promiscuous mode [ 337.741242][ T8022] syzkaller0: entered allmulticast mode [ 337.814437][ T8014] vivid-004: reconnect [ 340.386138][ T9] libceph: connect (1)[c::]:6789 error -101 [ 340.392291][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 340.784480][ T30] audit: type=1326 audit(1751998525.013:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8043 comm="syz.3.527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f102c38e929 code=0x0 [ 341.206140][ T8053] netlink: 68 bytes leftover after parsing attributes in process `syz.4.529'. [ 341.621431][ T8032] ceph: No mds server is up or the cluster is laggy [ 341.999066][ T9] libceph: connect (1)[c::]:6789 error -101 [ 342.005171][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 343.017905][ T8062] tipc: Enabled bearer , priority 0 [ 343.091046][ T8062] syzkaller0: entered promiscuous mode [ 343.185924][ T8062] syzkaller0: entered allmulticast mode [ 343.329995][ T8071] tipc: Resetting bearer [ 343.421414][ T8061] tipc: Resetting bearer [ 344.107010][ T5939] tipc: Node number set to 1349035236 [ 344.325006][ T8077] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 344.576263][ T8061] tipc: Disabling bearer [ 344.979568][ T30] audit: type=1326 audit(1751998529.203:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8081 comm="syz.3.539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f102c38e929 code=0x0 [ 347.940276][ T30] audit: type=1326 audit(1751998531.693:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8094 comm="syz.4.552" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f248258e929 code=0x0 [ 350.257666][ T8133] ------------[ cut here ]------------ [ 350.263561][ T8133] WARNING: CPU: 1 PID: 8133 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 350.273517][ T8133] Modules linked in: [ 350.277748][ T8133] CPU: 1 UID: 0 PID: 8133 Comm: syz.4.546 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 350.289754][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.299968][ T8133] RIP: 0010:folio_memcg+0x1a8/0x310 [ 350.305223][ T8133] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a9 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 350.325384][ T8133] RSP: 0018:ffffc9000b2c7250 EFLAGS: 00010287 [ 350.332163][ T8133] RAX: ffffffff8205b037 RBX: 0000000000000000 RCX: 0000000000080000 [ 350.340202][ T8133] RDX: ffffc9000d320000 RSI: 0000000000001d70 RDI: 0000000000001d71 [ 350.348349][ T8133] RBP: 0000000000000000 R08: ffffea000080a7c7 R09: 1ffffd40001014f8 [ 350.356442][ T8133] R10: dffffc0000000000 R11: fffff940001014f9 R12: ffffea000080a7f0 [ 350.364470][ T8133] R13: dffffc0000000000 R14: ffff888028996f80 R15: 0000000000000002 [ 350.372527][ T8133] FS: 00007f24833b46c0(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000 [ 350.381669][ T8133] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.388357][ T8133] CR2: 0000000000000000 CR3: 0000000076984000 CR4: 00000000003526f0 [ 350.396426][ T8133] Call Trace: [ 350.399731][ T8133] [ 350.402685][ T8133] workingset_activation+0x5f/0x4a0 [ 350.407946][ T8133] ? folio_mark_accessed+0x311/0x4a0 [ 350.413634][ T8133] folio_mark_accessed+0x3b5/0x4a0 [ 350.419087][ T8133] kvm_release_page_clean+0x9a/0xe0 [ 350.424317][ T8133] kvm_tdp_page_fault+0x2dd/0x370 [ 350.429411][ T8133] kvm_mmu_do_page_fault+0x2c5/0x640 [ 350.434731][ T8133] ? vmx_vcpu_run+0xd8b/0x25d0 [ 350.439551][ T8133] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 350.445439][ T8133] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 350.451057][ T8133] kvm_mmu_page_fault+0x22f/0xb70 [ 350.456147][ T8133] ? __pfx_handle_ept_violation+0x10/0x10 [ 350.461916][ T8133] vmx_handle_exit+0x1093/0x18a0 [ 350.466938][ T8133] ? vcpu_run+0x361c/0x6f70 [ 350.471480][ T8133] vcpu_run+0x432e/0x6f70 [ 350.475878][ T8133] ? vcpu_run+0x361c/0x6f70 [ 350.480455][ T8133] ? __pfx_vcpu_run+0x10/0x10 [ 350.485155][ T8133] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 350.490966][ T8133] ? rcu_is_watching+0x15/0xb0 [ 350.495801][ T8133] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 350.501392][ T8133] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 350.507181][ T8133] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 350.513204][ T8133] ? rcu_is_watching+0x15/0xb0 [ 350.518486][ T8133] ? look_up_lock_class+0x74/0x170 [ 350.523953][ T8133] ? register_lock_class+0x51/0x320 [ 350.529252][ T8133] ? __lock_acquire+0xab9/0xd20 [ 350.534236][ T8133] kvm_vcpu_ioctl+0x95c/0xe90 [ 350.538960][ T8133] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 350.544189][ T8133] ? __lock_acquire+0xab9/0xd20 [ 350.549099][ T8133] ? __asan_memset+0x22/0x50 [ 350.553715][ T8133] ? smack_file_ioctl+0x302/0x340 [ 350.558798][ T8133] ? __pfx_smack_file_ioctl+0x10/0x10 [ 350.564214][ T8133] ? __fget_files+0x2a/0x420 [ 350.568843][ T8133] ? __fget_files+0x3a0/0x420 [ 350.573543][ T8133] ? __fget_files+0x2a/0x420 [ 350.578184][ T8133] ? bpf_lsm_file_ioctl+0x9/0x20 [ 350.583151][ T8133] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 350.588417][ T8133] __se_sys_ioctl+0xf9/0x170 [ 350.593034][ T8133] do_syscall_64+0xfa/0x3b0 [ 350.597593][ T8133] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.602823][ T8133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.608950][ T8133] ? clear_bhb_loop+0x60/0xb0 [ 350.613661][ T8133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.619965][ T8133] RIP: 0033:0x7f248258e929 [ 350.624770][ T8133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.644402][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.650612][ T8133] RSP: 002b:00007f24833b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.659102][ T8133] RAX: ffffffffffffffda RBX: 00007f24827b6080 RCX: 00007f248258e929 [ 350.667139][ T8133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 350.675149][ T8133] RBP: 00007f2482610b39 R08: 0000000000000000 R09: 0000000000000000 [ 350.683184][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.691207][ T8133] R13: 0000000000000000 R14: 00007f24827b6080 R15: 00007ffc6466f578 [ 350.699253][ T8133] [ 350.702287][ T8133] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.709557][ T8133] CPU: 1 UID: 0 PID: 8133 Comm: syz.4.546 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) [ 350.721437][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.731487][ T8133] Call Trace: [ 350.734757][ T8133] [ 350.737693][ T8133] dump_stack_lvl+0x99/0x250 [ 350.742284][ T8133] ? __asan_memcpy+0x40/0x70 [ 350.746868][ T8133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.752057][ T8133] ? __pfx__printk+0x10/0x10 [ 350.756658][ T8133] panic+0x2db/0x790 [ 350.760552][ T8133] ? __pfx_panic+0x10/0x10 [ 350.764981][ T8133] __warn+0x31b/0x4b0 [ 350.768956][ T8133] ? folio_memcg+0x1a8/0x310 [ 350.773537][ T8133] ? folio_memcg+0x1a8/0x310 [ 350.778121][ T8133] report_bug+0x2be/0x4f0 [ 350.782450][ T8133] ? folio_memcg+0x1a8/0x310 [ 350.787036][ T8133] ? folio_memcg+0x1a8/0x310 [ 350.791618][ T8133] ? folio_memcg+0x1aa/0x310 [ 350.796203][ T8133] handle_bug+0x84/0x160 [ 350.800444][ T8133] exc_invalid_op+0x1a/0x50 [ 350.804937][ T8133] asm_exc_invalid_op+0x1a/0x20 [ 350.809781][ T8133] RIP: 0010:folio_memcg+0x1a8/0x310 [ 350.814971][ T8133] Code: 80 3c 28 00 74 08 4c 89 f7 e8 b4 cc 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 a9 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 350.834567][ T8133] RSP: 0018:ffffc9000b2c7250 EFLAGS: 00010287 [ 350.840627][ T8133] RAX: ffffffff8205b037 RBX: 0000000000000000 RCX: 0000000000080000 [ 350.848593][ T8133] RDX: ffffc9000d320000 RSI: 0000000000001d70 RDI: 0000000000001d71 [ 350.856562][ T8133] RBP: 0000000000000000 R08: ffffea000080a7c7 R09: 1ffffd40001014f8 [ 350.864528][ T8133] R10: dffffc0000000000 R11: fffff940001014f9 R12: ffffea000080a7f0 [ 350.872492][ T8133] R13: dffffc0000000000 R14: ffff888028996f80 R15: 0000000000000002 [ 350.880460][ T8133] ? folio_memcg+0x1a7/0x310 [ 350.885053][ T8133] workingset_activation+0x5f/0x4a0 [ 350.890242][ T8133] ? folio_mark_accessed+0x311/0x4a0 [ 350.895548][ T8133] folio_mark_accessed+0x3b5/0x4a0 [ 350.900664][ T8133] kvm_release_page_clean+0x9a/0xe0 [ 350.905868][ T8133] kvm_tdp_page_fault+0x2dd/0x370 [ 350.910900][ T8133] kvm_mmu_do_page_fault+0x2c5/0x640 [ 350.916187][ T8133] ? vmx_vcpu_run+0xd8b/0x25d0 [ 350.920964][ T8133] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 350.926794][ T8133] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 350.932347][ T8133] kvm_mmu_page_fault+0x22f/0xb70 [ 350.937382][ T8133] ? __pfx_handle_ept_violation+0x10/0x10 [ 350.943101][ T8133] vmx_handle_exit+0x1093/0x18a0 [ 350.948035][ T8133] ? vcpu_run+0x361c/0x6f70 [ 350.952546][ T8133] vcpu_run+0x432e/0x6f70 [ 350.956888][ T8133] ? vcpu_run+0x361c/0x6f70 [ 350.961436][ T8133] ? __pfx_vcpu_run+0x10/0x10 [ 350.966121][ T8133] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 350.971861][ T8133] ? rcu_is_watching+0x15/0xb0 [ 350.976656][ T8133] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 350.982204][ T8133] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 350.987916][ T8133] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 350.993894][ T8133] ? rcu_is_watching+0x15/0xb0 [ 350.998655][ T8133] ? look_up_lock_class+0x74/0x170 [ 351.003768][ T8133] ? register_lock_class+0x51/0x320 [ 351.008968][ T8133] ? __lock_acquire+0xab9/0xd20 [ 351.013829][ T8133] kvm_vcpu_ioctl+0x95c/0xe90 [ 351.018516][ T8133] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 351.023706][ T8133] ? __lock_acquire+0xab9/0xd20 [ 351.028558][ T8133] ? __asan_memset+0x22/0x50 [ 351.033156][ T8133] ? smack_file_ioctl+0x302/0x340 [ 351.038185][ T8133] ? __pfx_smack_file_ioctl+0x10/0x10 [ 351.043575][ T8133] ? __fget_files+0x2a/0x420 [ 351.048167][ T8133] ? __fget_files+0x3a0/0x420 [ 351.052849][ T8133] ? __fget_files+0x2a/0x420 [ 351.057444][ T8133] ? bpf_lsm_file_ioctl+0x9/0x20 [ 351.062375][ T8133] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 351.067572][ T8133] __se_sys_ioctl+0xf9/0x170 [ 351.072168][ T8133] do_syscall_64+0xfa/0x3b0 [ 351.076673][ T8133] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.081885][ T8133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.087951][ T8133] ? clear_bhb_loop+0x60/0xb0 [ 351.092629][ T8133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.098534][ T8133] RIP: 0033:0x7f248258e929 [ 351.102954][ T8133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.122565][ T8133] RSP: 002b:00007f24833b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.130981][ T8133] RAX: ffffffffffffffda RBX: 00007f24827b6080 RCX: 00007f248258e929 [ 351.138950][ T8133] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 351.146914][ T8133] RBP: 00007f2482610b39 R08: 0000000000000000 R09: 0000000000000000 [ 351.154876][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.162846][ T8133] R13: 0000000000000000 R14: 00007f24827b6080 R15: 00007ffc6466f578 [ 351.170828][ T8133] [ 351.174167][ T8133] Kernel Offset: disabled [ 351.178502][ T8133] Rebooting in 86400 seconds..