last executing test programs: 26.650747335s ago: executing program 4 (id=442): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd4f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r9, 0x1, 0x3, &(0x7f0000000380)=[{}, {}, {}], 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x3a155000) io_submit(r9, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r8, 0x0}]) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r11 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 24.252842593s ago: executing program 1 (id=445): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = socket$inet(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x5a}, 0x20) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r4, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r4, &(0x7f0000000180)="93", 0x1, 0x8840, 0x0, 0x0) close(r4) write$dsp(0xffffffffffffffff, 0x0, 0x0) 21.752339978s ago: executing program 4 (id=447): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xffffffff}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) socket$unix(0x1, 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast1, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x16}, 0x2c) r5 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffec0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) fcntl$dupfd(r5, 0x406, r4) 21.647188013s ago: executing program 0 (id=448): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x208, 0x940c, 0x3002, 0x0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0x0, 0xff000000, 0xff], [0xffffff00, 0xffffffff, 0xffffff00, 0xffff00], 'vlan0\x00', 'geneve0\x00', {}, {0xff}, 0x1d, 0x66, 0x5, 0x2}, 0x0, 0x1c8, 0x208, 0x4001, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@recent0={{0xf8}, {0x1, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x2b, "e0a1dff634a4af5313c30a32cdad7c73ff3de5fe02a8825d9e89f6ff5d96"}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x5, 0x2, 0x1, 0xb, '\x00', 'syz1\x00', {0xf0000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), 0x0, 0x0, 0x0, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000240)={0x6, 0x0, r8}) syz_open_procfs(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 20.962974283s ago: executing program 1 (id=449): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) io_uring_enter(r0, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8) 20.605398109s ago: executing program 1 (id=451): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x10, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15655595860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) unshare(0x4000280) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) 19.440659081s ago: executing program 4 (id=452): r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xb, 0x6, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0) ioctl$VIDIOC_QUERYMENU(r3, 0xc008561c, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, 0x0, 0x4040004) ioctl$VIDIOC_SUBDEV_S_CROP(r4, 0xc038563c, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xd7b706656310aba8) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r6, 0x4028af11, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='\xfc\x05\x00\x00gvWq3K\ao\xa1\xb43\xd5\x7f\xc5|,\xe7\n^\'4\xa5\xc0\x84\x97\xb8\x17Z\xa0.\xefd\x94M\xf7\xbc\x02\x13\xf2\x15\xeb\xe6\xb8\xc9\xaeq\xb2\xe0x\x83w\xaeo\x9b6,\x88\xaa\xb2\x15\xeaM\xdf\xae\x0e5G\xc7O\x15\xb1\xa4\x95n\x11\xb4\x86\xd3\x92\x95^$-\x9ce|\xb0\xa4\xc1\x04,\xd8\x1e', &(0x7f0000000100)='noblock_\x7fG\x14T]validity', 0x0) 14.955285189s ago: executing program 3 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) pread64(r8, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r10, 0x8b) ioctl$sock_TIOCOUTQ(r10, 0x5411, 0x0) 13.564858071s ago: executing program 3 (id=457): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc090507"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r4 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 13.523203705s ago: executing program 2 (id=458): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8ff, 0x12) io_uring_setup(0x194e, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdfe, 0x801) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0xb55, 0x5, 0x9606a0a, 0x5, 0xb37, 0x3, 0x1, 0x0, 0x0, 0x6, 0x2, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x143) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) connect$netrom(r2, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) chdir(&(0x7f0000000100)='./file0\x00') 12.344874285s ago: executing program 2 (id=459): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x80010, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, 0x0, 0x10008840) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x680040, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000002440), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000002740)={0x0, 0x1012, 0x2, @discrete={0x8, 0x1}}) bind$pptp(r6, &(0x7f0000000080)={0x18, 0x2, {0x2, @broadcast}}, 0x1e) pselect6(0x2a, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) 12.212035297s ago: executing program 0 (id=460): openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7d68c906) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x2}, @TCA_NETEM_ECN={0x8}]}}}]}, 0xffffffffffffff91}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/102400, 0x19000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x1f, 0x4) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000380)='configfs\x00', 0x80000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r3, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000140)={0x2000200b}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0) dup3(r4, r5, 0x0) 10.995913434s ago: executing program 2 (id=461): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0408fcc67af208004500002420000000002f907800000000e0000001010088be001090780200000000000000"], 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r4, 0x111, 0x4, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="a7db9483cae790e452d356", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000}, 0x50) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = inotify_init1(0x0) inotify_add_watch(r6, 0x0, 0x774) write$binfmt_elf64(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff940200000000000040000000000000000000000000000000000040002c8f3800010000000200000003000000940f000004000000000000000b00000000000000cc0100000000000005"], 0x78) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) renameat2(r4, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r7, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.850020326s ago: executing program 0 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r6 = gettid() r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) shutdown(r7, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0xf2a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(r4, 0x0, 0x20) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="030000000700000000000000040000"], 0x0, 0x0, 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="6486d3a62e281f65f1b6304e0b0f73f542e5f01c9c295fea54496855d7077eae3d95f7492b0d2acd291d404f67cec9fa8359305bf17b9415256495c5a9f7b7e42bcf6bdd8ea805e8e22ffc1d0c445fa296f8faaae70c814bdd7aba9084b8a71e5350ab46099b90ed5654d19820f87b3516afe6bd9c5871d3d1b51319a0f5bea63703306ffc1dfcfcd3b054c880859cb9b691ce1f6cc09910", 0x98, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 10.153217339s ago: executing program 1 (id=463): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="7f", 0x1}], 0x1, 0x11, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) socket$netlink(0x10, 0x3, 0x8) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 9.960802893s ago: executing program 4 (id=464): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104c000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800, 0x4}}, 0x2e) getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0xfffc, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x80000) getpeername$inet6(r6, 0x0, &(0x7f0000001240)) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fccbdf250900000005000700020000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x24084001}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x3}) 9.879844949s ago: executing program 2 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040832}, 0xc094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r7 = dup2(r6, r6) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) r8 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r8, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 7.378070996s ago: executing program 3 (id=466): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x1, 0x8, 0x6, 0x8, {{0x9, 0x4, 0x0, 0x18, 0x24, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0x10}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x2}]}}}}}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xda, &(0x7f0000000340)=""/218, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) 6.701024367s ago: executing program 1 (id=467): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0xe99, 0x8080) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r3, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r5, 0x0, 0x1004000, 0x0, 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000903000/0x1000)=nil, 0x1000, 0x2, 0x110, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_getevents(0x0, 0x4, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x60) sendmsg$nl_xfrm(r6, 0x0, 0x4000080) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x3, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x2, 0x5, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0x1ed40, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x201, 0x4, 0x1, 0x3, 0x3, 0x1, 0x20000000000, 0xc, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x6, 0x201, 0x77d, 0xb3, 0x5, 0xffffffff00000001, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x67fffffffffe, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0xc9cd, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000005, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0xf, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x16, 0x54, 0x93d, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@loopback, 0x86dd}}}]}, 0x38}}, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f00000003c0)={0x0, 0x0, {0xfffffff9, 0xfffffffd, 0xfffff1b4}}) 6.698991927s ago: executing program 4 (id=468): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = dup(0xffffffffffffffff) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d07, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) memfd_create(&(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x18000000000002a0, 0x13, 0x0, &(0x7f00000001c0)="b15dd7cf1c00000400000000000036af1747da", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) dup(r10) 6.688147554s ago: executing program 0 (id=469): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000084) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4204, r4, 0x202, &(0x7f0000000100)={0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x34, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=ANY=[@ANYBLOB="480100001000010028bd7000ffdbdf25ac1414aa0000000000000000000000007f0000010000000000000000000000004e230000200080000a0020000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010100000000000000000000000000000000206c000000fe800000000000000000000000000023feffffffffffffff000000000000000000000000000000000100000000000008c802000000000100060000000800000000000000000000000000000000000000ffffffffff1f0000080000000000000000000000000000000400000000000000000000000900000000000000000000000000000002000100030000000000000008001f0004000000480003006465666c61746500"/244], 0x148}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) syz_open_dev$sg(0x0, 0x6, 0x8003) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, r8, 0x0, 0x20000000000006) 5.957871701s ago: executing program 2 (id=470): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8ff, 0x12) io_uring_setup(0x194e, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdfe, 0x801) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0xb55, 0x5, 0x9606a0a, 0x5, 0xb37, 0x3, 0x1, 0x0, 0x0, 0x6, 0x2, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x143) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) connect$netrom(r2, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(r2, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) chdir(&(0x7f0000000100)='./file0\x00') 5.901437129s ago: executing program 3 (id=471): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8ff, 0x12) io_uring_setup(0x194e, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdfe, 0x801) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0xb55, 0x5, 0x9606a0a, 0x5, 0xb37, 0x3, 0x1, 0x0, 0x0, 0x6, 0x2, 0x6}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2e}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x143) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x454, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3a3, 0x9, 0x7, 0x5, 0x42d7d4c5, 0x5, 0xfffffffb, 0x0, 0x5, 0x10001, 0x6, 0xfffffffe, 0x4, 0x0, 0x4, 0x1, 0x2, 0xc1ce, 0x1ff, 0xfffffffb, 0x7f, 0x5, 0xffff, 0x1, 0x8, 0x187f, 0x8, 0x100, 0x8, 0xede, 0x7, 0x7, 0x5, 0x3, 0x7, 0xfffffb32, 0x1, 0x6, 0x4, 0x7, 0x5, 0xffff, 0x2, 0x95, 0xfffffffb, 0x8, 0xffffffff, 0x6, 0x7f, 0x6c, 0xfffffffe, 0x8000, 0x4, 0xf, 0x8, 0x792, 0x4, 0x1, 0x0, 0x9, 0x3, 0x7f, 0xe1a, 0x1, 0x9, 0x6, 0x8001, 0x9, 0xa5, 0x7, 0x6, 0x81, 0x3, 0x2, 0x2, 0x6, 0x200, 0x7, 0xa, 0x3, 0x3, 0x9, 0x800, 0x0, 0x146, 0x9, 0x8001, 0xb, 0x2, 0x1ff, 0x7f, 0x9, 0x6, 0x3, 0x57, 0x622, 0x8000, 0x80, 0xc7, 0x609, 0x7, 0x3f, 0x0, 0x401, 0x7, 0xffffff92, 0x332, 0x4, 0x7, 0x4, 0x235e, 0xb03, 0x4, 0x2, 0x6, 0x0, 0x8, 0x5, 0x0, 0x564, 0x200, 0x1ff, 0x4, 0x9, 0x1, 0xcd9, 0x1, 0x10001, 0x2, 0x2, 0x45e9, 0x3, 0x9, 0x1000, 0x7, 0x3, 0x3, 0x7, 0xd, 0x4, 0x80000000, 0x5, 0x19, 0x400, 0xfff, 0x1ff, 0x1000, 0x100, 0x2, 0xc4f6, 0xbeb, 0x8, 0x6, 0x0, 0x9, 0xffffffff, 0x69, 0x40, 0xf2, 0x4, 0x9, 0x4, 0x8001, 0x9, 0x1, 0xc, 0x4, 0xffffffff, 0x1f, 0x5, 0x251b, 0x729e, 0x2, 0x6, 0x800, 0x1, 0x8001, 0xfffff7e6, 0x1e7, 0x8, 0x1, 0x10001, 0x0, 0xffffffff, 0xe8c, 0x8, 0x8, 0x5, 0x0, 0x4, 0x5, 0x3, 0x0, 0x7, 0x6, 0x4, 0x7, 0x3f56, 0x4e, 0x7fffffff, 0x3, 0x5, 0x7fffffff, 0x0, 0x4, 0x7, 0x7, 0x1, 0x2, 0x3, 0x9, 0x8001, 0x5, 0xffffffff, 0x6, 0x2, 0x2, 0x2, 0x40000000, 0x6, 0x2, 0xa28, 0xffff, 0x10000, 0x7, 0x2, 0x5, 0x1, 0x9, 0x3ff, 0x8, 0x1, 0x3ff, 0x81, 0x4, 0x2, 0x8, 0x1, 0x2, 0x8, 0x75f7, 0x800, 0x8, 0x3, 0x7, 0x200000, 0x10, 0xa3, 0xffffffff, 0x800, 0x7fff, 0x3, 0x3, 0x3, 0x3, 0xfffffc01]}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x454}, 0x1, 0x0, 0x0, 0x81}, 0x2000c000) socket(0x10, 0x803, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) connect$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) chdir(&(0x7f0000000100)='./file0\x00') 3.19695596s ago: executing program 0 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getrlimit(0x6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1802a6cf1d47dd46bdb2e8f100000200000000000000000000008500000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xd, 0x0, &(0x7f0000000500)="ba7114d8af50aa3e1c6ed2459d", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), 0x0}, 0x20) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x189802) r5 = creat(0x0, 0xe5) r6 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0, 0x0, r5}, 0x68) 3.085607291s ago: executing program 2 (id=473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000740)={0x36, 0x0, 0x7462, 0x760, 0x4, "1012a2c2e0d997451f6388080d00"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x50) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) socket(0x1e, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000008) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x7d) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x1) 3.053536577s ago: executing program 1 (id=474): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) syz_usb_connect$cdc_ecm(0x2, 0x50, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x24004800) socket$inet6_udplite(0xa, 0x2, 0x88) 2.444433861s ago: executing program 3 (id=475): mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x10010, 0xffffffffffffffff, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xe}, 0x94) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="8000c6000a000200aaaaaaaaaabb0000060005"], 0x30}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) r6 = memfd_create(0x0, 0x2) fcntl$addseals(r6, 0x409, 0x7) r7 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000180)={0xfffffffa, 0x5, 0x1}) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000000000000000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) 2.443348706s ago: executing program 4 (id=476): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$media(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1, 0x26, 0x6}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) r6 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) fcntl$addseals(r6, 0x409, 0x7) r7 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r7, 0x8, &(0x7f0000000340), 0x8, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)}) 2.012933519s ago: executing program 0 (id=477): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="7f", 0x1}], 0x1, 0x11, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) socket$netlink(0x10, 0x3, 0x8) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 0s ago: executing program 3 (id=478): timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r4}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000240)}, {0x0}, {&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/36, 0x24}], 0x8, &(0x7f0000000940)=""/11, 0xb}, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r7, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000001000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000600000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000030900010073797a30"], 0xf8}}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {0x2}, {0xffffffff}, {}, 0x0, 0x3f0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.187' (ED25519) to the list of known hosts. [ 84.063025][ T5804] cgroup: Unknown subsys name 'net' [ 84.222412][ T5804] cgroup: Unknown subsys name 'cpuset' [ 84.232273][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.865441][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.252626][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.260902][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.268926][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.277292][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.285035][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.316372][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.325013][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.333330][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.341912][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.355507][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.448811][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.457635][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.467048][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.481196][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.500740][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.531898][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.546053][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.550606][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.562591][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.570290][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.579233][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.587651][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.594772][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.603636][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.615188][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.075441][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 91.176480][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 91.347069][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 91.460988][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 91.474799][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.483660][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.493888][ T5817] bridge_slave_0: entered allmulticast mode [ 91.502170][ T5817] bridge_slave_0: entered promiscuous mode [ 91.564348][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.571762][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.579045][ T5817] bridge_slave_1: entered allmulticast mode [ 91.587020][ T5817] bridge_slave_1: entered promiscuous mode [ 91.656799][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 91.693812][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.701292][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.708722][ T5814] bridge_slave_0: entered allmulticast mode [ 91.717032][ T5814] bridge_slave_0: entered promiscuous mode [ 91.730714][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.737967][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.745218][ T5814] bridge_slave_1: entered allmulticast mode [ 91.752714][ T5814] bridge_slave_1: entered promiscuous mode [ 91.769252][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.815961][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.823131][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.830657][ T5824] bridge_slave_0: entered allmulticast mode [ 91.839764][ T5824] bridge_slave_0: entered promiscuous mode [ 91.879107][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.932295][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.939650][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.947392][ T5824] bridge_slave_1: entered allmulticast mode [ 91.956291][ T5824] bridge_slave_1: entered promiscuous mode [ 92.039443][ T1209] cfg80211: failed to load regulatory.db [ 92.057739][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.067368][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.074510][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.083195][ T5828] bridge_slave_0: entered allmulticast mode [ 92.090754][ T5828] bridge_slave_0: entered promiscuous mode [ 92.101702][ T5817] team0: Port device team_slave_0 added [ 92.110579][ T5817] team0: Port device team_slave_1 added [ 92.126590][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.139414][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.151528][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.160867][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.168333][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.175851][ T5828] bridge_slave_1: entered allmulticast mode [ 92.183122][ T5828] bridge_slave_1: entered promiscuous mode [ 92.330054][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.340348][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.348811][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.376090][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.379523][ T51] Bluetooth: hci0: command tx timeout [ 92.389415][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.399767][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.407068][ T5826] bridge_slave_0: entered allmulticast mode [ 92.414291][ T5826] bridge_slave_0: entered promiscuous mode [ 92.435625][ T51] Bluetooth: hci1: command tx timeout [ 92.438330][ T5814] team0: Port device team_slave_0 added [ 92.450443][ T5814] team0: Port device team_slave_1 added [ 92.458923][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.469058][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.476389][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.502811][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.514185][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.521739][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.529207][ T5826] bridge_slave_1: entered allmulticast mode [ 92.537125][ T5826] bridge_slave_1: entered promiscuous mode [ 92.547369][ T5824] team0: Port device team_slave_0 added [ 92.595400][ T51] Bluetooth: hci2: command tx timeout [ 92.623086][ T5824] team0: Port device team_slave_1 added [ 92.629679][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.637329][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.663377][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.675244][ T5815] Bluetooth: hci3: command tx timeout [ 92.681077][ T51] Bluetooth: hci4: command tx timeout [ 92.703447][ T5828] team0: Port device team_slave_0 added [ 92.736336][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.743322][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.771189][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.784875][ T5828] team0: Port device team_slave_1 added [ 92.794800][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.854614][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.879304][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.888993][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.915693][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.928997][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.936644][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.963003][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.033317][ T5817] hsr_slave_0: entered promiscuous mode [ 93.040509][ T5817] hsr_slave_1: entered promiscuous mode [ 93.068308][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.075748][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.101799][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.116320][ T5826] team0: Port device team_slave_0 added [ 93.126593][ T5826] team0: Port device team_slave_1 added [ 93.137269][ T5814] hsr_slave_0: entered promiscuous mode [ 93.143662][ T5814] hsr_slave_1: entered promiscuous mode [ 93.154029][ T5814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.162364][ T5814] Cannot create hsr debugfs directory [ 93.185459][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.195300][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.221566][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.293451][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.303521][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.333657][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.391622][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.401338][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.430218][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.504661][ T5824] hsr_slave_0: entered promiscuous mode [ 93.511660][ T5824] hsr_slave_1: entered promiscuous mode [ 93.518474][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.526147][ T5824] Cannot create hsr debugfs directory [ 93.582141][ T5828] hsr_slave_0: entered promiscuous mode [ 93.589180][ T5828] hsr_slave_1: entered promiscuous mode [ 93.596426][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.604279][ T5828] Cannot create hsr debugfs directory [ 93.776202][ T5826] hsr_slave_0: entered promiscuous mode [ 93.782777][ T5826] hsr_slave_1: entered promiscuous mode [ 93.789282][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.797079][ T5826] Cannot create hsr debugfs directory [ 94.150912][ T5814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.164129][ T5814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.197520][ T5814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.210492][ T5814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.321092][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.341857][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.352887][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.369017][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.435574][ T51] Bluetooth: hci0: command tx timeout [ 94.488916][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.512258][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.517041][ T51] Bluetooth: hci1: command tx timeout [ 94.543478][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.570164][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.659633][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.670660][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.678726][ T51] Bluetooth: hci2: command tx timeout [ 94.701269][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.714752][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.733289][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.755348][ T51] Bluetooth: hci4: command tx timeout [ 94.760821][ T5815] Bluetooth: hci3: command tx timeout [ 94.830157][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.854387][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.882417][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.897908][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.905295][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.933627][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.950776][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.958085][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.971548][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.983194][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.994080][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.028901][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.036222][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.079235][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.086670][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.154484][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.278799][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.353035][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.368069][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.375287][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.430597][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.437910][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.540902][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.562734][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.569951][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.643702][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.651054][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.680333][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.754862][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.807080][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.814244][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.840716][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.856377][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.863671][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.044124][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.175228][ T5814] veth0_vlan: entered promiscuous mode [ 96.194626][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.220801][ T5814] veth1_vlan: entered promiscuous mode [ 96.342443][ T5817] veth0_vlan: entered promiscuous mode [ 96.413386][ T5817] veth1_vlan: entered promiscuous mode [ 96.468459][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.483995][ T5814] veth0_macvtap: entered promiscuous mode [ 96.510311][ T5814] veth1_macvtap: entered promiscuous mode [ 96.517192][ T5815] Bluetooth: hci0: command tx timeout [ 96.541608][ T5817] veth0_macvtap: entered promiscuous mode [ 96.562126][ T5824] veth0_vlan: entered promiscuous mode [ 96.581145][ T5824] veth1_vlan: entered promiscuous mode [ 96.595821][ T5815] Bluetooth: hci1: command tx timeout [ 96.607428][ T5817] veth1_macvtap: entered promiscuous mode [ 96.621643][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.637412][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.666003][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.726365][ T5814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.735685][ T5814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.744439][ T5814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.754585][ T5814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.757634][ T5815] Bluetooth: hci2: command tx timeout [ 96.812661][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.822612][ T5828] veth0_vlan: entered promiscuous mode [ 96.832942][ T5824] veth0_macvtap: entered promiscuous mode [ 96.835537][ T5815] Bluetooth: hci3: command tx timeout [ 96.844176][ T5815] Bluetooth: hci4: command tx timeout [ 96.892740][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.912129][ T5824] veth1_macvtap: entered promiscuous mode [ 96.926211][ T5828] veth1_vlan: entered promiscuous mode [ 96.940974][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.952322][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.961847][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.970733][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.033716][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.137500][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.145717][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.168706][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.208392][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.217571][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.228565][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.239025][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.286090][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.293998][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.303387][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.316719][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.389305][ T5826] veth0_vlan: entered promiscuous mode [ 97.406964][ T5828] veth0_macvtap: entered promiscuous mode [ 97.424912][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.432767][ T5826] veth1_vlan: entered promiscuous mode [ 97.441432][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.463549][ T5828] veth1_macvtap: entered promiscuous mode [ 97.488849][ T5814] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.538806][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.584031][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.630993][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.653747][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.687459][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.710740][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.774071][ T752] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.813955][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.823114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.878672][ T5933] vivid-007: ================= START STATUS ================= [ 97.887311][ T5933] vivid-007: Enable Output Cropping: true [ 97.893539][ T5933] vivid-007: Enable Output Composing: true [ 97.899653][ T5933] vivid-007: Enable Output Scaler: true [ 97.905633][ T5933] vivid-007: Tx RGB Quantization Range: Automatic [ 97.912263][ T5933] vivid-007: Transmit Mode: HDMI [ 97.918049][ T5933] vivid-007: Hotplug Present: 0x00000000 [ 97.923907][ T5933] vivid-007: RxSense Present: 0x00000000 [ 97.945368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.953724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.962648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.983886][ T5933] vivid-007: EDID Present: 0x00000000 [ 97.989658][ T5933] vivid-007: ================== END STATUS ================== [ 98.018848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.027918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.121451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.223742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.232532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.595300][ T5815] Bluetooth: hci0: command tx timeout [ 98.675419][ T5815] Bluetooth: hci1: command tx timeout [ 98.835274][ T5815] Bluetooth: hci2: command tx timeout [ 98.869159][ T752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.915868][ T51] Bluetooth: hci3: command tx timeout [ 98.921396][ T5815] Bluetooth: hci4: command tx timeout [ 98.927945][ T5826] veth0_macvtap: entered promiscuous mode [ 99.117067][ T5937] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 99.146334][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.154185][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.167606][ T5937] qnx6: wrong signature (magic) in superblock #1. [ 99.174330][ T5937] qnx6: unable to read the first superblock [ 99.315833][ T5826] veth1_macvtap: entered promiscuous mode [ 99.683392][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.732498][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.763737][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.814915][ T5826] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.837151][ T5826] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.848470][ T5826] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.888934][ T5826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.598964][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.632015][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.841951][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.850967][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.653180][ T5962] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.662207][ T5962] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.671099][ T5962] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.680054][ T5962] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.880847][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.907400][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.109360][ T752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.150521][ T752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.995347][ T5983] hub 8-0:1.0: USB hub found [ 107.005480][ T5983] hub 8-0:1.0: 1 port detected [ 111.123303][ T6004] vivid-007: kernel_thread() failed [ 111.193447][ T30] audit: type=1326 audit(1751536776.818:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 111.218816][ T30] audit: type=1326 audit(1751536776.818:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 111.245854][ T30] audit: type=1326 audit(1751536776.818:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 111.267686][ T30] audit: type=1326 audit(1751536776.818:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 111.437952][ T30] audit: type=1326 audit(1751536776.818:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 112.285399][ T30] audit: type=1326 audit(1751536776.828:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 112.307107][ T30] audit: type=1326 audit(1751536776.828:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 112.401046][ T6014] netlink: 52 bytes leftover after parsing attributes in process `syz.1.19'. [ 112.421958][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.431816][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.493919][ T30] audit: type=1326 audit(1751536776.828:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 113.133906][ T30] audit: type=1326 audit(1751536776.828:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 113.162146][ T30] audit: type=1326 audit(1751536776.828:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5993 comm="syz.2.16" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451eb8e929 code=0x7ffc0000 [ 115.290189][ T3080] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.775428][ T3080] usb 5-1: Using ep0 maxpacket: 32 [ 115.788405][ T3080] usb 5-1: config 128 has an invalid interface number: 172 but max is 0 [ 115.873082][ T3080] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 116.078316][ T3080] usb 5-1: config 128 has no interface number 0 [ 116.125170][ T5901] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.302861][ T3080] usb 5-1: config 128 interface 172 has no altsetting 0 [ 116.609905][ T3080] usb 5-1: string descriptor 0 read error: -71 [ 116.778510][ T3080] usb 5-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=fc.d7 [ 116.906392][ T3080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.179730][ T3080] usb 5-1: can't set config #128, error -71 [ 117.286708][ T6043] process 'syz.2.25' launched '/dev/fd/12' with NULL argv: empty string added [ 117.320484][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 117.320550][ T30] audit: type=1400 audit(1751536783.258:87): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=6038 comm="syz.2.25" path="socket:[7530]" dev="sockfs" ino=7530 [ 117.732339][ T3080] usb 5-1: USB disconnect, device number 2 [ 117.794857][ T30] audit: type=1400 audit(1751536783.298:88): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=6038 comm="syz.2.25" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 117.956437][ T5901] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 118.060181][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.159241][ T5901] usb 2-1: Product: syz [ 118.223839][ T5901] usb 2-1: Manufacturer: syz [ 118.290920][ T5901] usb 2-1: SerialNumber: syz [ 118.561763][ T5901] usb 2-1: config 0 descriptor?? [ 118.621711][ T5901] usb 2-1: selecting invalid altsetting 1 [ 118.631838][ T5901] comedi comedi0: could not switch to alternate setting 1 [ 118.693202][ T5901] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 118.798476][ T6041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.424558][ T3080] usb 2-1: USB disconnect, device number 2 [ 123.602339][ T6085] sit0: entered promiscuous mode [ 123.661969][ T6085] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 123.904303][ T6085] netlink: 1 bytes leftover after parsing attributes in process `syz.0.32'. [ 124.915737][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'. [ 125.125341][ T6101] syz.1.35: attempt to access beyond end of device [ 125.125341][ T6101] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 125.142057][ T6101] syz.1.35: attempt to access beyond end of device [ 125.142057][ T6101] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 125.158966][ T6101] Mount JFS Failure: -5 [ 125.163407][ T6101] jfs_mount failed w/return code = -5 [ 127.647459][ T6120] program syz.0.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.677032][ T6120] program syz.0.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.688683][ T6120] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.945508][ T6144] lo speed is unknown, defaulting to 1000 [ 128.953252][ T6144] lo speed is unknown, defaulting to 1000 [ 128.987469][ T6144] lo speed is unknown, defaulting to 1000 [ 129.187650][ T6144] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.402954][ T6144] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 129.452781][ T6144] lo speed is unknown, defaulting to 1000 [ 129.462343][ T6144] lo speed is unknown, defaulting to 1000 [ 129.469625][ T6144] lo speed is unknown, defaulting to 1000 [ 129.476776][ T6144] lo speed is unknown, defaulting to 1000 [ 129.483736][ T6144] lo speed is unknown, defaulting to 1000 [ 129.644240][ T6137] Zero length message leads to an empty skb [ 130.835396][ T6137] delete_channel: no stack [ 132.994153][ T6161] syz.2.47 uses obsolete (PF_INET,SOCK_PACKET) [ 133.009837][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.025508][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.430045][ T6173] binder: BINDER_SET_CONTEXT_MGR already set [ 133.439858][ T6173] binder: 6170:6173 ioctl 4018620d 200000000040 returned -16 [ 135.374359][ T6196] batadv1: entered promiscuous mode [ 140.765697][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 143.237891][ T6227] syz.2.58: attempt to access beyond end of device [ 143.237891][ T6227] loop2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 143.253558][ T6227] gfs2: error -5 reading superblock [ 144.558909][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 144.586042][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 144.681629][ T6237] Device name not specified. [ 144.681629][ T6237] [ 145.031366][ T51] Bluetooth: hci4: connection err: -111 [ 145.082019][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'. [ 146.563039][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 147.459615][ T6253] Bluetooth: MGMT ver 1.23 [ 149.823817][ T6267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.888183][ T6268] devtmpfs: Unknown parameter 'nr_Inode' [ 152.253190][ T6280] hub 8-0:1.0: USB hub found [ 152.259797][ T6280] hub 8-0:1.0: 1 port detected [ 153.072774][ T6266] syz.0.68 (6266) used greatest stack depth: 19768 bytes left [ 153.573697][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 153.582679][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 153.591536][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 153.624990][ T6282] netlink: 'syz.2.73': attribute type 11 has an invalid length. [ 153.632996][ T6282] netlink: 224 bytes leftover after parsing attributes in process `syz.2.73'. [ 155.427750][ T6304] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 156.282470][ T6313] netlink: 'syz.1.77': attribute type 10 has an invalid length. [ 156.297950][ T6313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.308534][ T6313] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 157.148609][ T6314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 157.218806][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 160.970647][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.83'. [ 164.761460][ T6355] syz.4.86: attempt to access beyond end of device [ 164.761460][ T6355] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 164.775589][ T6355] syz.4.86: attempt to access beyond end of device [ 164.775589][ T6355] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 164.789521][ T6355] Mount JFS Failure: -5 [ 164.793767][ T6355] jfs_mount failed w/return code = -5 [ 165.142213][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 168.863587][ T6372] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 171.304290][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 171.309073][ T5815] Bluetooth: hci0: command 0x080f tx timeout [ 173.715276][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 176.751800][ T6415] : entered promiscuous mode [ 176.786803][ T5917] usb 3-1: device descriptor read/all, error -71 [ 177.041192][ T6415] netlink: 36 bytes leftover after parsing attributes in process `syz.0.100'. [ 178.453701][ T6437] Bluetooth: hci5: Frame reassembly failed (-84) [ 179.187293][ T6438] random: crng reseeded on system resumption [ 180.515300][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 180.521697][ T5815] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 182.156463][ T6457] netlink: 'syz.3.108': attribute type 4 has an invalid length. [ 182.280834][ T6456] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.352064][ T44] lo speed is unknown, defaulting to 1000 [ 182.479100][ T44] syz0: Port: 1 Link DOWN [ 187.554239][ T6457] syz.3.108 (6457) used greatest stack depth: 19624 bytes left [ 188.498027][ T6488] netlink: 'syz.2.113': attribute type 6 has an invalid length. [ 191.465392][ T6498] netlink: 'syz.4.116': attribute type 10 has an invalid length. [ 191.477165][ T6498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.486995][ T6498] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 191.713790][ T5917] IPVS: starting estimator thread 0... [ 192.016210][ T6499] IPVS: using max 27 ests per chain, 64800 per kthread [ 193.126242][ T6513] netlink: 'syz.2.117': attribute type 16 has an invalid length. [ 193.134171][ T6513] netlink: 'syz.2.117': attribute type 17 has an invalid length. [ 193.805334][ T6496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.214990][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 194.233092][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 194.447890][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.461245][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.565176][ T6527] fuse: Unknown parameter '`fd' [ 195.715224][ T6509] warning: `syz.4.119' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 197.128047][ T6534] random: crng reseeded on system resumption [ 197.228468][ T5887] IPVS: starting estimator thread 0... [ 197.578404][ T6542] IPVS: using max 23 ests per chain, 55200 per kthread [ 199.324978][ T6554] capability: warning: `syz.1.126' uses deprecated v2 capabilities in a way that may be insecure [ 199.987765][ T6558] xt_bpf: check failed: parse error [ 200.527472][ T6564] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 201.990199][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.130'. [ 204.125295][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 204.872637][ T6595] capability: warning: `syz.2.134' uses 32-bit capabilities (legacy support in use) [ 205.839123][ T6602] hugetlbfs: syz.0.135 (6602): Using mlock ulimits for SHM_HUGETLB is obsolete [ 206.800523][ T6608] netlink: 84 bytes leftover after parsing attributes in process `syz.2.136'. [ 208.726380][ T6617] program syz.3.139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.306996][ T6625] vivid-003: ================= START STATUS ================= [ 209.315164][ T6625] vivid-003: Radio HW Seek Mode: Bounded [ 209.322127][ T6625] vivid-003: Radio Programmable HW Seek: false [ 209.331785][ T6625] vivid-003: RDS Rx I/O Mode: Block I/O [ 209.337885][ T6625] vivid-003: Generate RBDS Instead of RDS: false [ 209.344661][ T6625] vivid-003: RDS Reception: true [ 209.349888][ T6625] vivid-003: RDS Program Type: 0 inactive [ 209.356379][ T6625] vivid-003: RDS PS Name: inactive [ 209.362020][ T6625] vivid-003: RDS Radio Text: inactive [ 209.368529][ T6625] vivid-003: RDS Traffic Announcement: false inactive [ 209.377026][ T6625] vivid-003: RDS Traffic Program: false inactive [ 209.384064][ T6625] vivid-003: RDS Music: false inactive [ 209.390692][ T6625] vivid-003: ================== END STATUS ================== [ 212.315664][ T6643] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 213.672775][ T6650] i2c i2c-0: Invalid block write size 34 [ 213.680082][ T6650] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 213.885663][ T6658] netlink: 'syz.4.147': attribute type 4 has an invalid length. [ 214.334604][ T6650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.627175][ T6663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.999318][ T6667] Bluetooth: hci3: command 0x0406 tx timeout [ 216.999845][ T5818] Bluetooth: hci4: command 0x0405 tx timeout [ 217.128689][ T6680] netlink: 68 bytes leftover after parsing attributes in process `syz.0.152'. [ 217.536276][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 217.543337][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 217.608192][ T6686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.176282][ T13] Bluetooth: (null): Too short H5 packet [ 219.530833][ T13] Bluetooth: (null): Invalid header checksum [ 219.545443][ T13] Bluetooth: (null): Invalid header checksum [ 220.445239][ T5138] Bluetooth: hci4: command 0x0405 tx timeout [ 222.675485][ T6716] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 222.951280][ T6724] trusted_key: syz.4.160 sent an empty control message without MSG_MORE. [ 227.375396][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 228.580421][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 228.589427][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 228.598829][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.166'. [ 228.670827][ T6756] netlink: 'syz.0.166': attribute type 11 has an invalid length. [ 228.678876][ T6756] netlink: 224 bytes leftover after parsing attributes in process `syz.0.166'. [ 234.475554][ T3080] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 235.111703][ T3080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.169816][ T3080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.075200][ T3080] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.091004][ T3080] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.147561][ T6781] delete_channel: no stack [ 236.230700][ T3080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.249910][ T3080] usb 4-1: config 0 descriptor?? [ 236.275328][ T3080] usb 4-1: can't set config #0, error -71 [ 236.308621][ T3080] usb 4-1: USB disconnect, device number 2 [ 236.695848][ T6799] syz.0.176: attempt to access beyond end of device [ 236.695848][ T6799] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 236.709546][ T6799] hfsplus: unable to find HFS+ superblock [ 238.691266][ T6812] netlink: 'syz.4.178': attribute type 4 has an invalid length. [ 238.699129][ T6812] netlink: 17 bytes leftover after parsing attributes in process `syz.4.178'. [ 240.609019][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 240.617957][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 240.627299][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 240.713642][ T6824] netlink: 'syz.1.180': attribute type 11 has an invalid length. [ 240.721616][ T6824] netlink: 224 bytes leftover after parsing attributes in process `syz.1.180'. [ 241.761633][ T5887] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 242.935172][ T5887] usb 1-1: Using ep0 maxpacket: 8 [ 243.370704][ T5887] usb 1-1: device descriptor read/all, error -71 [ 243.904255][ T6859] sctp: [Deprecated]: syz.3.186 (pid 6859) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.904255][ T6859] Use struct sctp_sack_info instead [ 244.504487][ T5968] libceph: connect (1)[c::]:6789 error -97 [ 245.274285][ T5968] libceph: mon0 (1)[c::]:6789 connect error [ 245.422721][ T6856] ceph: No mds server is up or the cluster is laggy [ 246.260883][ T6866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.020211][ T6901] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 253.073904][ T6901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.089029][ T6901] team0: Port device bond0 added [ 255.009688][ T5827] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 256.315776][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.328174][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.966409][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.4.203'. [ 260.039592][ T6975] can0: slcan on ttyS3. [ 260.610583][ T6972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 261.515307][ T6976] bridge0: port 3(syz_tun) entered blocking state [ 261.522099][ T6976] bridge0: port 3(syz_tun) entered disabled state [ 261.529005][ T6976] syz_tun: entered allmulticast mode [ 261.536905][ T6976] syz_tun: entered promiscuous mode [ 261.568917][ T6975] can0 (unregistered): slcan off ttyS3. [ 265.391561][ T6991] overlayfs: missing 'lowerdir' [ 266.997336][ T7016] hub 8-0:1.0: USB hub found [ 267.004105][ T7016] hub 8-0:1.0: 1 port detected [ 267.804037][ T7019] netlink: 36 bytes leftover after parsing attributes in process `syz.2.216'. [ 272.019409][ T7045] 9pnet_fd: Insufficient options for proto=fd [ 272.083348][ T7045] siw: device registration error -23 [ 280.073087][ T7102] mkiss: ax0: crc mode is auto. [ 281.681410][ T7115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 281.730644][ T7115] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 285.468487][ T7157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.242'. [ 288.835300][ T5138] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 293.638603][ T7200] : entered promiscuous mode [ 293.686427][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 294.431021][ T7203] netlink: 'syz.2.252': attribute type 6 has an invalid length. [ 295.375588][ T7204] mkiss: ax0: crc mode is auto. [ 295.504835][ T5815] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 297.141634][ T7223] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.254'. [ 297.491748][ T7217] x_tables: duplicate underflow at hook 3 [ 299.234973][ T7238] ======================================================= [ 299.234973][ T7238] WARNING: The mand mount option has been deprecated and [ 299.234973][ T7238] and is ignored by this kernel. Remove the mand [ 299.234973][ T7238] option from the mount to silence this warning. [ 299.234973][ T7238] ======================================================= [ 299.269908][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.277964][ T7238] kAFS: No cell specified [ 303.235282][ T7253] delete_channel: no stack [ 310.639535][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 311.415783][ T7309] mkiss: ax0: crc mode is auto. [ 313.877795][ T7334] overlay: Unknown parameter '/' [ 314.904016][ T7336] hsr0: entered promiscuous mode [ 314.946309][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.278'. [ 315.145957][ T7336] hsr_slave_0: left promiscuous mode [ 315.175331][ T7336] hsr_slave_1: left promiscuous mode [ 315.432028][ T7336] hsr0 (unregistering): left promiscuous mode [ 317.105382][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.111918][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.308171][ T7341] mmap: syz.1.280 (7341) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 317.368361][ T7348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.276616][ T7341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.520661][ T7366] program syz.3.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.538299][ T7366] program syz.3.283 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.549999][ T7366] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 319.311519][ T7348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.794190][ T7375] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 321.361709][ T5886] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 323.464337][ T5886] usb 3-1: device not accepting address 5, error -71 [ 323.949462][ T7404] overlay: Unknown parameter '/' [ 326.355992][ T7409] mkiss: ax0: crc mode is auto. [ 330.884390][ T7459] loop6: detected capacity change from 0 to 524287487 [ 331.026504][ T7459] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.108295][ T7459] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.130353][ T7459] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.834797][ T7459] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.900082][ T7459] Buffer I/O error on dev loop6, logical block 0, async page read [ 331.900163][ T7464] loop6: detected capacity change from 524287487 to 0 [ 331.908520][ T7459] ldm_validate_partition_table(): Disk read failed. [ 331.922165][ T7459] Dev loop6: unable to read RDB block 0 [ 331.929322][ T7459] loop6: unable to read partition table [ 332.008117][ T7459] loop6: partition table beyond EOD, truncated [ 332.015184][ T7459] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 332.928362][ T7481] netlink: 'syz.4.305': attribute type 10 has an invalid length. [ 333.393417][ T30] audit: type=1326 audit(1751536999.797:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7477 comm="syz.2.306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f451eb8e929 code=0x0 [ 333.493746][ T7485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 334.077978][ T7485] syz.2.306 (7485) used greatest stack depth: 15960 bytes left [ 335.216628][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 335.216798][ T5138] Bluetooth: hci3: unexpected event for opcode 0x2060 [ 338.364543][ T7522] overlayfs: overlapping lowerdir path [ 341.084642][ T7544] netlink: 'syz.3.318': attribute type 3 has an invalid length. [ 341.141623][ T7545] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 341.149735][ T7545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.157424][ T7545] IPv6: NLM_F_CREATE should be set when creating new route [ 343.336659][ T7549] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 343.376415][ T7549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.445981][ T7549] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 344.525613][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 347.364351][ T30] audit: type=1326 audit(1751537013.508:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.323" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff72f58e929 code=0x0 [ 347.801369][ T7585] netlink: 48 bytes leftover after parsing attributes in process `syz.3.323'. [ 348.853614][ T7596] pim6reg: entered allmulticast mode [ 348.879444][ T7596] pim6reg: left allmulticast mode [ 350.806527][ T7608] netlink: 'syz.4.330': attribute type 10 has an invalid length. [ 353.344943][ T30] audit: type=1326 audit(1751537019.515:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 353.918292][ T30] audit: type=1326 audit(1751537019.515:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 353.947502][ T30] audit: type=1326 audit(1751537019.525:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 353.974772][ T30] audit: type=1326 audit(1751537019.525:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 354.017193][ T30] audit: type=1326 audit(1751537019.525:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 354.211822][ T30] audit: type=1326 audit(1751537019.525:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 354.237688][ T30] audit: type=1326 audit(1751537019.525:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 354.649416][ T30] audit: type=1326 audit(1751537019.525:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 354.673982][ T30] audit: type=1326 audit(1751537019.525:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 354.697469][ T30] audit: type=1326 audit(1751537019.535:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7621 comm="syz.0.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3abb8e929 code=0x7ffc0000 [ 358.726019][ T7655] /dev/nullb0: Can't open blockdev [ 359.357469][ T7662] netlink: 'syz.1.342': attribute type 10 has an invalid length. [ 361.502771][ T7684] random: crng reseeded on system resumption [ 362.437999][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.468751][ T7691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.612597][ T7691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.668538][ T7691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.863191][ T7691] bond0: (slave batadv0): Releasing backup interface [ 363.596168][ T7698] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.514992][ T7688] xt_CT: No such helper "snmp" [ 367.279108][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 367.279157][ T30] audit: type=1326 audit(1751537033.694:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 367.572168][ T7716] netlink: 116 bytes leftover after parsing attributes in process `syz.3.353'. [ 367.619649][ T30] audit: type=1326 audit(1751537033.744:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 368.184368][ T30] audit: type=1326 audit(1751537033.744:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 369.064793][ T30] audit: type=1326 audit(1751537033.744:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 369.086373][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.865943][ T30] audit: type=1326 audit(1751537033.744:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 370.119344][ T30] audit: type=1326 audit(1751537033.744:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 370.337925][ T30] audit: type=1326 audit(1751537033.744:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 370.476276][ T30] audit: type=1326 audit(1751537033.744:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 370.527876][ T30] audit: type=1326 audit(1751537033.794:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 370.761870][ T30] audit: type=1326 audit(1751537033.794:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7713 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff72f58e929 code=0x7ffc0000 [ 370.783300][ C1] vkms_vblank_simulate: vblank timer overrun [ 375.268352][ T7771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.364'. [ 375.444771][ T5138] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2 [ 375.454183][ T5138] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 378.287777][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.326031][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.477049][ T5138] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 379.670555][ T5138] Bluetooth: hci1: Injecting HCI hardware error event [ 379.682555][ T5138] Bluetooth: hci1: hardware error 0x00 [ 381.891832][ T5138] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 383.486047][ T7810] x_tables: duplicate underflow at hook 3 [ 385.726628][ T7824] ptrace attach of "./syz-executor exec"[5817] was attempted by "./syz-executor exec"[7824] [ 386.046830][ T7824] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 386.094515][ T7824] overlayfs: failed to set xattr on upper [ 386.134904][ T7824] overlayfs: ...falling back to redirect_dir=nofollow. [ 386.145039][ T7824] overlayfs: ...falling back to index=off. [ 386.301703][ T7824] overlayfs: ...falling back to uuid=null. [ 386.328874][ T7824] overlayfs: maximum fs stacking depth exceeded [ 392.170668][ T7868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 394.994320][ T7887] unsupported nlmsg_type 40 [ 395.146001][ T7881] veth0_to_team: entered promiscuous mode [ 395.151987][ T7881] veth0_to_team: entered allmulticast mode [ 396.669382][ T7904] netlink: 'syz.2.395': attribute type 10 has an invalid length. [ 396.684963][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.696870][ T7904] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 397.844979][ T7912] loop9: detected capacity change from 0 to 7 [ 397.853323][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.861453][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.869595][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.877575][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.886128][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.896414][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.904531][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.912538][ T7912] ldm_validate_partition_table(): Disk read failed. [ 397.920156][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.928724][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.937058][ T7912] Buffer I/O error on dev loop9, logical block 0, async page read [ 397.947644][ T7912] Dev loop9: unable to read RDB block 0 [ 397.956225][ T7912] loop9: unable to read partition table [ 397.964412][ T7912] loop9: partition table beyond EOD, truncated [ 397.970927][ T7912] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 397.970927][ T7912] ) failed (rc=-5) [ 401.541993][ T7931] netlink: 52 bytes leftover after parsing attributes in process `syz.0.401'. [ 401.553255][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.562647][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.735589][ T5815] Bluetooth: hci4: command 0x0405 tx timeout [ 402.037442][ T7935] netlink: 'syz.3.400': attribute type 10 has an invalid length. [ 402.299656][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.361622][ T7935] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 404.604615][ T7946] IPVS: ip_vs_add_dest(): server weight less than zero [ 407.367705][ T7970] netlink: 'syz.0.409': attribute type 10 has an invalid length. [ 408.929360][ T7977] veth0_vlan: entered allmulticast mode [ 409.011657][ T7977] veth0_vlan: left promiscuous mode [ 409.024937][ T7977] veth0_vlan: entered promiscuous mode [ 416.044428][ T8029] new mount options do not match the existing superblock, will be ignored [ 416.130966][ T8027] option changes via remount are deprecated (pid=8018 comm=syz.4.421) [ 418.308889][ T8042] netlink: 'syz.0.426': attribute type 10 has an invalid length. [ 418.612144][ T8055] pim6reg: entered allmulticast mode [ 418.638469][ T8055] pim6reg: left allmulticast mode [ 432.861503][ T5138] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 434.111494][ T8142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.198445][ T5968] IPVS: starting estimator thread 0... [ 434.713691][ T8144] IPVS: using max 37 ests per chain, 88800 per kthread [ 435.133314][ T8153] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 436.119573][ T8159] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 436.920069][ T5138] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 436.932816][ T5138] Bluetooth: hci4: Injecting HCI hardware error event [ 436.941656][ T5138] Bluetooth: hci4: hardware error 0x00 [ 439.240872][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.247275][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.503285][ T5138] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 441.435922][ T8179] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 443.254957][ T5886] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 443.596012][ T5886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 443.605111][ T5886] usb 4-1: not running at top speed; connect to a high speed hub [ 443.645879][ T8191] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.459'. [ 443.711103][ T5886] usb 4-1: config 253 has an invalid interface number: 140 but max is 0 [ 443.728300][ T5886] usb 4-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 443.919466][ T5886] usb 4-1: config 253 has no interface number 0 [ 443.928254][ T5886] usb 4-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 444.422767][ T5886] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 444.436901][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.453124][ T5886] usb 4-1: Product: syz [ 444.463086][ T5886] usb 4-1: Manufacturer: syz [ 444.485865][ T5886] usb 4-1: SerialNumber: syz [ 445.536392][ T8182] delete_channel: no stack [ 445.575390][ T5886] usbtest 4-1:253.140: couldn't get endpoints, -22 [ 445.619130][ T5886] usbtest 4-1:253.140: probe with driver usbtest failed with error -22 [ 445.642215][ T5886] usb 4-1: USB disconnect, device number 3 [ 448.384117][ T8217] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 450.412445][ T8229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.411522][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 454.159516][ T8263] No source specified [ 455.411128][ T8263] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 455.578912][ T8258] tty tty1: ldisc open failed (-12), clearing slot 0 [ 455.749449][ T8272] page: refcount:3 mapcount:0 mapping:ffff888148c9e478 index:0x2 pfn:0x30a26 [ 455.796808][ T8272] memcg:ffff888140490c80 [ 455.804246][ T8272] aops:def_blk_aops ino:fa00000 [ 455.810912][ T8272] flags: 0xfff00000000039(locked|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 455.825394][ T8272] raw: 00fff00000000039 ffffea0000c289c8 ffff88801cea8328 ffff888148c9e478 [ 455.839106][ T8272] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff888140490c80 [ 455.850205][ T8272] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 455.863975][ T8272] page_owner tracks the page as allocated [ 455.872027][ T8272] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8270, tgid 8261 (syz.0.477), ts 455744597369, free_ts 455608497529 [ 455.896637][ T8272] post_alloc_hook+0x240/0x2a0 [ 455.909035][ T8272] get_page_from_freelist+0x21d5/0x22b0 [ 455.915850][ T8272] __alloc_frozen_pages_noprof+0x181/0x370 [ 455.923865][ T8272] alloc_pages_mpol+0x232/0x4a0 [ 455.935223][ T8272] alloc_pages_noprof+0xa9/0x190 [ 455.941968][ T8272] folio_alloc_noprof+0x1e/0x30 [ 455.948056][ T8272] filemap_alloc_folio_noprof+0xdf/0x470 [ 455.955105][ T8272] page_cache_ra_order+0x5e5/0xc70 [ 455.962589][ T8272] do_sync_mmap_readahead+0x4b5/0x5f0 [ 455.970634][ T8272] filemap_fault+0x62a/0x1200 [ 455.977318][ T8272] __do_fault+0x135/0x390 [ 455.983277][ T8272] __handle_mm_fault+0x198b/0x5620 [ 455.990052][ T8272] handle_mm_fault+0x2d5/0x7f0 [ 455.993442][ T8272] do_user_addr_fault+0x764/0x1390 [ 455.994535][ T8272] exc_page_fault+0x76/0xf0 [ 455.995685][ T8272] asm_exc_page_fault+0x26/0x30 [ 455.997404][ T8272] page last free pid 6158 tgid 6158 stack trace: [ 455.997422][ T8272] __free_frozen_pages+0xc65/0xe60 [ 455.998573][ T8272] __slab_free+0x326/0x400 [ 455.999713][ T8272] qlist_free_all+0x97/0x140 [ 456.000803][ T8272] kasan_quarantine_reduce+0x148/0x160 [ 456.002522][ T8272] __kasan_slab_alloc+0x22/0x80 [ 456.003602][ T8272] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 456.004778][ T8272] getname_flags+0xb8/0x540 [ 456.005891][ T8272] vfs_fstatat+0x43/0x170 [ 456.005924][ T8272] __x64_sys_newfstatat+0x116/0x190 [ 456.007030][ T8272] do_syscall_64+0xfa/0x3b0 [ 456.008153][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.016898][ T8272] ------------[ cut here ]------------ [ 456.016917][ T8272] kernel BUG at mm/filemap.c:3442! [ 456.022186][ T8272] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 456.022231][ T8272] CPU: 0 UID: 0 PID: 8272 Comm: syz.0.477 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 456.022257][ T8272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.022273][ T8272] RIP: 0010:filemap_fault+0x117d/0x1200 [ 456.022301][ T8272] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 8d 6b 29 00 e9 81 fc ff ff e8 a3 13 c8 ff 48 89 df 48 c7 c6 a0 30 94 8b e8 d4 ae 0d 00 90 <0f> 0b e8 8c 13 c8 ff 48 8b 3c 24 48 c7 c6 20 37 94 8b e8 bc ae 0d [ 456.022316][ T8272] RSP: 0018:ffffc9001a8a76e0 EFLAGS: 00010246 [ 456.022334][ T8272] RAX: 658a8c6070517d00 RBX: ffffea0000c28980 RCX: 0000000000000000 [ 456.022348][ T8272] RDX: 0000000000000000 RSI: ffffffff8d96e815 RDI: 00000000ffffffff [ 456.022360][ T8272] RBP: ffffc9001a8a7818 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e [ 456.022373][ T8272] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: dffffc0000000000 [ 456.022386][ T8272] R13: 1ffffd4000185131 R14: ffffea0000c28998 R15: ffffea0000c28988 [ 456.022399][ T8272] FS: 00007fb3aca816c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 456.022414][ T8272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.022426][ T8272] CR2: 00002000000010b8 CR3: 00000000500c0000 CR4: 00000000003526f0 [ 456.022443][ T8272] Call Trace: [ 456.022451][ T8272] [ 456.022464][ T8272] ? __pfx_filemap_fault+0x10/0x10 [ 456.022491][ T8272] __do_fault+0x135/0x390 [ 456.022516][ T8272] __handle_mm_fault+0x198b/0x5620 [ 456.022544][ T8272] ? __pfx___handle_mm_fault+0x10/0x10 [ 456.022571][ T8272] ? find_vma+0xe7/0x160 [ 456.022589][ T8272] ? __pfx_find_vma+0x10/0x10 [ 456.022609][ T8272] handle_mm_fault+0x2d5/0x7f0 [ 456.022632][ T8272] do_user_addr_fault+0x764/0x1390 [ 456.022660][ T8272] exc_page_fault+0x76/0xf0 [ 456.022684][ T8272] asm_exc_page_fault+0x26/0x30 [ 456.022701][ T8272] RIP: 0010:__put_user_4+0xd/0x20 [ 456.022725][ T8272] Code: 66 89 01 31 c9 0f 01 ca e9 00 3b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 3a 03 00 90 90 90 90 90 90 90 90 90 90 [ 456.022738][ T8272] RSP: 0018:ffffc9001a8a7c98 EFLAGS: 00050206 [ 456.022754][ T8272] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000010b8 [ 456.022765][ T8272] RDX: 0000000000000000 RSI: ffffffff8db5a681 RDI: ffffffff8be1b940 [ 456.022777][ T8272] RBP: ffffc9001a8a7eb0 R08: 0000000000000000 R09: ffffffff820a3bc0 [ 456.022789][ T8272] R10: dffffc0000000000 R11: ffffed100f0bb8f9 R12: 0000200000001080 [ 456.022802][ T8272] R13: 0000000000040000 R14: 0000200000000480 R15: 0000000000000030 [ 456.022816][ T8272] ? __might_fault+0xb0/0x130 [ 456.022841][ T8272] __sys_sendmmsg+0x25f/0x430 [ 456.022864][ T8272] ? __pfx___sys_sendmmsg+0x10/0x10 [ 456.022881][ T8272] ? do_futex+0x333/0x420 [ 456.022902][ T8272] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 456.022937][ T8272] ? rcu_is_watching+0x15/0xb0 [ 456.022964][ T8272] __x64_sys_sendmmsg+0xa0/0xc0 [ 456.022984][ T8272] do_syscall_64+0xfa/0x3b0 [ 456.023007][ T8272] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.023030][ T8272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.023047][ T8272] ? clear_bhb_loop+0x60/0xb0 [ 456.023066][ T8272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.023088][ T8272] RIP: 0033:0x7fb3abb8e929 [ 456.023107][ T8272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.023121][ T8272] RSP: 002b:00007fb3aca81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 456.023140][ T8272] RAX: ffffffffffffffda RBX: 00007fb3abdb6080 RCX: 00007fb3abb8e929 [ 456.023152][ T8272] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000006 [ 456.023164][ T8272] RBP: 00007fb3abc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 456.023176][ T8272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.023189][ T8272] R13: 0000000000000000 R14: 00007fb3abdb6080 R15: 00007fffd9209e08 [ 456.023210][ T8272] [ 456.023220][ T8272] Modules linked in: [ 456.023245][ T8272] ---[ end trace 0000000000000000 ]--- [ 456.023270][ T8272] RIP: 0010:filemap_fault+0x117d/0x1200 [ 456.024398][ T8272] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 8d 6b 29 00 e9 81 fc ff ff e8 a3 13 c8 ff 48 89 df 48 c7 c6 a0 30 94 8b e8 d4 ae 0d 00 90 <0f> 0b e8 8c 13 c8 ff 48 8b 3c 24 48 c7 c6 20 37 94 8b e8 bc ae 0d [ 456.025507][ T8272] RSP: 0018:ffffc9001a8a76e0 EFLAGS: 00010246 [ 456.028014][ T8272] RAX: 658a8c6070517d00 RBX: ffffea0000c28980 RCX: 0000000000000000 [ 456.028035][ T8272] RDX: 0000000000000000 RSI: ffffffff8d96e815 RDI: 00000000ffffffff [ 456.028050][ T8272] RBP: ffffc9001a8a7818 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e [ 456.028066][ T8272] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: dffffc0000000000 [ 456.028081][ T8272] R13: 1ffffd4000185131 R14: ffffea0000c28998 R15: ffffea0000c28988 [ 456.028098][ T8272] FS: 00007fb3aca816c0(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 456.028112][ T8272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.028123][ T8272] CR2: 00007f0402875e9c CR3: 00000000500c0000 CR4: 00000000003526f0 [ 456.028148][ T8272] Kernel panic - not syncing: Fatal exception [ 456.028436][ T8272] Kernel Offset: disabled