last executing test programs: 21m32.751722787s ago: executing program 32 (id=1339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 21m27.087815442s ago: executing program 33 (id=1354): mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) unshare(0xb0b6cc53adc9c1bb) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20044000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000040000000000000008000385100000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1e}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x21, &(0x7f0000000200)=ANY=[@ANYBLOB='nr_bZocks=504,\x00']) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000001300)={'nr0\x00'}) sysinfo(&(0x7f0000000500)=""/92) 18m55.709716836s ago: executing program 34 (id=1665): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x222) 17m21.533095281s ago: executing program 35 (id=1875): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x22, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, 0x0) 15m17.140359617s ago: executing program 4 (id=2152): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0, 0x0, 0xbe}, 0x18) socket$netlink(0x10, 0x3, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) fallocate(r1, 0x23, 0x1ff, 0x7f) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000000b03000000000000000000030000060500010000000000080003400000000108000340000000000500010000000000080002"], 0x7c}}, 0x4814) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 15m15.502528451s ago: executing program 4 (id=2159): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x2001) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x22) 15m14.674767611s ago: executing program 4 (id=2166): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x9}, {0x3, 0x3ff}]}, 0x18, 0x1) setxattr$incfs_metadata(&(0x7f0000000300)='./file1\x00', &(0x7f0000000380), &(0x7f00000003c0)="2c6a6c967417f23d616e89b2fe07475e5484908a047be93b9067e1ea7b65ccb6669ad6173561c5", 0x27, 0x0) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@ng={0x4, 0x5}, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 15m13.896537898s ago: executing program 4 (id=2170): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x6b0d, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x29d, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc000fd}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) close(0xffffffffffffffff) 15m11.744881151s ago: executing program 4 (id=2180): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 15m11.209914797s ago: executing program 4 (id=2182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0/..\x00') r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 15m9.455569512s ago: executing program 1 (id=2185): bpf$MAP_CREATE(0x0, 0x0, 0x0) mlockall(0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setgroups(0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000"], 0x7c}}, 0x0) bind$rxrpc(r0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd74) r5 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 15m8.319257819s ago: executing program 1 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xbc, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x45, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x911, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @val={0x5, 0x3, {0x58, 0xe0, 0x7}}, @val={0x25, 0x3, {0x4, 0x95}}, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x3f, 0xf, [@random={0x1, 0x39, "e163b8a3acf86d6391a884c3f2359a41e1e83d9b326c007ff7fae1646d934ef119695542ca343885c0555ffb58d7e051b9a091f36b7b8c6ce0"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xdcb}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000045}, 0x0) 15m7.986185974s ago: executing program 1 (id=2188): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x2, &(0x7f0000000040)={0x1d, "79c58abcca2dfc8862fb4046e2b8075d96249cb98f5c03f18356fa722969c3a992"}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r4 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0xffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15m6.937334794s ago: executing program 8 (id=2190): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x404000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xe}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x2cea, &(0x7f0000000180)={0x0, 0x7a71, 0x40, 0x0, 0x385}, &(0x7f0000000080), &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f000018a000/0x2000)=nil, 0x2000, 0x12) close(r0) 15m6.35743175s ago: executing program 1 (id=2191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 15m6.103656986s ago: executing program 1 (id=2192): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 15m5.809628964s ago: executing program 1 (id=2195): socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) socket(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0xa0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/601, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfd85) 15m5.087713126s ago: executing program 8 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 15m3.955038462s ago: executing program 8 (id=2199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000007c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='page_pool_release\x00', r2, 0x0, 0x4bbf}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x1d, 0x2, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "c801beb100000047", "f8f26ae06508255f4c930e80aedcd08e", "6d81108a", "c440238952152069"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "9b00", "25110528444d684ad9c60100000000000100dd3600", "5cb6d254", "160000009a00"}, 0xba3f6f2771eade19) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) syz_open_pts(0xffffffffffffffff, 0x8182) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 15m1.997172244s ago: executing program 8 (id=2202): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = open_tree(0xffffffffffffffff, 0x0, 0x901) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000004) ptrace(0x10, 0x1) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5, {0x1}}, './file0\x00'}) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x13, 0x1, 0x0, 0x5f, 0x3, 0x0, 0xa6, 0x2, 0x5, 0x3}, {0xfffffff9, 0x4004, 0x0, 0x0, 0x0, 0xf6, 0x1, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000000}, {0xffffff01, 0x36, 0x0, 0x0, 0x4, 0x5, 0x7, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xfffffffffffffffe, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x40, 0xf4, 0x4, 0x200}], 0xfffffffe}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xbc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x40, 0x0, 0x0, r9}, {0x0, 0x10000000000003fd, 0xfffffffffffffffe, 0x40000000, 0x2, 0x1a, 0x5, 0x100}, {0x9, 0x5, 0xfffffffffffffc01, 0x4}, 0xb, 0x0, 0x1, 0x0, 0x1, 0x3}, [@replay_thresh={0x8, 0xb, 0x7}]}, 0xbc}}, 0x8044) sendto$inet6(r7, &(0x7f00000003c0)="f95e43", 0x3, 0x51, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @local, 0x9}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00') ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, 0x0) 15m0.469187807s ago: executing program 8 (id=2205): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 15m0.17567634s ago: executing program 8 (id=2207): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0xd, 0x4000009, r1, 0x0) 14m55.980648476s ago: executing program 36 (id=2182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0/file0/..\x00') r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) 14m50.589381606s ago: executing program 37 (id=2195): socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, 0x0, 0x0) socket(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000002840), 0xa0000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/601, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xfd85) 14m44.131777363s ago: executing program 38 (id=2207): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0xd, 0x4000009, r1, 0x0) 14m27.721144719s ago: executing program 5 (id=2252): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(0xffffffffffffffff, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4e14, 0x912a, 0x41, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x16}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x5ce4cce6d453c924) 14m25.844366567s ago: executing program 5 (id=2255): syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @multicast, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 14m24.353714625s ago: executing program 5 (id=2257): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001040)={'wlan1\x00'}) ptrace(0x10, r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)=0x80000003) r4 = dup2(r2, r3) syz_fuse_handle_req(r4, &(0x7f0000000280)="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", 0x2026, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="080003007000fcdbdf25090000000807fa000200ddff0c00010600000300ac1414bb"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x78, r6, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffff800}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) r7 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$cont(0x18, r10, 0x8000000000000000, 0x40009) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000002280)={0x0, 0x81, 0x5}, 0x8) io_uring_enter(r7, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x689, 0x10001) syz_emit_ethernet(0xfd7, &(0x7f0000002440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @dccp={{0x6, 0x4, 0x2, 0x6, 0xfc9, 0x64, 0x1, 0xc, 0x21, 0x0, @remote, @rand_addr=0x64010100, {[@rr={0x7, 0x3, 0x78}]}}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x5, 0x0, 0x0, 0x1, 0x4, '\x00', 0x80, 'TaI'}, "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"}}}}}, 0x0) 14m23.458791577s ago: executing program 5 (id=2260): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0xffffffffffffffff, 0x3, 0x5003) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0), 0x20302, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) 14m22.055561965s ago: executing program 5 (id=2261): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x20000080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 14m21.990189281s ago: executing program 5 (id=2262): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa00b06e358408004500001c00"], 0x0) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f00000002c0), 0x0, 0x2) syz_genetlink_get_family_id$tipc(0x0, r5) r8 = dup2(r3, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 14m6.902589816s ago: executing program 39 (id=2262): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa00b06e358408004500001c00"], 0x0) io_uring_enter(r5, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f00000002c0), 0x0, 0x2) syz_genetlink_get_family_id$tipc(0x0, r5) r8 = dup2(r3, r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0xb, 0x2, 0x0, &(0x7f0000000140)=0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 4m36.501669927s ago: executing program 6 (id=4324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x8000}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f000500", 0x1b}], 0x1}, 0x4404c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000200)="c21c21d8c3afd223d148e19038c7f631d4f2e48baced9aaa2f6655667758f89bca4aa7697a49805d8177f230abaeea84c7185c597cb11458b4353798eb6000049bcc039df9534d963396aa9dab556e032e24be9f2a813943c9d92654ffde6566485243d7e8fa8d", &(0x7f0000000300)=""/222, &(0x7f0000000400)="3966f587a7a07091e2e8d4deefc7fe7c43247ff191e024ef104ed444bda29f276147a0749139d9cdf35eea86b972fa89ac40ee3797ab0fca98025e4fa80166f607aadba770ee10c9852fc71ee92ae6c16c9e3e3955b7086cf4f739b33da67969907232d349a0a3ce24908a5d21b432a85c66d12be14f15d76abd5a85b519e058f0b76e0b32effe91e744b59807fe8510f49ec54cf683ac5e27088e81975a65b5421f9ebb3658e33ac6eb05f94b65ebabbec7eb21cc997523c490cd6ffc6e167f8d5ad13e256a88a87f34168164f5cb", &(0x7f0000000540)="d91232296cbfdd3b011a66a210025b11e93f5d5c6d430bba2beb52dddc0c529c29528a683a37052481797c14d2a57b4b834b3e3bcba850e19f00f88db0d64f3f7c1bc62af9576116f3824e8b2d6e56f3b137b0343d4987c156cc8b1dee0fd5de4fffc570d8c74e2d9ebcf9670c95dcf208bc643f626eadbabc6d867af8ae58624fea5b001b2940a24a9d84df", 0x6018, r3, 0x4}, 0x38) 4m35.816435545s ago: executing program 6 (id=4327): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000280)={0x1, 0x0, 0x27f}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b000)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x550}}, 0xc020) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = fsopen(0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000440)={0x10006, 0xb5d, 0x80}, 0xffffffffffffffad) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012009b25f2e54a7f106b000080000000"], 0x26}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r7 = dup(r2) write$FUSE_BMAP(r7, &(0x7f0000000240)={0x18, 0x0, 0x0, {0x7fffffff}}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180), 0x200000, &(0x7f0000000300)=ANY=[@ANYBLOB="0a8214e97a5fbb09ea959305b790528923f251e0f2d172d7a751f673f3ee948fabc1dda5ee0c681fb8535b1e887fba2024a3dec3fa8a24b8", @ANYRES32, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',cache=fscache,directio,\x00']) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') 4m35.607558638s ago: executing program 6 (id=4328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, &(0x7f000000cb00)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) fsmount(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) 4m34.54073855s ago: executing program 6 (id=4331): r0 = memfd_create(&(0x7f0000000840)='[\v\xdbX\xae[\x1a\xa9\x00\xc2\x9aml\r\xcf\xaa\x13\x99\x85B\xc3\x06<\xc2\xa9\xc3\xdb\x88\xee\x85md\xc8\x85HX\xa9%\f\x8fe\xe0\x00\x00\xa8\xfdn\xbe \a\x0e\xa3\xb9\x1d\x9dO\xbdj\x00\x00\xfb\xff\x00c\xb2\xc9\ap\xd0\xa2\x82\x1e\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcb\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2\xa75\x9d\xcb\x1e\x80\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x00uNh\xc5(\xbc\xf3\xac{\x04D2\xf2\xcd\xc2{E\xae\x89\xddI\xc8\xc6\xe9\xef\x98\xf0\x8b\xac\xa7R\x10\x011\x9fi\x00\x00\x00\x00\x00\x00\x00\x00\x002?D\x86\x14\xa52<\x87n\xf4\x04R\x15\t\xb8\xbeT\xb8\xe7K)\x1fP\xb6\xce8\xcc\xabe\xcb\xd0\xf9\xc9\xfe_\v\xaa#\x8f\x8asu\xb2\xfe\xc4\xbe\x03\xd3\x93E\x1d\xaf}\x9b\xac\xc2\x9a\xe6W\x92sD\fn\x9e\xc2s\xc6_4\f\xc1\x8b\x9a\xa4_\xad\x9b\xb9 \v\x0f{>\xdf^.\xb8\x96\x1d\x99vY\xa8\xfa\xd7i\x94i^;\xaa\xe7XA\xd2\xc5\x02\x12I\xbe\xd0Ksq\x96 \xbf\xed\x1c\x91\xeeN\xda&\xddtG\xc2\xa8j\xae\xac)\xfdNu\x19\x91\xa7z\x1b\x0e\xab\xd2k\x16\x87#\xf6p#\x8d\xdd?\x9fXV\x12\xa9\xc7v\x02\x98g:4\xb6\xcaY\xc2~k\xcb\xef]h/\xa2\xaf\xc4\xec\xdc\xd4H\xed\x94qNY\x85\x87&\xf1\xbb\f\x02\x0fo\xae\xf4\x19|\xc4\xfcL\xdb\x00\xedrK\x13\xb5J?s\x93\xe6\xda\xf0\xf3B\x8d\xb4\xd8>\x12\xb0\x8e\x8d\xdaQ\xa2\xd0\xbc\x92d\x9e^\xbc\xd5\x8aNf\xefa\v*\xb08\xfc\xd2\xa4\x11`\xae\x98\xcc\xe1\xea\xc2\x1dKR\x0e\x1cK\x86\v\xba\xdfz\xa8\xdf\xb6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xe9\xb3@\xe8\a0\x1e\xb8L\x83\xc4\xa8\xb2\xc1\xf8\xae\x1d\x198\x0f\xfa\t\x88+\xdc\xe1\x01@\xbd\x8ba\"|\x14\x1bF\x9b\xd3\xff7\a\x1c:U\xba\xf4\t\xdc\xef\xe3\x11\xdb^\xee\x8c0\xee\xde6:\x80t\xfb\xbc^K\xb4\x8c9\xb0\xec\x82\x127!\x0e\xa3\xc9\xe0\xea\xfa\x0f\xbb\x0e \xc3\xef\xb20xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0xd, 0x6, 0x3, 0x8000000000000001, 0x0, 0x0, 0x80}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000300)={@private1, @local, @remote, 0x2, 0x5, 0x4f, 0x400, 0x9, 0x1800200}) syz_pidfd_open(r0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{}], {0x4, 0x1}, [], {0x10, 0x6}}, 0x2c, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000b40)={0x0, 0x0, '\x00', @bt={0xfffffffb, 0x8518, 0x0, 0xffffffff, 0x2, 0x4000000000000000, 0xe, 0xe}}) sendmsg$NFT_BATCH(r5, &(0x7f0000010100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x10}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xe98f}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 4m32.591430796s ago: executing program 6 (id=4338): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 4m17.288914607s ago: executing program 40 (id=4338): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) 32.367441846s ago: executing program 9 (id=5020): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r5 = socket(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x1cc, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x170, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x40}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1d81}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}]}}}, {0x114, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x104, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x96, 0x3, "20a41a102fd62c731f5407d9d0b62fe413545e8706d02999e1b19c09ab1c4f2c47bccd7fc5f0e3a90f25a372d3895799dba9c0eb04155440e7ad8ac7e35662cfcdcd8d09fd50c6af16a0ddc7b257338c80446642706d840e70fe149c2a920afcdd884839d2bcd1e5358a16441a676ace91971bd8e92587cc7b7f37ae7ba3383f59cbdb359b69c232bb7c4f339b27c3b109f4"}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_INFO={0x5f, 0x3, "e6e7dd85730201a2857ab3c371913095d330948bf16e090c3df19b100d52170f1e37330d16c21a7428e72210f08944636e0aaa85023f5186a0964202a90813c6675e1970a553cab09938c753190c04465601d850b67fb5002048e4"}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) brk(0x689d80000000) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x24200, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0xd0, 0x30, 0x9, 0xf00, 0x0, {}, [{0xbc, 0x1, [@m_mpls={0xb8, 0x11, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x7fff, 0xffffffffffffffff, 0x2, 0x2}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x17}]}, {0x5f, 0x6, "689c4e5101d8fe4082eace021ab9f06a7a193acdd2577a9b8e0333578b01a0ae9e22e37ab22c56db7fc8bf57cf8e7c3421018f749ef0e429ccaabcf7c0f5713a242f85c7ac96d09cd853704d13fb591525758649c740ac673b7108"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xd0}}, 0x40040c0) 31.115804792s ago: executing program 9 (id=5024): openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ftruncate(r1, 0x400) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000003c0)=0x2000) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r6, 0x80) r7 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r7, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r7, 0x3a5) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000001900000000010800060001000000060001000a000000"], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="94000000", @ANYRES16=r4, @ANYBLOB="04002abd7000fcdbdf2506000000050005000000000008000200020000001c0006800800060008000000060001000200000008000300ffffffff54000180080003007f0000010400fe80000000000000000000000000000000000000000000001206000100020000000800030064010102080006001f00000008001300e00000010000"], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r8 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000400)=0x27b00000) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x47f6, 0x0, 0x4, 0x0, 0x0) 25.320285494s ago: executing program 9 (id=5039): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0xd1}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x294240) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x3, 0xcdc5, 0x1, 0x80000001}, 0x5, 0xe37b, 0x7fffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, 0x0, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) bind$inet6(r5, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x24}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x140}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a8, 0x1, 0x7ffc, 0x8040024e}, &(0x7f0000000140)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r7 = syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@inodes_32bit}, {@prjquota}, {@errors_fix_safe}, {@errors_ro}, {@reconstruct_alloc}, {@recovery_pass_last={'recovery_pass_last', 0x3d, 'initialize_subvolumes'}}, {@nochanges}, {@verbose}], [{@audit}]}, 0x1, 0x590a, &(0x7f000000b240)="$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") getdents64(r7, &(0x7f0000000440)=""/108, 0x6c) 24.714127227s ago: executing program 9 (id=5042): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) 23.678400564s ago: executing program 9 (id=5045): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x1, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x20005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x9, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x8, 0x624dfaee, 0xc, 0x7f, 0x1000, 0xf9, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x7fffffff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x24, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x0, 0x4, 0x53, 0x4, 0x7b, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x40, 0x7d, 0x6}}) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, 0x0, 0x41) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0xfffffffffffffffe, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7, 0x5, 0x5, 0x6, 0x800, 0x45, 0x8, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.384410112s ago: executing program 9 (id=5047): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="08b5a71534e47c5cde7582fa3b023d4b8c6b93b4e81cd3347471666373cd1c78989c6c8311de5fdc28fca2420c2ab26daac232c722df9f83ffe2c4c359dcb0a687832cd6c0658097a993f613be2698a85660a9e682c4", 0x56}], 0x1, 0x0, 0x0, 0x4008000}], 0x1, 0x40800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.315756241s ago: executing program 3 (id=5090): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000040)='./file0\x00', 0x104) lsetxattr$security_ima(0x0, &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5211eb8e5ce6935e9bbd76e32c4c956e"}, 0x11, 0x1) syz_usb_connect(0x3, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x2280, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 6.8999881s ago: executing program 7 (id=5093): bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000780)="08b5a71534e47c5cde7582fa3b023d4b8c6b93b4e81cd3347471666373cd1c78989c6c8311de5fdc28fca2420c2ab26daac232c722df9f83ffe2c4c359dcb0a687832cd6c0658097a993f613be2698a85660a9e682c4", 0x56}], 0x1, 0x0, 0x0, 0x4008000}], 0x1, 0x40800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.83636272s ago: executing program 7 (id=5095): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000004c0)=@multiplanar_userptr={0x4, 0x3, 0x4, 0xa018, 0x0, {}, {0x2, 0xc, 0x7, 0x3, 0x9, 0x1b, "3cdab13e"}, 0x6, 0x2, {&(0x7f0000000440)=[{0xc, 0x8001, {&(0x7f00000001c0)}, 0x60}, {0x3, 0x5, {0x0}, 0x100}]}, 0x3, 0x0, r0}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{}, 0x8, 0x5, 0xedd1}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000081000000100000000000000041040600", @ANYRES32=r0, @ANYBLOB="f4a400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000080000eaffff000000000000000000"], 0x50) syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") 5.100181783s ago: executing program 3 (id=5098): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000000cb00)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31) fsmount(0xffffffffffffffff, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) 4.984301731s ago: executing program 0 (id=5099): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 3.752544344s ago: executing program 0 (id=5101): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000014000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e54"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 3.751194311s ago: executing program 3 (id=5102): ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000080)={0x2, 0x0, [0x8000, 0x1, 0x4, 0x7, 0x9, 0x9, 0x4, 0x2]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r1 = accept(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000) sendto(r1, &(0x7f0000000680)="138582db23b8734db88761cecdf08d74a0d33b69e0aa8e426beac6659134ce0b9ab64cfa9145d9dca1c7d0e19d5aad95541efd870c751da7ee28e550a2e8699968eb7c207095dd192cd3c70c1930935eae0aa93b94687f387f371d8774a95f60403e64a13d813878c019bc256013b004c022d5b38ea051a4d9503dede59f832860d97c9e7bace2697e3706e7267508755598f89a242cdb2328f3e93aced8aedabd3bf23146459dc662d2023ccf1485eab407b20d0cd9e36560bc01d06e983d6c42bd01eac95982bd7d637446b6c8c9efcc68b91b094e948a225060e541f9e01f4165", 0xe2, 0x8005, &(0x7f00000004c0)=@ieee802154={0x24, @short={0x2, 0xffff, 0xffff}}, 0x80) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) 3.493931806s ago: executing program 2 (id=5103): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0xd1}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x294240) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000001c0)={{0x0, 0x3, 0xcdc5, 0x1, 0x80000001}, 0x5, 0xe37b, 0x7fffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x24}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.414884811s ago: executing program 0 (id=5104): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='mm_vmscan_lru_shrink_active\x00', r1}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 3.39139729s ago: executing program 3 (id=5105): pipe(&(0x7f0000000500)) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0xbc, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffe0}, {}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x2, 0x0, 0xf, 0xff, 0x0, 0x2, 0xb, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1], 0x1, [0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x30, 0xc, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x49}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8}]}]}]}}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) 3.301736787s ago: executing program 2 (id=5106): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0xe, 0x5, 0xfc, 0x289e}]}, 0x10) 3.265519659s ago: executing program 0 (id=5107): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x240002, 0x0) r3 = gettid() tkill(r3, 0xb) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000380)=r3) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$TIOCSPGRP(r4, 0x5410, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0xc, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0), 0x5b, 0x40, 0x0) r6 = getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r8 = syz_pidfd_open(r6, 0x0) process_madvise(r8, &(0x7f0000000340)=[{&(0x7f00000000c0)="b16ca4", 0x3}], 0x1, 0x19, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000840)={0x3, {{0xa, 0x4e23, 0x9, @mcast1, 0x8}}, 0x0, 0x3, [{{0xa, 0x4e24, 0x7fffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x100}}, {{0xa, 0x4e21, 0x102, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2c5}}, {{0xa, 0x4e23, 0x752400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}}]}, 0x210) 3.165120169s ago: executing program 2 (id=5108): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r5 = socket(0x29, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x1d0, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x40}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x1d81}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8}]}}}, {0x118, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x96, 0x3, "20a41a102fd62c731f5407d9d0b62fe413545e8706d02999e1b19c09ab1c4f2c47bccd7fc5f0e3a90f25a372d3895799dba9c0eb04155440e7ad8ac7e35662cfcdcd8d09fd50c6af16a0ddc7b257338c80446642706d840e70fe149c2a920afcdd884839d2bcd1e5358a16441a676ace91971bd8e92587cc7b7f37ae7ba3383f59cbdb359b69c232bb7c4f339b27c3b109f4"}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_INFO={0x64, 0x3, "e6e7dd85730201a2857ab3c371913095d330948bf16e090c3df19b100d52170f1e37330d16c21a7428e72210f08944636e0aaa85023f5186a0964202a90813c6675e1970a553cab09938c753190c04465601d850b67fb5002048e4f313da3226"}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) brk(0x689d80000000) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x24200, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0xd0, 0x30, 0x9, 0xf00, 0x0, {}, [{0xbc, 0x1, [@m_mpls={0xb8, 0x11, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x8000, 0x7fff, 0xffffffffffffffff, 0x2, 0x2}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x17}]}, {0x5f, 0x6, "689c4e5101d8fe4082eace021ab9f06a7a193acdd2577a9b8e0333578b01a0ae9e22e37ab22c56db7fc8bf57cf8e7c3421018f749ef0e429ccaabcf7c0f5713a242f85c7ac96d09cd853704d13fb591525758649c740ac673b7108"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xd0}}, 0x40040c0) 2.783603259s ago: executing program 7 (id=5109): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0)=""/236, &(0x7f0000000540)=0xec) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0187000000000000000067000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x44844}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.723723589s ago: executing program 2 (id=5110): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x42bb, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x1, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x28000, 0x5, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x2, 0x9, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xfeff58b9, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x20005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x9, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x8, 0x624dfaee, 0xc, 0x7f, 0x1000, 0xf9, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x7fffffff, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x9, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0x8, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[], 0x214}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x24, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x8000, 0x209, 0x1, 0x354, 0x3, 0x0, 0x0, 0x1}}, 0x50) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x20) sched_setaffinity(0x0, 0xfffffffffffffd58, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="14020000140001002dbd7000000000000a"], 0x214}], 0x1}, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, 0x0, 0x41) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0xfffffffffffffffe, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffe, 0x7, 0x5, 0x5, 0x6, 0x800, 0x45, 0x8, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.653560385s ago: executing program 2 (id=5111): syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @multicast, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3f, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @rand_addr, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8}]}}]}, 0x3c}}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2.630541491s ago: executing program 7 (id=5112): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r3 = syz_io_uring_setup(0x18d6, &(0x7f0000000440)={0x0, 0x5352, 0x0, 0x2000, 0xfffffffc}, &(0x7f0000ffe000), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x2, 0x0, 0xfe) 1.503390227s ago: executing program 0 (id=5113): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0x6, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e05, 0x1, @mcast1, 0x7}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="80006466d3805699", 0x8, 0x20004840, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/7, 0x7}, 0x1}], 0x40000000000025b, 0x40000002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x4c000) 1.044412s ago: executing program 7 (id=5114): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000014000a0000050900030073797a30000000000900010073797a3100000000080007006e6174001400048008000140000000030800024054dd5e54"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.039945752s ago: executing program 3 (id=5115): fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x5, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 175.614833ms ago: executing program 7 (id=5116): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x9c, 0x4, 0x0, 0x0, 0x0, 0x9}) r0 = socket$netlink(0x10, 0x3, 0x15) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000fe42008a18eb3e691244050a94605d0b461d66e2ff0ab0220d7f47f64e6694aee5b72054f7897c116ea005c3d5c57b6f3620feca0eb9c093415f0b5dd7992ea644b72a2d6338075b36d54308aa2132d68e81e56c4b6f815f956d91fe229ee1d18117d8d42953f29c7cf16f740ad40af61420ede1c40730076207ca90296089d74caf867b8ecdba4feb1884f04a0d28be5781371d3fd7a1a412485831cbcaa5862e6cea8e36bb5e28f0b5c2ed9b907b61d01b10cb"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) r2 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x88081) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000380)=0xd) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$eventfd(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000240)={{0x80, 0xf7}, 'port1\x00', 0x3ee, 0x2062f, 0x3, 0x100, 0x0, 0xc, 0x3fc, 0x0, 0x7, 0xfd}) close_range(r1, 0xffffffffffffffff, 0x10000000000000) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x492f82, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r7}, 0xc) r8 = openat$ppp(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f0000000180)=0x1) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x44}, 0x0) timer_create(0xb, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 175.148136ms ago: executing program 2 (id=5117): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4000004) sendto$packet(r0, &(0x7f0000000580)="31143787", 0x4, 0x40, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xe, 0x6, @local}, 0x14) 120.62063ms ago: executing program 0 (id=5118): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x4e) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)}, {&(0x7f0000000440)="9472aef1629418da78f7", 0xa}], 0x2}], 0x1, 0x8001) recvmsg$qrtr(r2, 0x0, 0x0, 0x10020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = timerfd_create(0x0, 0x0) read(r4, &(0x7f0000000080)=""/149, 0x95) 0s ago: executing program 3 (id=5119): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffdb2, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095", @ANYRESHEX=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0xc, 0x9, 0xc45, 0x1010, 0xc7, 0x0, 0x800007, 'syz0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@deltaction={0x28, 0x32, 0x101, 0x0, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES16=r4], 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000208000/0x1000)=nil, 0x1000, 0x11) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) kernel console output (not intermixed with test programs): batadv0: Removing interface: batadv_slave_1 [ 1051.774946][ T6068] batman_adv: batadv0: Removing interface: dummy0 [ 1051.815569][ T6068] veth1_macvtap: left promiscuous mode [ 1051.821229][ T6068] veth0_macvtap: left promiscuous mode [ 1051.826889][ T6068] veth1_vlan: left promiscuous mode [ 1051.832669][ T6068] veth0_vlan: left promiscuous mode [ 1051.839100][ T6068] veth1_macvtap: left promiscuous mode [ 1051.844805][ T6068] veth0_macvtap: left promiscuous mode [ 1051.851594][ T6068] veth1_vlan: left promiscuous mode [ 1052.507168][ T6068] team0 (unregistering): Port device team_slave_1 removed [ 1052.565046][ T6068] team0 (unregistering): Port device team_slave_0 removed [ 1053.589667][ T6068] team0 (unregistering): Port device team_slave_1 removed [ 1053.642921][ T6068] team0 (unregistering): Port device team_slave_0 removed [ 1054.251004][ T10] lo speed is unknown, defaulting to 1000 [ 1054.279873][ T10] infiniband syz2: ib_query_port failed (-19) [ 1054.299217][T13775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1054.333657][T13775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1054.381052][T13775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1054.440491][T13775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1054.747591][T13738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1054.777206][T13738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1054.880852][T13738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1054.911275][T13738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1055.219789][T13699] veth0_vlan: entered promiscuous mode [ 1055.267166][T13699] veth1_vlan: entered promiscuous mode [ 1055.285404][T13775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1055.601283][T13775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.665158][T13699] veth0_macvtap: entered promiscuous mode [ 1055.835866][T11209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.843097][T11209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.885837][T13699] veth1_macvtap: entered promiscuous mode [ 1055.897571][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.904799][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.934085][T13738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.091514][T13699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.121965][T13699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.188994][T13738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.217189][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.263204][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.297121][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.310870][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.318029][T11218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.327789][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.361909][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.369161][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.622627][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.640293][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.747425][T10896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.771466][T10896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.871832][T13775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.004152][T12993] Bluetooth: hci1: unexpected event 0x14 length: 20 > 6 [ 1057.097161][T13982] nvme_fabrics: missing parameter 'transport=%s' [ 1057.122082][T13982] nvme_fabrics: missing parameter 'nqn=%s' [ 1057.272746][T13738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.280697][T13985] fuse: Unknown parameter '00000000000000000000004' [ 1057.294303][T13775] veth0_vlan: entered promiscuous mode [ 1057.339021][T13775] veth1_vlan: entered promiscuous mode [ 1057.436436][T13738] veth0_vlan: entered promiscuous mode [ 1057.461820][T13775] veth0_macvtap: entered promiscuous mode [ 1057.477631][T13738] veth1_vlan: entered promiscuous mode [ 1057.489742][T13775] veth1_macvtap: entered promiscuous mode [ 1057.499774][T13987] netlink: 'syz.9.2271': attribute type 1 has an invalid length. [ 1057.515313][T13775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.525407][T13987] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2271'. [ 1057.644451][T13775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.687890][T10896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.697583][T10896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.739703][T13738] veth0_macvtap: entered promiscuous mode [ 1057.777315][T10896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.789580][T13738] veth1_macvtap: entered promiscuous mode [ 1057.814554][T10896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.937986][T13738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.981908][T13738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.006993][ T9709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.156371][ T9709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.165887][ T9709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.176568][ T9709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.455954][T13995] batman_adv: batadv0: Adding interface: dummy0 [ 1058.474788][T13995] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.507054][T13995] batman_adv: batadv0: Interface activated: dummy0 [ 1058.560950][T13996] net_ratelimit: 30 callbacks suppressed [ 1058.560987][T13996] batadv0: mtu less than device minimum [ 1058.582911][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.594999][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.607118][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.618737][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.630192][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.641625][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.653086][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.664460][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.675898][T13996] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1058.960521][ T6069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.971459][ T6069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.137382][T11209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.171446][T11209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.267586][T10896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.282460][T10896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.330284][T11209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.339325][T11209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.897854][T14018] fuse: Unknown parameter '00000000000000000000004' [ 1060.419559][T14023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2223'. [ 1060.530250][ T10] IPVS: starting estimator thread 0... [ 1060.649978][T14026] IPVS: using max 23 ests per chain, 55200 per kthread [ 1060.718255][T14029] xt_l2tp: v2 sid > 0xffff: 1114112 [ 1061.060277][T14031] nvme_fabrics: missing parameter 'transport=%s' [ 1061.186634][T14031] nvme_fabrics: missing parameter 'nqn=%s' [ 1062.310969][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 1062.348758][T14048] fuse: Unknown parameter 'fd00000000000000000000004' [ 1062.919372][T14059] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1062.919372][T14059] program syz.0.2292 not setting count and/or reply_len properly [ 1064.043495][T14072] 9pnet_virtio: no channels available for device syz [ 1065.698716][T14080] fuse: Unknown parameter 'fd00000000000000000000004' [ 1066.954751][T13665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1066.966007][T13665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1066.975880][T13665] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1066.992711][T13665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1067.010261][T13665] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1068.628550][T14105] kexec: Could not allocate control_code_buffer [ 1068.663338][T14092] nvme_fabrics: missing parameter 'transport=%s' [ 1068.673907][T14092] nvme_fabrics: missing parameter 'nqn=%s' [ 1068.743363][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.914381][T14120] fuse: Unknown parameter 'fd00000000000000000000004' [ 1069.141065][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.161740][T13665] Bluetooth: hci5: command tx timeout [ 1069.401307][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.632586][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.068287][T14140] ptrace attach of "./syz-executor exec"[13738] was attempted by "./syz-executor exec"[14140] [ 1070.311574][T14145] befs: (nbd0): No write support. Marking filesystem read-only [ 1070.313679][T14145] block nbd0: Attempted send on invalid socket [ 1070.313774][T14145] blk_print_req_error: 3 callbacks suppressed [ 1070.313802][T14145] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1070.316031][T14145] befs: (nbd0): unable to read superblock [ 1071.683639][T13665] Bluetooth: hci5: command tx timeout [ 1072.180765][T13665] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 1072.507127][ T13] bridge_slave_1: left allmulticast mode [ 1072.527139][ T13] bridge_slave_1: left promiscuous mode [ 1072.626044][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.704535][ T13] bridge_slave_0: left allmulticast mode [ 1072.751943][ T13] bridge_slave_0: left promiscuous mode [ 1072.758105][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.712430][T13665] Bluetooth: hci5: command tx timeout [ 1073.747951][T14151] kexec: Could not allocate control_code_buffer [ 1073.919070][T14162] nvme_fabrics: missing parameter 'transport=%s' [ 1073.932526][T14162] nvme_fabrics: missing parameter 'nqn=%s' [ 1074.491182][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1074.621439][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1074.649117][ T13] bond0 (unregistering): Released all slaves [ 1074.681920][ T13] bond1 (unregistering): Released all slaves [ 1075.285276][ T13] bond2 (unregistering): Released all slaves [ 1075.804058][T13665] Bluetooth: hci5: command tx timeout [ 1075.930801][ T13] bond3 (unregistering): Released all slaves [ 1076.175409][ T13] bond4 (unregistering): Released all slaves [ 1076.190269][T13665] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1076.206711][T13665] Bluetooth: hci1: Injecting HCI hardware error event [ 1076.218933][T12993] Bluetooth: hci1: hardware error 0x00 [ 1076.381177][ T13] bond5 (unregistering): Released all slaves [ 1076.422534][T14094] chnl_net:caif_netlink_parms(): no params data found [ 1077.035351][T14094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.070444][T14094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.079381][T14094] bridge_slave_0: entered allmulticast mode [ 1077.091627][T14094] bridge_slave_0: entered promiscuous mode [ 1077.253914][T14094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.272634][T14094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.302732][T14094] bridge_slave_1: entered allmulticast mode [ 1077.324797][T14094] bridge_slave_1: entered promiscuous mode [ 1077.507746][T14094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.581449][T14094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.844315][ T13] hsr_slave_0: left promiscuous mode [ 1077.852302][T14215] nvme_fabrics: missing parameter 'transport=%s' [ 1077.863456][ T13] hsr_slave_1: left promiscuous mode [ 1077.874336][T14215] nvme_fabrics: missing parameter 'nqn=%s' [ 1077.892115][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1077.906169][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.920970][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1077.930538][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1077.951995][ T13] batman_adv: batadv0: Interface deactivated: 0! [ 1077.962459][ T13] batman_adv: batadv0: Removing interface: 0! [ 1078.005408][ T13] veth1_macvtap: left promiscuous mode [ 1078.011353][ T13] veth0_macvtap: left promiscuous mode [ 1078.350133][T12993] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1080.357436][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1080.476378][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1081.175595][T14094] team0: Port device team_slave_0 added [ 1081.184793][T14094] team0: Port device team_slave_1 added [ 1081.346967][T14094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.445947][T14094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.497555][T14094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.526316][T14094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.547490][T14094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.575318][T14094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.818330][T14094] hsr_slave_0: entered promiscuous mode [ 1081.831803][T14094] hsr_slave_1: entered promiscuous mode [ 1082.796638][T14282] nvme_fabrics: missing parameter 'transport=%s' [ 1082.815613][T14282] nvme_fabrics: missing parameter 'nqn=%s' [ 1083.331252][T14094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1083.397051][T14094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1083.438899][T14094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1083.505345][T14094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1083.797341][T14306] netlink: 368 bytes leftover after parsing attributes in process `syz.0.2363'. [ 1083.847430][T14094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.914389][T14094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.944418][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.951765][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.473983][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.481256][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.657425][T14094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1086.283936][T14329] netlink: 'syz.0.2369': attribute type 1 has an invalid length. [ 1086.291933][T14329] netlink: 'syz.0.2369': attribute type 2 has an invalid length. [ 1087.051759][T14340] binder: 14339:14340 unknown command 0 [ 1087.079745][T14340] binder: 14339:14340 ioctl c0306201 200000000080 returned -22 [ 1087.104784][T14342] binder: 14339:14342 ioctl 4018620d 0 returned -22 [ 1087.133857][T14094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1089.628994][T14094] veth0_vlan: entered promiscuous mode [ 1089.640285][T14360] nvme_fabrics: missing parameter 'transport=%s' [ 1089.696589][T14094] veth1_vlan: entered promiscuous mode [ 1090.040172][T14360] nvme_fabrics: missing parameter 'nqn=%s' [ 1090.122457][T14094] veth0_macvtap: entered promiscuous mode [ 1090.158457][T14094] veth1_macvtap: entered promiscuous mode [ 1090.271949][T14094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1090.316038][T14094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1090.429552][T10896] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.455869][T10896] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.487312][T10896] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.515037][T10896] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.758187][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.788834][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1090.864962][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1090.915132][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.649205][T14384] binder: 14383:14384 unknown command 0 [ 1092.687292][T14384] binder: 14383:14384 ioctl c0306201 200000000080 returned -22 [ 1092.745900][T14384] binder: 14383:14384 ioctl c0306201 0 returned -14 [ 1095.311624][T14406] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1095.311624][T14406] program syz.3.2387 not setting count and/or reply_len properly [ 1101.031066][T14440] binder: 14438:14440 unknown command 0 [ 1101.061627][T14440] binder: 14438:14440 ioctl c0306201 200000000080 returned -22 [ 1101.110043][T14440] binder: 14438:14440 ioctl c0306201 0 returned -14 [ 1103.084433][T14451] ALSA: mixer_oss: invalid OSS volume '' [ 1104.378599][T14462] bond1: entered promiscuous mode [ 1104.385056][T14462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1106.023848][T14490] binder: 14489:14490 unknown command 0 [ 1106.029602][T14490] binder: 14489:14490 ioctl c0306201 200000000080 returned -22 [ 1106.103103][T14490] binder: 14489:14490 ioctl c0306201 0 returned -14 [ 1109.524885][T14528] binder: 14526:14528 unknown command 0 [ 1110.931882][T14528] binder: 14526:14528 ioctl c0306201 200000000080 returned -22 [ 1112.278870][T14561] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2432'. [ 1112.344719][T14563] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1112.366025][T14563] hfsplus: unable to find HFS+ superblock [ 1112.444466][T14564] bond1: entered promiscuous mode [ 1112.450620][T14564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1113.646782][T14577] binder: 14574:14577 unknown command 0 [ 1113.662779][T14577] binder: 14574:14577 ioctl c0306201 200000000080 returned -22 [ 1115.940888][T14582] netlink: 368 bytes leftover after parsing attributes in process `syz.6.2439'. [ 1116.037542][T14589] overlayfs: failed to resolve './file1': -2 [ 1119.259686][T14617] binder: 14613:14617 unknown command 0 [ 1119.277215][T14617] binder: 14613:14617 ioctl c0306201 200000000080 returned -22 [ 1120.306997][T14628] overlayfs: failed to resolve './file1': -2 [ 1121.270143][T14624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2452'. [ 1121.434466][T13706] hid-generic 0000:0003:0001.000E: unknown main item tag 0x0 [ 1121.986562][T13706] hid-generic 0000:0003:0001.000E: unknown main item tag 0x0 [ 1122.000202][T14636] netlink: 'syz.3.2456': attribute type 1 has an invalid length. [ 1122.016286][T14636] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2456'. [ 1122.025881][T13706] hid-generic 0000:0003:0001.000E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1122.370214][T14651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2462'. [ 1122.650322][T13971] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1123.426273][T13971] usb 4-1: Using ep0 maxpacket: 32 [ 1123.446828][T13971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1123.458352][T13971] usb 4-1: config 0 has no interface number 0 [ 1123.489910][T13971] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.529943][T13971] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.570128][T13971] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1123.579251][T13971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.559307][T13971] usb 4-1: config 0 descriptor?? [ 1124.652182][T14674] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1124.661627][T14674] FAT-fs (loop2): unable to read boot sector [ 1127.382932][T14683] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1127.441556][T13971] uclogic 0003:28BD:0094.000F: failed retrieving string descriptor #100: -71 [ 1127.456946][T14683] FAT-fs (loop9): unable to read boot sector [ 1127.485194][T13971] uclogic 0003:28BD:0094.000F: failed retrieving pen parameters: -71 [ 1127.501542][T13971] uclogic 0003:28BD:0094.000F: pen probing failed: -71 [ 1127.508474][T13971] uclogic 0003:28BD:0094.000F: failed probing parameters: -71 [ 1127.520401][T13971] uclogic 0003:28BD:0094.000F: probe with driver uclogic failed with error -71 [ 1127.699084][T13971] usb 4-1: USB disconnect, device number 34 [ 1127.740620][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2475'. [ 1129.284024][T14713] netlink: 'syz.6.2472': attribute type 1 has an invalid length. [ 1129.320139][T14713] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2472'. [ 1129.394250][T14712] NILFS (loop0): device size too small [ 1129.546408][T14719] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2487'. [ 1130.765627][T13706] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 1130.837265][T13706] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1131.393501][T14742] netlink: 'syz.0.2497': attribute type 1 has an invalid length. [ 1131.432776][T14742] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2497'. [ 1133.505757][T14762] binder: 14760:14762 unknown command 0 [ 1133.532808][T14762] binder: 14760:14762 ioctl c0306201 200000000080 returned -22 [ 1134.762649][T14776] netlink: 'syz.6.2508': attribute type 1 has an invalid length. [ 1134.974353][T14776] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2508'. [ 1137.070377][T13706] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1137.863176][T13706] usb 4-1: Using ep0 maxpacket: 32 [ 1137.876263][T13706] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1137.897166][T13706] usb 4-1: config 0 has no interface number 0 [ 1137.905766][T13706] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1137.916866][T13706] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1137.926710][T13706] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1137.950839][T14801] binder: 14800:14801 unknown command 0 [ 1137.957267][T13706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.965885][T14801] binder: 14800:14801 ioctl c0306201 200000000080 returned -22 [ 1138.013121][T13706] usb 4-1: config 0 descriptor?? [ 1138.415827][T14806] EXT4-fs: Ignoring removed nobh option [ 1138.426396][T14806] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1138.436403][T14806] EXT4-fs (loop6): unable to read superblock [ 1139.105864][T13706] uclogic 0003:28BD:0094.0011: failed retrieving string descriptor #100: -71 [ 1140.010496][T13706] uclogic 0003:28BD:0094.0011: failed retrieving pen parameters: -71 [ 1140.018857][T13706] uclogic 0003:28BD:0094.0011: pen probing failed: -71 [ 1140.025959][T13706] uclogic 0003:28BD:0094.0011: failed probing parameters: -71 [ 1140.034514][T13706] uclogic 0003:28BD:0094.0011: probe with driver uclogic failed with error -71 [ 1140.056789][T13706] usb 4-1: USB disconnect, device number 35 [ 1141.235059][T14822] netlink: 'syz.3.2525': attribute type 1 has an invalid length. [ 1141.260279][T14822] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2525'. [ 1144.235816][T14826] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1144.269971][T14826] XFS (loop3): SB validate failed with error -5. [ 1145.061350][T14866] netlink: 'syz.3.2537': attribute type 1 has an invalid length. [ 1145.258565][T14866] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2537'. [ 1148.896950][T14902] ntfs3(loop9): try to read out of volume at offset 0x0 [ 1149.680661][T12993] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 1151.528386][T14935] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1151.603267][T14935] EXT4-fs (loop9): unable to read superblock [ 1153.687365][T13665] Bluetooth: hci4: unexpected cc 0x203e length: 2 > 1 [ 1153.694591][T13665] Bluetooth: hci4: unexpected event for opcode 0x203e [ 1153.710018][T13665] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1153.720041][T13665] Bluetooth: hci4: Injecting HCI hardware error event [ 1154.231541][T12993] Bluetooth: hci4: hardware error 0x00 [ 1154.448615][T14963] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1154.459325][T14963] EXT4-fs (loop6): unable to read superblock [ 1156.277074][T12993] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1159.828839][T15013] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1159.929931][T15013] hfsplus: unable to find HFS+ superblock [ 1160.876996][T15030] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1160.887458][T15030] EXT4-fs (loop0): unable to read superblock [ 1161.144047][T15039] bridge_slave_0: left allmulticast mode [ 1162.470113][T15039] bridge_slave_0: left promiscuous mode [ 1162.476005][T15039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.564678][T15039] bridge_slave_1: left allmulticast mode [ 1162.578174][T15039] bridge_slave_1: left promiscuous mode [ 1162.588951][T15039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.662479][T15039] bond0: (slave bond_slave_0): Releasing backup interface [ 1162.732542][T15039] bond0: (slave bond_slave_1): Releasing backup interface [ 1162.821292][T15039] team0: Port device team_slave_0 removed [ 1162.852412][T15039] team0: Port device team_slave_1 removed [ 1162.903714][T15039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1162.933788][T15039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1162.974415][T15039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.039628][T15039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.081525][T15039] net_ratelimit: 10 callbacks suppressed [ 1163.081543][T15039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1163.154876][T15043] team0: Mode changed to "roundrobin" [ 1163.170902][T15048] vlan0: entered promiscuous mode [ 1163.296515][T15048] team0: Port device vlan0 added [ 1163.314790][T15058] tipc: Started in network mode [ 1163.331979][T15058] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 1163.357060][T15058] tipc: Enabled bearer , priority 0 [ 1163.404778][T15064] netlink: 368 bytes leftover after parsing attributes in process `syz.9.2599'. [ 1164.104392][T15078] 9pnet_fd: Insufficient options for proto=fd [ 1165.175331][T14807] tipc: Node number set to 11578026 [ 1167.318652][T15103] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1168.447414][T15119] binder: 15116:15119 unknown command 0 [ 1168.614164][T15119] binder: 15116:15119 ioctl c0306201 200000000080 returned -22 [ 1169.656663][T15124] netlink: 368 bytes leftover after parsing attributes in process `syz.3.2620'. [ 1170.138505][T15136] overlayfs: failed to resolve './bus': -2 [ 1170.153056][T15137] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1170.176644][T15137] EXT4-fs (loop9): unable to read superblock [ 1170.298311][T15127] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1170.320350][T15127] bcachefs (/dev/loop2): error reading default superblock: IO error: -5 [ 1170.329042][T15127] I/O error, dev loop2, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 1170.358161][T15127] bcachefs (/dev/loop2): error reading superblock: IO error: -5 [ 1170.422711][T15127] bcachefs: bch2_fs_get_tree() error: EIO [ 1171.373426][T15149] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1171.399073][T15149] EXT4-fs (loop6): unable to read superblock [ 1171.411659][T15151] binder: 15148:15151 unknown command 0 [ 1171.417275][T15151] binder: 15148:15151 ioctl c0306201 200000000080 returned -22 [ 1171.427429][T15153] 9pnet: p9_errstr2errno: server reported unknown error @cF S+ [ 1172.587663][T15167] overlayfs: failed to resolve './bus': -2 [ 1172.803067][T15174] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1172.815355][T15174] hfsplus: unable to find HFS+ superblock [ 1173.545839][T15185] binder: 15183:15185 unknown command 0 [ 1173.574392][T15185] binder: 15183:15185 ioctl c0306201 200000000080 returned -22 [ 1173.893198][T15189] binder: BINDER_SET_CONTEXT_MGR already set [ 1173.903154][T15189] binder: 15183:15189 ioctl 4018620d 200000000040 returned -16 [ 1174.366503][T15194] 9pnet: p9_errstr2errno: server reported unknown error @cF S+ [ 1174.718701][T15205] overlayfs: failed to resolve './bus': -2 [ 1175.207138][T15175] xfs: Unknown parameter 'noikeep' [ 1179.072383][T15267] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1179.106756][T15267] MINIX-fs: unable to read superblock [ 1179.303775][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2671'. [ 1179.621397][T15252] xfs: Unknown parameter 'noikeep' [ 1182.114391][T11207] Bluetooth: hci0: Frame reassembly failed (-84) [ 1184.189977][T12993] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1186.434710][T15343] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1188.100231][T10573] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1188.111640][T10573] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1188.120432][T10573] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1188.129395][T10573] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1188.137350][T10573] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1188.314207][T15363] binder: 15362:15363 unknown command 0 [ 1188.330118][T15363] binder: 15362:15363 ioctl c0306201 200000000080 returned -22 [ 1188.484242][T15355] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1188.484242][T15355] program syz.0.2697 not setting count and/or reply_len properly [ 1188.491663][T15367] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1188.555705][T15367] EXT4-fs (loop6): unable to read superblock [ 1188.791328][T11218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.837945][T15358] chnl_net:caif_netlink_parms(): no params data found [ 1188.910651][T11218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.409896][T10573] Bluetooth: hci5: command 0x0405 tx timeout [ 1189.825543][T11218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.901215][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2706'. [ 1189.928008][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.941127][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1189.949416][T15358] bridge_slave_0: entered allmulticast mode [ 1189.966941][T15358] bridge_slave_0: entered promiscuous mode [ 1190.008754][T11218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.046990][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.054678][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.062367][T15358] bridge_slave_1: entered allmulticast mode [ 1190.077215][T15358] bridge_slave_1: entered promiscuous mode [ 1190.189916][T10573] Bluetooth: hci0: command tx timeout [ 1190.221491][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1190.486441][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1190.588005][T15400] Mount JFS Failure: -22 [ 1190.592758][T15400] jfs_mount failed w/return code = -22 [ 1191.370647][T15402] binder: 15401:15402 unknown command 0 [ 1191.381741][T15402] binder: 15401:15402 ioctl c0306201 200000000080 returned -22 [ 1191.420746][T15358] team0: Port device team_slave_0 added [ 1191.445012][T15358] team0: Port device team_slave_1 added [ 1191.593938][T11218] bridge_slave_1: left allmulticast mode [ 1191.600892][T11218] bridge_slave_1: left promiscuous mode [ 1191.606648][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.618349][T11218] bridge_slave_0: left allmulticast mode [ 1191.640227][T11218] bridge_slave_0: left promiscuous mode [ 1191.646557][T11218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.300017][T10573] Bluetooth: hci0: command tx timeout [ 1193.369954][ T5982] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1193.742004][ T5982] usb 3-1: Using ep0 maxpacket: 32 [ 1193.752835][T11218] bond0 (unregistering): Released all slaves [ 1193.776137][ T5982] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1193.787903][ T5982] usb 3-1: config 0 has no interface number 0 [ 1193.855219][ T5982] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1193.864428][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.889980][ T5982] usb 3-1: Product: syz [ 1193.894225][ T5982] usb 3-1: Manufacturer: syz [ 1193.909980][ T5982] usb 3-1: SerialNumber: syz [ 1193.943979][ T5982] usb 3-1: config 0 descriptor?? [ 1194.008927][ T5982] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1194.278620][T11218] bond1 (unregistering): Released all slaves [ 1194.307655][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.332553][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.369983][T10573] Bluetooth: hci0: command tx timeout [ 1194.383376][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.398648][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.406293][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1194.435958][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.545522][T11218] tipc: Left network mode [ 1194.578971][T15358] hsr_slave_0: entered promiscuous mode [ 1194.601546][T15358] hsr_slave_1: entered promiscuous mode [ 1194.627676][T15358] debugfs: 'hsr0' already exists in 'hsr' [ 1194.654916][T15358] Cannot create hsr debugfs directory [ 1195.559963][ T5982] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1195.567082][ T5982] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1195.809208][T15427] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1195.830062][ T5982] usb 3-1: USB disconnect, device number 28 [ 1195.856066][T15429] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2718'. [ 1195.883437][T15427] EXT4-fs (loop2): unable to read superblock [ 1196.109330][T11218] hsr_slave_0: left promiscuous mode [ 1196.119405][T11218] hsr_slave_1: left promiscuous mode [ 1196.129519][T11218] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1196.145024][T11218] batman_adv: batadv0: Removing interface: team0 [ 1196.173704][T11218] batman_adv: batadv0: Interface deactivated: dummy0 [ 1196.198552][T11218] batman_adv: batadv0: Removing interface: dummy0 [ 1196.261321][T11218] veth1_macvtap: left promiscuous mode [ 1196.291424][T11218] veth0_macvtap: left promiscuous mode [ 1196.315362][T11218] veth1_vlan: left promiscuous mode [ 1196.332935][T11218] veth0_vlan: left promiscuous mode [ 1196.395423][T15436] binder: 15435:15436 unknown command 0 [ 1196.406004][T15436] binder: 15435:15436 ioctl c0306201 200000000080 returned -22 [ 1196.429954][T10573] Bluetooth: hci0: command tx timeout [ 1196.694694][T11218] pim6reg (unregistering): left allmulticast mode [ 1197.901782][ T9534] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1197.911618][T12719] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1198.179919][T12719] usb 1-1: Using ep0 maxpacket: 16 [ 1198.202051][ T9534] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.231326][T12719] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1198.267155][ T9534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1198.296542][T12719] usb 1-1: config 204 has an invalid interface number: 118 but max is 1 [ 1198.324037][T12719] usb 1-1: config 204 has an invalid interface number: 152 but max is 1 [ 1198.334912][ T9534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1198.394713][T12719] usb 1-1: config 204 has no interface number 0 [ 1198.409813][ T9534] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1198.525712][T12719] usb 1-1: config 204 has no interface number 1 [ 1198.541339][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2730'. [ 1198.554519][T12719] usb 1-1: config 204 interface 118 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1198.581668][ T9534] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1198.604449][T12719] usb 1-1: config 204 interface 118 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 64 [ 1198.614951][ T9534] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.659682][T12719] usb 1-1: config 204 interface 118 altsetting 3 bulk endpoint 0xD has invalid maxpacket 1023 [ 1198.675791][ T9534] usb 3-1: config 0 descriptor?? [ 1198.706688][ T9534] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1198.714078][T12719] usb 1-1: config 204 interface 118 has no altsetting 0 [ 1198.730356][T12719] usb 1-1: config 204 interface 152 has no altsetting 0 [ 1198.749547][T12719] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=c7.0c [ 1198.768433][T12719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.786846][T12719] usb 1-1: Product: syz [ 1198.791416][T12719] usb 1-1: Manufacturer: syz [ 1198.807135][T12719] usb 1-1: SerialNumber: syz [ 1198.820885][T15457] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1198.844220][T15457] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1198.917202][ T9534] spca561 3-1:0.0: probe with driver spca561 failed with error -22 [ 1198.933217][T11218] team0 (unregistering): Port device team_slave_1 removed [ 1198.940185][ T9534] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1198.961540][ T9534] usb 3-1: MIDIStreaming interface descriptor not found [ 1199.047843][T11218] team0 (unregistering): Port device team_slave_0 removed [ 1199.088369][T12719] kvaser_usb 1-1:204.118: error -ENODEV: Cannot get usb endpoint(s) [ 1199.109213][ T9534] usb 3-1: USB disconnect, device number 29 [ 1199.175231][T12719] kvaser_usb 1-1:204.152: error -ENODEV: Cannot get usb endpoint(s) [ 1199.213934][T12719] usb 1-1: USB disconnect, device number 37 [ 1201.354436][T11218] lo (unregistering): left allmulticast mode [ 1203.326229][ T5982] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1203.710533][ T5982] usb 7-1: Using ep0 maxpacket: 8 [ 1203.828303][ T5982] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1203.911678][ T5982] usb 7-1: config 179 has no interface number 0 [ 1203.922133][ T5982] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1203.925321][T11218] IPVS: stop unused estimator thread 0... [ 1204.045725][ T5982] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1204.128239][ T5982] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1204.227923][ T5982] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1204.272105][ T5982] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1204.336537][ T5982] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1204.364828][ T5982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.380397][T15506] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1204.432221][T15358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1204.474547][T15358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1204.496979][T15518] overlayfs: failed to resolve './bus': -2 [ 1204.524729][T15358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1204.538021][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 1204.610023][T15358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1204.651396][ T812] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input42 [ 1204.962127][T15506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.040835][T15506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.320264][T12719] usb 7-1: USB disconnect, device number 3 [ 1206.320279][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1206.334567][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1206.725765][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.752871][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.786900][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.794151][T11218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.836374][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.843636][T11218] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1207.723280][T15558] overlayfs: failed to resolve './bus': -2 [ 1207.849868][T15561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2762'. [ 1209.531996][T15358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.665715][T15358] veth0_vlan: entered promiscuous mode [ 1209.686025][T15358] veth1_vlan: entered promiscuous mode [ 1209.754006][T15358] veth0_macvtap: entered promiscuous mode [ 1209.954201][T15358] veth1_macvtap: entered promiscuous mode [ 1210.049634][T15358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.213924][T15358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.239587][T15589] nvme_fabrics: missing parameter 'transport=%s' [ 1210.295490][T11218] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.314823][T15589] nvme_fabrics: missing parameter 'nqn=%s' [ 1211.126455][T14882] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.147501][T14882] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.547371][T14882] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1212.369975][T11209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.377847][T11209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.536786][T10896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.570697][T10896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1216.751439][ T9534] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1217.560178][ T9534] usb 3-1: Using ep0 maxpacket: 16 [ 1217.570466][ T9534] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 1217.587578][ T9534] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.599257][ T9534] usb 3-1: Product: syz [ 1217.603629][ T9534] usb 3-1: Manufacturer: syz [ 1217.653086][ T9534] usb 3-1: SerialNumber: syz [ 1218.135924][ T9534] usb 3-1: config 0 descriptor?? [ 1218.143783][ T9534] ums-jumpshot 3-1:0.0: USB Mass Storage device detected [ 1218.170888][ T9534] ums-jumpshot 3-1:0.0: Quirks match for vid 05dc pid 0001: 2 [ 1219.141224][ T9534] usb 3-1: USB disconnect, device number 30 [ 1221.003249][T13665] Bluetooth: hci5: command 0x0405 tx timeout [ 1222.465298][T15693] netlink: 'syz.2.2796': attribute type 11 has an invalid length. [ 1222.536850][T15693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2796'. [ 1223.535104][T15708] netlink: 'syz.2.2802': attribute type 10 has an invalid length. [ 1224.304044][T15708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.375214][T15708] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1227.285091][T15735] netlink: 'syz.9.2809': attribute type 11 has an invalid length. [ 1227.330945][T15737] overlayfs: failed to clone upperpath [ 1227.339045][T15741] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2809'. [ 1228.109206][T15751] fuse: Bad value for 'fd' [ 1229.310050][ T812] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1229.389871][T13665] Bluetooth: hci0: command tx timeout [ 1229.489924][ T812] usb 3-1: device descriptor read/64, error -71 [ 1229.745937][T15772] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1229.787626][ T812] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1230.079890][ T812] usb 3-1: device descriptor read/64, error -71 [ 1230.413744][ T812] usb usb3-port1: attempt power cycle [ 1230.849942][ T812] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1230.913019][ T812] usb 3-1: device descriptor read/8, error -71 [ 1230.970458][T15781] netlink: 'syz.0.2824': attribute type 11 has an invalid length. [ 1231.187594][T15781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2824'. [ 1231.249910][ T812] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1231.273736][ T812] usb 3-1: device descriptor read/8, error -71 [ 1231.410192][ T812] usb usb3-port1: unable to enumerate USB device [ 1233.679234][T15809] fuse: Bad value for 'fd' [ 1234.750350][T15824] netlink: 'syz.3.2836': attribute type 11 has an invalid length. [ 1234.822320][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2836'. [ 1235.642657][T15851] overlayfs: missing 'lowerdir' [ 1236.218499][T15861] fuse: Bad value for 'fd' [ 1237.000168][T15865] netlink: 'syz.9.2851': attribute type 11 has an invalid length. [ 1237.064948][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2851'. [ 1237.476238][T10573] Bluetooth: hci5: command 0x0405 tx timeout [ 1237.918178][T15886] overlayfs: missing 'lowerdir' [ 1238.550453][T15901] netlink: 'syz.3.2865': attribute type 11 has an invalid length. [ 1238.636121][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'. [ 1239.266712][T10573] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1239.332728][T15916] binder: 15913:15916 unknown command 0 [ 1239.338359][T15916] binder: 15913:15916 ioctl c0306201 200000000640 returned -22 [ 1239.508669][T15919] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1239.547804][T15920] overlayfs: missing 'lowerdir' [ 1239.550460][T15919] EXT4-fs (loop3): unable to read superblock [ 1239.710150][T10573] Bluetooth: hci3: command tx timeout [ 1241.294643][T15946] netlink: 'syz.2.2883': attribute type 10 has an invalid length. [ 1241.373728][T15946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.381680][T15946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.491846][T15946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.499270][T15946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.506963][T15946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.514258][T15946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.705568][T15946] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1242.051699][T15963] overlayfs: missing 'lowerdir' [ 1243.543135][T15979] netlink: 'syz.6.2893': attribute type 11 has an invalid length. [ 1243.647745][T15985] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1243.945059][T15985] EXT4-fs (loop2): unable to read superblock [ 1244.221822][T15996] netlink: 368 bytes leftover after parsing attributes in process `syz.6.2899'. [ 1247.594701][T16034] overlayfs: failed to clone upperpath [ 1248.101475][T10573] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1251.271623][T16090] netlink: 165 bytes leftover after parsing attributes in process `syz.9.2931'. [ 1252.513939][T10573] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1255.896840][T16135] batman_adv: batadv0: Adding interface: dummy0 [ 1255.914666][T16135] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.944309][T16135] batman_adv: batadv0: Interface activated: dummy0 [ 1255.989570][T16135] batadv0: mtu less than device minimum [ 1256.005307][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1256.017434][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1256.029482][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1256.041490][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1256.053522][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1256.065580][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1256.077704][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1256.089805][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1256.101811][T16135] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1263.187058][T16257] overlayfs: failed to clone upperpath [ 1264.342409][T10573] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1266.099607][T16294] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3005'. [ 1266.588935][T16303] overlayfs: failed to clone upperpath [ 1268.596887][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3016'. [ 1269.551160][T16340] overlayfs: failed to clone upperpath [ 1270.220785][T16354] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.503054][T16354] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.683511][T16360] overlayfs: missing 'lowerdir' [ 1270.735967][T16354] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.864195][T16354] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.137573][T14882] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.262158][T14882] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.271362][T14882] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.280769][T14882] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1274.212071][T16388] overlayfs: failed to clone upperpath [ 1274.635102][T16399] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1274.660293][T16399] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1277.783481][T16431] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1277.844038][T16431] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1281.642497][T16468] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1281.698886][T16468] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1282.570984][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3070'. [ 1283.549864][T10573] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1285.111203][T16520] overlayfs: failed to clone upperpath [ 1286.627712][T16550] overlayfs: failed to clone upperpath [ 1288.299906][T16586] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3103'. [ 1289.185609][T16592] overlayfs: failed to clone upperpath [ 1289.521231][T13665] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1291.269656][T16619] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3116'. [ 1292.034437][T16627] overlayfs: failed to clone upperpath [ 1293.115696][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.123516][T16633] bridge_slave_1: left allmulticast mode [ 1293.129181][T16633] bridge_slave_1: left promiscuous mode [ 1293.135181][T16633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.168719][T16633] net_ratelimit: 10 callbacks suppressed [ 1293.168763][T16633] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 1294.095530][T16663] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3131'. [ 1294.836404][T16665] overlayfs: failed to clone upperpath [ 1295.426264][T16672] veth0_to_team: entered promiscuous mode [ 1295.658902][T16676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3135'. [ 1296.432967][T16689] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1296.579850][T16689] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1298.171821][T16705] overlayfs: failed to clone upperpath [ 1298.721903][T16717] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1298.730977][T16717] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1299.121672][T16723] netlink: 368 bytes leftover after parsing attributes in process `syz.6.3155'. [ 1300.532210][T16740] overlayfs: failed to clone upperpath [ 1300.755718][T16748] overlayfs: missing 'lowerdir' [ 1302.857422][T16767] netlink: 368 bytes leftover after parsing attributes in process `syz.9.3169'. [ 1304.425459][T16783] overlayfs: failed to clone upperpath [ 1305.864286][T16800] netlink: 368 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1307.892016][T16822] overlayfs: failed to clone upperpath [ 1308.003034][T16829] netlink: 368 bytes leftover after parsing attributes in process `syz.3.3193'. [ 1309.995529][T16850] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3197'. [ 1311.898889][T16858] 9pnet_fd: Insufficient options for proto=fd [ 1312.993235][T16871] netlink: 368 bytes leftover after parsing attributes in process `syz.6.3205'. [ 1315.166086][T16897] overlayfs: failed to clone upperpath [ 1319.246597][T16942] overlayfs: failed to clone upperpath [ 1319.729456][T16955] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1319.980068][T16959] wireguard0: entered promiscuous mode [ 1320.733511][T16959] wireguard0: entered allmulticast mode [ 1321.856975][T16974] overlayfs: failed to clone upperpath [ 1324.573802][T17004] netlink: 368 bytes leftover after parsing attributes in process `syz.6.3246'. [ 1329.798141][T17066] autofs: Bad value for 'fd' [ 1330.015378][T17081] No source specified [ 1331.607468][T17110] autofs: Bad value for 'fd' [ 1334.636655][T17147] autofs: Unknown parameter '0x0000000000000000' [ 1336.840825][T17190] autofs: Unknown parameter '0x0000000000000000' [ 1342.151103][T17199] 9pnet_fd: Insufficient options for proto=fd [ 1342.542658][T17213] tipc: Enabling of bearer rejected, failed to enable media [ 1343.495102][T17227] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1343.539995][T17227] team0: Port device batadv1 added [ 1343.704248][T17233] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3320'. [ 1343.731226][T17234] autofs: Unknown parameter '0x0000000000000000' [ 1344.550038][T17261] netlink: 'syz.2.3331': attribute type 4 has an invalid length. [ 1344.572688][T17261] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1344.598435][T17262] netlink: 'syz.3.3329': attribute type 21 has an invalid length. [ 1344.676927][T17261] : renamed from bond0 (while UP) [ 1346.772219][T17279] autofs: Unknown parameter '0x0000000000000000' [ 1350.459083][T17315] netlink: 'syz.6.3350': attribute type 11 has an invalid length. [ 1352.604863][T17344] overlayfs: failed to clone upperpath [ 1353.416544][T17355] netlink: 'syz.2.3362': attribute type 11 has an invalid length. [ 1356.230253][T17386] netlink: 'syz.2.3374': attribute type 11 has an invalid length. [ 1358.481751][T17430] netlink: 'syz.2.3388': attribute type 11 has an invalid length. [ 1360.892830][T17447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3392'. [ 1362.381953][T17460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1363.251273][T17473] netlink: 'syz.3.3401': attribute type 11 has an invalid length. [ 1365.166359][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3406'. [ 1365.737028][T17491] sctp: [Deprecated]: syz.3.3405 (pid 17491) Use of int in maxseg socket option. [ 1365.737028][T17491] Use struct sctp_assoc_value instead [ 1370.093244][T16007] tipc: Resetting bearer [ 1383.269941][ T30] audit: type=1326 audit(1758075545.393:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17678 comm="syz.6.3471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc126f8eba9 code=0x0 [ 1389.583866][T17740] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1389.806496][T13665] Bluetooth: hci0: command 0x0406 tx timeout [ 1392.637937][T17764] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3497'. [ 1393.140630][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3499'. [ 1393.636403][T17773] bond0: (slave bond_slave_1): Releasing backup interface [ 1395.327450][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3508'. [ 1400.663882][T17823] fuse: Bad value for 'fd' [ 1419.323796][T18019] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1419.579175][ T6069] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1419.651530][ T6069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1419.714290][ T6069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.115641][T18043] netlink: 'syz.2.3585': attribute type 4 has an invalid length. [ 1422.984986][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3588'. [ 1423.698809][T10573] Bluetooth: hci0: unexpected event for opcode 0x1005 [ 1423.853548][T18068] netlink: 368 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1426.671545][T18117] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1426.806226][T18120] netlink: 368 bytes leftover after parsing attributes in process `syz.2.3612'. [ 1430.415374][T18146] netlink: 'syz.3.3619': attribute type 1 has an invalid length. [ 1430.633983][T18153] trusted_key: encrypted_key: key user:syz not found [ 1432.171573][T18166] overlayfs: failed to clone upperpath [ 1433.205375][T18185] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3633'. [ 1441.810354][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3663'. [ 1442.831233][T18279] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3667'. [ 1444.616062][T18291] macsec0: entered promiscuous mode [ 1445.223584][T18288] macsec0: left promiscuous mode [ 1447.318653][T18328] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3681'. [ 1447.694833][T16558] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1447.723727][T16558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.819685][T16558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.510686][T18362] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3694'. [ 1453.117326][T18400] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3705'. [ 1455.874381][ T6069] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1455.999378][ T6069] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1458.234812][ T30] audit: type=1326 audit(1758075620.113:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1458.608808][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3723'. [ 1459.147613][ T30] audit: type=1326 audit(1758075620.123:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1459.171302][ T30] audit: type=1326 audit(1758075620.123:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1459.258786][ T30] audit: type=1326 audit(1758075620.123:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1459.324529][ T30] audit: type=1326 audit(1758075620.133:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1459.597057][ T30] audit: type=1326 audit(1758075620.133:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1459.622191][ T30] audit: type=1326 audit(1758075620.143:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1459.654801][ T30] audit: type=1326 audit(1758075620.153:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1460.333240][ T30] audit: type=1326 audit(1758075620.163:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1460.366019][ T30] audit: type=1326 audit(1758075620.163:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18442 comm="syz.0.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f8a0d98eba9 code=0x7ffc0000 [ 1460.572179][T18472] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3727'. [ 1461.751258][T14882] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1462.450655][T14882] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1462.581315][T18487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3733'. [ 1462.658001][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3733'. [ 1463.539880][T18505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3736'. [ 1464.741898][T18514] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1465.614048][T18521] netlink: 368 bytes leftover after parsing attributes in process `syz.0.3744'. [ 1465.728438][T18525] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1466.013456][T18532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3748'. [ 1466.028437][T18532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3748'. [ 1466.370584][T18534] netlink: 84 bytes leftover after parsing attributes in process `syz.9.3747'. [ 1466.410043][T18537] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1466.689209][T11207] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1467.229694][T11207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.247833][T11207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.855726][T18560] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3756'. [ 1469.798281][T18568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3759'. [ 1471.575261][T14882] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1471.892454][T14882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.910969][T14882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.933424][T18597] netlink: 'syz.2.3769': attribute type 10 has an invalid length. [ 1471.961380][T18597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3769'. [ 1471.995059][T18597] team0: entered promiscuous mode [ 1472.001484][T18601] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 1472.013216][T18597] team_slave_0: entered promiscuous mode [ 1472.019876][T18597] team_slave_1: entered promiscuous mode [ 1472.035577][T18597] team0: entered allmulticast mode [ 1472.048928][T18597] team_slave_0: entered allmulticast mode [ 1472.055379][T18597] team_slave_1: entered allmulticast mode [ 1472.085707][T18597] bridge0: port 3(team0) entered blocking state [ 1472.104664][T18597] bridge0: port 3(team0) entered disabled state [ 1472.305874][T18608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3773'. [ 1472.320380][T18597] bridge0: port 3(team0) entered blocking state [ 1472.326839][T18597] bridge0: port 3(team0) entered forwarding state [ 1473.166987][T18616] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3774'. [ 1473.343751][T18626] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3780'. [ 1473.707395][T18635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3784'. [ 1473.808771][T10896] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1474.011775][T10896] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1476.519563][T18668] netlink: 'syz.0.3797': attribute type 1 has an invalid length. [ 1476.765714][T11209] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1477.405123][T11209] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1478.947872][T18687] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1480.238661][T18702] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1481.002355][T16558] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1481.056088][T16558] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1483.194172][T18741] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3821'. [ 1483.690254][T18751] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3826'. [ 1485.395810][T11207] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1485.462603][T11207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.481001][T11207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.931801][T18795] ip6gretap0 speed is unknown, defaulting to 1000 [ 1486.984510][T18795] ip6gretap0 speed is unknown, defaulting to 1000 [ 1487.020768][T18795] ip6gretap0 speed is unknown, defaulting to 1000 [ 1487.615639][T18795] infiniband syz2: set active [ 1487.620857][T18795] infiniband syz2: added ip6gretap0 [ 1487.951478][T18795] RDS/IB: syz2: added [ 1487.956617][T18795] smc: adding ib device syz2 with port count 1 [ 1487.963152][T18795] smc: ib device syz2 port 1 has no pnetid [ 1488.012606][ T5982] ip6gretap0 speed is unknown, defaulting to 1000 [ 1488.044854][T18795] ip6gretap0 speed is unknown, defaulting to 1000 [ 1488.311527][ T10] ip6gretap0 speed is unknown, defaulting to 1000 [ 1488.326402][T18795] ip6gretap0 speed is unknown, defaulting to 1000 [ 1488.578227][T18795] ip6gretap0 speed is unknown, defaulting to 1000 [ 1488.840258][T18795] ip6gretap0 speed is unknown, defaulting to 1000 [ 1489.587672][T18795] ip6gretap0 speed is unknown, defaulting to 1000 [ 1490.118163][T16495] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1490.174795][T11207] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 1496.790389][T18880] netlink: 'syz.0.3865': attribute type 16 has an invalid length. [ 1496.798339][T18880] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.3865'. [ 1499.168763][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1499.182543][ T30] audit: type=1326 audit(1758075661.293:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18897 comm="syz.6.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126f8eba9 code=0x7ffc0000 [ 1500.122645][ T30] audit: type=1326 audit(1758075661.313:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18897 comm="syz.6.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126f8eba9 code=0x7ffc0000 [ 1500.145915][ T30] audit: type=1326 audit(1758075661.313:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18897 comm="syz.6.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc126f8eba9 code=0x7ffc0000 [ 1500.168593][ T30] audit: type=1326 audit(1758075661.313:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18897 comm="syz.6.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126f8eba9 code=0x7ffc0000 [ 1500.220657][ T30] audit: type=1326 audit(1758075661.313:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18897 comm="syz.6.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc126f8eba9 code=0x7ffc0000 [ 1501.051613][ T30] audit: type=1326 audit(1758075662.023:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18897 comm="syz.6.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126f8eba9 code=0x7ffc0000 [ 1501.095143][ T30] audit: type=1326 audit(1758075662.023:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18897 comm="syz.6.3874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc126f8eba9 code=0x7ffc0000 [ 1507.004894][T18986] netlink: 'syz.0.3904': attribute type 10 has an invalid length. [ 1507.019814][T18986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3904'. [ 1507.800863][T18986] team0: entered promiscuous mode [ 1507.806258][T18986] team_slave_0: entered promiscuous mode [ 1507.850534][T18986] team_slave_1: entered promiscuous mode [ 1507.856373][T18986] team0: entered allmulticast mode [ 1507.900528][T18986] team_slave_0: entered allmulticast mode [ 1507.924291][T18986] team_slave_1: entered allmulticast mode [ 1507.942658][T18986] bridge0: port 3(team0) entered blocking state [ 1507.950101][T18986] bridge0: port 3(team0) entered disabled state [ 1509.700619][T18986] bridge0: port 3(team0) entered blocking state [ 1509.707050][T18986] bridge0: port 3(team0) entered forwarding state [ 1510.488401][T19023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.495768][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.589340][T19023] batman_adv: batadv0: Interface deactivated: dummy0 [ 1510.891437][T19023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.969164][T19023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1513.032348][T11209] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.074577][T11209] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.221440][T11209] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.251006][T11218] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.187222][T19058] netlink: 'syz.3.3925': attribute type 10 has an invalid length. [ 1515.200639][T19058] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3925'. [ 1515.222686][T19058] team0: entered promiscuous mode [ 1515.238099][T19058] team_slave_0: entered promiscuous mode [ 1515.262183][T19058] team_slave_1: entered promiscuous mode [ 1515.268900][T19058] team0: entered allmulticast mode [ 1515.274285][T19058] team_slave_0: entered allmulticast mode [ 1515.280103][T19058] team_slave_1: entered allmulticast mode [ 1515.292631][T19058] bridge0: port 2(team0) entered blocking state [ 1515.339247][T19058] bridge0: port 2(team0) entered disabled state [ 1515.409156][T19058] bridge0: port 2(team0) entered blocking state [ 1515.415571][T19058] bridge0: port 2(team0) entered forwarding state [ 1518.075134][T19096] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3936'. [ 1524.298815][T19149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3953'. [ 1524.862868][T19156] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3958'. [ 1528.144860][ T6069] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 1528.178566][ T9709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1528.196079][ T9709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.717484][T19234] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3976'. [ 1534.821300][T19307] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3997'. [ 1536.551770][T19322] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4002'. [ 1543.759857][T19385] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4020'. [ 1550.554228][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4048'. [ 1551.710535][T19467] netlink: 368 bytes leftover after parsing attributes in process `syz.6.4050'. [ 1551.973009][T19472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1555.317611][T19507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4064'. [ 1557.593360][T19533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4070'. [ 1557.725167][T19541] netlink: 'syz.0.4073': attribute type 10 has an invalid length. [ 1557.739135][T19541] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4073'. [ 1558.490835][T19546] vlan1: entered promiscuous mode [ 1558.496182][T19546] vlan1: entered allmulticast mode [ 1558.501685][T19546] veth0_vlan: entered allmulticast mode [ 1559.340775][T19558] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4079'. [ 1560.811173][T19581] netlink: 'syz.0.4087': attribute type 10 has an invalid length. [ 1560.849729][T19581] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4087'. [ 1561.173116][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4085'. [ 1562.902436][T19603] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4094'. [ 1567.235581][T19653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4106'. [ 1570.764359][T19693] netlink: 'syz.0.4121': attribute type 8 has an invalid length. [ 1571.859730][T19701] netlink: 200 bytes leftover after parsing attributes in process `syz.3.4124'. [ 1572.131140][T19705] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4123'. [ 1573.837326][T19729] libceph: resolve '. [ 1573.837326][T19729] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1573.837326][T19729] ' (ret=-3): failed [ 1576.672704][T19768] sctp: [Deprecated]: syz.2.4141 (pid 19768) Use of int in maxseg socket option. [ 1576.672704][T19768] Use struct sctp_assoc_value instead [ 1577.890212][T19785] netlink: 'syz.0.4148': attribute type 16 has an invalid length. [ 1578.062435][T19785] netlink: 'syz.0.4148': attribute type 17 has an invalid length. [ 1578.104935][T19791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1578.180125][T19785] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1578.201812][ T812] ip6gretap0 speed is unknown, defaulting to 1000 [ 1582.960811][T19873] tipc: Enabling of bearer rejected, failed to enable media [ 1585.043535][T19903] netlink: 'syz.6.4173': attribute type 8 has an invalid length. [ 1586.485832][T14807] IPVS: starting estimator thread 0... [ 1586.580116][T19937] IPVS: using max 36 ests per chain, 86400 per kthread [ 1589.936840][T19990] vxcan1: tx address claim with dlc 0 [ 1590.201995][T19994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4200'. [ 1595.726854][T20070] wlan0 speed is unknown, defaulting to 1000 [ 1595.734415][T20070] wlan0 speed is unknown, defaulting to 1000 [ 1595.751930][T20070] wlan0 speed is unknown, defaulting to 1000 [ 1595.929885][T20070] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1596.180523][T20070] wlan0 speed is unknown, defaulting to 1000 [ 1596.188916][T20070] wlan0 speed is unknown, defaulting to 1000 [ 1596.196338][T20070] wlan0 speed is unknown, defaulting to 1000 [ 1596.203901][T20070] wlan0 speed is unknown, defaulting to 1000 [ 1596.211264][T20070] wlan0 speed is unknown, defaulting to 1000 [ 1596.304300][T20051] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4210'. [ 1596.398798][T20073] netlink: 'syz.0.4217': attribute type 10 has an invalid length. [ 1596.410156][T20073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4217'. [ 1599.593039][T20113] netlink: 1296 bytes leftover after parsing attributes in process `syz.6.4231'. [ 1599.728653][T20116] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4230'. [ 1601.589669][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4237'. [ 1603.304330][T20160] overlayfs: failed to clone upperpath [ 1603.371685][T20164] overlayfs: failed to clone upperpath [ 1609.738422][T20236] netlink: 'syz.9.4267': attribute type 10 has an invalid length. [ 1610.508379][T20236] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4267'. [ 1610.565601][T20236] team0: entered promiscuous mode [ 1610.581266][T20236] team_slave_0: entered promiscuous mode [ 1610.589767][T20236] team_slave_1: entered promiscuous mode [ 1610.596400][T20236] batadv1: entered promiscuous mode [ 1610.602619][T20236] team0: entered allmulticast mode [ 1610.607921][T20236] team_slave_0: entered allmulticast mode [ 1612.151954][T20250] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1612.384431][T20236] team_slave_1: entered allmulticast mode [ 1612.399668][T20236] batadv1: entered allmulticast mode [ 1612.427635][T20236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.447961][T20236] bridge0: port 3(team0) entered blocking state [ 1612.468565][T20236] bridge0: port 3(team0) entered disabled state [ 1612.963866][T11207] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1612.973628][T11207] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1616.219932][T20300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.229101][T20300] batman_adv: batadv0: Interface activated: dummy0 [ 1616.236040][T20300] batadv0: mtu less than device minimum [ 1616.244195][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1616.256227][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1616.268242][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1616.280394][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1616.292503][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1616.304480][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1616.316508][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1616.328504][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1616.340556][T20300] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1618.079218][T20317] syz2: rxe_newlink: already configured on ip6gretap0 [ 1624.771190][T20369] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1628.033558][T20389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4308'. [ 1631.569609][T20425] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1632.287459][ T30] audit: type=1326 audit(1758075794.363:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20409 comm="syz.3.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546f8eba9 code=0x7ffc0000 [ 1632.379296][ T30] audit: type=1326 audit(1758075794.423:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20409 comm="syz.3.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546f8eba9 code=0x7ffc0000 [ 1632.526852][T20431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4322'. [ 1632.556380][ T30] audit: type=1326 audit(1758075794.673:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20409 comm="syz.3.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1546f8eba9 code=0x7ffc0000 [ 1632.579397][ T30] audit: type=1326 audit(1758075794.673:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20409 comm="syz.3.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546f8eba9 code=0x7ffc0000 [ 1633.392847][ T30] audit: type=1326 audit(1758075795.523:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20409 comm="syz.3.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1546f8eba9 code=0x7ffc0000 [ 1633.964127][T20438] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4323'. [ 1637.382612][T20482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4336'. [ 1644.481958][T20538] netlink: 'syz.0.4350': attribute type 1 has an invalid length. [ 1649.669403][T20578] netlink: 'syz.3.4362': attribute type 10 has an invalid length. [ 1649.739329][T20578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4362'. [ 1650.584276][T20593] overlayfs: failed to clone lowerpath [ 1651.319723][T13971] IPVS: starting estimator thread 0... [ 1651.592241][T20596] IPVS: using max 24 ests per chain, 57600 per kthread [ 1651.799952][T20604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1655.111518][T20641] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1655.122229][T20641] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1655.132469][T20641] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1655.143617][T20641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1655.151618][T20641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1655.415390][T20639] ip6gretap0 speed is unknown, defaulting to 1000 [ 1656.194040][T20639] wlan0 speed is unknown, defaulting to 1000 [ 1656.395739][T20492] net_ratelimit: 11 callbacks suppressed [ 1656.395763][T20492] Set syz1 is full, maxelem 65536 reached [ 1657.165725][T20639] chnl_net:caif_netlink_parms(): no params data found [ 1657.191958][T20670] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4387'. [ 1657.335046][T20641] Bluetooth: hci2: command tx timeout [ 1659.297268][T11207] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.422465][T20641] Bluetooth: hci2: command tx timeout [ 1659.549341][T20639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.573461][T20639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.585928][T20639] bridge_slave_0: entered allmulticast mode [ 1659.594234][T20639] bridge_slave_0: entered promiscuous mode [ 1659.619439][T11207] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.642076][T20639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.660478][T20639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.668546][T20639] bridge_slave_1: entered allmulticast mode [ 1659.684569][T20639] bridge_slave_1: entered promiscuous mode [ 1659.784846][T11207] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.177626][T11207] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.283208][T20639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.372592][T20639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.668007][T20639] team0: Port device team_slave_0 added [ 1660.736580][T20639] team0: Port device team_slave_1 added [ 1660.915138][T20639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.944798][T20639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.059692][T20639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.094771][T20639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.116390][T20639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1661.167035][T20639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.470753][T20641] Bluetooth: hci2: command tx timeout [ 1661.947228][T20639] hsr_slave_0: entered promiscuous mode [ 1662.003781][T20639] hsr_slave_1: entered promiscuous mode [ 1662.011432][T20639] debugfs: 'hsr0' already exists in 'hsr' [ 1662.017228][T20639] Cannot create hsr debugfs directory [ 1662.041637][T20721] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4402'. [ 1662.521083][T20734] 9pnet_fd: p9_fd_create_unix (20734): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1663.616358][T20641] Bluetooth: hci2: command tx timeout [ 1664.442050][T20749] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4409'. [ 1665.593178][T11207] bond0 (unregistering): Released all slaves [ 1666.020069][T11207] bond1 (unregistering): Released all slaves [ 1666.278823][T11207] tipc: Disabling bearer [ 1666.316386][T11207] tipc: Left network mode [ 1666.378991][T12719] IPVS: starting estimator thread 0... [ 1666.432382][T20772] tipc: Started in network mode [ 1666.437327][T20772] tipc: Node identity ac1414aa, cluster identity 4711 [ 1666.445053][T20772] tipc: Enabled bearer , priority 10 [ 1666.463131][T20774] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4415'. [ 1666.479620][T20775] IPVS: using max 31 ests per chain, 74400 per kthread [ 1667.570217][ T10] tipc: Node number set to 2886997162 [ 1668.348352][T11207] hsr_slave_0: left promiscuous mode [ 1668.376215][T11207] hsr_slave_1: left promiscuous mode [ 1668.418907][T11207] veth1_macvtap: left promiscuous mode [ 1668.439708][T11207] veth0_macvtap: left promiscuous mode [ 1668.445472][T11207] veth1_vlan: left promiscuous mode [ 1669.573476][T20799] fuse: Unknown parameter '000000000000000000040xffffffffffffffff' [ 1670.232511][T11207] team0 (unregistering): Port device vlan0 removed [ 1670.244957][T20803] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1671.339370][T20793] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1671.544863][T20815] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1671.553822][T20815] overlayfs: missing 'lowerdir' [ 1672.630568][T20832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1673.292314][T20639] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1673.370616][T20639] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1673.458496][T20639] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1673.529216][T20639] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1673.721021][T20847] netlink: 368 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1673.860106][T20853] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4440'. [ 1673.919841][T20854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4437'. [ 1674.224374][T20639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.284108][T20639] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.331448][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.338819][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.442478][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.449706][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.659886][T20859] netlink: 'syz.9.4443': attribute type 1 has an invalid length. [ 1677.915683][T20639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.190109][T20902] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1679.508399][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4453'. [ 1680.077227][T20639] veth0_vlan: entered promiscuous mode [ 1680.696127][T20639] veth1_vlan: entered promiscuous mode [ 1680.868988][T20639] veth0_macvtap: entered promiscuous mode [ 1680.922476][T20639] veth1_macvtap: entered promiscuous mode [ 1681.026568][T20639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.081874][T20639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.268668][ T6068] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.372872][T20932] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1681.954152][ T6068] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.987448][ T6068] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.013895][ T6068] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.241042][T19868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.255743][T19868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.383082][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.402112][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.746498][T20942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4375'. [ 1682.959763][T20942] bond0: (slave bond_slave_1): Releasing backup interface [ 1684.673488][T20961] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4467'. [ 1685.266656][T20966] netlink: 368 bytes leftover after parsing attributes in process `syz.9.4469'. [ 1687.568990][T20982] exFAT-fs (nullb0): invalid boot record signature [ 1687.578972][T20982] exFAT-fs (nullb0): failed to read boot sector [ 1687.587123][T20982] exFAT-fs (nullb0): failed to recognize exfat type [ 1688.389629][T20935] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1689.359590][T20935] usb 8-1: Using ep0 maxpacket: 32 [ 1689.395542][T20935] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 1689.435493][T20935] usb 8-1: config 0 has no interface number 0 [ 1689.457055][T20935] usb 8-1: config 0 interface 89 has no altsetting 0 [ 1689.482026][T20935] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1689.652639][T20935] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.329561][T20935] usb 8-1: Product: syz [ 1690.345621][T20935] usb 8-1: Manufacturer: syz [ 1690.359495][T20935] usb 8-1: SerialNumber: syz [ 1690.434133][T20935] usb 8-1: config 0 descriptor?? [ 1690.466190][T20935] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1690.789523][T20935] em28xx 8-1:0.89: Video interface 89 found: bulk [ 1691.392711][T20935] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 1692.657327][T20935] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1692.683597][T20935] em28xx 8-1:0.89: board has no eeprom [ 1692.770877][T20935] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 1692.798464][T20935] em28xx 8-1:0.89: analog set to bulk mode. [ 1692.828724][ T10] em28xx 8-1:0.89: Registering V4L2 extension [ 1692.860228][T20935] usb 8-1: USB disconnect, device number 2 [ 1692.887399][T20935] em28xx 8-1:0.89: Disconnecting em28xx [ 1693.004111][T21035] bridge: RTM_NEWNEIGH with unconfigured vlan 116 on bridge_slave_0 [ 1693.018340][ T10] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 1693.027254][ T10] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 1693.066358][ T10] em28xx 8-1:0.89: No AC97 audio processor [ 1693.138631][ T10] usb 8-1: Decoder not found [ 1693.160333][ T10] em28xx 8-1:0.89: failed to create media graph [ 1693.177335][ T10] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 1693.224334][ T10] em28xx 8-1:0.89: Registering snapshot button... [ 1693.485076][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input44 [ 1693.546942][ T10] em28xx 8-1:0.89: Remote control support is not available for this card. [ 1693.581433][T20935] em28xx 8-1:0.89: Closing input extension [ 1693.592145][T20935] em28xx 8-1:0.89: Deregistering snapshot button [ 1693.653109][T20935] em28xx 8-1:0.89: Freeing device [ 1697.753287][T21104] fuse: Unknown parameter 'user_id00000000000000000000' [ 1697.831629][T21107] fuse: Bad value for 'fd' [ 1698.052478][T21109] nfs: Unknown parameter '/dev/ubi_ctrl' [ 1698.787026][T21113] autofs: Bad value for 'fd' [ 1699.231549][T21123] overlayfs: missing 'lowerdir' [ 1701.465831][T21156] fuse: Unknown parameter 'user_id00000000000000000000' [ 1703.865243][T21180] overlayfs: missing 'lowerdir' [ 1704.651843][T21186] netlink: 'syz.3.4537': attribute type 10 has an invalid length. [ 1704.669152][T21186] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4537'. [ 1708.181804][T21229] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1708.190696][T21229] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1708.202371][T21229] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1709.281694][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4547'. [ 1710.195117][T21253] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4556'. [ 1712.823607][T21272] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1712.832581][T21272] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1712.844439][T21272] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1714.030377][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 1714.529524][ T10] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1715.111769][ T10] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1715.136012][ T10] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1715.165876][T21293] fuse: Bad value for 'fd' [ 1715.170867][ T10] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1715.195568][T21293] nfs: Unknown parameter '/dev/ubi_ctrl' [ 1715.201616][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.227609][ T10] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1715.243486][ T10] usb 8-1: invalid MIDI out EP 0 [ 1715.545107][ T10] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1716.077359][ T10] usb 8-1: USB disconnect, device number 3 [ 1717.999311][T21320] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1717.999311][T21320] program syz.7.4577 not setting count and/or reply_len properly [ 1718.684351][T21325] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4578'. [ 1718.859754][T21328] fuse: Bad value for 'fd' [ 1718.923528][T21328] nfs: Unknown parameter '/dev/ubi_ctrl' [ 1719.313613][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4576'. [ 1722.404317][T21354] __vm_enough_memory: pid: 21354, comm: syz.7.4587, bytes: 21200019365888 not enough memory for the allocation [ 1722.621813][T21368] fuse: Bad value for 'fd' [ 1722.645039][T21368] nfs: Unknown parameter '/dev/ubi_ctrl' [ 1722.777551][T21373] netlink: 368 bytes leftover after parsing attributes in process `syz.2.4595'. [ 1723.909110][ T10] IPVS: starting estimator thread 0... [ 1724.019575][T21383] IPVS: using max 28 ests per chain, 67200 per kthread [ 1725.813615][T21405] __vm_enough_memory: pid: 21405, comm: syz.0.4603, bytes: 21200176648192 not enough memory for the allocation [ 1725.986989][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1729.669461][T21460] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.685406][T21460] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.695937][T21460] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1729.709560][T21460] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.720168][T21460] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1729.745041][T21460] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.758851][T21460] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.769439][T21460] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1729.783511][T21460] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.794158][T21460] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1729.813803][T21460] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.826820][T21460] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.837536][T21460] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1729.850061][T21460] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.860761][T21460] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1729.879456][T21460] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1729.891498][T21460] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1729.904314][T21460] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1729.914216][T21460] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1730.032099][T21461] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4611'. [ 1730.437069][T21465] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4617'. [ 1734.630466][T21498] fuse: Unknown parameter '0x0000000000000006' [ 1735.595937][T21502] netlink: 'syz.7.4628': attribute type 10 has an invalid length. [ 1735.948827][T21502] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4628'. [ 1735.958958][T21502] team0: entered promiscuous mode [ 1735.964131][T21502] team_slave_0: entered promiscuous mode [ 1735.972951][T21502] team_slave_1: entered promiscuous mode [ 1735.978865][T21502] team0: entered allmulticast mode [ 1736.000538][T21502] team_slave_0: entered allmulticast mode [ 1736.006428][T21502] team_slave_1: entered allmulticast mode [ 1736.019202][T21502] bridge0: port 3(team0) entered blocking state [ 1736.029973][T21502] bridge0: port 3(team0) entered disabled state [ 1736.065357][T21502] bridge0: port 3(team0) entered blocking state [ 1736.072194][T21502] bridge0: port 3(team0) entered forwarding state [ 1736.498231][T21510] exFAT-fs (nullb0): invalid boot record signature [ 1736.505135][T21510] exFAT-fs (nullb0): failed to read boot sector [ 1736.511816][T21510] exFAT-fs (nullb0): failed to recognize exfat type [ 1736.861842][T21512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 1739.531044][T21537] overlayfs: failed to clone upperpath [ 1740.085886][T21539] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4636'. [ 1742.080253][T21552] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4640'. [ 1743.053834][T21559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4641'. [ 1743.957884][T21563] netlink: 'syz.9.4643': attribute type 10 has an invalid length. [ 1743.998311][T21563] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4643'. [ 1744.910691][T21579] __vm_enough_memory: pid: 21579, comm: syz.0.4648, bytes: 21200176648192 not enough memory for the allocation [ 1745.974135][T21589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4644'. [ 1746.412547][T21599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4651'. [ 1747.310177][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 1747.673504][T21604] fuse: Unknown parameter '0x0000000000000006' [ 1748.552452][T21613] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4655'. [ 1750.148881][T21630] __vm_enough_memory: pid: 21630, comm: syz.9.4662, bytes: 21200253022208 not enough memory for the allocation [ 1752.516195][T21649] netlink: 'syz.3.4667': attribute type 10 has an invalid length. [ 1752.552090][T21649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4667'. [ 1754.080409][T21663] __vm_enough_memory: pid: 21663, comm: syz.3.4673, bytes: 21199991304192 not enough memory for the allocation [ 1762.778657][T21743] netlink: 512 bytes leftover after parsing attributes in process `syz.7.4695'. [ 1763.345123][T21757] overlayfs: failed to clone upperpath [ 1768.146029][T21793] overlayfs: failed to clone upperpath [ 1769.318791][T21803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4712'. [ 1769.660067][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1770.269694][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 1770.282590][ T10] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1770.295387][ T10] usb 8-1: config 0 has no interface number 0 [ 1770.303257][ T10] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1770.337842][ T10] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1770.367923][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.402535][ T10] usb 8-1: Product: syz [ 1770.419974][ T10] usb 8-1: Manufacturer: syz [ 1770.430774][ T10] usb 8-1: SerialNumber: syz [ 1770.444217][ T10] usb 8-1: config 0 descriptor?? [ 1770.457253][ T10] smsc75xx v1.0.0 [ 1771.715430][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1771.737836][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1772.116047][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1772.842225][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1772.940869][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1773.001101][ T10] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1773.054418][ T10] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1773.950317][ T10] usb 8-1: USB disconnect, device number 4 [ 1774.754415][T21845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4726'. [ 1778.901331][T10573] Bluetooth: hci2: command 0x0406 tx timeout [ 1779.917779][T21891] netlink: 'syz.0.4742': attribute type 10 has an invalid length. [ 1780.020292][T21891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4742'. [ 1781.847543][T21915] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1782.539887][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1782.920297][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 1785.277220][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1785.389498][ T10] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1785.411828][ T10] usb 8-1: can't read configurations, error -71 [ 1786.484568][T21943] netlink: 'syz.3.4760': attribute type 10 has an invalid length. [ 1786.512561][T21943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4760'. [ 1794.166363][T22019] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4780'. [ 1794.748935][T22031] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4785'. [ 1796.019004][T22045] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1799.433873][T22079] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4797'. [ 1799.708273][T22088] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4801'. [ 1801.725169][T22110] overlayfs: failed to clone upperpath [ 1805.401194][T22145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4820'. [ 1806.244771][T22162] binder: 22156:22162 ioctl 4018620d 0 returned -22 [ 1807.389613][T22171] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4827'. [ 1808.772492][T22182] netlink: 'syz.7.4832': attribute type 10 has an invalid length. [ 1808.794455][T22182] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4832'. [ 1809.151754][T22191] exFAT-fs (nullb0): invalid boot record signature [ 1809.158639][T22191] exFAT-fs (nullb0): failed to read boot sector [ 1809.165194][T22191] exFAT-fs (nullb0): failed to recognize exfat type [ 1809.610907][T22193] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4834'. [ 1810.730529][T22197] i2c i2c-0: Invalid block write size 34 [ 1815.063504][T22212] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4841'. [ 1815.284794][T22217] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4842'. [ 1816.889579][T22237] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4848'. [ 1817.692782][T22227] __vm_enough_memory: pid: 22227, comm: syz.9.4846, bytes: 21200253022208 not enough memory for the allocation [ 1819.328363][T22252] netlink: 80 bytes leftover after parsing attributes in process `syz.9.4853'. [ 1820.983271][T22267] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4857'. [ 1822.807954][T22287] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.4864'. [ 1825.003636][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4869'. [ 1825.582051][T22306] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4868'. [ 1829.896513][T22349] blk_print_req_error: 2 callbacks suppressed [ 1829.896529][T22349] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1829.912291][T22349] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1829.922488][T22349] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1829.932528][T22349] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1829.942188][T22349] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1829.952607][T22349] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1829.962106][T22349] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1829.971521][T22349] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1829.981306][T22349] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1829.991167][T22349] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1830.001299][T22349] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1830.010791][T22349] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1830.020296][T22349] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1830.030588][T22349] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1830.040073][T22349] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1830.050424][T22349] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1830.059960][T22349] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1830.069791][T22349] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1830.079409][T22349] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1830.830879][T22367] binder: 22362:22367 ioctl 4018620d 0 returned -22 [ 1832.676372][T22376] netlink: 88 bytes leftover after parsing attributes in process `syz.7.4888'. [ 1834.344314][T22394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4893'. [ 1838.541060][T22434] netlink: 116 bytes leftover after parsing attributes in process `syz.7.4905'. [ 1838.643881][T22435] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4906'. [ 1840.854345][T22447] blk_print_req_error: 2 callbacks suppressed [ 1840.854368][T22447] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.870270][T22447] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.880806][T22447] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1840.890796][T22447] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.900279][T22447] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1840.910906][T22447] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.920527][T22447] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.929979][T22447] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1840.939869][T22447] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.949529][T22447] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1840.959947][T22447] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.969511][T22447] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.978992][T22447] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1840.989692][T22447] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1840.999194][T22447] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1841.009637][T22447] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1841.019249][T22447] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1841.029133][T22447] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1841.038926][T22447] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1844.439006][T22488] binder: 22484:22488 ioctl 4018620d 0 returned -22 [ 1845.146722][T22489] netlink: 116 bytes leftover after parsing attributes in process `syz.9.4920'. [ 1846.085796][T22491] netlink: 'syz.0.4919': attribute type 1 has an invalid length. [ 1849.910333][T22532] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4933'. [ 1852.087360][T22566] __vm_enough_memory: pid: 22566, comm: syz.0.4943, bytes: 21200176648192 not enough memory for the allocation [ 1853.889472][T13971] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1854.149586][T13971] usb 8-1: Using ep0 maxpacket: 32 [ 1854.163645][T13971] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.242111][T13971] usb 8-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1854.449751][T13971] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.460798][T13971] usb 8-1: Product: syz [ 1854.465058][T13971] usb 8-1: Manufacturer: syz [ 1854.470018][T13971] usb 8-1: SerialNumber: syz [ 1854.579246][T13971] usb 8-1: config 0 descriptor?? [ 1854.779629][T13971] usb 8-1: bad CDC descriptors [ 1854.991105][T13971] usb 8-1: unsupported MDLM descriptors [ 1855.486011][T22604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1855.494708][T22604] batadv_slave_0: entered promiscuous mode [ 1856.540769][T22612] syz2: rxe_newlink: already configured on ip6gretap0 [ 1856.597951][T12719] usb 8-1: USB disconnect, device number 7 [ 1856.859489][T22619] overlayfs: failed to clone upperpath [ 1856.934463][T22620] __vm_enough_memory: pid: 22620, comm: syz.7.4959, bytes: 21200019365888 not enough memory for the allocation [ 1860.145653][T22650] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4969'. [ 1864.145320][T22685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1864.153757][T22685] batadv_slave_0: entered promiscuous mode [ 1865.975177][T22709] fuse: Bad value for 'fd' [ 1866.471087][T22719] binder: 22717:22719 ioctl 4018620d 0 returned -22 [ 1866.480994][T22719] binder: 22717:22719 ioctl c0306201 0 returned -14 [ 1870.035647][T22746] fuse: Bad value for 'fd' [ 1871.046977][T22736] blk_print_req_error: 2 callbacks suppressed [ 1871.046994][T22736] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1871.062725][T22736] bcachefs (/dev/loop7): error reading default superblock: IO error: -5 [ 1871.071191][T22736] I/O error, dev loop7, sector 7 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 1 [ 1871.080713][T22736] bcachefs (/dev/loop7): error reading superblock: IO error: -5 [ 1871.089032][T22736] bcachefs: bch2_fs_get_tree() error: EIO [ 1871.232639][T22754] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4998'. [ 1871.613611][T22760] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1871.623295][T22760] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1871.632866][T22760] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1871.642851][T22760] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1871.652483][T22760] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1871.663086][T22760] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1871.672736][T22760] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1871.682217][T22760] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1871.692680][T22760] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1871.703125][T22760] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1871.713573][T22760] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1871.723217][T22760] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1871.732801][T22760] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1871.742739][T22760] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1871.753072][T22760] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1871.762930][T22760] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1871.772555][T22760] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1872.113350][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1874.694332][T22785] fuse: Bad value for 'fd' [ 1875.726569][T22799] netlink: 1760 bytes leftover after parsing attributes in process `syz.9.5014'. [ 1876.986116][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5016'. [ 1878.255176][T22821] __vm_enough_memory: pid: 22821, comm: syz.9.5020, bytes: 21200253022208 not enough memory for the allocation [ 1879.279267][T22829] fuse: Bad value for 'fd' [ 1880.605676][T22851] netlink: 512 bytes leftover after parsing attributes in process `syz.7.5028'. [ 1884.859879][T22880] fuse: Bad value for 'fd' [ 1885.979223][T22892] i2c i2c-0: Invalid block write size 34 [ 1889.987158][T10573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1890.032823][T10573] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1890.050730][T10573] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1890.076415][T10573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1890.090967][T10573] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1890.249448][T22943] ip6gretap0 speed is unknown, defaulting to 1000 [ 1890.866953][ T9709] bridge0: port 3(team0) entered disabled state [ 1891.302498][ T9709] bridge_slave_1: left allmulticast mode [ 1891.312523][ T9709] bridge_slave_1: left promiscuous mode [ 1891.323822][ T9709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.383165][ T9709] bridge_slave_0: left allmulticast mode [ 1891.404717][ T9709] bridge_slave_0: left promiscuous mode [ 1891.426499][ T9709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1892.192947][T10573] Bluetooth: hci1: command tx timeout [ 1894.281977][T10573] Bluetooth: hci1: command tx timeout [ 1895.637930][ T9709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.649793][ T9709] bond0 (unregistering): Released all slaves [ 1895.777923][T22943] wlan0 speed is unknown, defaulting to 1000 [ 1896.408609][T10573] Bluetooth: hci1: command tx timeout [ 1897.168763][T23011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5078'. [ 1897.667877][T22943] chnl_net:caif_netlink_parms(): no params data found [ 1898.407553][T23022] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.5082'. [ 1898.429749][T10573] Bluetooth: hci1: command tx timeout [ 1898.703041][ T9709] hsr_slave_0: left promiscuous mode [ 1898.709080][ T9709] hsr_slave_1: left promiscuous mode [ 1898.715557][ T9709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1898.739047][ T9709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1898.770833][ T9709] batman_adv: batadv0: Interface deactivated: dummy0 [ 1898.777748][ T9709] batman_adv: batadv0: Removing interface: dummy0 [ 1898.939754][ T9709] batadv1 (unregistering): left promiscuous mode [ 1898.946161][ T9709] batadv1 (unregistering): left allmulticast mode [ 1898.962268][ T9709] team0 (unregistering): Port device batadv1 removed [ 1900.891144][ T9709] team_slave_1 (unregistering): left promiscuous mode [ 1900.898344][ T9709] team_slave_1 (unregistering): left allmulticast mode [ 1900.906832][ T9709] team0 (unregistering): Port device team_slave_1 removed [ 1900.963014][ T9709] team_slave_0 (unregistering): left promiscuous mode [ 1900.970645][ T9709] team_slave_0 (unregistering): left allmulticast mode [ 1900.981428][ T9709] team0 (unregistering): Port device team_slave_0 removed [ 1901.825013][T22943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1901.856466][T22943] bridge0: port 1(bridge_slave_0) entered disabled state [ 1902.027035][T22943] bridge_slave_0: entered allmulticast mode [ 1902.035121][T22943] bridge_slave_0: entered promiscuous mode [ 1902.050959][T22943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1902.058158][T22943] bridge0: port 2(bridge_slave_1) entered disabled state [ 1902.065509][T22943] bridge_slave_1: entered allmulticast mode [ 1902.073508][T22943] bridge_slave_1: entered promiscuous mode [ 1903.286609][T22943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1903.467503][T22943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1903.591364][T23069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'. [ 1904.346920][T23071] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.5093'. [ 1904.367883][T22943] team0: Port device team_slave_0 added [ 1904.394864][T22943] team0: Port device team_slave_1 added [ 1904.747290][T22943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1904.754897][T22943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1904.808243][T22943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1904.839876][T22943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1904.846959][T22943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1904.885768][T23081] blk_print_req_error: 4 callbacks suppressed [ 1904.885790][T23081] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1904.901702][T23081] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1904.911368][T23081] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1904.921236][T23081] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1904.930685][T23081] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1904.941039][T23081] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1904.950595][T23081] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1904.960014][T23081] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1904.969807][T23081] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1904.979251][T23081] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1904.990062][T23081] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1904.999656][T23081] I/O error, dev loop7, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1905.009183][T23081] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1905.018978][T23081] I/O error, dev loop7, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1905.028637][T23081] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1905.038687][T23081] I/O error, dev loop7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1905.048302][T23081] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1905.058081][T23081] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1905.067758][T23081] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1905.159212][T22943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1905.240562][T23079] __vm_enough_memory: pid: 23079, comm: syz.0.5096, bytes: 21200176648192 not enough memory for the allocation [ 1905.325469][T22943] hsr_slave_0: entered promiscuous mode [ 1905.373801][T22943] hsr_slave_1: entered promiscuous mode [ 1907.402644][T23115] __vm_enough_memory: pid: 23115, comm: syz.2.5108, bytes: 21199949393920 not enough memory for the allocation [ 1909.317784][T22943] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1909.342248][T22943] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1909.385584][T22943] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1910.173852][T22943] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2022.519366][ C1] ------------[ cut here ]------------ [ 2022.525861][ C1] WARNING: kernel/rcu/tree_stall.h:1050 at rcu_check_gp_start_stall+0x2e4/0x470, CPU#1: syz.0.5118/23157 [ 2022.537109][ C1] Modules linked in: [ 2022.541889][ C1] CPU: 1 UID: 0 PID: 23157 Comm: syz.0.5118 Not tainted syzkaller #0 PREEMPT(full) [ 2022.551273][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2022.561333][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 2022.567669][ C1] Code: ff ff 48 c7 c7 60 74 d3 99 be 04 00 00 00 e8 63 79 7d 00 4c 89 f7 b8 01 00 00 00 87 05 85 71 2c 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 80 29 34 8e 74 47 48 c7 c0 30 6c c4 8f 48 c1 e8 [ 2022.587312][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010046 [ 2022.593379][ C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a702cd [ 2022.601366][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e342980 [ 2022.609357][ C1] RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004 [ 2022.617343][ C1] R10: dffffc0000000000 R11: fffffbfff33a6e8c R12: 0000000000002904 [ 2022.625344][ C1] R13: 1ffff110170e7602 R14: ffffffff8e342980 R15: dffffc0000000000 [ 2022.633322][ C1] FS: 00007f8a0bbf66c0(0000) GS:ffff888125ae1000(0000) knlGS:0000000000000000 [ 2022.642278][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2022.648861][ C1] CR2: 000000110c2c29b4 CR3: 000000005f562000 CR4: 00000000003526f0 [ 2022.656834][ C1] Call Trace: [ 2022.660134][ C1] [ 2022.662989][ C1] rcu_core+0x5fa/0x1770 [ 2022.667426][ C1] ? __lock_acquire+0xab9/0xd20 [ 2022.672291][ C1] ? __pfx_rcu_core+0x10/0x10 [ 2022.676986][ C1] ? sched_balance_domains+0x121/0x9e0 [ 2022.682454][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 2022.687928][ C1] ? sched_balance_domains+0x121/0x9e0 [ 2022.693409][ C1] handle_softirqs+0x286/0x870 [ 2022.698197][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2022.702974][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2022.708278][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2022.712877][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2022.718110][ C1] irq_exit_rcu+0x9/0x30 [ 2022.722383][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2022.728041][ C1] [ 2022.730972][ C1] [ 2022.733901][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2022.739897][ C1] RIP: 0010:do_syscall_64+0xc3/0xfa0 [ 2022.745198][ C1] Code: 00 48 8b 7d 08 48 89 7b 18 e8 c9 72 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 d9 3e 44 f6 90 90 e8 82 3e 44 f6 fb 49 8b 57 08 c2 3f 74 0e 4c 89 f7 4c 89 ee e8 cd 16 27 f6 49 89 c4 90 90 41 [ 2022.764898][ C1] RSP: 0018:ffffc9001133fee0 EFLAGS: 00000282 [ 2022.770967][ C1] RAX: 89806c78da903f00 RBX: ffffc9001133fee0 RCX: 89806c78da903f00 [ 2022.778942][ C1] RDX: 0000000000000000 RSI: ffffffff8dbc0cb8 RDI: ffffffff8c037e00 [ 2022.786912][ C1] RBP: ffffc9001133ff38 R08: ffffffff8fc43c37 R09: 1ffffffff1f88786 [ 2022.794886][ C1] R10: dffffc0000000000 R11: fffffbfff1f88787 R12: 000000000000000f [ 2022.802945][ C1] R13: 000000000000000f R14: ffffc9001133ff48 R15: ffff88807f92dac0 [ 2022.810935][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.817003][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2022.823258][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2022.827968][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.833858][ C1] RIP: 0033:0x7f8a0d92ada9 [ 2022.838272][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 2022.857982][ C1] RSP: 002b:00007f8a0bbf5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 2022.866411][ C1] RAX: ffffffffffffffda RBX: 00007f8a0dbd5fa0 RCX: 00007f8a0d92ada9 [ 2022.874404][ C1] RDX: 00007f8a0bbf5a80 RSI: 00007f8a0bbf5bb0 RDI: 0000000000000021 [ 2022.882405][ C1] RBP: 00007f8a0da11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2022.890391][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2022.898370][ C1] R13: 00007f8a0dbd6038 R14: 00007f8a0dbd5fa0 R15: 00007ffdcdf55838 [ 2022.906384][ C1] [ 2022.909429][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2022.916726][ C1] CPU: 1 UID: 0 PID: 23157 Comm: syz.0.5118 Not tainted syzkaller #0 PREEMPT(full) [ 2022.926097][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2022.936152][ C1] Call Trace: [ 2022.939437][ C1] [ 2022.942283][ C1] dump_stack_lvl+0x99/0x250 [ 2022.946885][ C1] ? __asan_memcpy+0x40/0x70 [ 2022.951487][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2022.956700][ C1] ? __pfx__printk+0x10/0x10 [ 2022.961325][ C1] vpanic+0x237/0x6d0 [ 2022.965341][ C1] ? __pfx_vpanic+0x10/0x10 [ 2022.969845][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 2022.975056][ C1] panic+0xb9/0xc0 [ 2022.978799][ C1] ? __pfx_panic+0x10/0x10 [ 2022.983233][ C1] __warn+0x334/0x4c0 [ 2022.987235][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2022.992963][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2022.998693][ C1] report_bug+0x2be/0x4f0 [ 2023.003029][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2023.008752][ C1] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 2023.014475][ C1] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 2023.020346][ C1] handle_bug+0x84/0x160 [ 2023.024609][ C1] exc_invalid_op+0x1a/0x50 [ 2023.029141][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2023.034015][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 2023.040438][ C1] Code: ff ff 48 c7 c7 60 74 d3 99 be 04 00 00 00 e8 63 79 7d 00 4c 89 f7 b8 01 00 00 00 87 05 85 71 2c 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 80 29 34 8e 74 47 48 c7 c0 30 6c c4 8f 48 c1 e8 [ 2023.060147][ C1] RSP: 0018:ffffc90000a08bb8 EFLAGS: 00010046 [ 2023.066240][ C1] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a702cd [ 2023.074313][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e342980 [ 2023.082302][ C1] RBP: ffffc90000a08e30 R08: 0000000000000003 R09: 0000000000000004 [ 2023.090461][ C1] R10: dffffc0000000000 R11: fffffbfff33a6e8c R12: 0000000000002904 [ 2023.098449][ C1] R13: 1ffff110170e7602 R14: ffffffff8e342980 R15: dffffc0000000000 [ 2023.106522][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 2023.112282][ C1] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 2023.118038][ C1] rcu_core+0x5fa/0x1770 [ 2023.122311][ C1] ? __lock_acquire+0xab9/0xd20 [ 2023.127186][ C1] ? __pfx_rcu_core+0x10/0x10 [ 2023.131882][ C1] ? sched_balance_domains+0x121/0x9e0 [ 2023.137350][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 2023.142819][ C1] ? sched_balance_domains+0x121/0x9e0 [ 2023.148299][ C1] handle_softirqs+0x286/0x870 [ 2023.153076][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2023.157851][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2023.163158][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2023.167851][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2023.173088][ C1] irq_exit_rcu+0x9/0x30 [ 2023.177356][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2023.183021][ C1] [ 2023.185964][ C1] [ 2023.188908][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2023.194905][ C1] RIP: 0010:do_syscall_64+0xc3/0xfa0 [ 2023.200226][ C1] Code: 00 48 8b 7d 08 48 89 7b 18 e8 c9 72 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 d9 3e 44 f6 90 90 e8 82 3e 44 f6 fb 49 8b 57 08 c2 3f 74 0e 4c 89 f7 4c 89 ee e8 cd 16 27 f6 49 89 c4 90 90 41 [ 2023.219857][ C1] RSP: 0018:ffffc9001133fee0 EFLAGS: 00000282 [ 2023.225931][ C1] RAX: 89806c78da903f00 RBX: ffffc9001133fee0 RCX: 89806c78da903f00 [ 2023.233905][ C1] RDX: 0000000000000000 RSI: ffffffff8dbc0cb8 RDI: ffffffff8c037e00 [ 2023.241880][ C1] RBP: ffffc9001133ff38 R08: ffffffff8fc43c37 R09: 1ffffffff1f88786 [ 2023.249854][ C1] R10: dffffc0000000000 R11: fffffbfff1f88787 R12: 000000000000000f [ 2023.257920][ C1] R13: 000000000000000f R14: ffffc9001133ff48 R15: ffff88807f92dac0 [ 2023.265915][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.271998][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2023.278154][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2023.282838][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2023.288732][ C1] RIP: 0033:0x7f8a0d92ada9 [ 2023.293150][ C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 2023.312774][ C1] RSP: 002b:00007f8a0bbf5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 2023.321210][ C1] RAX: ffffffffffffffda RBX: 00007f8a0dbd5fa0 RCX: 00007f8a0d92ada9 [ 2023.329189][ C1] RDX: 00007f8a0bbf5a80 RSI: 00007f8a0bbf5bb0 RDI: 0000000000000021 [ 2023.337162][ C1] RBP: 00007f8a0da11e19 R08: 0000000000000000 R09: 0000000000000000 [ 2023.345148][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2023.353125][ C1] R13: 00007f8a0dbd6038 R14: 00007f8a0dbd5fa0 R15: 00007ffdcdf55838 [ 2023.361118][ C1] [ 2024.476679][ C1] Shutting down cpus with NMI [ 2024.481801][ C1] Kernel Offset: disabled [ 2024.486149][ C1] Rebooting in 86400 seconds..