last executing test programs: 28m15.187523091s ago: executing program 32 (id=43): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x560f, &(0x7f0000000000)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) read$FUSE(r3, &(0x7f00000046c0)={0x2020}, 0xfee1) 26m36.396675132s ago: executing program 1 (id=223): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x8000001, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x32, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000100)=""/85) 26m26.637851376s ago: executing program 1 (id=236): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000000000000ffffffff0000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3"], 0x1dc}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a3, &(0x7f0000000200)='bridge0\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x2, 0x10, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x1, 0x700, 0x101, 0x6}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) pipe(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0xfffc, 0x41, 0x2}, {0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x80000000000000}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0xe}, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) 26m26.024996892s ago: executing program 1 (id=239): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setgid(0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r5 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r5, 0x2) write(r0, &(0x7f0000000240)="9882e701d953bea155af79d431b512e63686ac1bbdd3a351e8247a1dd5d23b46bd2d3693c93c8482b998977f64868edc9c6c9dab0db4ea64a176f96e0f", 0x3d) 26m24.249082448s ago: executing program 1 (id=241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x0, 0x0, 0x9) 26m23.082624614s ago: executing program 1 (id=242): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x4) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/24, 0x18) r5 = accept$alg(r4, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 26m14.93267558s ago: executing program 1 (id=249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1, &(0x7f00000003c0)=""/42, 0x2a}, 0x1ff}], 0xffc, 0x40000102, 0x0) 26m13.662165954s ago: executing program 33 (id=249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) sendto$inet6(r1, &(0x7f0000000140)='U', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) recvmmsg(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4092, 0xffc}], 0x1, &(0x7f00000003c0)=""/42, 0x2a}, 0x1ff}], 0xffc, 0x40000102, 0x0) 15m29.295308951s ago: executing program 6 (id=1157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000001c0), 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd0000", 0x23) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='..0:\x00', 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) write$binfmt_script(r4, &(0x7f0000000040), 0x4) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000300)=0x2) 15m27.495127784s ago: executing program 6 (id=1161): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x2f, 0x0, 0x403ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 15m27.352520678s ago: executing program 6 (id=1165): prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004885) prctl$PR_SCHED_CORE(0x3e, 0x8000001, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000003af3850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x32, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000000100)=""/85) 15m22.685825604s ago: executing program 6 (id=1171): syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x4, 0x0, @value=r2, @void, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f0000000000)={0x1, 0x0, 0x1}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x214e}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x24}}, 0x20000000) 15m21.958794738s ago: executing program 6 (id=1175): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x2f, 0x0, 0x403ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 15m21.849912994s ago: executing program 6 (id=1177): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x8}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x76, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x1, 0xa, 0x34325852, 0x7, 0x0, 0x3, 0x7, 0x3ff, 0x0, 0x2, 0x2, 0x1}}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0x1a1c07, 0x6, 0x0, 0x9}) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 15m6.52389008s ago: executing program 34 (id=1177): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x8}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, 0x0, 0x0, 0x4) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x76, 0x8, 0x0, 0x0}}, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x1, 0xa, 0x34325852, 0x7, 0x0, 0x3, 0x7, 0x3ff, 0x0, 0x2, 0x2, 0x1}}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0x1a1c07, 0x6, 0x0, 0x9}) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) 14m47.348897176s ago: executing program 2 (id=1234): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x80000000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x4661, 0x0, 0x3, 0x8b}, &(0x7f0000000400)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) close_range(r4, r5, 0x0) r8 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1fc}], 0x18}, 0x0) 14m43.942288428s ago: executing program 2 (id=1238): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r6, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) openat$bsg(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000180)={r7, &(0x7f0000000040), 0x0}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000006c0)}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 14m41.167864478s ago: executing program 2 (id=1241): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x40084) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000000)={0x7, 0x800}) io_uring_setup(0x28f0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x47) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x3231564e, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) r3 = syz_open_dev$cec(0x0, 0x0, 0x10000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setpriority(0x2, 0x0, 0x3) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) 14m37.476131214s ago: executing program 2 (id=1246): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100"], 0x16) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) setpriority(0x0, 0x1, 0xa7a8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000200), 0x10c820, &(0x7f0000000300)=ANY=[]) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='affs\x00', 0x8008, 0x0) 14m34.9521362s ago: executing program 2 (id=1249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x10, 0x80, @void, @value}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) sendfile(r4, r5, &(0x7f0000000000)=0x5, 0x20001) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600000000000000000038000000"], 0x69) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc23) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 14m31.014775992s ago: executing program 2 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[], 0x22c}}, 0x0) 14m15.903256047s ago: executing program 35 (id=1253): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$wireguard(0x0, r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[], 0x22c}}, 0x0) 6m23.324684328s ago: executing program 5 (id=1994): recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x2f, 0x0, 0x403ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) prctl$PR_GET_IO_FLUSHER(0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "d0baa78683365c21", "90f2142e57f2f9752576d07d748df62221e924e7b42ecaea34669533a35ab169", "7aebc923", "14b6429e3a851d78"}, 0x38) sendto$inet6(r1, &(0x7f0000000380)="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", 0x137, 0x8001, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) socket$pppl2tp(0x18, 0x1, 0x1) 6m17.120920533s ago: executing program 5 (id=2004): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x2f, 0x0, 0x403ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) prctl$PR_GET_IO_FLUSHER(0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "d0baa78683365c21", "90f2142e57f2f9752576d07d748df62221e924e7b42ecaea34669533a35ab169", "7aebc923", "14b6429e3a851d78"}, 0x38) sendto$inet6(r1, &(0x7f0000000380)="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", 0x137, 0x8001, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r3, 0x8004510b, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) socket$pppl2tp(0x18, 0x1, 0x1) 6m13.701566253s ago: executing program 5 (id=2012): socket$inet(0x2b, 0x801, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pipe2$9p(&(0x7f0000000cc0), 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) close_range(r5, 0xffffffffffffffff, 0x0) 6m10.107808774s ago: executing program 5 (id=2021): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14e7e100158b010000000000000000000001fd00"], 0x14}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x68, &(0x7f00000000c0)={0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xffff}, {0x4, 0x1}, {0x5, 0x5}}}, 0x24}}, 0x40) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r5 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) 6m7.235954883s ago: executing program 5 (id=2028): recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x2f, 0x0, 0x403ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) prctl$PR_GET_IO_FLUSHER(0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "d0baa78683365c21", "90f2142e57f2f9752576d07d748df62221e924e7b42ecaea34669533a35ab169", "7aebc923", "14b6429e3a851d78"}, 0x38) sendto$inet6(r1, &(0x7f0000000380)="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", 0x137, 0x8001, 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x100000001, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) socket$pppl2tp(0x18, 0x1, 0x1) 6m4.933804644s ago: executing program 5 (id=2035): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x19, 0x0, &(0x7f0000000280)) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000001180)={0x80000000}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) 5m49.642437926s ago: executing program 36 (id=2035): r0 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x19, 0x0, &(0x7f0000000280)) connect$unix(r3, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x8a}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'sit0\x00'}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000001180)={0x80000000}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000140)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x993568c40857f797, &(0x7f00000011c0)=""/57, &(0x7f0000001200)=0x39) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x4, 0x0, 0x10, 0x8001, 0x3, 0x0, 0x2, 0xb}}) 5m15.978215953s ago: executing program 8 (id=2115): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="e2d4dd357ef540ef0df23fb5feb194761ff8d76b68be858b05e592712c5c7e91fde8e645f011f756faa30efb457a4473c225b8002d566edfbdb4a14f59bc7eca680504bdfa0d19ccf68dfae8a01d2eb3772bd78129b1bb69fce11f0aadbe5d29e8c3fd2028001d543f6d4c62d784e1ef76ff03bbbbcab0684dddd595817de73d128fb45f4ef69f492da6e57654d72649d7b0dedd118a610d99864316c1b2f351ba56f4a7b4857edb05d8622d04689437088d9cced02d5921f45f7c8bb5484259740973d74f16e57b302c330ef1"], 0x1f) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) socket$pppl2tp(0x18, 0x1, 0x1) 5m13.879619972s ago: executing program 8 (id=2118): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x280, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socket$unix(0x1, 0x1, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r4 = dup(r3) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r4, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socket$xdp(0x2c, 0x3, 0x0) 5m11.448189627s ago: executing program 8 (id=2125): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x23, 0x0, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, &(0x7f0000000740)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x8, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x405}}}, 0x7) setpriority(0x0, 0x1, 0xa7a8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r7) 5m8.144828501s ago: executing program 8 (id=2128): r0 = socket(0xa, 0x801, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, 0x0, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mq_notify(0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x4c}}, 0xc000) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="611578000000000061134c0000000000bfa000000000000007000000ee0000052d03010000000000250500000000000069163e0000000000bf07000000000000350507000fff0720670500003f000000140300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190de000000003cc3aa39642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a01000000a1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2474ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6e15e1417058ba11671295d20ba906d4331ce87573d2472371ac6369744a569da6c90f0e8ecba9ee68be2691922073d177bdffd5f1aa96173286f7d66f6c3e6b5eff01ed91681bbddcc66544b42a3d68c129798f2ae62b0fc690c9df12ef0dee69bdbe446322a18155e6662c13708d73aa49f1d8fd2cf86754065bfed808d0c76caaca1e0fc8a6baf185b58a1541911688f4a055bc49ed73c5bfb556c7c7bb62a8594e0aef56a374f4bf910a60d9cd751c3a14f94a3be70dbc9211d754ca9023e1efeef81c775664c3f348d000000000000000000000076d4b94b8d33469cdf2aba94c6e871fcd122f18409ee01620e45ab01c4af441373c1e6234b631ea4bb41e344"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5m3.834933023s ago: executing program 8 (id=2134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00000000000600000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0x480bd72125a0c189, 0xa}, {0xffe0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x880) connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r6, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x91, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x0, 0x1, 0x3, '\x00', &(0x7f0000000040)}) socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)) 4m59.430921081s ago: executing program 8 (id=2139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x1, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x4, 0xb, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8090) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x80) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x5000}, 0x18, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x1) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) 4m43.161621495s ago: executing program 37 (id=2139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x1, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x4, 0xb, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8090) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x80) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x5000}, 0x18, 0x0) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x1) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) 1m3.541108916s ago: executing program 3 (id=2494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ptrace(0x10, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{}, [@alu={0x7, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d8, @void, @value}, 0x90) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085674a000600010000000000", @ANYRES32, @ANYBLOB="000000000000000066080000000000001800000000000000000000000000800095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x294}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x9) add_key$fscrypt_provisioning(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x1e, 0x3, 'Y'}]}}}}}}}}, 0x0) 1m0.204345818s ago: executing program 3 (id=2497): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x85}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x80000001, 0x0, 0x0, 0x8}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="140000001a00077fb3e408000000000000000000349231bfbd260eb99711f55fc77ca95db4c626d88ec776c3bea051aebe1a3f8c4ba9ed79133dd6000fcd1c1a1afff11a33eff1248a7b0497e487ccd72788e629845a3ce2a3e18086f2c30570664537a6b7bac25223517ed734b0c67d7f3f", 0x72) recvmmsg(r4, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @time=@time={0x7, 0xe}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x8}, {}, {}, @result={0xbac, 0x28}}], 0x70) getsockopt$MRT(r5, 0x0, 0xd0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}}], 0x1, 0x2040000, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f000000b2c0), 0x20000, 0x0) 58.804423069s ago: executing program 3 (id=2502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff00000000090000000c0003800800010000000000"], 0x20}}, 0x0) r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0)) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r8, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x6, @empty, 0x80040}, 0x1c) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x8002, r5}, 0x38) write$binfmt_format(r2, &(0x7f0000000100)='-1\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 56.933162182s ago: executing program 0 (id=2504): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x2d5556136457cea6, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x40}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x276e, 0x20, 0x40000000}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000200)={0x3, 0x4}) r6 = syz_open_dev$video(&(0x7f0000000440), 0x800000005, 0x11fc00) pselect6(0x40, &(0x7f0000000400)={0xf, 0x0, 0x0, 0x0, 0xbbcb}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x44, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x88}}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4004880) syz_io_uring_setup(0xb44, &(0x7f00000002c0)={0x0, 0x7b79, 0x100, 0x10000000, 0x8078}, &(0x7f0000000340), &(0x7f0000000280)=0x0) r8 = syz_open_dev$ttys(0xc, 0x2, 0x1) r9 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r9, 0x540a, 0x2) ioctl$TCXONC(r8, 0x540a, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0400000000000000d92f3217f3b3b852a4dcda6d810000000000000000000a20000000000adfca85ada3", @ANYRES16=r7, @ANYRES32=r2], 0xcc}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) bind$bt_hci(r1, &(0x7f0000000480)={0x1f, 0x0, 0x3}, 0x6) 56.856891075s ago: executing program 3 (id=2505): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x400, @loopback={0xff00000000000000}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000004c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}], 0x30}}], 0x1, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) writev(r4, &(0x7f0000000140), 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x200000, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r7 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r7}}) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$SOUND_MIXER_READ_DEVMASK(r6, 0x80044dfe, 0x0) getpid() 53.787657624s ago: executing program 0 (id=2510): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c890}, 0xbeac10588807b056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0500330002000000080034"], 0x2c}}, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) 53.659904229s ago: executing program 3 (id=2511): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r6, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000180)) ioctl$SNDCTL_DSP_GETOPTR(r6, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) r8 = socket$inet6(0xa, 0x6, 0xb4de) recvmmsg(r8, &(0x7f0000007440)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f0000000100)=""/133, 0x85}, {&(0x7f0000000240)=""/217, 0xd9}, {&(0x7f0000000340)=""/243, 0xf3}], 0x4, &(0x7f0000000480)=""/86, 0x56}, 0x80}, {{&(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000600)}, {&(0x7f0000000640)=""/102, 0x66}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000800)=""/255, 0xff}, {&(0x7f0000000900)=""/113, 0x71}], 0x5, &(0x7f0000000a00)=""/97, 0x61}, 0xfffffff8}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000a80)=""/40, 0x28}, {&(0x7f0000000ac0)=""/62, 0x3e}, {&(0x7f0000000b00)=""/127, 0x7f}, {&(0x7f0000000b80)=""/74, 0x4a}, {&(0x7f0000000c00)=""/162, 0xa2}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/127, 0x7f}], 0x7, &(0x7f0000001dc0)=""/57, 0x39}, 0x2}, {{&(0x7f0000001e00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001e80)=""/37, 0x25}, {&(0x7f0000001ec0)=""/62, 0x3e}, {&(0x7f0000001f00)=""/210, 0xd2}, {&(0x7f0000002000)=""/243, 0xf3}, {&(0x7f0000002100)=""/246, 0xf6}, {&(0x7f0000002200)=""/12, 0xc}, {&(0x7f0000002240)=""/12, 0xc}], 0x7, &(0x7f0000002300)=""/117, 0x75}, 0x6}, {{&(0x7f0000002380)=@xdp, 0x80, &(0x7f0000004880)=[{&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/171, 0xab}, {&(0x7f00000034c0)=""/5, 0x5}, {&(0x7f0000003500)=""/150, 0x96}, {&(0x7f00000035c0)=""/167, 0xa7}, {&(0x7f0000003680)=""/14, 0xe}, {&(0x7f00000036c0)=""/157, 0x9d}, {&(0x7f0000003780)=""/79, 0x4f}, {&(0x7f0000003800)=""/103, 0x67}, {&(0x7f0000003880)=""/4096, 0x1000}], 0xa, &(0x7f0000004940)=""/155, 0x9b}, 0x5}, {{0x0, 0x0, 0x0}, 0x3bb}, {{&(0x7f0000005e80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005f00)=""/224, 0xe0}, {&(0x7f0000007640)=""/201, 0xc9}], 0x2, &(0x7f0000006140)=""/153, 0x99}, 0x2}, {{&(0x7f0000006200)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000006280)=""/184, 0xb8}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000007340)=""/120, 0x78}], 0x3, &(0x7f0000007400)=""/6, 0x6}, 0xe7}], 0x8, 0x22, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 48.755276507s ago: executing program 0 (id=2515): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsmount(r0, 0x0, 0x82) fchdir(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000180)=""/82, 0x52) io_uring_setup(0x33a0, &(0x7f0000000200)={0x0, 0xfd60, 0x327700fb73322a26, 0x0, 0x356, 0x0, r2}) getdents64(r2, 0xfffffffffffffffe, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000003c0)=0x1ff, 0x4) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x80801) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r4) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x8}) recvfrom$inet6(r5, &(0x7f0000000280)=""/108, 0x6c, 0x40002000, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x200088c0}, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 48.025226421s ago: executing program 3 (id=2517): syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18}}}}}}, 0x0) syz_emit_ethernet(0x103, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)}], 0x1}}], 0x1, 0x4000800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 44.640236684s ago: executing program 0 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="020000000400000008000000010000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x10, 0x80, @void, @value}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) sendfile(r4, r5, &(0x7f0000000000)=0x5, 0x20001) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000600000000000000000038000000"], 0x69) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xc23) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 40.450482075s ago: executing program 0 (id=2529): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x8, 0x80000) fanotify_mark(r2, 0x105, 0x4800003a, r1, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x3, 0x5, 0x8, 0x3, 0x1, {0x1, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) chown(0x0, 0x0, 0x0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x4000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x10002, {0x1, 0x0, 0x4}, {0x0, 0xff, 0x3}, 0x0, 0xff}], 0x20) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r4) 37.790315361s ago: executing program 0 (id=2533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)) dup3(r5, r4, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x20000000}) rt_sigaction(0x3f, &(0x7f0000000100)={0x0, 0x0, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 32.622128508s ago: executing program 38 (id=2517): syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x18}}}}}}, 0x0) syz_emit_ethernet(0x103, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') r2 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)}], 0x1}}], 0x1, 0x4000800) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 22.505060068s ago: executing program 39 (id=2533): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)) dup3(r5, r4, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000000)={0x20000000}) rt_sigaction(0x3f, &(0x7f0000000100)={0x0, 0x0, 0x0, {[0x100000000]}}, 0x0, 0x8, &(0x7f0000000240)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r6], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 21.155177193s ago: executing program 9 (id=2550): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="e2d4dd357ef540ef0df23fb5feb194761ff8d76b68be858b05e592712c5c7e91fde8e645f011f756faa30efb457a4473c225b8002d566edfbdb4a14f59bc7eca680504bdfa0d19ccf68dfae8a01d2eb3772bd78129b1bb69fce11f0aadbe5d29e8c3fd2028001d543f6d4c62d784e1ef76ff03bbbbcab0684dddd595817de73d128fb45f4ef69f492da6e57654d72649d7b0dedd118a610d99864316c1b2f351ba56f4a7b4857edb05d8622d04689437088d9cced02d5921f45f7c8bb5484259740973d74f16e57b302c330ef1"], 0x1f) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) socket$pppl2tp(0x18, 0x1, 0x1) 15.208002183s ago: executing program 4 (id=2556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000003380)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x6992, 0x8, 0x40002, 0xfc}) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 13.858532041s ago: executing program 4 (id=2557): syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r0, 0x1000000) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r2, &(0x7f00000004c0)=""/57, 0x39) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, 0xffffffffffffffff, 0xb}}, 0x48) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001c80)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x246, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x80, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x2, 0xfb, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0xf2}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0xb, 0x8}}}}}]}}]}}, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0000004500001c0000000000029078ac1eff01e000000112009078"], 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xa, 0xd0e0000, 0x0, 0x100, 0x280, 0x1d8, 0x1d8, 0x280, 0x1d8, 0x3, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'ip6tnl0\x00', 'rose0\x00', {}, {}, 0x73}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@uncond, 0x3202, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x2, 0x2, 0x42fd3a5e50046d73, 0x0, 0x4], 0x2, 0x2}, {0x2, [0x2, 0x6, 0x3, 0x1, 0x2, 0x6], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0x7, 0x0, &(0x7f0000000000)="63eced8e46dc3f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 13.669035996s ago: executing program 9 (id=2558): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) socket(0x10, 0x803, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r4 = accept(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x1d}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000e40)) 12.609659038s ago: executing program 9 (id=2560): recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback, 0x2f, 0x0, 0x403ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, 0x0, 0x0) prctl$PR_GET_IO_FLUSHER(0x4) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000002240)=@gcm_256={{0x303}, "d0baa78683365c21", "90f2142e57f2f9752576d07d748df62221e924e7b42ecaea34669533a35ab169", "7aebc923", "14b6429e3a851d78"}, 0x38) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, 0x0) write$binfmt_aout(r1, 0x0, 0xfdef) 10.54184962s ago: executing program 4 (id=2562): r0 = openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r5, 0x10e, 0x5, &(0x7f0000000040)=""/162, &(0x7f0000000100)=0xa2) r6 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0x12}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) setreuid(0x0, 0xee01) socket$netlink(0x10, 0x3, 0x4) 9.392751198s ago: executing program 7 (id=2563): syz_io_uring_setup(0x53f, &(0x7f00000004c0)={0x0, 0x807734, 0x8000, 0x8, 0xfe}, &(0x7f00000000c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r1 = syz_open_dev$I2C(&(0x7f0000003fc0), 0xa, 0x101000) ioctl$I2C_RETRIES(r1, 0x701, 0xfffffffffffffffc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x59, @loopback, 0x8}}, 0x5, 0x0, 0x0, 0x0, 0xc1, 0x0, 0xff}, 0x9c) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x4, 0x3, 0x608, 0x0, 0xffff, 0x1, 0x4, 0x6a, r4}, &(0x7f0000000040)=0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0x2d, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0xa, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="110000000000000f00fd0800"/30, @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208", @ANYRES32=0x0, @ANYBLOB="a0050000000000000000000024000000000000000000000007000000940400004410880000000000000000000000000000000000110000000000000000000000010000"], 0x98}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, 0x0, &(0x7f0000000100)) sendto$inet6(r2, &(0x7f0000000000)="ee", 0x1, 0x40050, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x29, 0x0, 0x0, 0x204}]}, 0x10) r8 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x101400, 0x0) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) 9.383273355s ago: executing program 4 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) clock_adjtime(0x1, &(0x7f0000000000)={0x3fd, 0x6, 0x24, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffffffffffffff7f, 0x1003, 0x3, 0x0, 0x0, 0xd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x83}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, 0x0}, 0x138) r7 = socket(0x2, 0x3, 0x67) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38}, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 8.260293656s ago: executing program 4 (id=2565): syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000001003010902940003010040000904000000010100000a24010000000201101324060000060000"], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8) syz_open_dev$MSR(0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) 6.620659343s ago: executing program 7 (id=2566): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r3, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="e2d4dd357ef540ef0df23fb5feb194761ff8d76b68be858b05e592712c5c7e91fde8e645f011f756faa30efb457a4473c225b8002d566edfbdb4a14f59bc7eca680504bdfa0d19ccf68dfae8a01d2eb3772bd78129b1bb69fce11f0aadbe5d29e8c3fd2028001d543f6d4c62d784e1ef76ff03bbbbcab0684dddd595817de73d128fb45f4ef69f492da6e57654d72649d7b0dedd118a610d99864316c1b2f351ba56f4a7b4857edb05d8622d04689437088d9cced02d5921f45f7c8bb5484259740973d74f16e57b302c330ef1"], 0x1f) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) socket$pppl2tp(0x18, 0x1, 0x1) 5.428443224s ago: executing program 7 (id=2567): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r5, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@private2}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 4.092679941s ago: executing program 4 (id=2568): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000080)=[0xee00]) read$FUSE(r5, &(0x7f00000031c0)={0x2020}, 0x2020) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000000c0)="2ef2dd050080000048b844410000000000000f23d00f21f835000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b9009800000f01d90f01c965470f01c4410f79d226450f01cb660f013b", 0x55}], 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x218100, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3.861872521s ago: executing program 7 (id=2569): r0 = fsopen(&(0x7f0000000480)='configfs\x00', 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x408001, 0x1) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vxcan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000c, 0x13, r1, 0x3ee33000) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, 0x0, 0x40c4) r8 = fsmount(r0, 0x0, 0x0) fchdir(r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r10 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r10, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)="e991e8426f7e5c663e", 0x9}, {0x0}], 0x2}}], 0x1, 0x0) getdents64(r9, 0xfffffffffffffffe, 0x29) 3.861559156s ago: executing program 9 (id=2570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x10, 0x0, @void}, 0x10) 3.549189849s ago: executing program 9 (id=2571): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40, 0x0) 1.415005758s ago: executing program 9 (id=2572): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x10837, &(0x7f0000000340)={0x0, 0x8922, 0x80, 0x0, 0x3db}, 0x0, &(0x7f0000000140)) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = dup(0xffffffffffffffff) r3 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffef3, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f00000000c0)={0x0, 0x0, 0x3, @discrete={0x0, 0xfffffffe}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="10000000eeff00"/20, @ANYRES16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000040005479965b1bd0c3ccbc0a6fddd01edaf477f2d022422a357097a1a491be0883bcb417c0fb481b74c2877153ba3925203465b33d9ed0a2c52b498726f8c18cd53a76a5dfeeb32fe2c7908f500bbdefaaa71a6013b9ea74bc7659036a3a7db5c92129b736ad054f1db18d30f7e2960e845c9811900e76570f3d014519f240ca6c28657f"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x1e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) dup2(r5, r6) 0s ago: executing program 7 (id=2574): syz_open_dev$vim2m(&(0x7f0000000340), 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x72a) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) shutdown(r4, 0x1) r5 = syz_open_dev$MSR(0x0, 0x1de9, 0x0) read$msr(r5, &(0x7f0000032680)=""/102379, 0x1903b) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) kernel console output (not intermixed with test programs): ve interface with an up link [ 1213.508573][T14018] team0: Port device team_slave_0 added [ 1213.520098][T14018] team0: Port device team_slave_1 added [ 1213.569356][T14018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.577511][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.620663][T14018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.636854][T14018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.644067][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.675564][T14018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.893070][T14018] hsr_slave_0: entered promiscuous mode [ 1214.907958][T14018] hsr_slave_1: entered promiscuous mode [ 1214.914842][T14018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.926151][T14018] Cannot create hsr debugfs directory [ 1218.128302][T14328] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1220.062078][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 1220.062100][ T30] audit: type=1800 audit(2000000646.400:320): pid=14332 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1589" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1221.240190][T13946] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1221.321179][T13946] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1221.769048][T13946] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1221.901170][T13946] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1223.113448][T14018] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1223.840195][T14018] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1223.863003][T14018] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1223.896848][T14018] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1224.052357][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.250090][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.954012][T14389] overlayfs: failed to clone upperpath [ 1224.974016][T14390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 1225.152121][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.159409][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.218615][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.225936][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.550230][T14018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.590499][T14018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.607647][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.614899][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.649626][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.656888][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.973740][T14427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 1229.280874][T14018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.711209][ T9765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1229.723705][ T9765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1229.733866][ T9765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1229.745077][ T9765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1229.764003][ T9765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1229.924276][T14448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1600'. [ 1229.941722][T14448] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1600'. [ 1229.953206][T14448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1600'. [ 1229.963978][T14448] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1600'. [ 1230.013761][T14445] lo speed is unknown, defaulting to 1000 [ 1230.160969][T14445] lo speed is unknown, defaulting to 1000 [ 1231.329824][T14018] veth0_vlan: entered promiscuous mode [ 1231.389894][T14018] veth1_vlan: entered promiscuous mode [ 1231.596739][T14018] veth0_macvtap: entered promiscuous mode [ 1231.789423][T14018] veth1_macvtap: entered promiscuous mode [ 1231.952910][ T9765] Bluetooth: hci1: command tx timeout [ 1232.485458][T14018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.584768][T14018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.975422][ T9765] Bluetooth: hci1: command tx timeout [ 1234.416544][T14018] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.426345][T14018] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.435253][T14018] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.443987][T14018] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.134661][T14500] xt_SECMARK: invalid mode: 2 [ 1236.057487][ T9765] Bluetooth: hci1: command tx timeout [ 1236.830074][T14508] input: syz1 as /devices/virtual/input/input13 [ 1237.626617][ T65] bridge_slave_1: left allmulticast mode [ 1237.632712][ T65] bridge_slave_1: left promiscuous mode [ 1237.642413][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.660122][ T65] bridge_slave_0: left allmulticast mode [ 1237.674493][ T65] bridge_slave_0: left promiscuous mode [ 1237.694730][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.151848][ T9765] Bluetooth: hci1: command tx timeout [ 1238.247862][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1238.258965][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1238.271552][ T65] bond0 (unregistering): Released all slaves [ 1239.367848][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.377737][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.455508][T14445] chnl_net:caif_netlink_parms(): no params data found [ 1241.549281][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1241.565654][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1241.574879][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1241.586540][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1241.594624][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1242.012918][T14539] lo speed is unknown, defaulting to 1000 [ 1242.023334][T14539] lo speed is unknown, defaulting to 1000 [ 1242.058296][ T65] hsr_slave_0: left promiscuous mode [ 1242.064881][ T65] hsr_slave_1: left promiscuous mode [ 1242.081162][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.098795][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.155142][T10780] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1243.770571][ T5827] Bluetooth: hci4: command tx timeout [ 1244.091654][T10780] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 1244.118271][T10780] usb 6-1: config 0 has no interface number 0 [ 1244.778071][T10780] usb 6-1: New USB device found, idVendor=093a, idProduct=2623, bcdDevice=b2.14 [ 1244.795034][T10780] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.812455][T10780] usb 6-1: Product: syz [ 1244.831861][T10780] usb 6-1: Manufacturer: syz [ 1244.838754][T10780] usb 6-1: SerialNumber: syz [ 1244.857804][T10780] usb 6-1: config 0 descriptor?? [ 1244.893452][T10780] gspca_main: gspca_pac7302-2.14.0 probing 093a:2623 [ 1245.107012][ T65] team0 (unregistering): Port device team_slave_1 removed [ 1245.189877][ T65] team0 (unregistering): Port device team_slave_0 removed [ 1245.408454][T10780] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1245.517091][T10780] gspca_pac7302 6-1:0.101: probe with driver gspca_pac7302 failed with error -110 [ 1245.815225][ T5827] Bluetooth: hci4: command tx timeout [ 1245.931439][T12514] usb 6-1: USB disconnect, device number 4 [ 1246.370981][T14577] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1248.425163][ T5827] Bluetooth: hci4: command tx timeout [ 1249.016545][T14586] bridge0: port 5(batadv2) entered blocking state [ 1249.023095][T14586] bridge0: port 5(batadv2) entered disabled state [ 1249.029738][T14586] batadv2: entered allmulticast mode [ 1249.036500][T14586] batadv2: entered promiscuous mode [ 1249.259037][T14445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.338654][T14590] overlayfs: failed to resolve './file0': -2 [ 1249.643337][ T36] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1249.653166][ T36] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1250.068838][T14445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.085319][T14445] bridge_slave_0: entered allmulticast mode [ 1250.110140][T14445] bridge_slave_0: entered promiscuous mode [ 1250.120628][T14445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.129393][T14445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.137202][T14445] bridge_slave_1: entered allmulticast mode [ 1250.146524][T14445] bridge_slave_1: entered promiscuous mode [ 1251.275184][ T5827] Bluetooth: hci4: command tx timeout [ 1251.521372][T14445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.542388][T14603] binder: 14602:14603 ioctl c0306201 0 returned -14 [ 1251.579987][T14445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.709134][T14606] overlayfs: failed to resolve './file0': -2 [ 1252.270372][T14445] team0: Port device team_slave_0 added [ 1252.298203][T14445] team0: Port device team_slave_1 added [ 1252.364849][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'. [ 1252.376955][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1637'. [ 1252.460644][T14445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.470214][T14445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.498049][T14445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.514890][T14445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.522460][T14445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.554567][T14445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1257.761362][ T65] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.790004][T14445] hsr_slave_0: entered promiscuous mode [ 1257.805584][T14445] hsr_slave_1: entered promiscuous mode [ 1258.547807][ T65] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.606413][T14539] chnl_net:caif_netlink_parms(): no params data found [ 1259.877319][ T65] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.046901][ T65] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.139991][T14680] dvmrp8: left allmulticast mode [ 1262.362043][T14688] vlan2: entered allmulticast mode [ 1262.367381][T14688] vlan1: entered allmulticast mode [ 1262.377187][T14688] bridge0: port 6(vlan2) entered blocking state [ 1262.383626][T14688] bridge0: port 6(vlan2) entered disabled state [ 1262.392562][T14688] vlan2: entered promiscuous mode [ 1262.397725][T14688] vlan1: entered promiscuous mode [ 1262.404234][T14688] bridge0: port 6(vlan2) entered blocking state [ 1262.411132][T14688] bridge0: port 6(vlan2) entered forwarding state [ 1262.652589][T14539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.677942][T14539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.763678][T14539] bridge_slave_0: entered allmulticast mode [ 1262.855146][T14539] bridge_slave_0: entered promiscuous mode [ 1263.541626][T14539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.561429][T14539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.583910][T14539] bridge_slave_1: entered allmulticast mode [ 1263.608585][T14539] bridge_slave_1: entered promiscuous mode [ 1263.881395][T14539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.922202][T14539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.050431][T14539] team0: Port device team_slave_0 added [ 1264.086240][ T65] bridge_slave_1: left allmulticast mode [ 1264.092126][ T65] bridge_slave_1: left promiscuous mode [ 1264.098467][T14701] 9pnet_virtio: no channels available for device syz [ 1264.098635][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.122603][ T65] bridge_slave_0: left allmulticast mode [ 1264.129427][ T65] bridge_slave_0: left promiscuous mode [ 1264.142149][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.581079][T14720] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1661'. [ 1268.095286][T14729] xt_nat: multiple ranges no longer supported [ 1268.295737][T14729] 9pnet_fd: Insufficient options for proto=fd [ 1269.309760][T14732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 1269.378467][T14733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 1269.384693][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1269.408311][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.419657][ T65] bond0 (unregistering): Released all slaves [ 1269.442240][T14539] team0: Port device team_slave_1 added [ 1269.725958][T14732] macsec0 (unregistering): left allmulticast mode [ 1269.732450][T14732] macsec0 (unregistering): left promiscuous mode [ 1269.749733][T14732] bridge0: port 4(macsec0) entered disabled state [ 1270.024503][T14539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.031757][T14539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.058589][T14539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.077811][T14539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.093169][T14539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.126351][T14539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1270.319663][ T65] hsr_slave_0: left promiscuous mode [ 1270.341899][ T65] hsr_slave_1: left promiscuous mode [ 1270.348385][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.423382][T14744] Device name cannot be null; rc = [-22] [ 1271.077537][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.113018][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.137507][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.169230][ T65] veth1_macvtap: left promiscuous mode [ 1271.174877][ T65] veth0_macvtap: left promiscuous mode [ 1271.181215][ T65] veth1_vlan: left promiscuous mode [ 1271.186824][ T65] veth0_vlan: left promiscuous mode [ 1272.584546][ T65] team0 (unregistering): Port device team_slave_1 removed [ 1272.716419][ T65] team0 (unregistering): Port device team_slave_0 removed [ 1274.921460][T14539] hsr_slave_0: entered promiscuous mode [ 1274.934066][T14539] hsr_slave_1: entered promiscuous mode [ 1274.940904][T14539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.950463][T14539] Cannot create hsr debugfs directory [ 1276.201293][T14445] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1276.277086][T14445] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1277.562343][T14445] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1277.714487][T14445] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1278.754394][ T8243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.762433][ T8243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.476556][T14848] batadv1: entered promiscuous mode [ 1283.023709][T14445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.319892][T14445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.397520][ T6475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.404660][ T6475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.435698][ T6475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.443025][ T6475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.549206][T14445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1284.728805][T14539] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1284.799991][T14539] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1284.839185][T14539] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1284.967131][T14445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.981303][T14539] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1285.430895][T14539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.473121][T14539] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.499134][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.506448][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1286.448485][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.455754][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.730830][ T9765] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1288.741081][ T9765] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1288.750325][ T9765] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1288.761598][ T9765] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1288.771144][ T9765] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1288.952657][T14539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.029567][T14918] lo speed is unknown, defaulting to 1000 [ 1289.641753][T14918] lo speed is unknown, defaulting to 1000 [ 1290.857043][ T5827] Bluetooth: hci5: command tx timeout [ 1292.940237][ T5827] Bluetooth: hci5: command tx timeout [ 1293.776273][T14539] veth0_vlan: entered promiscuous mode [ 1295.020351][ T5827] Bluetooth: hci5: command tx timeout [ 1296.068778][T14539] veth1_vlan: entered promiscuous mode [ 1297.225088][ T5827] Bluetooth: hci5: command tx timeout [ 1298.542917][T15024] netlink: 'syz.4.1716': attribute type 13 has an invalid length. [ 1298.574819][T14539] veth0_macvtap: entered promiscuous mode [ 1298.587936][T15024] macvtap0: entered promiscuous mode [ 1298.605015][T15024] macvtap0: refused to change device tx_queue_len [ 1298.611887][T14918] chnl_net:caif_netlink_parms(): no params data found [ 1298.716567][ T65] bridge_slave_1: left allmulticast mode [ 1298.722271][ T65] bridge_slave_1: left promiscuous mode [ 1298.986765][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.517909][ T65] bridge_slave_0: left allmulticast mode [ 1299.533938][ T65] bridge_slave_0: left promiscuous mode [ 1299.547749][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.505992][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.512393][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.900073][ T9765] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1300.916555][ T9765] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1300.929029][ T9765] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1300.940374][ T9765] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1301.588341][ T9765] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1301.753570][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.766557][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1301.777825][ T65] bond0 (unregistering): Released all slaves [ 1303.051507][T14918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.064254][T14918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.071816][T14918] bridge_slave_0: entered allmulticast mode [ 1303.080460][T14918] bridge_slave_0: entered promiscuous mode [ 1303.125711][T14918] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.143198][T14918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.188464][T14918] bridge_slave_1: entered allmulticast mode [ 1303.265507][T14918] bridge_slave_1: entered promiscuous mode [ 1303.663716][ T9765] Bluetooth: hci1: command tx timeout [ 1303.950375][T15042] lo speed is unknown, defaulting to 1000 [ 1303.958839][T14918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.073850][ T65] hsr_slave_0: left promiscuous mode [ 1304.094786][ T65] hsr_slave_1: left promiscuous mode [ 1304.130390][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.150345][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.030593][ T65] team0 (unregistering): Port device team_slave_1 removed [ 1305.094557][T15078] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1726'. [ 1305.112598][ T65] team0 (unregistering): Port device team_slave_0 removed [ 1306.075582][ T9765] Bluetooth: hci1: command tx timeout [ 1307.732592][T15042] lo speed is unknown, defaulting to 1000 [ 1307.760332][T14918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1307.864570][T15079] netlink: 632 bytes leftover after parsing attributes in process `syz.4.1726'. [ 1307.909236][T14918] team0: Port device team_slave_0 added [ 1307.961695][T14918] team0: Port device team_slave_1 added [ 1308.146250][ T9765] Bluetooth: hci1: command tx timeout [ 1309.558044][T14918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.589667][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.616609][T14918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.780965][T14918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.806740][T14918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.895635][T14918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1310.181199][T15136] overlayfs: failed to clone lowerpath [ 1310.216445][ T9765] Bluetooth: hci1: command tx timeout [ 1310.282734][T15137] overlayfs: failed to clone upperpath [ 1311.908468][T14918] hsr_slave_0: entered promiscuous mode [ 1312.087855][T14918] hsr_slave_1: entered promiscuous mode [ 1320.141878][T15042] chnl_net:caif_netlink_parms(): no params data found [ 1324.110209][T10780] IPVS: starting estimator thread 0... [ 1324.418004][T15266] IPVS: using max 24 ests per chain, 57600 per kthread [ 1325.390946][T15042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1325.399836][T15042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.426558][T15042] bridge_slave_0: entered allmulticast mode [ 1325.435985][T15042] bridge_slave_0: entered promiscuous mode [ 1325.611184][T15042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1325.621235][T15042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.642752][T15042] bridge_slave_1: entered allmulticast mode [ 1325.653618][T15042] bridge_slave_1: entered promiscuous mode [ 1325.666642][ T65] bridge_slave_1: left allmulticast mode [ 1325.679785][ T65] bridge_slave_1: left promiscuous mode [ 1325.688334][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.850149][ T65] bridge_slave_0: left allmulticast mode [ 1325.874053][ T65] bridge_slave_0: left promiscuous mode [ 1325.893918][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.085404][ T30] audit: type=1326 audit(2000001010.417:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15313 comm="syz.3.1761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x0 [ 1331.661067][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.673183][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1331.684363][ T65] bond0 (unregistering): Released all slaves [ 1331.754151][T15346] lo speed is unknown, defaulting to 1000 [ 1331.820993][T15042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.833995][T15346] lo speed is unknown, defaulting to 1000 [ 1331.851948][T15346] lo speed is unknown, defaulting to 1000 [ 1331.861706][T15042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.872585][T15346] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1331.883324][T14918] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1332.009903][T14918] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1332.118302][T15346] lo speed is unknown, defaulting to 1000 [ 1332.128622][T15042] team0: Port device team_slave_0 added [ 1332.141213][T15042] team0: Port device team_slave_1 added [ 1332.147793][T14918] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1332.170409][T14918] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1332.228329][T15346] lo speed is unknown, defaulting to 1000 [ 1332.340287][T15346] lo speed is unknown, defaulting to 1000 [ 1332.354677][T15042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.382787][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.449765][T15042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.471568][T15346] lo speed is unknown, defaulting to 1000 [ 1332.487409][T15042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.501715][T15042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.565148][T15042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.583240][T15346] lo speed is unknown, defaulting to 1000 [ 1332.594745][T15346] lo speed is unknown, defaulting to 1000 [ 1332.880053][T15042] hsr_slave_0: entered promiscuous mode [ 1332.936528][T15042] hsr_slave_1: entered promiscuous mode [ 1332.943108][T15042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1333.045312][T15042] Cannot create hsr debugfs directory [ 1333.151129][T15373] could not allocate digest TFM handle poly1305-generic [ 1334.359221][T15390] libceph: resolve '@e2OAqcz' (ret=-3): failed [ 1334.503351][ T65] hsr_slave_0: left promiscuous mode [ 1334.533049][ T65] hsr_slave_1: left promiscuous mode [ 1334.539538][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1334.554161][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1334.600630][ T65] veth0_macvtap: left promiscuous mode [ 1334.606524][ T65] veth1_vlan: left promiscuous mode [ 1334.611925][ T65] veth0_vlan: left promiscuous mode [ 1337.018846][ T65] team0 (unregistering): Port device team_slave_1 removed [ 1337.138954][ T65] team0 (unregistering): Port device team_slave_0 removed [ 1339.338524][T15412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1779'. [ 1339.924755][T14918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1340.047975][T14918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1340.238898][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1340.246179][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1340.262653][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1340.269856][ T8243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1340.318909][T14918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1341.053409][T14918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1342.475143][T15468] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1344.502973][T14918] veth0_vlan: entered promiscuous mode [ 1344.574253][T14918] veth1_vlan: entered promiscuous mode [ 1344.598178][T15042] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1344.628674][T15042] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1344.654166][T15042] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1344.692740][T15042] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1344.830998][T14918] veth0_macvtap: entered promiscuous mode [ 1344.879489][T14918] veth1_macvtap: entered promiscuous mode [ 1345.066080][T14918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1345.172664][T14918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.224333][T14918] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.242682][T14918] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.252994][T14918] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.280100][T14918] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.571458][ T6436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.590248][ T6436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.701042][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.837681][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.884784][T15042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.956991][T15042] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.005876][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.013011][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.028846][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.036156][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.425905][T15546] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1348.879392][T15546] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1351.499046][T15042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.303672][T15042] veth0_vlan: entered promiscuous mode [ 1354.378297][T15608] overlayfs: missing 'lowerdir' [ 1354.384212][T15042] veth1_vlan: entered promiscuous mode [ 1354.519716][T15042] veth0_macvtap: entered promiscuous mode [ 1354.567541][T15042] veth1_macvtap: entered promiscuous mode [ 1354.683558][T15042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1355.563949][T15615] netlink: 88 bytes leftover after parsing attributes in process `syz.8.1810'. [ 1355.574015][T15615] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1355.600435][T15042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1355.657483][T15042] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.697942][T15042] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.748523][T15042] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1355.771464][T15042] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.785283][T14900] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1357.976822][T13131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1357.992374][T13131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.033681][T14900] usb 9-1: config 0 has an invalid interface number: 212 but max is 0 [ 1358.066404][T14900] usb 9-1: config 0 has no interface number 0 [ 1358.085116][T14900] usb 9-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 1358.107488][T14900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.140376][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.187650][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1358.335835][T14900] usb 9-1: config 0 descriptor?? [ 1360.194541][T14900] usb 9-1: can't set config #0, error -71 [ 1360.229278][T14900] usb 9-1: USB disconnect, device number 2 [ 1361.964666][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.973886][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.731957][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1362.744544][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1362.756395][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1362.767775][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1362.779118][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1363.292418][T13131] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.480387][T15691] lo speed is unknown, defaulting to 1000 [ 1364.519743][T15691] lo speed is unknown, defaulting to 1000 [ 1364.864687][T13131] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.865154][ T9765] Bluetooth: hci1: command tx timeout [ 1365.645742][T13131] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1366.936081][ T9765] Bluetooth: hci1: command tx timeout [ 1367.331460][T13131] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.468661][T15691] lo speed is unknown, defaulting to 1000 [ 1369.015192][ T9765] Bluetooth: hci1: command tx timeout [ 1370.285598][T13131] bridge_slave_1: left allmulticast mode [ 1370.291340][T13131] bridge_slave_1: left promiscuous mode [ 1370.312857][T13131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.156412][ T9765] Bluetooth: hci1: command tx timeout [ 1371.265719][T13131] bridge_slave_0: left allmulticast mode [ 1371.271426][T13131] bridge_slave_0: left promiscuous mode [ 1371.292155][T13131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.520861][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 1374.185404][T13131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1374.199933][T13131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1374.210406][T13131] bond0 (unregistering): Released all slaves [ 1375.401878][T15691] chnl_net:caif_netlink_parms(): no params data found [ 1375.489098][T15800] overlayfs: missing 'workdir' [ 1377.834621][T15830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1852'. [ 1378.092288][T15691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1378.132201][T15691] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.169891][T15691] bridge_slave_0: entered allmulticast mode [ 1378.205527][T15691] bridge_slave_0: entered promiscuous mode [ 1378.249150][T15691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1378.282908][T15691] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.316313][T15691] bridge_slave_1: entered allmulticast mode [ 1378.409768][T15691] bridge_slave_1: entered promiscuous mode [ 1379.556390][T15691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.674603][T15691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1382.229176][T15691] team0: Port device team_slave_0 added [ 1383.227244][T13131] hsr_slave_0: left promiscuous mode [ 1383.241176][T13131] hsr_slave_1: left promiscuous mode [ 1383.256573][T13131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.274381][T13131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.322157][T13131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1383.344726][T13131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1383.402169][T13131] veth1_macvtap: left promiscuous mode [ 1383.409914][T13131] veth0_macvtap: left promiscuous mode [ 1383.421702][T13131] veth1_vlan: left promiscuous mode [ 1383.429725][T13131] veth0_vlan: left promiscuous mode [ 1385.620252][T13131] team0 (unregistering): Port device team_slave_1 removed [ 1385.690494][T13131] team0 (unregistering): Port device team_slave_0 removed [ 1387.151120][T15691] team0: Port device team_slave_1 added [ 1388.897684][T15904] input: syz1 as /devices/virtual/input/input14 [ 1388.998221][T15906] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[15906] [ 1390.042973][T15691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1390.098857][T15691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.175401][T15691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.237128][T15691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.244221][T15691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.274502][T15691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.052853][T15691] hsr_slave_0: entered promiscuous mode [ 1392.085965][T15691] hsr_slave_1: entered promiscuous mode [ 1392.247444][T15691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1392.275967][T15691] Cannot create hsr debugfs directory [ 1392.364360][T15934] hfs: unable to load iocharset "io#harset" [ 1396.065932][T15971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'. [ 1399.813426][T15691] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1399.847425][T15691] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1400.439369][T15691] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1400.866376][T15691] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1402.172842][T15691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.226350][T16024] netlink: 'syz.3.1892': attribute type 10 has an invalid length. [ 1403.165270][T16024] bond0: (slave wlan1): Releasing backup interface [ 1403.356012][T15691] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.374010][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.381341][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.471605][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1403.478884][ T6436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1405.161119][T16054] overlayfs: failed to resolve './file0': -2 [ 1408.320773][T15691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1410.714184][T15691] veth0_vlan: entered promiscuous mode [ 1411.528814][T15691] veth1_vlan: entered promiscuous mode [ 1412.337952][T15691] veth0_macvtap: entered promiscuous mode [ 1412.369809][T15691] veth1_macvtap: entered promiscuous mode [ 1412.440902][T15691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1412.481958][T15691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1412.617192][T15691] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.874707][T15691] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.888428][T15691] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.925115][T15691] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1415.122988][ T8246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.159215][ T8246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.193389][ T8246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.218439][ T8246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.260003][ T9765] Bluetooth: hci5: command 0x0406 tx timeout [ 1420.258886][T16194] overlayfs: failed to clone upperpath [ 1423.339720][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.346181][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.251964][T16234] overlayfs: failed to clone upperpath [ 1433.670592][T16294] orangefs_mount: mount request failed with -4 [ 1438.923035][T16339] xt_hashlimit: max too large, truncated to 1048576 [ 1444.623830][ T30] audit: type=1326 audit(2000001126.957:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1444.648699][ T30] audit: type=1326 audit(2000001126.957:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1444.692335][ T30] audit: type=1326 audit(2000001127.027:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1444.726145][ T30] audit: type=1326 audit(2000001127.027:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1444.751547][ T30] audit: type=1326 audit(2000001127.027:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1444.781584][ T30] audit: type=1326 audit(2000001127.057:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1444.965434][ T30] audit: type=1326 audit(2000001127.057:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1445.835383][ T30] audit: type=1326 audit(2000001127.057:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1446.008085][ T30] audit: type=1326 audit(2000001127.137:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1446.047845][ T30] audit: type=1326 audit(2000001127.137:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16379 comm="syz.3.1964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x7ffc0000 [ 1446.669474][T16392] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1446.676033][T16392] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1446.731952][T16392] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1446.738046][T16392] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1446.970987][T16392] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1448.696632][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1448.785327][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1449.285250][ T5986] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1450.847392][ T5827] Bluetooth: hci5: command 0x0406 tx timeout [ 1450.855164][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1451.473138][T16429] gretap1: entered promiscuous mode [ 1451.749759][T16436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1980'. [ 1453.095163][ T5827] Bluetooth: hci1: command 0x0c1a tx timeout [ 1455.135609][ T5986] usb 6-1: device descriptor read/64, error -110 [ 1455.750218][T16467] CIFS mount error: No usable UNC path provided in device string! [ 1455.750218][T16467] [ 1455.760449][T16467] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1456.681946][ T5986] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1457.763980][T16488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1998'. [ 1457.833600][T16488] loop6: detected capacity change from 0 to 63 [ 1457.844261][T16266] buffer_io_error: 24 callbacks suppressed [ 1457.844274][T16266] Buffer I/O error on dev loop6, logical block 0, async page read [ 1458.087608][T16488] support for the xor transformation has been removed. [ 1458.109570][T16266] Buffer I/O error on dev loop6, logical block 0, async page read [ 1459.013094][T16266] Buffer I/O error on dev loop6, logical block 0, async page read [ 1459.072861][T16266] Buffer I/O error on dev loop6, logical block 0, async page read [ 1459.092075][T16266] Buffer I/O error on dev loop6, logical block 0, async page read [ 1459.112172][T16266] Buffer I/O error on dev loop6, logical block 0, async page read [ 1459.135726][T16266] Buffer I/O error on dev loop6, logical block 3, async page read [ 1461.533137][T16510] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1461.573182][ T5827] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 1462.293892][T16514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1465.595157][ T9765] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1465.605888][ T9765] Bluetooth: hci1: Injecting HCI hardware error event [ 1465.616283][ T5827] Bluetooth: hci1: hardware error 0x00 [ 1466.018643][T16538] netlink: 'syz.3.2009': attribute type 10 has an invalid length. [ 1466.413986][T16541] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2011'. [ 1467.665313][ T5827] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1470.626624][T16586] kernel read not supported for file /!selinu (pid: 16586 comm: syz.8.2022) [ 1471.336261][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1471.336284][ T30] audit: type=1800 audit(2000001152.977:363): pid=16586 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2022" name=2173656C696E75FF7F dev="mqueue" ino=50250 res=0 errno=0 [ 1472.367007][T16598] bridge0: port 3(team0) entered blocking state [ 1472.374369][T16598] bridge0: port 3(team0) entered disabled state [ 1472.381744][T16598] team0: entered allmulticast mode [ 1472.387026][T16598] team_slave_0: entered allmulticast mode [ 1472.392923][T16598] team_slave_1: entered allmulticast mode [ 1472.413911][T16598] team0: entered promiscuous mode [ 1472.419222][T16598] team_slave_0: entered promiscuous mode [ 1472.426474][T16598] team_slave_1: entered promiscuous mode [ 1472.436589][T16598] bridge0: port 3(team0) entered blocking state [ 1472.443045][T16598] bridge0: port 3(team0) entered forwarding state [ 1472.851805][T16593] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1472.880914][T16593] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1475.184192][T16624] input: syz1 as /devices/virtual/input/input15 [ 1479.119491][T16671] overlayfs: failed to resolve './file1': -2 [ 1481.634617][T14923] IPVS: starting estimator thread 0... [ 1481.643736][T16693] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1481.772134][T16699] overlayfs: failed to clone upperpath [ 1481.971425][T16698] IPVS: using max 28 ests per chain, 67200 per kthread [ 1484.499545][T16726] macsec0: entered promiscuous mode [ 1484.515039][T16726] macsec0: entered allmulticast mode [ 1484.521310][T16726] veth1_macvtap: entered allmulticast mode [ 1484.876455][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.886590][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.152401][T16734] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2060'. [ 1486.895029][T16737] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1488.122574][T16749] 9pnet_fd: Insufficient options for proto=fd [ 1490.775416][T16772] netlink: 'syz.7.2069': attribute type 13 has an invalid length. [ 1490.783523][T16772] macvtap0: entered promiscuous mode [ 1491.695298][T16772] macvtap0: refused to change device tx_queue_len [ 1492.367293][T16780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1493.094820][ T9765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1493.108827][ T9765] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1493.329867][ T9765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1493.490098][ T9765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1493.503795][ T9765] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1493.700200][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1493.707964][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1493.718086][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1493.730210][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1493.739231][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1494.291847][T16781] lo speed is unknown, defaulting to 1000 [ 1494.445242][T16800] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2073'. [ 1494.801324][T16781] lo speed is unknown, defaulting to 1000 [ 1495.138990][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'. [ 1495.148040][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2076'. [ 1496.549798][ T5827] Bluetooth: hci4: command tx timeout [ 1498.628659][ T5827] Bluetooth: hci4: command tx timeout [ 1500.023090][T16830] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1500.283517][ T30] audit: type=1326 audit(2000001695.445:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1500.406644][ T30] audit: type=1326 audit(2000001695.485:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1500.434502][ T30] audit: type=1326 audit(2000001695.485:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1501.223815][ T30] audit: type=1326 audit(2000001695.485:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1501.224630][ T5827] Bluetooth: hci4: command tx timeout [ 1501.246122][ T30] audit: type=1326 audit(2000001695.485:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1501.287311][ T30] audit: type=1326 audit(2000001695.495:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f640518e963 code=0x7ffc0000 [ 1501.349515][ T30] audit: type=1326 audit(2000001695.495:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f640518e963 code=0x7ffc0000 [ 1501.598318][ T30] audit: type=1326 audit(2000001695.495:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1501.642689][ T30] audit: type=1326 audit(2000001695.495:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1501.688093][ T30] audit: type=1326 audit(2000001695.495:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16837 comm="syz.4.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1502.639966][T16845] xt_connbytes: Forcing CT accounting to be enabled [ 1502.647024][T16845] Cannot find set identified by id 0 to match [ 1503.311857][ T5827] Bluetooth: hci4: command tx timeout [ 1504.360230][T16781] lo speed is unknown, defaulting to 1000 [ 1505.693403][T16869] netlink: 260 bytes leftover after parsing attributes in process `syz.8.2089'. [ 1506.845612][ T8246] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.984619][T16781] chnl_net:caif_netlink_parms(): no params data found [ 1507.309807][ T8246] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.539304][ T8246] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.416470][T16921] overlayfs: failed to clone lowerpath [ 1512.179204][ T8246] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.527803][T16781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.570716][T16781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.579371][T16781] bridge_slave_0: entered allmulticast mode [ 1512.608077][T16781] bridge_slave_0: entered promiscuous mode [ 1513.244303][T16928] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-:/": -EINTR [ 1513.343701][T16781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.386485][T16781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.463731][T16781] bridge_slave_1: entered allmulticast mode [ 1513.494145][T16781] bridge_slave_1: entered promiscuous mode [ 1515.048057][T16781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1515.247464][T16781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1515.764627][T16951] serio: Serial port ttyS3 [ 1516.529302][T16781] team0: Port device team_slave_0 added [ 1517.866713][T16781] team0: Port device team_slave_1 added [ 1518.872771][T16962] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2109'. [ 1523.118276][T16781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1523.177204][T16781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1523.384128][T16781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1523.416236][ T8246] team0: left allmulticast mode [ 1523.423771][ T8246] team_slave_0: left allmulticast mode [ 1524.162019][ T8246] team_slave_1: left allmulticast mode [ 1524.190817][ T8246] team0: left promiscuous mode [ 1524.196035][ T8246] team_slave_0: left promiscuous mode [ 1524.202244][ T8246] team_slave_1: left promiscuous mode [ 1524.210215][ T8246] bridge0: port 3(team0) entered disabled state [ 1524.228244][ T8246] bridge_slave_1: left allmulticast mode [ 1524.234133][ T8246] bridge_slave_1: left promiscuous mode [ 1524.244541][ T8246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.267576][T16979] ceph: No mds server is up or the cluster is laggy [ 1524.290079][ T8246] bridge_slave_0: left allmulticast mode [ 1524.318764][ T8246] bridge_slave_0: left promiscuous mode [ 1524.327992][ T8246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.314376][ T8246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.332585][ T8246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.351768][ T8246] bond0 (unregistering): Released all slaves [ 1526.917127][T16781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1527.000246][T16781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1527.590498][T16781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1531.178740][T16781] hsr_slave_0: entered promiscuous mode [ 1531.211979][T16781] hsr_slave_1: entered promiscuous mode [ 1531.257500][T16781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1531.289320][T16781] Cannot create hsr debugfs directory [ 1536.255439][T17072] netlink: 'syz.4.2132': attribute type 11 has an invalid length. [ 1536.689370][T17087] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1536.712739][T17087] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2135'. [ 1537.189689][ T8246] hsr_slave_0: left promiscuous mode [ 1537.195719][ T8246] hsr_slave_1: left promiscuous mode [ 1537.216042][ T8246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1537.240072][ T8246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1537.274910][ T8246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1537.437863][ T8246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1537.496223][ T8246] veth1_macvtap: left promiscuous mode [ 1538.221209][ T8246] veth0_macvtap: left promiscuous mode [ 1538.226925][ T8246] veth1_vlan: left promiscuous mode [ 1538.245649][ T8246] veth0_vlan: left promiscuous mode [ 1538.612719][T17096] siw: device registration error -23 [ 1539.703631][ T8246] team0 (unregistering): Port device team_slave_1 removed [ 1539.769451][ T8246] team0 (unregistering): Port device team_slave_0 removed [ 1540.659767][T16781] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1540.730920][T16781] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1540.791111][T16781] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1540.842399][T17104] netlink: 64985 bytes leftover after parsing attributes in process `syz.7.2148'. [ 1540.885235][T16781] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1543.929779][ T8246] IPVS: stop unused estimator thread 0... [ 1544.180626][T17137] xt_connbytes: Forcing CT accounting to be enabled [ 1544.187696][T17137] set match dimension is over the limit! [ 1545.276915][T16781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.584001][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.590399][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.597984][T16781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.656489][ T8246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.663773][ T8246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1546.674764][ T8246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.682014][ T8246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1546.866974][T17154] batadv3: entered promiscuous mode [ 1546.976552][T17160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2150'. [ 1547.033610][T17160] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.043024][T17160] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.051956][T17160] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.060812][T17160] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.645007][T17160] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1547.654006][T17160] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1547.663083][T17160] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1547.672121][T17160] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1550.222620][T16781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1552.809788][T17199] 9pnet: Could not find request transport: fd0x000000000000000b0xffffffffffffffff [ 1558.170317][ T9765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1558.185433][ T9765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1558.194994][ T9765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1558.214410][ T9765] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1558.228697][ T9765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1559.425422][T17263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2169'. [ 1560.296739][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1560.314104][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1560.327081][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1560.349679][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1560.362674][ T5827] Bluetooth: hci0: command tx timeout [ 1560.376433][ T5827] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1560.611234][T17251] lo speed is unknown, defaulting to 1000 [ 1560.637964][T17251] lo speed is unknown, defaulting to 1000 [ 1560.686060][T17264] lo speed is unknown, defaulting to 1000 [ 1562.099293][T17279] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1562.215405][T17251] lo speed is unknown, defaulting to 1000 [ 1562.221291][T17264] lo speed is unknown, defaulting to 1000 [ 1562.436448][ T9765] Bluetooth: hci4: command tx timeout [ 1562.443691][ T5827] Bluetooth: hci0: command tx timeout [ 1564.107109][T17264] lo speed is unknown, defaulting to 1000 [ 1564.522477][ T9765] Bluetooth: hci4: command tx timeout [ 1564.528245][ T9765] Bluetooth: hci0: command tx timeout [ 1564.568152][T17303] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2176'. [ 1566.647072][ T9765] Bluetooth: hci4: command tx timeout [ 1566.652787][ T5827] Bluetooth: hci0: command tx timeout [ 1567.949948][T17324] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2179'. [ 1568.476529][T12514] libceph: connect (1)[c::]:6789 error -101 [ 1568.556744][T17341] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2180'. [ 1568.727716][ T5827] Bluetooth: hci4: command tx timeout [ 1569.345851][T12514] libceph: mon0 (1)[c::]:6789 connect error [ 1569.615067][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1569.623823][T17332] ceph: No mds server is up or the cluster is laggy [ 1569.641874][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1570.170136][ T5893] libceph: connect (1)[c::]:6789 error -101 [ 1570.176251][ T5893] libceph: mon0 (1)[c::]:6789 connect error [ 1571.004071][T17251] chnl_net:caif_netlink_parms(): no params data found [ 1571.232289][T17264] chnl_net:caif_netlink_parms(): no params data found [ 1575.401177][T17251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.409130][T17251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1575.642439][T17409] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2192'. [ 1575.775489][T17251] bridge_slave_0: entered allmulticast mode [ 1576.140068][T17251] bridge_slave_0: entered promiscuous mode [ 1576.755583][T17264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.763833][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.771576][T17264] bridge_slave_0: entered allmulticast mode [ 1576.779791][T17264] bridge_slave_0: entered promiscuous mode [ 1576.947982][T17251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.976494][T17251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.011299][T17251] bridge_slave_1: entered allmulticast mode [ 1577.062597][T17251] bridge_slave_1: entered promiscuous mode [ 1577.590715][T17264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.608486][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.629607][T17264] bridge_slave_1: entered allmulticast mode [ 1577.639583][T17264] bridge_slave_1: entered promiscuous mode [ 1577.665716][ T9765] Bluetooth: hci4: command 0x0405 tx timeout [ 1577.785012][T17251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.675441][T17251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.932333][T17264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.976452][T17264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1580.673034][T17251] team0: Port device team_slave_0 added [ 1580.709477][T17251] team0: Port device team_slave_1 added [ 1581.316228][T17264] team0: Port device team_slave_0 added [ 1581.348125][ T8254] bridge_slave_1: left allmulticast mode [ 1581.355245][ T8254] bridge_slave_1: left promiscuous mode [ 1581.408637][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.420493][ T8254] bridge_slave_0: left allmulticast mode [ 1581.426196][ T8254] bridge_slave_0: left promiscuous mode [ 1581.432856][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.761202][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1582.800122][ T30] audit: type=1326 audit(2000001777.633:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17445 comm="syz.4.2201" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x0 [ 1584.540180][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1584.553024][ T8254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1584.564125][ T8254] bond0 (unregistering): Released all slaves [ 1584.581229][T17251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.589622][T17251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.635200][T17251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.661193][T17251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.668391][T17251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.705042][T17251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1584.720541][T17264] team0: Port device team_slave_1 added [ 1585.201610][T17264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1585.873508][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.946297][T17264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.732196][ T8254] hsr_slave_0: left promiscuous mode [ 1586.756105][ T8254] hsr_slave_1: left promiscuous mode [ 1586.782105][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.805456][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.650648][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 1587.790252][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 1589.142003][T17502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 1590.299602][T17264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.307158][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1590.334145][T17264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.087591][T17251] hsr_slave_0: entered promiscuous mode [ 1591.111147][T17251] hsr_slave_1: entered promiscuous mode [ 1591.117789][T17251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1591.125560][T17251] Cannot create hsr debugfs directory [ 1591.292132][T17264] hsr_slave_0: entered promiscuous mode [ 1591.299083][T17264] hsr_slave_1: entered promiscuous mode [ 1591.311248][T17264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1591.324898][T17264] Cannot create hsr debugfs directory [ 1591.802994][T17517] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1592.821387][T17522] syz.7.2218: attempt to access beyond end of device [ 1592.821387][T17522] loop7: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1592.836718][T17522] gfs2: error -5 reading superblock [ 1593.589959][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2221'. [ 1593.610477][T17537] netlink: 200 bytes leftover after parsing attributes in process `syz.7.2221'. [ 1594.017206][ T8254] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.979547][ T8254] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.448424][ T8254] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.633279][ T8254] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1598.654823][ T30] audit: type=1326 audit(2000001793.563:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17579 comm="syz.3.2229" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f020a38e929 code=0x0 [ 1600.034401][T17251] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1600.073795][ T8254] bridge_slave_1: left allmulticast mode [ 1600.300871][ T8254] bridge_slave_1: left promiscuous mode [ 1600.306856][ T8254] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.326029][ T8254] bridge_slave_0: left allmulticast mode [ 1600.337562][ T8254] bridge_slave_0: left promiscuous mode [ 1600.350666][ T8254] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.524471][T17612] overlayfs: missing 'lowerdir' [ 1605.331190][ T8254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.345313][ T8254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.362662][ T8254] bond0 (unregistering): Released all slaves [ 1605.652922][T17638] ceph: No mds server is up or the cluster is laggy [ 1605.764015][T17251] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1605.805044][T17251] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1605.863427][T17251] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1608.961956][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.968417][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.008522][T17669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'. [ 1610.240303][ T8254] hsr_slave_0: left promiscuous mode [ 1610.406228][ T8254] hsr_slave_1: left promiscuous mode [ 1610.506648][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1610.604713][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1611.112136][ T8254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1611.155063][ T8254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1611.328507][ T8254] veth1_macvtap: left promiscuous mode [ 1611.375964][ T8254] veth0_macvtap: left promiscuous mode [ 1611.414452][ T8254] veth1_vlan: left promiscuous mode [ 1611.454375][ T8254] veth0_vlan: left promiscuous mode [ 1614.787592][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1614.810666][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1614.841717][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1614.864600][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1614.884137][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1615.058618][ T8254] team0 (unregistering): Port device team_slave_1 removed [ 1615.120434][ T8254] team0 (unregistering): Port device team_slave_0 removed [ 1615.788119][T17708] lo speed is unknown, defaulting to 1000 [ 1615.986543][T17708] lo speed is unknown, defaulting to 1000 [ 1616.084584][T17264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1617.005522][ T9765] Bluetooth: hci5: command tx timeout [ 1617.091981][T17264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1617.290167][T17264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1619.339318][ T9765] Bluetooth: hci5: command tx timeout [ 1619.947191][T17708] lo speed is unknown, defaulting to 1000 [ 1621.449467][ T9765] Bluetooth: hci5: command tx timeout [ 1621.520299][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1621.532425][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1621.558492][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1621.576883][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1621.681932][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1623.540059][ T9765] Bluetooth: hci5: command tx timeout [ 1623.622003][ T8254] IPVS: stop unused estimator thread 0... [ 1623.625494][T17764] lo speed is unknown, defaulting to 1000 [ 1623.636568][T17764] lo speed is unknown, defaulting to 1000 [ 1623.739612][T17782] netlink: 'syz.3.2258': attribute type 1 has an invalid length. [ 1623.792054][ T5827] Bluetooth: hci0: command tx timeout [ 1623.957377][T17791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2259'. [ 1624.557531][T17764] lo speed is unknown, defaulting to 1000 [ 1626.216080][ T5827] Bluetooth: hci0: command tx timeout [ 1627.625978][T17833] syz_tun: entered allmulticast mode [ 1628.212062][T17822] syz_tun: left allmulticast mode [ 1628.275222][ T5827] Bluetooth: hci0: command tx timeout [ 1629.417825][T17708] chnl_net:caif_netlink_parms(): no params data found [ 1630.660973][ T5827] Bluetooth: hci0: command tx timeout [ 1630.708039][T17852] kthread_run failed with err -4 [ 1630.896109][T17764] chnl_net:caif_netlink_parms(): no params data found [ 1631.078893][T17864] overlayfs: failed to clone lowerpath [ 1631.341054][T17708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.370899][T17708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1631.384889][T17708] bridge_slave_0: entered allmulticast mode [ 1631.438866][T17708] bridge_slave_0: entered promiscuous mode [ 1631.484472][T17708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1631.511905][T17708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.519246][T17708] bridge_slave_1: entered allmulticast mode [ 1631.604676][T17708] bridge_slave_1: entered promiscuous mode [ 1631.934368][T17875] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2273'. [ 1631.955556][T17875] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1632.102096][T17708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1632.487546][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 1632.578642][T17708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.809048][T17708] team0: Port device team_slave_0 added [ 1637.001825][T17708] team0: Port device team_slave_1 added [ 1638.898832][T17926] ceph: No mds server is up or the cluster is laggy [ 1639.261725][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 1639.272066][T17940] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2283'. [ 1639.369367][T17764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.378848][T17764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.387344][T17764] bridge_slave_0: entered allmulticast mode [ 1639.396310][T17764] bridge_slave_0: entered promiscuous mode [ 1639.456794][T17708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1639.465218][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.508326][T17708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1639.524014][T17764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1639.563882][T17764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.584127][T17764] bridge_slave_1: entered allmulticast mode [ 1639.615398][T17764] bridge_slave_1: entered promiscuous mode [ 1639.649063][T17708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1639.672444][T17708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1639.716767][T17708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1640.898337][T17952] ptrace attach of "./syz-executor exec"[5831] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 1641.871637][T17764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1642.164807][T17963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2288'. [ 1642.180107][T17764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.462878][T17708] hsr_slave_0: entered promiscuous mode [ 1642.485067][T17708] hsr_slave_1: entered promiscuous mode [ 1642.867479][T17764] team0: Port device team_slave_0 added [ 1644.899926][T17764] team0: Port device team_slave_1 added [ 1646.756638][T17764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1646.768481][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1646.803777][T17764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.862375][ T36] bridge_slave_1: left allmulticast mode [ 1646.868245][ T36] bridge_slave_1: left promiscuous mode [ 1646.876650][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.908233][ T36] bridge_slave_0: left allmulticast mode [ 1646.915838][ T36] bridge_slave_0: left promiscuous mode [ 1646.922191][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.935030][ T36] bridge_slave_1: left allmulticast mode [ 1646.940886][ T36] bridge_slave_1: left promiscuous mode [ 1646.948545][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.000998][ T36] bridge_slave_0: left allmulticast mode [ 1648.006730][ T36] bridge_slave_0: left promiscuous mode [ 1648.187862][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.376637][T18003] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1648.650246][T18003] 9pnet: Could not find request transport: fd0x000000000000000a0xffffffffffffffff [ 1649.385626][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1649.498889][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1649.817467][ T36] bond0 (unregistering): Released all slaves [ 1649.924914][T18021] set match dimension is over the limit! [ 1651.433995][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1651.453742][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1651.468562][ T36] bond0 (unregistering): Released all slaves [ 1651.496744][T17764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.504436][T17764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1651.535698][T17764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.773783][T18046] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2306'. [ 1655.264867][T18064] overlayfs: failed to clone upperpath [ 1657.318304][T17764] hsr_slave_0: entered promiscuous mode [ 1657.328118][T17764] hsr_slave_1: entered promiscuous mode [ 1657.339798][T17764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1657.374931][T17764] Cannot create hsr debugfs directory [ 1657.743598][ T36] hsr_slave_0: left promiscuous mode [ 1657.764700][ T36] hsr_slave_1: left promiscuous mode [ 1657.776900][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1658.373455][T18097] kAFS: No cell specified [ 1658.445771][T18098] No such timeout policy "syz1" [ 1658.582569][T18097] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1659.306826][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.643870][ T36] hsr_slave_0: left promiscuous mode [ 1661.676752][ T36] hsr_slave_1: left promiscuous mode [ 1661.699591][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.719244][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.550959][T18137] Process accounting resumed [ 1665.698559][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1665.982543][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1667.614215][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1667.671701][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1667.840710][T18168] ubi31: detaching mtd0 [ 1667.864805][T18168] ubi31: mtd0 is detached [ 1668.298129][T18181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1668.339712][T18181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1668.965426][ T30] audit: type=1326 audit(2000002376.539:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1669.837776][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.844239][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.868985][ T30] audit: type=1326 audit(2000002376.539:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1669.890815][ T30] audit: type=1326 audit(2000002376.539:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1669.934653][ T30] audit: type=1326 audit(2000002376.539:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1669.990007][ T30] audit: type=1326 audit(2000002376.539:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1670.198312][ T30] audit: type=1326 audit(2000002376.539:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1670.237159][ T30] audit: type=1326 audit(2000002376.539:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1670.354907][ T30] audit: type=1326 audit(2000002376.539:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1671.023293][ T30] audit: type=1326 audit(2000002376.539:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1671.132097][ T30] audit: type=1326 audit(2000002376.539:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18184 comm="syz.4.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1672.936155][T17708] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1673.070922][T18220] overlayfs: missing 'lowerdir' [ 1673.511936][T18216] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2346'. [ 1673.649585][T17708] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1673.732470][T13131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.758351][T13131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.827413][T17708] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1677.742061][ T9765] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1678.237930][T18258] ceph: No mds server is up or the cluster is laggy [ 1678.267315][ T9765] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1678.277766][ T9765] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1678.288879][ T9765] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1678.296951][ T9765] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1678.899370][T18272] overlayfs: missing 'lowerdir' [ 1679.592564][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1679.592585][ T30] audit: type=1326 audit(2000002387.172:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18270 comm="syz.7.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1679.620780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1679.718898][ T30] audit: type=1326 audit(2000002387.172:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18270 comm="syz.7.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1679.798980][ T30] audit: type=1326 audit(2000002387.212:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18270 comm="syz.7.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1679.845717][T18279] netlink: 'syz.3.2360': attribute type 21 has an invalid length. [ 1679.864502][ T30] audit: type=1326 audit(2000002387.212:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18270 comm="syz.7.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1679.943453][T18262] lo speed is unknown, defaulting to 1000 [ 1679.976144][ T30] audit: type=1326 audit(2000002387.212:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18270 comm="syz.7.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1680.020149][T18279] netlink: 'syz.3.2360': attribute type 6 has an invalid length. [ 1680.027995][T18279] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2360'. [ 1680.050525][T18262] lo speed is unknown, defaulting to 1000 [ 1680.445854][ T9765] Bluetooth: hci4: command tx timeout [ 1680.806283][ T30] audit: type=1326 audit(2000002387.242:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18270 comm="syz.7.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1681.064866][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1681.078105][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1681.149640][T18290] overlayfs: missing 'lowerdir' [ 1681.259623][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1681.278065][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1681.292686][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1682.529917][ T5827] Bluetooth: hci4: command tx timeout [ 1682.717095][T18302] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1682.724228][T18302] overlayfs: failed to set xattr on upper [ 1682.730162][T18302] overlayfs: ...falling back to redirect_dir=nofollow. [ 1682.737515][T18302] overlayfs: ...falling back to index=off. [ 1682.743954][T18302] overlayfs: ...falling back to uuid=null. [ 1683.269186][T18285] lo speed is unknown, defaulting to 1000 [ 1683.720966][T18304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2366'. [ 1683.874856][ T5827] Bluetooth: hci5: command tx timeout [ 1684.119196][T18311] overlayfs: missing 'lowerdir' [ 1684.721638][ T5827] Bluetooth: hci4: command tx timeout [ 1684.916355][T18285] lo speed is unknown, defaulting to 1000 [ 1686.085898][ T5827] Bluetooth: hci5: command tx timeout [ 1687.003812][ T5827] Bluetooth: hci4: command tx timeout [ 1687.079958][T18262] lo speed is unknown, defaulting to 1000 [ 1687.138391][T18322] overlayfs: failed to clone upperpath [ 1688.130462][ T5827] Bluetooth: hci5: command tx timeout [ 1688.787652][T18330] mkiss: ax0: crc mode is auto. [ 1689.126301][T18285] lo speed is unknown, defaulting to 1000 [ 1689.315353][T18338] overlayfs: missing 'lowerdir' [ 1690.041158][T17241] bridge_slave_1: left allmulticast mode [ 1690.046904][T17241] bridge_slave_1: left promiscuous mode [ 1690.097521][T17241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.346098][ T5827] Bluetooth: hci5: command tx timeout [ 1690.363727][T17241] bridge_slave_0: left allmulticast mode [ 1690.374984][T17241] bridge_slave_0: left promiscuous mode [ 1690.382974][T17241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.806610][T18348] 9pnet_fd: Insufficient options for proto=fd [ 1691.158459][T17241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.175716][T17241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.198262][T17241] bond0 (unregistering): Released all slaves [ 1691.890071][T18362] netlink: 'syz.7.2378': attribute type 23 has an invalid length. [ 1692.250329][T18365] overlayfs: missing 'lowerdir' [ 1693.160012][T18262] chnl_net:caif_netlink_parms(): no params data found [ 1693.463804][T18376] overlayfs: missing 'lowerdir' [ 1696.285206][T18392] xt_hashlimit: max too large, truncated to 1048576 [ 1696.294836][T18392] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1697.102260][T17241] hsr_slave_0: left promiscuous mode [ 1697.127879][T17241] hsr_slave_1: left promiscuous mode [ 1697.144053][T17241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1697.221462][T17241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1697.734816][T18399] netlink: 'syz.7.2381': attribute type 4 has an invalid length. [ 1698.586511][T17241] team0 (unregistering): Port device team_slave_1 removed [ 1698.748686][T17241] team0 (unregistering): Port device team_slave_0 removed [ 1698.824703][T18406] netlink: 'syz.4.2389': attribute type 10 has an invalid length. [ 1699.494771][T18262] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.290720][T18262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.301002][T18262] bridge_slave_0: entered allmulticast mode [ 1700.311000][T18262] bridge_slave_0: entered promiscuous mode [ 1700.517044][T18262] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.535554][T18262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.547405][T18262] bridge_slave_1: entered allmulticast mode [ 1701.324362][T18262] bridge_slave_1: entered promiscuous mode [ 1701.779490][T18262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.893739][T18262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1702.179996][T18431] netlink: 'syz.4.2394': attribute type 4 has an invalid length. [ 1702.187871][T18431] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.2394'. [ 1702.207809][T18431] vlan2: entered allmulticast mode [ 1702.212996][T18431] vlan1: entered allmulticast mode [ 1702.220042][T18431] bridge0: port 3(vlan2) entered blocking state [ 1702.228662][T18431] bridge0: port 3(vlan2) entered disabled state [ 1702.256780][T18431] vlan2: entered promiscuous mode [ 1702.262705][T18431] vlan1: entered promiscuous mode [ 1702.280336][T18431] bridge0: port 3(vlan2) entered blocking state [ 1702.288887][T18431] bridge0: port 3(vlan2) entered forwarding state [ 1705.022277][T18262] team0: Port device team_slave_0 added [ 1705.043966][T18285] chnl_net:caif_netlink_parms(): no params data found [ 1705.740966][T18262] team0: Port device team_slave_1 added [ 1705.813558][T18436] syz.7.2395: attempt to access beyond end of device [ 1705.813558][T18436] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1706.538295][T18444] Cannot find set identified by id 0 to match [ 1706.858654][T18262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.888792][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.916903][T18262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.963243][T18262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.973556][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1707.001397][T18262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1707.751383][T18461] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2400'. [ 1708.486634][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2401'. [ 1708.529443][T18285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.547397][T18285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.566988][T18285] bridge_slave_0: entered allmulticast mode [ 1708.583171][T18285] bridge_slave_0: entered promiscuous mode [ 1708.606434][T18285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.613660][T18285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.621822][T18285] bridge_slave_1: entered allmulticast mode [ 1708.630415][T18285] bridge_slave_1: entered promiscuous mode [ 1708.648224][T18468] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1708.662081][T18463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1708.878946][T18262] hsr_slave_0: entered promiscuous mode [ 1708.894813][T18262] hsr_slave_1: entered promiscuous mode [ 1709.068725][T18285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1710.217229][T18480] rdma_rxe: rxe_newlink: failed to add tunl0 [ 1710.242498][T18480] fuse: Unknown parameter '0x0000000000000006' [ 1711.117080][T18483] netlink: 30 bytes leftover after parsing attributes in process `syz.7.2403'. [ 1711.290531][T18285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.389446][T18285] team0: Port device team_slave_0 added [ 1712.476998][T18285] team0: Port device team_slave_1 added [ 1714.080367][T18285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1714.087380][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.209336][T18285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.442199][T18285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.449637][T18285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1715.262068][T18285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.129707][T18285] hsr_slave_0: entered promiscuous mode [ 1716.546782][T18285] hsr_slave_1: entered promiscuous mode [ 1716.553258][T18285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1716.561515][T18285] Cannot create hsr debugfs directory [ 1717.132639][T18524] xt_connbytes: Forcing CT accounting to be enabled [ 1717.139718][T18524] set match dimension is over the limit! [ 1718.342918][T17241] bridge_slave_1: left allmulticast mode [ 1718.375543][T17241] bridge_slave_1: left promiscuous mode [ 1718.390301][T17241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1718.413042][T17241] bridge_slave_0: left allmulticast mode [ 1718.418786][T17241] bridge_slave_0: left promiscuous mode [ 1718.544860][T17241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.529580][T17241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1720.542156][T17241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1720.553366][T17241] bond0 (unregistering): Released all slaves [ 1720.854462][T18262] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1721.925526][T18262] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1722.007186][T18262] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1722.317883][T18556] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2423'. [ 1723.044122][T17241] hsr_slave_0: left promiscuous mode [ 1723.051332][T17241] hsr_slave_1: left promiscuous mode [ 1723.057306][T17241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.065361][T17241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1723.255225][T17241] team0 (unregistering): Port device team_slave_1 removed [ 1723.306416][T17241] team0 (unregistering): Port device team_slave_0 removed [ 1723.528305][T18262] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1723.547959][T18556] vcan0: entered promiscuous mode [ 1723.556658][T18556] vcan0: entered allmulticast mode [ 1723.949733][T18262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1723.993893][T18262] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.011102][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.018319][ T8259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.047767][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.055356][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.276536][T18285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1724.311656][T18285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1724.346376][T18285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1724.363196][T18285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1724.567785][T18262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.593220][T18285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1724.625212][T18285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.640743][ T8254] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.647961][ T8254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1724.719274][ T8254] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.726514][ T8254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1724.840617][T18285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1725.237505][T18262] veth0_vlan: entered promiscuous mode [ 1725.264728][T18262] veth1_vlan: entered promiscuous mode [ 1725.348201][T18285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.360559][T18262] veth0_macvtap: entered promiscuous mode [ 1725.392734][T18262] veth1_macvtap: entered promiscuous mode [ 1725.450724][T18262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1725.491976][T18285] veth0_vlan: entered promiscuous mode [ 1725.505357][T18262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1725.522414][T18262] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.532069][T18262] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.541342][T18262] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.550568][T18262] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.576021][T18285] veth1_vlan: entered promiscuous mode [ 1725.749111][T18285] veth0_macvtap: entered promiscuous mode [ 1725.767818][ T8254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.772246][T18285] veth1_macvtap: entered promiscuous mode [ 1725.775692][ T8254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.886661][T18285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1725.913969][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.923265][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.936530][T18285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1725.954904][T18285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.964448][T18285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.973671][T18285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1725.983773][T18285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.361527][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.398791][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1727.508168][T18616] overlayfs: failed to clone upperpath [ 1727.602184][ T6474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1727.677609][ T6474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1729.999516][T18641] syzkaller0: entered promiscuous mode [ 1730.562377][T18645] xt_connbytes: Forcing CT accounting to be enabled [ 1730.570135][T18645] Cannot find set identified by id 0 to match [ 1730.870010][T18630] syzkaller0: left promiscuous mode [ 1731.612260][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.619010][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.828573][T18679] netlink: 'syz.0.2430': attribute type 11 has an invalid length. [ 1739.385784][T18688] overlayfs: failed to clone upperpath [ 1740.607276][T18697] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2438'. [ 1740.617783][T18697] netlink: 328 bytes leftover after parsing attributes in process `syz.9.2438'. [ 1740.877375][T18706] overlayfs: missing 'lowerdir' [ 1741.545037][T18704] futex_wake_op: syz.0.2440 tries to shift op by -1; fix this program [ 1741.576121][T18704] Bluetooth: MGMT ver 1.23 [ 1741.910801][ T30] audit: type=1326 audit(2000002449.321:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1741.947115][ T30] audit: type=1326 audit(2000002449.321:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1742.155925][ T30] audit: type=1326 audit(2000002449.321:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1742.243935][T18714] netlink: 'syz.4.2442': attribute type 10 has an invalid length. [ 1742.251930][T18714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2442'. [ 1742.263805][T18714] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1743.278001][ T30] audit: type=1326 audit(2000002449.321:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1743.404404][ T30] audit: type=1326 audit(2000002449.321:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1744.350896][ T30] audit: type=1326 audit(2000002449.341:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1744.389781][ T30] audit: type=1326 audit(2000002449.481:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1744.804879][ T30] audit: type=1326 audit(2000002449.481:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1745.870960][ T30] audit: type=1326 audit(2000002449.521:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1746.201355][ T30] audit: type=1326 audit(2000002449.521:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18708 comm="syz.4.2442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1747.137657][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1747.137676][ T30] audit: type=1326 audit(2000002454.532:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18738 comm="syz.4.2448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x0 [ 1747.639109][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 1747.645422][T18732] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1747.818423][T18732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1747.881711][T18732] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1748.021787][T18758] netlink: 1272 bytes leftover after parsing attributes in process `syz.7.2450'. [ 1748.447947][T18732] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1748.601084][T18732] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1749.722864][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 1750.364179][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 1751.971171][ T5827] Bluetooth: hci4: command 0x0c1a tx timeout [ 1751.999727][T18732] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1752.907541][ T5827] Bluetooth: hci5: command 0x0c1a tx timeout [ 1754.949815][ T9765] Bluetooth: hci5: command 0x0c1a tx timeout [ 1755.359724][T18807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2457'. [ 1755.478552][T18809] syz.7.2460: attempt to access beyond end of device [ 1755.478552][T18809] loop15: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1755.492116][T18809] hfs: can't find a HFS filesystem on dev loop15 [ 1756.636011][T18813] xt_bpf: check failed: parse error [ 1757.646051][T18821] syz.4.2464 (18821): attempted to duplicate a private mapping with mremap. This is not supported. [ 1757.669194][ T30] audit: type=1326 audit(2000002465.045:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18820 comm="syz.4.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1758.454116][ T30] audit: type=1326 audit(2000002465.045:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18820 comm="syz.4.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1758.476015][ T9765] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1758.497657][ T30] audit: type=1326 audit(2000002465.045:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18820 comm="syz.4.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1758.596927][ T30] audit: type=1326 audit(2000002465.964:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18820 comm="syz.4.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1758.933326][T18837] 9pnet_fd: Insufficient options for proto=fd [ 1759.397907][ T30] audit: type=1326 audit(2000002465.964:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18820 comm="syz.4.2464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640518e929 code=0x7ffc0000 [ 1759.944824][T18849] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2467'. [ 1760.968085][T18852] xt_HMARK: proto mask must be zero with L3 mode [ 1765.773204][T18880] set match dimension is over the limit! [ 1768.400162][T18905] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2482'. [ 1769.338550][T18891] overlayfs: missing 'lowerdir' [ 1769.855959][T18913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2484'. [ 1771.752715][T18926] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2486'. [ 1776.594785][T18956] overlay: Unknown parameter 'uid<00000000000000000000' [ 1779.709470][T18973] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1782.281645][T19001] netlink: 'syz.4.2499': attribute type 11 has an invalid length. [ 1784.334101][T19019] 9pnet_fd: Insufficient options for proto=fd [ 1785.619181][T19030] netlink: 'syz.9.2508': attribute type 1 has an invalid length. [ 1785.641369][T19030] netlink: 224 bytes leftover after parsing attributes in process `syz.9.2508'. [ 1785.651818][T19030] netlink: 'syz.9.2508': attribute type 1 has an invalid length. [ 1786.993048][T17714] libceph: connect (1)[c::]:6789 error -101 [ 1787.047764][T17714] libceph: mon0 (1)[c::]:6789 connect error [ 1787.483592][T19041] ceph: No mds server is up or the cluster is laggy [ 1788.328444][T19051] can0: slcan on ttyS3. [ 1789.749149][T19054] batadv3: entered promiscuous mode [ 1789.786830][ T1100] batman_adv: batadv3: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1789.898201][T19059] random: crng reseeded on system resumption [ 1790.079642][T19061] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(16) [ 1790.086324][T19061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1790.140471][T19065] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(19) [ 1790.147150][T19065] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1790.338212][T19071] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 1790.721226][T19069] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1790.755854][T19061] vhci_hcd vhci_hcd.0: Device attached [ 1790.777668][T19065] vhci_hcd vhci_hcd.0: Device attached [ 1790.784146][T19047] can0 (unregistered): slcan off ttyS3. [ 1791.160286][ T5893] vhci_hcd: vhci_device speed not set [ 1791.372830][T19069] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(24) [ 1791.379611][T19069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1791.415329][T19061] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(18) [ 1791.422025][T19061] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1791.462991][ T5893] usb 47-1: new full-speed USB device number 2 using vhci_hcd [ 1791.606539][T19069] vhci_hcd vhci_hcd.0: Device attached [ 1791.679210][T19061] vhci_hcd vhci_hcd.0: Device attached [ 1791.695748][T19079] vhci_hcd vhci_hcd.0: pdev(7) rhport(5) sockfd(21) [ 1791.702696][T19079] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1791.728479][T19065] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1791.866725][T19061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1791.919902][T19079] vhci_hcd vhci_hcd.0: Device attached [ 1792.722057][T19080] vhci_hcd: connection closed [ 1792.722338][T19076] vhci_hcd: connection closed [ 1792.727172][T19062] vhci_hcd: connection reset by peer [ 1792.737505][T19066] vhci_hcd: connection closed [ 1792.737767][T19073] vhci_hcd: connection closed [ 1792.755905][ T8243] vhci_hcd: stop threads [ 1792.779962][ T8243] vhci_hcd: release socket [ 1792.784905][ T8243] vhci_hcd: disconnect device [ 1792.792557][ T8243] vhci_hcd: stop threads [ 1792.802051][ T8243] vhci_hcd: release socket [ 1792.810850][ T8243] vhci_hcd: disconnect device [ 1792.971140][ T8243] vhci_hcd: stop threads [ 1792.982433][ T8243] vhci_hcd: release socket [ 1792.987240][ T8243] vhci_hcd: disconnect device [ 1792.992635][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.999688][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.111201][ T8243] vhci_hcd: stop threads [ 1793.115536][ T8243] vhci_hcd: release socket [ 1793.130359][ T8243] vhci_hcd: disconnect device [ 1793.140895][ T8243] vhci_hcd: stop threads [ 1793.156002][ T8243] vhci_hcd: release socket [ 1793.421861][ T8243] vhci_hcd: disconnect device [ 1794.688223][ T8246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.760783][ T8246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.006358][T19121] random: crng reseeded on system resumption [ 1796.921076][ T5893] vhci_hcd: vhci_device speed not set [ 1797.675409][T14900] libceph: connect (1)[c::]:6789 error -101 [ 1798.840411][T19133] ceph: No mds server is up or the cluster is laggy [ 1798.858218][T14900] libceph: mon0 (1)[c::]:6789 connect error [ 1799.105712][T19138] netlink: 'syz.4.2526': attribute type 4 has an invalid length. [ 1800.046156][T19151] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2527'. [ 1800.922662][T17714] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1801.195409][T17714] usb 10-1: config index 0 descriptor too short (expected 20267, got 36) [ 1801.285711][T17714] usb 10-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1801.405640][T17714] usb 10-1: config 9 has 0 interfaces, different from the descriptor's value: 3 [ 1801.546755][T17714] usb 10-1: New USB device found, idVendor=413c, idProduct=81e6, bcdDevice=10.b2 [ 1801.660175][T17714] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.844925][T17714] usb 10-1: Product: syz [ 1801.947773][T17714] usb 10-1: Manufacturer: у [ 1802.051898][T17714] usb 10-1: SerialNumber: syz [ 1802.418864][T19162] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2530'. [ 1803.135047][T17714] usb 10-1: USB disconnect, device number 2 [ 1803.406472][ T30] audit: type=1326 audit(2000002510.728:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1804.200846][ T30] audit: type=1326 audit(2000002510.748:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1804.621318][ T30] audit: type=1326 audit(2000002511.518:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f134778d3df code=0x7ffc0000 [ 1804.692397][T19175] lo: entered allmulticast mode [ 1804.725984][T19175] tunl0: entered allmulticast mode [ 1804.741308][T19175] gre0: entered allmulticast mode [ 1804.924117][ T30] audit: type=1326 audit(2000002511.518:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1805.093844][T19169] sctp: [Deprecated]: syz.7.2534 (pid 19169) Use of int in maxseg socket option. [ 1805.093844][T19169] Use struct sctp_assoc_value instead [ 1805.143765][ T5986] IPVS: starting estimator thread 0... [ 1805.158657][T19175] gretap0: entered allmulticast mode [ 1805.211683][T19175] erspan0: entered allmulticast mode [ 1805.224678][T19175] ip_vti0: entered allmulticast mode [ 1805.232984][ T30] audit: type=1326 audit(2000002511.518:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1805.275920][T19175] ip6_vti0: entered allmulticast mode [ 1805.298579][T19181] IPVS: using max 48 ests per chain, 115200 per kthread [ 1805.479224][ T30] audit: type=1326 audit(2000002511.638:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1805.506934][T19175] sit0: entered allmulticast mode [ 1806.461598][T19175] ip6tnl0: entered allmulticast mode [ 1806.472061][ T30] audit: type=1326 audit(2000002511.638:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1806.523122][T19175] ip6gre0: entered allmulticast mode [ 1806.745523][T19175] syz_tun: entered allmulticast mode [ 1807.487707][ T30] audit: type=1326 audit(2000002511.638:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1807.746781][T19175] ip6gretap0: entered allmulticast mode [ 1807.754669][T19175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.764764][T19175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.802917][ T30] audit: type=1326 audit(2000002511.657:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1808.001177][ T30] audit: type=1326 audit(2000002511.657:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19168 comm="syz.7.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f134778e929 code=0x7ffc0000 [ 1808.060192][T19175] bridge0: entered allmulticast mode [ 1808.248731][T19175] vcan0: entered allmulticast mode [ 1808.256369][T19200] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2538'. [ 1808.999264][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2538'. [ 1809.004233][T19175] bond0: entered allmulticast mode [ 1809.124145][T19175] bond_slave_0: entered allmulticast mode [ 1809.153176][T19175] bond_slave_1: entered allmulticast mode [ 1809.189362][T19175] team0: entered allmulticast mode [ 1809.208230][T19175] team_slave_0: entered allmulticast mode [ 1809.214023][T19175] team_slave_1: entered allmulticast mode [ 1809.247821][T19175] dummy0: entered allmulticast mode [ 1810.530937][T19175] nlmon0: entered allmulticast mode [ 1810.594426][T19175] caif0: entered allmulticast mode [ 1810.600124][T19175] batadv0: entered allmulticast mode [ 1810.969248][T19175] vxcan0: entered allmulticast mode [ 1810.975467][T19175] vxcan1: entered allmulticast mode [ 1810.997442][T19175] veth0: entered allmulticast mode [ 1811.057433][T19175] veth1: entered allmulticast mode [ 1811.125755][T19175] wg0: entered allmulticast mode [ 1811.319188][T19175] wg1: entered allmulticast mode [ 1812.156672][T19175] wg2: entered allmulticast mode [ 1812.183996][T19175] veth0_to_bridge: entered allmulticast mode [ 1812.224045][T19175] veth1_to_bridge: entered allmulticast mode [ 1812.269167][T19175] veth0_to_bond: entered allmulticast mode [ 1813.084511][T19175] veth1_to_bond: entered allmulticast mode [ 1813.110942][ T9765] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1813.164164][T19175] veth0_to_team: entered allmulticast mode [ 1813.173747][T19175] veth1_to_team: entered allmulticast mode [ 1813.184715][T19175] veth0_to_batadv: entered allmulticast mode [ 1813.194860][T19175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1813.257868][T19175] batadv_slave_0: entered allmulticast mode [ 1813.269766][ T9765] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1813.280415][T19175] veth1_to_batadv: entered allmulticast mode [ 1813.312768][T19175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1813.320646][T19175] batadv_slave_1: entered allmulticast mode [ 1813.329736][T19175] xfrm0: entered allmulticast mode [ 1813.347935][T19175] veth0_to_hsr: entered allmulticast mode [ 1813.361124][T19175] hsr_slave_0: entered allmulticast mode [ 1813.379482][T19175] veth1_to_hsr: entered allmulticast mode [ 1813.399589][T19175] hsr_slave_1: entered allmulticast mode [ 1813.413476][T19175] hsr0: entered allmulticast mode [ 1813.432233][T19175] veth1_virt_wifi: entered allmulticast mode [ 1813.440322][T19175] veth0_virt_wifi: entered allmulticast mode [ 1813.448940][ T9765] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1813.490102][T19175] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1813.512507][T19175] veth1_vlan: entered allmulticast mode [ 1813.532500][T19175] veth0_vlan: entered allmulticast mode [ 1813.549002][T19175] vlan0: entered allmulticast mode [ 1813.555026][ T9765] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1813.562999][ T9765] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1813.576733][T19175] vlan1: entered allmulticast mode [ 1813.603749][T19175] macvlan0: entered allmulticast mode [ 1813.614660][T19175] macvlan1: entered allmulticast mode [ 1813.787155][T19175] ipvlan0: entered allmulticast mode [ 1814.757331][T19175] ipvlan1: entered allmulticast mode [ 1814.764993][T19175] veth1_macvtap: entered allmulticast mode [ 1814.775759][T19175] veth0_macvtap: entered allmulticast mode [ 1814.911177][T19175] macvtap0: entered allmulticast mode [ 1814.921079][T19175] macsec0: entered allmulticast mode [ 1815.009043][T19175] geneve0: entered allmulticast mode [ 1815.055755][T19175] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.076133][T19175] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.178694][T19175] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.573564][T19175] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1815.609960][T19175] geneve1: entered allmulticast mode [ 1815.654027][ T5827] Bluetooth: hci0: command tx timeout [ 1815.667273][T19175] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1815.711298][T19175] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 1815.768514][T19175] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 1815.800509][T19175] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 1816.046305][T19175] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 1816.901136][T19175] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 1817.025664][T19175] syzkaller0: entered allmulticast mode [ 1817.031393][T19175] bridge1: entered allmulticast mode [ 1818.274069][ T5827] Bluetooth: hci0: command tx timeout [ 1819.362035][T19227] lo speed is unknown, defaulting to 1000 [ 1819.472284][T19227] lo speed is unknown, defaulting to 1000 [ 1820.052760][T19281] ip6erspan0: entered allmulticast mode [ 1820.136536][T19281] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2551'. [ 1820.773684][ T5827] Bluetooth: hci0: command tx timeout [ 1822.940111][ T5827] Bluetooth: hci0: command tx timeout [ 1823.998371][T19227] lo speed is unknown, defaulting to 1000 [ 1824.402420][ T9765] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1824.417025][ T9765] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1824.428621][ T9765] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1824.507016][ T9765] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1824.525576][ T9765] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1825.271066][T19306] lo speed is unknown, defaulting to 1000 [ 1826.626745][ T9765] Bluetooth: hci3: command tx timeout [ 1826.688618][T19306] lo speed is unknown, defaulting to 1000 [ 1827.726908][ T8243] bridge_slave_1: left promiscuous mode [ 1827.732793][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.520760][ T8243] bridge_slave_0: left promiscuous mode [ 1828.631116][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.705100][ T9765] Bluetooth: hci3: command tx timeout [ 1830.776684][ T9765] Bluetooth: hci3: command tx timeout [ 1832.858895][ T9765] Bluetooth: hci3: command tx timeout [ 1834.915824][ T8243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1834.934701][ T8243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1834.945051][ T8243] bond0 (unregistering): Released all slaves [ 1835.057059][T19306] lo speed is unknown, defaulting to 1000 [ 1835.069575][T19227] chnl_net:caif_netlink_parms(): no params data found [ 1836.510572][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.552113][T19227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.559424][T19227] bridge_slave_0: entered allmulticast mode [ 1836.630120][T19227] bridge_slave_0: entered promiscuous mode [ 1836.640985][T19227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.661670][T19227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1836.682110][T19227] bridge_slave_1: entered allmulticast mode [ 1836.697231][T19227] bridge_slave_1: entered promiscuous mode [ 1836.988886][T19416] overlayfs: missing 'lowerdir' [ 1838.694196][T19227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1838.728478][T19227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1840.177952][T19433] [ 1840.180365][T19433] ====================================================== [ 1840.187499][T19433] WARNING: possible circular locking dependency detected [ 1840.194720][T19433] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 1840.201858][T19433] ------------------------------------------------------ [ 1840.208968][T19433] syz.9.2572/19433 is trying to acquire lock: [ 1840.215127][T19433] ffffffff8f868828 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x27e/0x560 [ 1840.225782][T19433] [ 1840.225782][T19433] but task is already holding lock: [ 1840.233149][T19433] ffff888025386278 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 1840.243355][T19433] [ 1840.243355][T19433] which lock already depends on the new lock. [ 1840.243355][T19433] [ 1840.253762][T19433] [ 1840.253762][T19433] the existing dependency chain (in reverse order) is: [ 1840.262955][T19433] [ 1840.262955][T19433] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 1840.271665][T19433] lock_acquire+0x120/0x360 [ 1840.276704][T19433] blk_alloc_queue+0x538/0x620 [ 1840.282009][T19433] __blk_mq_alloc_disk+0x162/0x340 [ 1840.287661][T19433] loop_add+0x41b/0xad0 [ 1840.292350][T19433] loop_init+0x173/0x230 [ 1840.297123][T19433] do_one_initcall+0x233/0x820 [ 1840.302421][T19433] do_initcall_level+0x137/0x1f0 [ 1840.307903][T19433] do_initcalls+0x69/0xd0 [ 1840.312774][T19433] kernel_init_freeable+0x3d9/0x570 [ 1840.318508][T19433] kernel_init+0x1d/0x1d0 [ 1840.323422][T19433] ret_from_fork+0x3fc/0x770 [ 1840.328546][T19433] ret_from_fork_asm+0x1a/0x30 [ 1840.333837][T19433] [ 1840.333837][T19433] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1840.341079][T19433] lock_acquire+0x120/0x360 [ 1840.346114][T19433] fs_reclaim_acquire+0x72/0x100 [ 1840.351596][T19433] kmem_cache_alloc_node_noprof+0x47/0x3c0 [ 1840.358044][T19433] __alloc_skb+0x112/0x2d0 [ 1840.363093][T19433] alloc_uevent_skb+0x7d/0x230 [ 1840.368395][T19433] kobject_uevent_net_broadcast+0x2fa/0x560 [ 1840.374913][T19433] kobject_uevent_env+0x55b/0x8c0 [ 1840.380553][T19433] kobject_synth_uevent+0x527/0xb00 [ 1840.386282][T19433] bus_uevent_store+0x115/0x170 [ 1840.391664][T19433] kernfs_fop_write_iter+0x378/0x4f0 [ 1840.397480][T19433] vfs_write+0x548/0xa90 [ 1840.402257][T19433] ksys_write+0x145/0x250 [ 1840.407112][T19433] do_syscall_64+0xfa/0x3b0 [ 1840.412216][T19433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.418707][T19433] [ 1840.418707][T19433] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 1840.426543][T19433] validate_chain+0xb9b/0x2140 [ 1840.431930][T19433] __lock_acquire+0xab9/0xd20 [ 1840.437141][T19433] lock_acquire+0x120/0x360 [ 1840.442263][T19433] __mutex_lock+0x182/0xe80 [ 1840.447348][T19433] kobject_uevent_net_broadcast+0x27e/0x560 [ 1840.453775][T19433] kobject_uevent_env+0x55b/0x8c0 [ 1840.459331][T19433] loop_set_status+0x4d3/0xaf0 [ 1840.464722][T19433] lo_ioctl+0xa5e/0x2410 [ 1840.469590][T19433] blkdev_ioctl+0x5a5/0x6d0 [ 1840.474718][T19433] __se_sys_ioctl+0xf9/0x170 [ 1840.479920][T19433] do_syscall_64+0xfa/0x3b0 [ 1840.485215][T19433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.491987][T19433] [ 1840.491987][T19433] other info that might help us debug this: [ 1840.491987][T19433] [ 1840.502274][T19433] Chain exists of: [ 1840.502274][T19433] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 1840.502274][T19433] [ 1840.516123][T19433] Possible unsafe locking scenario: [ 1840.516123][T19433] [ 1840.523603][T19433] CPU0 CPU1 [ 1840.528973][T19433] ---- ---- [ 1840.534350][T19433] lock(&q->q_usage_counter(io)#24); [ 1840.539770][T19433] lock(fs_reclaim); [ 1840.546287][T19433] lock(&q->q_usage_counter(io)#24); [ 1840.554194][T19433] lock(uevent_sock_mutex); [ 1840.558799][T19433] [ 1840.558799][T19433] *** DEADLOCK *** [ 1840.558799][T19433] [ 1840.566948][T19433] 3 locks held by syz.9.2572/19433: [ 1840.572151][T19433] #0: ffff8880255ca400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xaf0 [ 1840.581574][T19433] #1: ffff888025386278 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 1840.592236][T19433] #2: ffff8880253862b0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: loop_set_status+0x227/0xaf0 [ 1840.603172][T19433] [ 1840.603172][T19433] stack backtrace: [ 1840.609085][T19433] CPU: 0 UID: 0 PID: 19433 Comm: syz.9.2572 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 1840.609106][T19433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1840.609116][T19433] Call Trace: [ 1840.609124][T19433] [ 1840.609132][T19433] dump_stack_lvl+0x189/0x250 [ 1840.609159][T19433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1840.609181][T19433] ? __pfx__printk+0x10/0x10 [ 1840.609196][T19433] ? print_lock_name+0xde/0x100 [ 1840.609225][T19433] print_circular_bug+0x2ee/0x310 [ 1840.609251][T19433] check_noncircular+0x134/0x160 [ 1840.609277][T19433] validate_chain+0xb9b/0x2140 [ 1840.609308][T19433] __lock_acquire+0xab9/0xd20 [ 1840.609329][T19433] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 1840.609347][T19433] lock_acquire+0x120/0x360 [ 1840.609365][T19433] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 1840.609387][T19433] __mutex_lock+0x182/0xe80 [ 1840.609401][T19433] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 1840.609419][T19433] ? vsnprintf+0xe11/0xf00 [ 1840.609509][T19433] ? kobject_uevent_net_broadcast+0x27e/0x560 [ 1840.609527][T19433] ? __pfx___mutex_lock+0x10/0x10 [ 1840.609540][T19433] ? add_uevent_var+0x278/0x450 [ 1840.609558][T19433] ? kobject_uevent_env+0x50a/0x8c0 [ 1840.609574][T19433] ? __pfx_add_uevent_var+0x10/0x10 [ 1840.609591][T19433] kobject_uevent_net_broadcast+0x27e/0x560 [ 1840.609610][T19433] kobject_uevent_env+0x55b/0x8c0 [ 1840.609630][T19433] loop_set_status+0x4d3/0xaf0 [ 1840.609654][T19433] lo_ioctl+0xa5e/0x2410 [ 1840.609675][T19433] ? __dequeue_entity+0x4e/0xc60 [ 1840.609693][T19433] ? __pfx_lo_ioctl+0x10/0x10 [ 1840.609711][T19433] ? __lock_acquire+0xab9/0xd20 [ 1840.609731][T19433] ? __lock_acquire+0xab9/0xd20 [ 1840.609757][T19433] ? __lock_acquire+0xab9/0xd20 [ 1840.609777][T19433] ? __lock_acquire+0xab9/0xd20 [ 1840.609800][T19433] ? __lock_acquire+0xab9/0xd20 [ 1840.609822][T19433] ? __lock_acquire+0xab9/0xd20 [ 1840.609847][T19433] ? is_bpf_text_address+0x26/0x2b0 [ 1840.609870][T19433] ? is_bpf_text_address+0x292/0x2b0 [ 1840.609890][T19433] ? is_bpf_text_address+0x26/0x2b0 [ 1840.609912][T19433] ? kernel_text_address+0xa5/0xe0 [ 1840.609930][T19433] ? __kernel_text_address+0xd/0x40 [ 1840.609947][T19433] ? unwind_get_return_address+0x4d/0x90 [ 1840.609969][T19433] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1840.609985][T19433] ? arch_stack_walk+0xfc/0x150 [ 1840.610021][T19433] ? stack_trace_save+0x9c/0xe0 [ 1840.610039][T19433] ? kasan_save_track+0x4f/0x80 [ 1840.610055][T19433] ? kasan_save_track+0x3e/0x80 [ 1840.610069][T19433] ? kasan_save_free_info+0x46/0x50 [ 1840.610091][T19433] ? __kasan_slab_free+0x62/0x70 [ 1840.610107][T19433] ? kfree+0x18e/0x440 [ 1840.610122][T19433] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1840.610141][T19433] ? security_file_ioctl+0xcb/0x2d0 [ 1840.610159][T19433] ? __se_sys_ioctl+0x47/0x170 [ 1840.610173][T19433] ? do_syscall_64+0xfa/0x3b0 [ 1840.610195][T19433] ? do_vfs_ioctl+0xf37/0x1990 [ 1840.610210][T19433] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1840.610228][T19433] ? kasan_quarantine_put+0xdd/0x220 [ 1840.610245][T19433] ? blkdev_common_ioctl+0xfc3/0x2450 [ 1840.610267][T19433] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1840.610286][T19433] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1840.610304][T19433] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1840.610325][T19433] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1840.610343][T19433] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1840.610361][T19433] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1840.610381][T19433] ? __pfx___sched_core_set+0x10/0x10 [ 1840.610406][T19433] ? __lock_acquire+0xab9/0xd20 [ 1840.610426][T19433] ? __asan_memset+0x22/0x50 [ 1840.610439][T19433] ? smack_file_ioctl+0x24a/0x340 [ 1840.610457][T19433] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1840.610474][T19433] ? __pfx_lo_ioctl+0x10/0x10 [ 1840.610492][T19433] blkdev_ioctl+0x5a5/0x6d0 [ 1840.610514][T19433] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1840.610534][T19433] ? __fget_files+0x2a/0x420 [ 1840.610555][T19433] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1840.610575][T19433] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1840.610596][T19433] __se_sys_ioctl+0xf9/0x170 [ 1840.610611][T19433] do_syscall_64+0xfa/0x3b0 [ 1840.610624][T19433] ? lockdep_hardirqs_on+0x9c/0x150 [ 1840.610646][T19433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.610661][T19433] ? clear_bhb_loop+0x60/0xb0 [ 1840.610677][T19433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1840.610693][T19433] RIP: 0033:0x7ffbb078e929 [ 1840.610708][T19433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1840.610722][T19433] RSP: 002b:00007ffbb1511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1840.610740][T19433] RAX: ffffffffffffffda RBX: 00007ffbb09b6160 RCX: 00007ffbb078e929 [ 1840.610752][T19433] RDX: 0000200000000280 RSI: 0000000000004c02 RDI: 0000000000000007 [ 1840.610763][T19433] RBP: 00007ffbb0810b39 R08: 0000000000000000 R09: 0000000000000000 [ 1840.610773][T19433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1840.610783][T19433] R13: 0000000000000000 R14: 00007ffbb09b6160 R15: 00007ffc4fa11fa8 [ 1840.610800][T19433] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1841.485630][T19433] hfs: unable to load iocharset "io#harset" [ 1842.038093][ T8243] hsr_slave_0: left promiscuous mode [ 1842.044101][ T8243] hsr_slave_1: left promiscuous mode [ 1842.055705][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.126202][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.900670][ T8243] team0 (unregistering): Port device team_slave_1 removed [ 1842.951422][ T8243] team0 (unregistering): Port device team_slave_0 removed [ 1843.811368][ T8243] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.863554][ T8243] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.905495][ T8243] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.965552][ T8243] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.092581][ T8243] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.132894][ T8243] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.186436][ T8243] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.237025][ T8243] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.334719][ T8243] bridge_slave_1: left allmulticast mode [ 1844.354677][ T8243] bridge_slave_1: left promiscuous mode [ 1844.370265][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.381428][ T8243] bridge_slave_0: left allmulticast mode [ 1844.393710][ T8243] bridge_slave_0: left promiscuous mode [ 1844.399629][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.413983][ T8243] bridge_slave_1: left allmulticast mode [ 1844.423125][ T8243] bridge_slave_1: left promiscuous mode [ 1844.433838][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.442570][ T8243] bridge_slave_0: left allmulticast mode [ 1844.450105][ T8243] bridge_slave_0: left promiscuous mode [ 1844.455833][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.465776][ T8243] bridge_slave_1: left allmulticast mode [ 1844.473384][ T8243] bridge_slave_1: left promiscuous mode [ 1844.480928][ T8243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.492132][ T8243] bridge_slave_0: left allmulticast mode [ 1844.497948][ T8243] bridge_slave_0: left promiscuous mode [ 1844.503600][ T8243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.595586][ T8243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.605570][ T8243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.615514][ T8243] bond0 (unregistering): Released all slaves [ 1844.657583][ T8243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.669726][ T8243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.679260][ T8243] bond0 (unregistering): Released all slaves [ 1844.753979][ T8243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1844.764869][ T8243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1844.774907][ T8243] bond0 (unregistering): Released all slaves [ 1845.472988][ T8243] hsr_slave_0: left promiscuous mode [ 1845.480630][ T8243] hsr_slave_1: left promiscuous mode [ 1845.486835][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1845.510522][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1845.529339][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1845.536988][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.558017][ T8243] hsr_slave_0: left promiscuous mode [ 1845.570950][ T8243] hsr_slave_1: left promiscuous mode [ 1845.578054][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1845.586557][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1845.594807][ T8243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1845.603567][ T8243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1845.615547][ T8243] veth1_macvtap: left promiscuous mode [ 1845.621618][ T8243] veth0_macvtap: left promiscuous mode [ 1845.627163][ T8243] veth1_vlan: left promiscuous mode [ 1845.632555][ T8243] veth0_vlan: left promiscuous mode [ 1845.638718][ T8243] veth1_macvtap: left allmulticast mode [ 1845.644372][ T8243] veth1_macvtap: left promiscuous mode [ 1845.650726][ T8243] veth0_macvtap: left promiscuous mode [ 1845.656307][ T8243] veth1_vlan: left promiscuous mode [ 1845.663253][ T8243] veth0_vlan: left promiscuous mode [ 1845.821483][ T8243] team0 (unregistering): Port device team_slave_1 removed [ 1845.832989][ T8243] team0 (unregistering): Port device team_slave_0 removed [ 1846.097711][ T8243] team0 (unregistering): Port device team_slave_1 removed [ 1846.114152][ T8243] team0 (unregistering): Port device team_slave_0 removed [ 1846.938410][ T8243] IPVS: stop unused estimator thread 0...