last executing test programs: 15m55.324891323s ago: executing program 3 (id=112): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b4000000000"], 0x48}}, 0x0) 15m50.652192136s ago: executing program 0 (id=118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x6, 0x0, 0x7fffffffffffffe], 0x4, 0x8340}) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 15m50.497332055s ago: executing program 3 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x6}], 0x3, 0x20, 0x0) 15m48.636663348s ago: executing program 0 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 15m47.837777757s ago: executing program 3 (id=126): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xb, 0x0, 0x0, {0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f0000000000)='./file0/file0\x00') write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0x0, r2}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m47.356265368s ago: executing program 0 (id=127): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000080)=0x2000000, 0x4) r5 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x400000]}}, 0x5c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff03c}, {0x6}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="350a0000000000006911d400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 15m45.976070091s ago: executing program 0 (id=128): socket(0x1f, 0x80004, 0x0) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) rt_sigaction(0x10, &(0x7f00000004c0)={&(0x7f0000002700)="f3dfd2c4237d390b35650fa8c4831d02fc06c42191d9eff3400f7edfc4e2dd288f00000000473c0167660f71e5d12e660f7f0e", 0x1, 0x0, {[0xab4]}}, 0x0, 0x8, &(0x7f00000028c0)) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r6, 0x9, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lstat(0x0, &(0x7f0000000240)) r7 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) ftruncate(r7, 0x8800000) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xc010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r5}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 15m45.954191152s ago: executing program 3 (id=129): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="557b000000000000280012800b00010067656e65766500001800028008000b4000000000"], 0x48}}, 0x0) 15m44.6680996s ago: executing program 0 (id=130): r0 = openat(0xffffffffffffff9c, 0x0, 0x140, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup3(r5, r6, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000001c0), 0x0}, 0x20) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x3) 15m44.484611806s ago: executing program 3 (id=132): r0 = io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0xf44f, 0x0, 0x0, 0x169}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x22, &(0x7f0000003e80)=[{&(0x7f0000001700)=""/4082, 0xff2}], 0x1) 15m43.376070055s ago: executing program 3 (id=134): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x8, 0x93, 0xffff7fff, 0x44a2, 0x99b8}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0x200013, 0x0) 15m42.952139854s ago: executing program 0 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x6}], 0x3, 0x20, 0x0) 15m27.73441574s ago: executing program 32 (id=134): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0x8, 0x93, 0xffff7fff, 0x44a2, 0x99b8}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0x200013, 0x0) 15m27.185227811s ago: executing program 33 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x100}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0x2}, 0x6}], 0x3, 0x20, 0x0) 7m19.321022548s ago: executing program 2 (id=812): r0 = io_uring_setup(0x4827, &(0x7f00000000c0)={0x0, 0x96c5, 0x4, 0x1, 0xe6}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@x={0x94, 0xd, "31d02bcdd7a9"}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20044015}, 0x230d770ad5116c88) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x232) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m17.180459796s ago: executing program 2 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001a00)=""/4117, 0x1015}, {&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f0000002bc0)=""/210, 0xd2}, {&(0x7f0000000780)=""/104, 0x68}, {&(0x7f0000000040)=""/30, 0x1e}, {&(0x7f0000003c40)=""/4083, 0xff3}, {&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f00000018c0)=""/145, 0x91}], 0x8}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) 7m15.110196013s ago: executing program 2 (id=853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00431b000000"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='2', 0x1, 0x4fed0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 7m13.577682402s ago: executing program 2 (id=857): socket$inet6_tcp(0xa, 0x1, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) socket(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x639) readv(0xffffffffffffffff, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x9fc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001d40)=@newtaction={0x88c, 0x30, 0x1, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x400, 0x10000, 0x0, 0xc2, 0x6, 0x4, 0x5a76, 0x4, 0x2, 0x7fff, 0x5, 0x8, 0xe1, 0xf, 0x6, 0x3, 0x0, 0x2, 0x7, 0x4, 0x4, 0x6, 0xfffffff8, 0xdfa, 0xa, 0x2, 0x6, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x3ff, 0x7, 0x3, 0x5, 0x0, 0x0, 0x8f, 0x4, 0x2, 0x1, 0x6, 0xffffffff, 0xf, 0x1, 0x8, 0x9, 0x4, 0x70, 0xd, 0x10, 0x5, 0x7, 0x9, 0x1, 0xb4, 0x5c6, 0x803f, 0xffffffff, 0x10001, 0xfffffff8, 0xffffffff, 0x12000, 0x1, 0x2, 0xf, 0x6, 0x9, 0x8, 0x8, 0x4, 0x9, 0x5, 0x2, 0x10001, 0x7fff, 0x10000, 0x200, 0x4, 0x8, 0x1, 0x2, 0x7, 0x7fff, 0x6, 0x0, 0x5, 0x3, 0x8, 0x2, 0x4, 0x80000001, 0xe00000, 0x5, 0x5, 0x5579c707, 0x5, 0x5, 0x0, 0xfffffff8, 0x2, 0xffff, 0x3, 0x8, 0x7, 0x0, 0x508, 0xffffffff, 0x7fff, 0x0, 0xfffffe00, 0x1, 0x400, 0x5, 0x6, 0x6, 0xfffffff8, 0xee2, 0xffffffff, 0x9b4, 0x1ff, 0x3, 0x8, 0xd, 0x9, 0x1, 0x71, 0x4, 0x1, 0x1, 0x10, 0x1, 0x3, 0x9, 0x6f, 0x7, 0x7, 0x3, 0x1000, 0x7, 0x1, 0x7, 0x3, 0x48c2, 0x1, 0xffff63f9, 0xffff, 0x2f, 0x8, 0x7, 0xfe5, 0x8001, 0x4, 0x8000, 0xeb57, 0x7, 0x9, 0x9, 0xffffff65, 0x97, 0x1, 0x7, 0x7, 0x307, 0x3800000, 0x6, 0x5, 0x54, 0x9, 0x9, 0x21d5, 0x6, 0x4, 0xa, 0xb, 0x959, 0xffffffff, 0x1ff, 0x314f, 0x2, 0xb, 0x10001, 0x1ff, 0x0, 0x3, 0x7, 0xa, 0x81, 0x9, 0x9, 0xffffffff, 0x4, 0x4, 0x5, 0xce6, 0x9, 0xfffffffc, 0x2, 0x2, 0x0, 0xd, 0x4, 0x7, 0x3, 0x6, 0x4a1d, 0x8, 0x3, 0x9, 0x3, 0x2, 0x0, 0x5, 0x3, 0x2, 0x8, 0x0, 0x4, 0x8, 0xff, 0x5bb, 0xa4c, 0x4, 0xff, 0x8000, 0x0, 0x8, 0x9, 0x5, 0x0, 0xaf2, 0x2, 0x1, 0x8, 0x36, 0x8, 0x6, 0x5, 0x0, 0x1f, 0x3, 0x1ff, 0x0, 0xd, 0x7, 0x2, 0x6, 0x4, 0x17cd, 0x1, 0xfff, 0xf, 0x400]}, @TCA_POLICE_RATE={0x404, 0x2, [0x20, 0x4, 0x4, 0x4, 0xba1f, 0x3, 0x1, 0x4, 0x1, 0x9, 0xfb, 0xffff, 0x4, 0x0, 0x4, 0x4, 0xffff, 0x6, 0xa2f, 0x8000, 0x7, 0x1000, 0x9, 0xe, 0x4, 0x1, 0x7, 0x1, 0x55, 0x7, 0x8, 0x5, 0x4, 0x2, 0x3, 0x2, 0x8, 0x0, 0x10000, 0xaeae, 0xe, 0x6, 0x53, 0xfa, 0xd2be4f9, 0xf, 0x80000000, 0x2, 0xcc, 0x3, 0x3, 0x10000000, 0x800, 0x53e, 0x5, 0x2, 0x2, 0x2, 0x7, 0x11f, 0x1, 0x2, 0x8f5, 0x8, 0xff, 0x2, 0x9, 0x3, 0x3, 0x3ff, 0xcd, 0x3, 0x1000, 0x8, 0xfa, 0x401, 0xb3ec, 0x0, 0x2, 0xc5, 0x9, 0x5, 0x40, 0x3, 0x1, 0xfffffffe, 0x4, 0x9, 0x80000001, 0x91, 0x2, 0x5, 0x800, 0x5, 0x6, 0x8, 0x7, 0xffff, 0xfffffff9, 0x30, 0x4, 0x0, 0x7, 0xd5, 0x8000, 0xe6, 0x0, 0x2, 0x1, 0x40, 0x373, 0x6, 0x2, 0x7, 0x7, 0x4, 0x8, 0x5, 0x8000, 0x8, 0x4, 0x6, 0x1, 0x9, 0x7fff, 0xffffffc0, 0x0, 0x1, 0x9, 0x0, 0x2755, 0x2, 0x7ff, 0x9, 0x1, 0x3, 0x0, 0x7, 0x2e69, 0x200, 0x5, 0xc000, 0x101, 0x6, 0x3, 0x359, 0x591, 0xffa, 0xa, 0x8, 0x7f, 0x5, 0x3, 0x2, 0x2, 0x1, 0x6, 0x6, 0xd2b5906c, 0x3508, 0xabf, 0x9, 0xfffffffe, 0xfc, 0x8001, 0x5, 0x1ff, 0xffffff29, 0x9, 0x2, 0x0, 0x5, 0x0, 0x7fffffff, 0x9, 0x36b57a6e, 0x9, 0x79b, 0x7, 0x7, 0x7, 0x1, 0x5, 0x200, 0x5, 0xfffffffe, 0x9c, 0xfffffff2, 0x8000, 0x101, 0xd, 0x7f, 0xfffffff7, 0x8be, 0x7, 0xf, 0x81, 0xd0, 0x44d9, 0x9, 0x80, 0x5, 0x4, 0x5, 0x9, 0x6, 0x3, 0xa, 0x3, 0xffff, 0x80000000, 0xffff961a, 0x8001, 0xea6, 0x7, 0xb, 0x81, 0x7, 0x6, 0x4, 0xa, 0x7a, 0xe56, 0x1, 0x3, 0x9, 0x4, 0x3ff, 0x5, 0x5fa, 0x6, 0x80000000, 0x460, 0x7, 0x1, 0x2, 0x3ff, 0x1914e758, 0x9e7e, 0x6, 0xb, 0x8000, 0x2, 0xfe74, 0x8000, 0x2, 0x2, 0x6, 0x4, 0x6, 0x0, 0x3ff, 0x81, 0x3ff, 0x10000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x2, 0x90f8, 0x1, 0x3, {0x7, 0x1, 0x8, 0x7, 0x8, 0x9}, {0x8, 0x2, 0x3, 0x1000, 0x6, 0x101}, 0x2, 0x0, 0x8}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88c}}, 0x0) 7m12.659973756s ago: executing program 2 (id=860): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) fcntl$lock(r0, 0x23, &(0x7f0000000040)={0x1, 0x3, 0xb616, 0x3, r1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r6, &(0x7f0000003080)={0x2020}, 0xfffffda3) 7m10.220152219s ago: executing program 2 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r2 = getuid() fchown(r1, r2, 0x0) 6m54.747318199s ago: executing program 34 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r2 = getuid() fchown(r1, r2, 0x0) 6m11.957742828s ago: executing program 7 (id=888): iopl(0x3) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) truncate(&(0x7f0000000040)='./file0\x00', 0x8) 6m9.521415088s ago: executing program 6 (id=997): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) openat$ttynull(0xffffffffffffff9c, 0x0, 0x610080, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) tkill(0x0, 0x8) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000500), 0x2) r6 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) io_setup(0x6, &(0x7f00000003c0)=0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_submit(r7, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r9 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000}) lseek(r9, 0x100, 0x2) 6m7.674724568s ago: executing program 7 (id=1000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r0}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0x4008af24, &(0x7f0000010180)) 6m7.542670326s ago: executing program 6 (id=1001): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r6, 0x4b3a, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20) ioctl$TCXONC(r6, 0x4b3a, 0x2) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6m6.267763638s ago: executing program 6 (id=1003): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000010000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200020038000000000000004c001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000"], 0x13c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x15}, 0x1c) listen(0xffffffffffffffff, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2124}, {0xffffffffffffffff, 0xb0c4}], 0x2, 0x11ff) shutdown(0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101a02, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x25) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x7fffffffffffffff, 0x26ca}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) 6m6.15749867s ago: executing program 7 (id=1004): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sendmsg$kcm(r0, 0x0, 0x24004895) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x6}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) syz_emit_ethernet(0xbe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a30"], 0xfc}}, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000040)) 6m2.581923274s ago: executing program 6 (id=1009): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040004}, 0x24050010) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r4 = syz_open_procfs(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x30a40, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000280)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m58.964353481s ago: executing program 7 (id=1017): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000a00)}, 0x0) 5m58.754827093s ago: executing program 7 (id=1018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffff9c, &(0x7f0000000240), 0x400, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="0000884c05800078c40040000c00000186dd061000090180c200000bfc000000000000000000010000000001000000000000"], 0x42) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0xb8}}, 0x0) syz_clone(0x10002000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20044015}, 0x230d770ad5116c88) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r1, &(0x7f0000000700)=ANY=[], 0x232) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m41.800438465s ago: executing program 35 (id=1020): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x210, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1a0, 0xffffffff, 0xffffffff, 0x1a0, 0xffffffff, 0x8000000, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4680, 0x0, 0x101, 0x2}}}, {{@ip={@broadcast, @multicast1, 0x7fffff7f, 0xffffff00, 'team_slave_0\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x5e, 0x2, 0x69}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xb3eed7c25ddbad11, 0x9, 0x27ae, 0xffffffff, 'snmp\x00', 'syz1\x00', {0xfffffffffffffffe}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) 5m34.701868226s ago: executing program 36 (id=1036): r0 = io_uring_setup(0x4827, &(0x7f00000000c0)={0x0, 0x96c5, 0x4, 0x1, 0xe6}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000180)=@x={0x94, 0xd, "31d02bcdd7a9"}) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20044015}, 0x230d770ad5116c88) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x9) socket$packet(0x11, 0x2, 0x300) write$P9_RSTATu(r1, &(0x7f0000000700)=ANY=[], 0x232) close(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.906733806s ago: executing program 8 (id=1629): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000000000)="11868a0fceae284c000000", 0xb) 11.676212711s ago: executing program 5 (id=1650): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0xa) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) pread64(0xffffffffffffffff, &(0x7f0000000bc0)=""/102397, 0x18ffd, 0x30c) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000040)=0x8000000) 11.537120839s ago: executing program 1 (id=1652): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='btrfs\x00', 0x2800080, 0x0) 10.108080078s ago: executing program 8 (id=1653): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sendmsg$kcm(r0, 0x0, 0x24004895) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x6}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) syz_emit_ethernet(0xbe, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000580)={{&(0x7f000062f000/0x2000)=nil, 0x2000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a30"], 0xfc}}, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000040)) 9.217961999s ago: executing program 1 (id=1654): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000800", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="70000000000905030000000000000000000000000900010073797a31000000000c00048004000140000000003c0002000c0002800500010000005b002c000180140000000000000006000000000000000000000014000400fe8000000000000000000000000000bb080005000000000061919ee653972286f6806fcd5043e0c8733d229281951f6965e331c86cb30f38a81c91a3b2f0fa851430426515b546badf"], 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000340)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) modify_ldt$write(0x1, &(0x7f0000000300)={0xfffff, 0xffffffffffffffff, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_settime(0xfffffffb, 0x0) 7.9340629s ago: executing program 4 (id=1658): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000000), 0x0) 7.055856895s ago: executing program 5 (id=1659): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r1, r0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x0, 0x1ff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.055266151s ago: executing program 9 (id=1660): socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="72dadefca0f578a05844b9b965ce0977e362ab036480ca216572c4403da2fad44ac3cd82f3c5f630f05b68c41aa12ee72cd0446c61f707075de251560d6f7d1b4344a9ed9dfc77eecb1955ab694fdeb60337a6264997dab1f9a89a722639ced4c7451d70ee13ce2249a7cbc0d79caa54f8f4b6d947a0ae7cad8d80507acbf5fdc14ac57aa3471d78c29ee5adcce001f51417dab0f1110b321dab2245ecf5ccebc1f8bc3bc9e3f1c9b09c1f681a377cf87df172a8d99f00d6d60cd7be19f6da9d0c4fba5ed704576c6434109930e60b529fc0cf2798732a92bb386f5a673b1db74789c0f1e80b7c099775bae987834a3858bc293443dd8b8bacadde386fce30f10c439e8dd16b68e5ef15cfa9920a4831942900b35836749ec55fd525e6d17858c61cb4aab2105ffffc7371c68855f3f42421e09a5b6b8e3c904534897085f97a9ae1d84d125e690d1eadff0f0c286ee4b1ac743f7ef0808874bf1d9070929ca9c7ec970e2bb944a664c7a37ce658311b5984f3a902686ab45948865a7a3a588eb919554e89c15986fc50f592bd503554dbb18e8796e47cfa5f7395fbefc05ac4c1cc9135e4f58811dee05034f56601a44b439aeea9f8490a3b6b42bc54d4e5a046333f92dc46fd21e4b84eeb99f8a30bf7a7b570da734ef3ea236c8536ab0ff4ef3aa766e6ce190a3dd72562f0f7c93d4566a91bd1ec6ff236b1f46f1e37c02f1bf0448740c5752b2377372e1f0756c2b26f3adcd6666b5f5143adc57cc28959b5e3c27318617dbb840c08d44b7dcb2c0fb7461814338704c6b4dca8bb55f6a726489962c8c402c7dc871f9229a7771b516bd76373bcc00d5e70d06d1df1fae0be90a91435f690d8cc2d78835f790a7f0c72f0fc8ff6dbaa182807e11ee12c7cdf2607e66ff8985b0fc10ca1fba921845ffe85b64590c8b7694ea603013b6b7999849e2b830dd34814b41eff4bcd775dfc67f2dacdbfa681b97852766ec33ac9e969b38801771a92b1072b1a58fe28dd95fd0c86338ac3abae6408c9b78ef66456bc2258b8f8ec1091cfd1396637a0240ccaea9977f10137b55f1d1258bce38b3501a273ffc3b5208f561a0fa79b2f3d208e981e26409c4b37fa365024f9a563116ccd11e02dd3d09361dcdeab88152919840a5be743f338f4f4676f0f693413b6d0a82e24903c1f79819d642c068d4e64507ddc405450ae75bac08f615a99835feff9a8cedba1b0222d1a637865238f0abf43014aa9955538a2535f54d7d2d09cc01ca20ceef5d71e8aee8f3712d5519dc0c16252fd3428a0444b7c27f523bc65374b9815af9ee764695db32b6f1f1c260dc41c1c0395470831458e91e7763e4993761e9311650a485df539cf9fdf934ddc13b6f16c2c74da3861a655b18de2f6ea4b96488c11bffba4f7c519ede2d216e443b83d35f34b8427cbc0f9c0fc61f09dffcf8eff02df18069412785a602fcecff04c6b48cdf18cd2126ee48c3c7671602075642462800386e6cf49c7059c0ac6dda8852e20bdf300e71289bb7d0563c1eaf02a014d310f1a575767d8a6797a5feb7a1a938373d06ef0bc9bec35a93ea9d7bda2b67f7326ace9e097b71c4bf39acccf0f393af3f3d0f2962602bed872cd335c63c7641a6240769edc2004e187e3d931d594f3bb8cfa33aae52db9fc9a3622892755c510b0bfd675249e1175283d9bbe55d6bcfc5835d67aa52650ddacd021f913acdc627480b5a4089c6783b0399005146fbb7e33503f131bfc1bbeba54c382ae8ac73c36e7d95c507735ede07ca1912611437a0da1a7f90184667c57b510c7c6107e0700a226168d701ef9c8e378cc8e3481bc586b7d02d5b2234a988258f2c485db7ef8b8ed6b6d0d69d1737de654ff28cf10e40c4f9e5d3f2c5b582d1f95a1713fb28dc5394d4a2ae089cf4e5a62e22b3803912d2caf134a63dc7a1dd2ea3dd0b413c9ea7e9857cb2a5637d7c7fdfd3e01b76e5cfd0dda3c1b2db8c0acacfde209ce54cfae9e1e3b2bd85d7c281aa05700590fc9b085071034bab23011fdc212b46c3d295e5fb0727b1e4c171363dd77043acb714f38cfbd22706521e66a9af786df2a72984fe0c8b55b9df0d26ca2a8021504c7e00a7bda6c0444cddc9cf40a46d90922df7625f04eb97f7bb71680e3b367808264005174339b252c15b741c5f8a8e36a54d36820a18c891bd22cca5c5886394631b8fe04ae678d3f020cdef43fc9194da54ca2b5467127ac384a5ef0fab6b6595e421cfbef60bcbf132fe011e7cab5dcd2688b4011423f9ce55cca94bdc3d95885320e478bd127ce1de862e50a5009253fa409737931ac6b693d330bc140e6dc58622493429bb6574c2c2260be053d542c47d5dfd826f4956931db1da0fdcf3ce2385a9b408f99486d521bed8810736620185eae8aae199dab2c91458584db2ee5fa4ce61bb9c723d5b5195deb2ae7b451e6f0ec09150a31f1f5a4d5ea7aaf1d08bf519ea12828d04d353407c265567b66bc2b7fbcf4e71dfeb131e7c6d3d43dccc4a3dfede8efa204df6c45f3642757f7889f62e95cd8c0eb6a8dfec250debae5f9f9b9fd4d5dab14e5d9a7becc07eeea3a5465875fa11d44177b9a7373195861c049bd7401c6ea2ee6d4252d309d90b6aeb951e8d0dd5d513a40248cf46b5dd5d3edf1bc68f74f64ac6d489bbe66ff6f13a32c4054b59f9bac1de3a163bb862815572dbe12b4055d2ec30f89b9f8d347c66f8e65b5199dac4c54f171a3118df28986013b3153132a0aa31acf2dc3088a2d623a250fddf3aa4f7e53f1193d9f163362c18a05cbeb88e9fd45594e6f59c63dc6773c53908e21d3f41b145987e5c22c230b1ac1d6b6deeed8aea43f4a5ebc27fa7c77fea551eaed8d3560d12e06006dcd5f396e25f91bc0c4e55403fc339d7d371efd3a000305e2567080bfd57690c746c2d34e7dbe2a856114ddecc27709c5c2af149a3e2f17b68edcbcc394e7f96615c169cc2c7eba3821c2737c95f9ce86b19776f37c7d01afc9878daeb202910822eded0dfcf214920038cd6f5fc0313ef38e7e4584c97c2e08c6ced40498b86d185194cd93b7ac7aa05dadbab060d3caca9e9ee5beec4fbc1fbdc54013571663c15eef21752dcc8c5d3bbb2680e4f67eca98437bce3970f59e60dea986483b9874ee0c4cdefbdc0d3488a4fb3f7d441fa7dcf337703529bcf4be863f2ac8bbebd10813f2abddba4333b22152aeb42c970cfb310e573fe8b90c79ab737b2c9716c23b0c114612a406db1546d4384f1f5e1b570d530cd025ad06496a3032e22ee96353d8c45dd5b81f3f429b6874275d80b350d7de806eb4ce5a4c8e8d09cb365b6463d83d6b8b654cbd5141123efaa324e6d2b551e92b30ec1fe79548b962be72669e7f6695815c6df5bdebb405a98b306a0c49c5cde75da290c288ab2a44ba2bf7f1dcdbf098ae55d6c693d5c3eed20dd29fb136ead8ce271413d0c71311211c883e9f64d0edd324e24ced63d1c905cfb5a92ecc7ec6680cb1e930278455b7e36f86013bcb32e5de3e391f44a8f55bdfc5b442c1ec7aa8faf0d6ec608167929c4d65efa73cce63eccb7e787e13718e2b7a36bd2c8f57290e35a45632dfa13db399472d842281498bd4dba66e7c0659fa51e84bea05f162225acc2f83734e838120a65cd93e95b922f36097da89f820f4619fa669527fa8ac3a539b234d3653818bce11ae955e5c8d7cff8bd8ecc6f231d7db627d8e5578f2811e236f193f6870831f41da4a05ecf4d274eb927c56dff69063d87f699b63b3dd757dc12b9671d1f33e5bc684f86cbeb66eaf4b2334097ddb0c8c1a0b084f3d31928a27bdbc55e7ce3c6bddb4a510f0ea889065c1e298d2b3ff321be2d19c9dac6ffaa06562d128bda2b72abf935968457e598fe8b593aa72eecc85044861eda40d0e23dc616273315a81d67898f449579e919cc155325d3aeb4bae948c8a82a990be8cd529d54f896957335a5ce4864af1cbd617d61f084bddc3fbbd9277e8ecb2842db7b89fcde85d3429e6e1fe97aafec76e01b86e2a5e14ddcc0f6751aee179a0c2a245e4f1fc749252460dc3db5f5ba64ad77ace607cbddd68ed7d1768062872070483dcb56ce4eca890325c5407c7f25bbf389e84c891734dab70b3f33d3ca41d75aa4043496928365522baa2f578def1e989162521cb1cdb3538c7c70b44fbb916598f6ee0b349f7a670540d8e73a5c92260e03bba848d5508e59130d87fd04ac77f54ff713366c79c3f3f915b98240049f0933c35066885121c35ea2bce2a84d4a2e08b9c4ecabd1db39d37b437e3d112af6e3513e2906cae47c0095c2765a4aee271bb9cda501b9b67b06dcf96f48f55dbf98bf9b836d6f9c26895707a194f2cceb98e8e4d188f2da271b5220bf72d22139764822b1e20a48edbef6d975f49d69354bb904ebc1a9b72541d2c5af7b33430715e28baa122a96f1bf87fb68e85eb152d68a7a941ffea3709eb44ad97ee0d5e7d2e9db7cef19af354b620364b66a942babf2b246bb1e36593a653d5162e16959ea1e3f0d27bb6fdcff5f6919b2b283d0aa1f33379b23992c543c6961de77f088a67494231d74d1f62d52bb2e3bf088bd1645bfb5fd85bf5d963a4c3114ca1a776e56349b3d06200f31c07d8594f96bbc2867a90cdec7d7fdbec58db194db8de1fbb982869d5c56df0cfca3e5fa08e67973d717fbf4511bf37aa91ed8d268747b425bbcef632ec37045cdcca3659f22704b62eb0e3f56a532bae14c90a0104c0792c7d5ad21cd78e9015c2302fd38f8487c8bf040197b899d7338dfe33209e08f18fa6dbfc50a626f5fdaeebe6cddc0980fac780edfb7e8df665ea4a8da55b0a1d79456ba5ff926220f69ec9da4ea7ac2c658cd1e1b4d3988affb5e8a54c1e186d19d309f17a1935137420f397b973fa879a157643188879d82e509cdb73a6f79d875fd09c673051fbcb6c399d226a5cbef74b36ebc20aa973699d1e0da2f7a70f9af5ce490a480fe8179f49e187f6e1ebc04e8b8008f21da3e895e5ca43d9ade0e451976b02244446e63153942fa7484c006fe11f0f45197a7f436f0782016ea251c1ffd5c82ba2ef0f29623755a6db472559219693722bc95ff501cb804a856339bc9635f511a03d577c3f4ddea4e54b157a4717f0d075c5444da6024183feb99baa5070b0de78a2345bf3a3e20210c48d69f7f797b85793c494a27b3ba8d5957ab3fd57e7bee72366e0039ab9741598abc75dfad2a20317420195f7fc623e11ae91abf18543af88f89614327be073d3fd6790238ced6e523fce18a6cceae458af54b798ec87a37258e5df22c688d35f4531a0d0879f393d40780328ab80e88b5bae1a2885b55e5f93a0e884b7e4b2663abe61802c6fdbb63becb677f81c9583cfb020063605c112997a3111f280e34fd318cb49a595ea880d7d4e3b143832af9643a0b96c2ea7efa531262f100dd3d3fd4c21d731be040594d33baed8fd1cc0aa6f0cf2f8936548d0384f50613b0c0cdeca8a83b375ec8c9632958d06bcc4a0e33de31cdd5dc0449082ac4690a81a3b2b1b6a96826f16223321e81a2a2ab7367f5c5f2ae4cfbdb4708ecbfc6d62ad8cc32b97f2c13ae9953730ea049f79ed411606997ad1603219da7330698781e907d0b29242aa1f1ae216f6ca35d184d1027ad963e0cab2e26b002ab5e583d66bdf203041b216797e095ca372857ed0a54da4b0d69f62e9bf2fdb0a5352cf58ad4e172c8fcefc1e3f5d157c4635a3cf51cb3a43afdb9a618350d62f8470ebf2a32f99", 0xffc}, {&(0x7f0000000540)="633656a4", 0x4}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0}, &(0x7f0000000800)=0x40) 6.90670061s ago: executing program 4 (id=1661): r0 = openat$cuse(0xffffff9c, &(0x7f00000020c0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0x7}}}, 0x60) 6.705884799s ago: executing program 9 (id=1662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = fsopen(&(0x7f0000000280)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 6.540191177s ago: executing program 4 (id=1663): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) accept4$x25(0xffffffffffffffff, 0x0, 0x0, 0x80000) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r1, &(0x7f0000000000)="11868a0fceae284c000000", 0xb) 6.430823013s ago: executing program 9 (id=1664): syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0xa000) close(0x4) socket(0x1d, 0x2, 0x6) 6.082574445s ago: executing program 8 (id=1665): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x8004) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) 4.97309381s ago: executing program 8 (id=1666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100042300008578219c88a3cb88e3650a29c140a551e05fb22e2bf8f4ea0a5cb9764e1818bbbc5bd700e95bec133dbdcd7709f026bedcc6390a262bc8"], 0x4c}}, 0x0) eventfd(0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000005e000100ffffffc3000000000c0000000d000000ffffff7f04000180"], 0x20}], 0x1}, 0x0) 4.905425124s ago: executing program 5 (id=1667): sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019440)=@newtfilter={0x34, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 4.530708113s ago: executing program 1 (id=1668): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r2, 0x0, 0x0}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) 3.559208565s ago: executing program 5 (id=1669): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000280)=[0x100001], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x7f}) 3.361153707s ago: executing program 9 (id=1670): open$dir(&(0x7f0000000100)='./file0\x00', 0x40000400000002c2, 0x0) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) open$dir(&(0x7f0000000700)='./file0\x00', 0x202, 0x0) 3.360070274s ago: executing program 1 (id=1671): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='rcu_utilization\x00', r3, 0x0, 0x1}, 0x18) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000340)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c) modify_ldt$write(0x1, &(0x7f0000000300)={0xfffff, 0xffffffffffffffff, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_settime(0xfffffffb, 0x0) 3.216188112s ago: executing program 8 (id=1672): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)="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", 0xffc}, {&(0x7f0000000540)="633656a4", 0x4}], 0x2}}], 0x1, 0x4000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000f32000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0}, &(0x7f0000000800)=0x40) 3.203796939s ago: executing program 4 (id=1673): r0 = openat$cuse(0xffffff9c, &(0x7f00000020c0), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0x7}}}, 0x60) 2.732167689s ago: executing program 9 (id=1674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = fsopen(&(0x7f0000000280)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 2.664350808s ago: executing program 4 (id=1675): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x48000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sendmsg$kcm(r0, 0x0, 0x24004895) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)}, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)={0x6}) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x380}) syz_emit_ethernet(0xbe, 0x0, 0x0) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000580)={{&(0x7f000062f000/0x2000)=nil, 0x2000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000ec000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003780000000c0a010200fdffffff000000010000000900020073797a32000000004c000380480000800b000340000000003c000b80200007800e000100636f6e6e6c696d69740000000c00028008000140000000001800018004000200636f6e6e6c696d6974000000040002800900010073797a30"], 0xfc}}, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000040)) 2.663645839s ago: executing program 8 (id=1676): mknodat(0xffffffffffffffff, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x10, 0x3, 0x4, 0xc, 0xc, 0xfa, 0xfe, 0x3, 0x2, 0x1, 0x10, 0xf8, 0x5}, {0x6, 0x9, 0x3, 0xd, 0xae, 0x5, 0x2, 0xc, 0xfe, 0x40, 0x6, 0x17, 0x3c}, {0xa20000, 0x7, 0x4, 0x7, 0x2, 0x77, 0x1, 0x9, 0x2, 0x1, 0x8, 0x54, 0x18bb}], 0xd9}) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaa3dffffffffffffa0da2f008100490086dd6000000000142f0000000000000000000000ffffac1414aa00000000000000000000000000000000000089061566791eaff8024e52fe7c6e409f9953a77817876f02541559f0c4b510ba048f620eafc019098d7c101af028a6789d3c5f4e2d82190bf503909f8834b5188462e9e7e9ded3fc9a61845b85b794f8b1b262ec9eaaae98d3e814472b1dddce27d15fd7929ca0b1d37dc9617a43b265289eb7d8c7dd69bcc5d08263cb24a36a8a5e7a8de7e8dd8ab653b5d158a10f16df38fc29967454ed7f6da440acdeefcd753236d39dd1801d77fc35cc47", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="504000009078fffe"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000b40)="f30f09ba6100b8c400ef66b9eb0a00000f3266b9830000c066b84700000066ba000000000f30f2a60fc75add650fdabc755ac09af67f0066b98004000066b8532ebe1866ba0bffd3710f3066b9830500000f32", 0x53}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)) read$dsp(r5, &(0x7f00000011c0)=""/4117, 0x200021d5) fcntl$dupfd(r3, 0x406, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x200}, 0x8) 2.140171738s ago: executing program 1 (id=1677): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8004) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000040)) 2.126684497s ago: executing program 5 (id=1678): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [], {0x14}}, 0x28}}, 0x8807) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SHUTDOWN={0x22, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}) write$sysctl(0xffffffffffffffff, &(0x7f0000000380)='4\x00', 0x2) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f00000001c0)={0x0, 0x1, &(0x7f0000000340)=[r3], &(0x7f0000000280)=[0x1], 0x0, &(0x7f0000000380)}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mknod(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='btrfs\x00', 0x0, &(0x7f0000000980)='norecovery') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0x9, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbedit={0x60, 0x1, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4, {0x0, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x2a}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffffd}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x4}, {0xc, 0xa, {0x0, 0x1}}, {0xc, 0x9}}}]}]}, 0x78}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x8004) 280.158721ms ago: executing program 1 (id=1679): sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019440)=@newtfilter={0x34, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x8}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x800) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 279.470833ms ago: executing program 5 (id=1680): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2040400) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0xd36c, {0x6, 0x1, 0x5c449e81, 0x0, 0x425}}) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000b30000/0x1000)=nil, 0x1000, 0x180000b, 0x13, 0xffffffffffffffff, 0xfc2b3000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) write$binfmt_elf32(r2, &(0x7f00000001c0)=ANY=[@ANYRES64], 0x58) close(r2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r6, 0x6, 0x24, 0x0, 0x0) recvmmsg(r6, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}], 0x1}, 0x8000}], 0x1, 0x30, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x5, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000140)='\n\x00\x00\x00', 0x4}], 0x1) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r9, 0x4004ae8b, &(0x7f0000000800)=ANY=[@ANYBLOB='\b']) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 4 (id=1681): socket$xdp(0x2c, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f0000000a40)=""/65, 0x41}, {0x0}], 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): has an invalid descriptor of length 55, skipping remainder of the config [ 673.967725][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 673.995857][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 674.049157][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 674.101971][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 674.131982][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 674.155887][ T9] usb 2-1: Product: syz [ 674.160126][ T9] usb 2-1: Manufacturer: syz [ 674.200751][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 674.236335][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 675.712859][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 675.785418][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 675.991403][ T9] usb 2-1: USB disconnect, device number 7 [ 676.662788][T10053] xt_l2tp: invalid flags combination: c [ 676.843716][T10055] dlm: no locking on control device [ 683.501531][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 685.728271][T10105] dlm: no locking on control device [ 690.158329][ T29] audit: type=1804 audit(1740270883.549:14): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.883" name="/newroot/7/file1" dev="fuse" ino=1 res=1 errno=0 [ 690.323355][ T29] audit: type=1800 audit(1740270883.699:15): pid=10130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.883" name="/" dev="fuse" ino=1 res=0 errno=0 [ 690.602044][T10139] Non-string source [ 690.832325][T10144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.887'. [ 691.049962][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.059501][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.385064][ T5857] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 692.505094][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 693.301696][T10155] dlm: no locking on control device [ 696.261100][T10172] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.289638][T10172] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.305370][T10172] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 696.445827][T10172] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 696.518286][T10172] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 696.528772][T10172] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.204551][ T29] audit: type=1804 audit(1740270890.599:16): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.897" name="/newroot/290/file1" dev="fuse" ino=1 res=1 errno=0 [ 697.420170][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.899'. [ 697.661226][ T29] audit: type=1800 audit(1740270891.049:17): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.897" name="/" dev="fuse" ino=1 res=0 errno=0 [ 698.054821][T10134] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 698.061348][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 699.354524][ T5857] Bluetooth: hci5: command tx timeout [ 699.889191][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.5.902'. [ 700.443412][T10204] dlm: no locking on control device [ 701.365271][ T5857] Bluetooth: hci5: command tx timeout [ 701.456662][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.905'. [ 701.719273][T10215] ubi31: attaching mtd0 [ 701.845911][T10215] ubi31: scanning is finished [ 701.850913][T10215] ubi31: empty MTD device detected [ 702.475339][T10170] chnl_net:caif_netlink_parms(): no params data found [ 702.655356][T10215] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 702.807419][T10215] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 703.115282][T10215] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 703.226539][T10215] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 703.314233][T10215] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 703.365071][T10215] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 703.414916][T10215] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2566726566 [ 703.441488][T10215] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 703.454921][T10134] Bluetooth: hci5: command tx timeout [ 703.494794][T10227] ubi31: background thread "ubi_bgt31d" started, PID 10227 [ 703.522055][ T29] audit: type=1804 audit(1740270896.909:18): pid=10236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.910" name="/newroot/295/file1" dev="fuse" ino=1 res=1 errno=0 [ 704.284980][T10244] nbd4: detected capacity change from 0 to 4 [ 704.294979][T10245] block nbd4: shutting down sockets [ 704.804745][ T5857] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 704.804897][T10134] Bluetooth: hci0: command 0x0406 tx timeout [ 704.960329][ T1072] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 704.970549][ T1072] Buffer I/O error on dev nbd4, logical block 0, async page read [ 705.070869][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 705.467123][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.474548][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 705.490112][ T29] audit: type=1800 audit(1740270898.879:19): pid=10236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.910" name="/" dev="fuse" ino=1 res=0 errno=0 [ 705.511156][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 705.520756][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.536183][ T5857] Bluetooth: hci5: command tx timeout [ 705.543543][T10170] bridge_slave_0: entered allmulticast mode [ 705.552964][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 705.583553][T10170] bridge_slave_0: entered promiscuous mode [ 705.591854][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 705.621652][T10170] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.629833][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 705.661194][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.685003][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 705.717437][T10170] bridge_slave_1: entered allmulticast mode [ 705.741092][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 705.761205][T10170] bridge_slave_1: entered promiscuous mode [ 705.796754][ T9933] ldm_validate_partition_table(): Disk read failed. [ 705.814241][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 705.834234][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 706.078737][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 707.100596][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 707.151089][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 707.161493][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 707.169556][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 707.179564][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 707.215725][ T9933] Dev nbd4: unable to read RDB block 0 [ 707.222497][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 707.280320][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 707.591585][ T9933] nbd4: unable to read partition table [ 707.791164][ T9933] nbd4: partition table beyond EOD, truncated [ 707.923865][ T9933] ldm_validate_partition_table(): Disk read failed. [ 707.947776][ T9933] Dev nbd4: unable to read RDB block 0 [ 707.954121][ T9933] nbd4: unable to read partition table [ 707.977770][ T9933] nbd4: partition table beyond EOD, truncated [ 708.209886][T10170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.293030][T10265] ntfs3(nbd1): try to read out of volume at offset 0x0 [ 709.117254][T10170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.175340][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 710.685710][T10170] team0: Port device team_slave_0 added [ 710.714019][T10170] team0: Port device team_slave_1 added [ 710.799210][ T8] usb 6-1: device descriptor read/64, error -71 [ 710.933379][T10170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.947111][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.030965][T10170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.179459][ T8] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 711.305326][T10170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.408806][T10170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 711.523545][ T8] usb 6-1: device descriptor read/64, error -71 [ 711.566721][T10170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.676777][ T8] usb usb6-port1: attempt power cycle [ 712.245671][ T5857] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 712.257873][ T5857] Bluetooth: hci0: command 0x0406 tx timeout [ 712.379427][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 712.542163][T10170] hsr_slave_0: entered promiscuous mode [ 712.555284][ T8] usb 6-1: device descriptor read/8, error -71 [ 712.671404][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 712.695182][T10170] hsr_slave_1: entered promiscuous mode [ 712.822174][T10170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 714.157022][T10170] Cannot create hsr debugfs directory [ 714.457246][T10315] random: crng reseeded on system resumption [ 714.728058][T10322] fuse: Bad value for 'fd' [ 715.964944][ T29] audit: type=1800 audit(1740270909.319:20): pid=10328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.933" name="file1" dev="tmpfs" ino=102 res=0 errno=0 [ 716.654205][T10170] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 716.821692][T10170] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 718.117826][T10170] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 718.538060][T10170] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 718.968478][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 721.212302][T10170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.242182][T10170] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.830736][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.838041][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.865340][T10376] random: crng reseeded on system resumption [ 721.947468][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.954839][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.496326][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.951'. [ 723.700566][T10399] netlink: 'syz.6.953': attribute type 1 has an invalid length. [ 725.188213][T10170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.842822][T10417] can0: slcan on ttyS3. [ 726.126274][T10411] can0 (unregistered): slcan off ttyS3. [ 726.392610][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 728.293779][T10170] veth0_vlan: entered promiscuous mode [ 728.353264][T10170] veth1_vlan: entered promiscuous mode [ 728.581313][T10170] veth0_macvtap: entered promiscuous mode [ 729.760984][T10170] veth1_macvtap: entered promiscuous mode [ 729.998397][T10464] netlink: 'syz.6.969': attribute type 1 has an invalid length. [ 730.523592][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.624901][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.664711][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.702176][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.754906][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.766076][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.850973][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.6.973'. [ 731.634731][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.670482][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.714721][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.752879][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.768840][T10170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.790080][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.814724][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.884842][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.914706][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.953197][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 731.971428][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.990391][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.001557][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.035009][T10170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.046131][T10170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.059473][T10170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.189158][T10170] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.234883][T10170] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.275007][T10170] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.309625][T10170] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.382731][ T6031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.432383][ T6031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.858412][T10512] netlink: 'syz.6.982': attribute type 1 has an invalid length. [ 734.085458][T10134] Bluetooth: hci1: command 0x0406 tx timeout [ 734.200175][T10249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.247877][T10249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.704876][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 734.875530][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 734.915835][ T5841] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 734.934341][ T5841] usb 2-1: config 0 has no interface number 0 [ 734.961134][ T5841] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 734.998580][ T5841] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.021144][ T5841] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 735.064083][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.368442][T10541] fuse: Unknown parameter '0x0000000000000004' [ 735.759825][ T5841] usb 2-1: config 0 descriptor?? [ 736.695107][ T5841] uclogic 0003:28BD:0071.0002: pen parameters not found [ 736.715021][ T5841] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 736.909545][ T5926] usb 2-1: USB disconnect, device number 8 [ 738.468332][T10561] netlink: 'syz.5.995': attribute type 1 has an invalid length. [ 739.207342][T10134] Bluetooth: hci4: command 0x0406 tx timeout [ 740.415386][T10567] netlink: 20 bytes leftover after parsing attributes in process `syz.5.998'. [ 745.129351][T10605] netlink: 'syz.4.1008': attribute type 1 has an invalid length. [ 745.851396][T10610] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 749.464740][T10134] Bluetooth: hci3: command 0x0406 tx timeout [ 749.925601][T10642] tipc: Started in network mode [ 749.970729][T10642] tipc: Node identity 3ea9e2ec6f48, cluster identity 4711 [ 750.019104][T10642] tipc: Enabled bearer , priority 0 [ 750.183595][T10651] netlink: 'syz.1.1022': attribute type 1 has an invalid length. [ 751.052409][T10643] syzkaller0: entered promiscuous mode [ 751.074499][T10643] syzkaller0: entered allmulticast mode [ 751.098289][T10643] tipc: Resetting bearer [ 751.154947][T10641] tipc: Resetting bearer [ 751.337060][ T9] tipc: Node number set to 1373758188 [ 752.502869][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.509457][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.287133][T10692] [U]  [ 756.290243][T10692] [U] K{‘ [ 756.344993][T10692] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 756.352081][T10692] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 756.403185][T10692] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 756.446009][T10692] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 756.550484][T10692] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 756.574108][ C1] vkms_vblank_simulate: vblank timer overrun [ 756.629176][T10692] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 756.640989][T10692] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 756.656050][T10692] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 757.724776][T10692] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 757.758304][T10692] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 757.985465][T10692] [U] 22½“Æ©Ðû©x?0;3u± [ 757.989774][T10692] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 758.018430][T10692] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 758.876210][T10692] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 758.889360][T10692] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 758.895838][T10692] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 758.945062][T10692] [U] ¹ ec [ 758.948244][T10692] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 758.988356][T10691] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 760.698227][ T6031] Bluetooth: (null): Invalid header checksum [ 760.717402][ T6031] Bluetooth: (null): Invalid header checksum [ 761.725217][ T6031] Bluetooth: (null): Invalid header checksum [ 761.731371][ T6031] Bluetooth: (null): Invalid header checksum [ 762.436481][ T6031] Bluetooth: (null): Invalid header checksum [ 762.442714][ T6031] Bluetooth: (null): Invalid header checksum [ 762.449459][ T6031] Bluetooth: (null): Invalid header checksum [ 762.455898][ T6031] Bluetooth: (null): Invalid header checksum [ 762.463201][ T6031] Bluetooth: (null): Invalid header checksum [ 762.472509][ T6031] Bluetooth: (null): Invalid header checksum [ 762.478892][ T6031] Bluetooth: (null): Invalid header checksum [ 762.516146][ T6031] Bluetooth: (null): Invalid header checksum [ 765.697105][T10747] kvm: pic: single mode not supported [ 765.697126][T10747] kvm: pic: level sensitive irq not supported [ 765.707049][T10747] kvm: pic: single mode not supported [ 765.713171][T10747] kvm: pic: level sensitive irq not supported [ 765.718922][T10747] kvm: pic: single mode not supported [ 765.725173][T10747] kvm: pic: level sensitive irq not supported [ 765.730695][T10747] kvm: pic: single mode not supported [ 765.736875][T10747] kvm: pic: level sensitive irq not supported [ 766.260025][T10134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 766.279090][T10134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 766.296145][T10134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 766.306262][T10134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 766.343637][T10134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 766.357396][T10134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 768.497724][T10134] Bluetooth: hci2: command tx timeout [ 770.564948][T10134] Bluetooth: hci2: command tx timeout [ 770.840651][T10641] tipc: Disabling bearer [ 772.684886][T10134] Bluetooth: hci2: command tx timeout [ 774.741462][T10134] Bluetooth: hci2: command tx timeout [ 776.436420][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.617019][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 776.629543][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 776.642512][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 776.673940][T10749] chnl_net:caif_netlink_parms(): no params data found [ 776.681301][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 776.705658][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 776.716736][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 777.093805][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.207225][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.095935][T10134] Bluetooth: hci1: command tx timeout [ 779.406121][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.126755][T10134] Bluetooth: hci1: command tx timeout [ 781.681789][T10749] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.694122][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.732286][T10749] bridge_slave_0: entered allmulticast mode [ 781.763013][T10749] bridge_slave_0: entered promiscuous mode [ 781.867078][T10749] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.874548][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.948026][T10749] bridge_slave_1: entered allmulticast mode [ 782.105853][T10749] bridge_slave_1: entered promiscuous mode [ 783.215445][T10134] Bluetooth: hci1: command tx timeout [ 783.950947][T10749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.076908][T10749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.468489][T10881] ubi: mtd0 is already attached to ubi31 [ 785.362566][T10134] Bluetooth: hci1: command tx timeout [ 785.788054][T10749] team0: Port device team_slave_0 added [ 785.912421][T10749] team0: Port device team_slave_1 added [ 786.134771][ T12] bridge_slave_1: left allmulticast mode [ 786.146816][ T12] bridge_slave_1: left promiscuous mode [ 786.158347][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.920195][ T12] bridge_slave_0: left allmulticast mode [ 786.946383][ T12] bridge_slave_0: left promiscuous mode [ 787.278057][T10889] kvm: user requested TSC rate below hardware speed [ 787.293114][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.906132][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.016489][T10927] xt_nat: multiple ranges no longer supported [ 791.771848][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.800158][ T12] bond0 (unregistering): Released all slaves [ 791.883962][T10749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.893919][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.936043][T10749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.158400][T10749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.386753][T10749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.635787][T10749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.065896][T10823] chnl_net:caif_netlink_parms(): no params data found [ 796.266344][T10749] hsr_slave_0: entered promiscuous mode [ 796.291179][T10749] hsr_slave_1: entered promiscuous mode [ 796.305837][T10749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 796.336462][T10749] Cannot create hsr debugfs directory [ 796.433587][ T12] hsr_slave_0: left promiscuous mode [ 796.505118][ T12] hsr_slave_1: left promiscuous mode [ 796.511584][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.543299][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.590890][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.742003][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.286240][ T12] veth1_macvtap: left promiscuous mode [ 797.291896][ T12] veth0_macvtap: left promiscuous mode [ 797.333655][ T12] veth1_vlan: left promiscuous mode [ 797.357931][ T12] veth0_vlan: left promiscuous mode [ 797.971683][T10984] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 800.072674][ T12] team0 (unregistering): Port device team_slave_1 removed [ 800.140712][ T12] team0 (unregistering): Port device team_slave_0 removed [ 803.898023][T10823] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.938844][T10823] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.096986][T10823] bridge_slave_0: entered allmulticast mode [ 804.155567][T10823] bridge_slave_0: entered promiscuous mode [ 804.366540][T10823] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.377545][T10823] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.448241][T10823] bridge_slave_1: entered allmulticast mode [ 804.459861][T10823] bridge_slave_1: entered promiscuous mode [ 805.630342][T10823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.690375][T10823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.573550][T10823] team0: Port device team_slave_0 added [ 806.711266][T10823] team0: Port device team_slave_1 added [ 807.936778][T10823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.943784][T10823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.024804][T10823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.061765][T10823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.075525][T10823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.119306][T10823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.279892][ T8051] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 808.386333][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.498609][ T8051] usb 5-1: Using ep0 maxpacket: 16 [ 808.702695][ T8051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.962995][ T8051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 809.010520][ T8051] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 809.023235][ T8051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.042924][ T8051] usb 5-1: config 0 descriptor?? [ 809.161409][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.493690][ T8051] playstation 0003:054C:05C4.0003: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.4-1/input0 [ 809.523256][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.633281][T11082] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1143'. [ 809.708980][ T8051] playstation 0003:054C:05C4.0003: Invalid byte count transferred, expected 16 got 0 [ 809.811131][ T8051] playstation 0003:054C:05C4.0003: Failed to retrieve DualShock4 pairing info: -22 [ 809.919689][ T8051] playstation 0003:054C:05C4.0003: Failed to get MAC address from DualShock4 [ 810.000576][ T8051] playstation 0003:054C:05C4.0003: Failed to create dualshock4. [ 810.261666][ T8051] playstation 0003:054C:05C4.0003: probe with driver playstation failed with error -22 [ 810.396899][T10823] hsr_slave_0: entered promiscuous mode [ 810.416915][ T8051] usb 5-1: USB disconnect, device number 4 [ 810.451030][T10823] hsr_slave_1: entered promiscuous mode [ 810.470821][T10823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 810.494695][T10823] Cannot create hsr debugfs directory [ 810.650576][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.072248][T10749] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 812.014939][T10749] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 812.101917][T10749] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 812.141890][T10749] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 812.587292][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1149'. [ 814.376397][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.383495][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.740730][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.347451][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.477861][T11133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1153'. [ 816.461622][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.547636][T11140] syz.5.1156: attempt to access beyond end of device [ 816.547636][T11140] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 816.597605][T11142] block nbd5: shutting down sockets [ 816.638309][T11140] getblk(): invalid block size 512 requested [ 816.729911][T11140] logical block size: 1024 [ 816.791988][T11140] CPU: 1 UID: 0 PID: 11140 Comm: syz.5.1156 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 816.792028][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 816.792043][T11140] Call Trace: [ 816.792052][T11140] [ 816.792061][T11140] dump_stack_lvl+0x241/0x360 [ 816.792109][T11140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 816.792147][T11140] ? __wake_up_klogd+0xcc/0x110 [ 816.792194][T11140] bdev_getblk+0x59c/0x670 [ 816.792219][T11140] ? __pfx___schedule+0x10/0x10 [ 816.792257][T11140] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 816.792297][T11140] __bread_gfp+0x86/0x400 [ 816.792326][T11140] udf_read_tagged+0xa6/0xe00 [ 816.792351][T11140] ? mark_lock+0x9a/0x360 [ 816.792382][T11140] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 816.792423][T11140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 816.792468][T11140] udf_check_anchor_block+0xba/0x550 [ 816.792491][T11140] ? irqentry_exit+0x63/0x90 [ 816.792520][T11140] ? lockdep_hardirqs_on+0x99/0x150 [ 816.792571][T11140] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 816.792597][T11140] ? udf_load_vrs+0x6f3/0x1130 [ 816.792634][T11140] udf_load_vrs+0x767/0x1130 [ 816.792657][T11140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 816.792717][T11140] ? __pfx_udf_load_vrs+0x10/0x10 [ 816.792746][T11140] ? udf_fill_super+0x5c5/0x1cb0 [ 816.792782][T11140] udf_fill_super+0x5f2/0x1cb0 [ 816.792827][T11140] ? __pfx_udf_fill_super+0x10/0x10 [ 816.792877][T11140] ? __pfx_udf_fill_super+0x10/0x10 [ 816.792912][T11140] ? get_tree_bdev_flags+0x3e6/0x5c0 [ 816.792956][T11140] get_tree_bdev_flags+0x48c/0x5c0 [ 816.792985][T11140] ? lockdep_hardirqs_on+0x99/0x150 [ 816.793018][T11140] ? __pfx_udf_fill_super+0x10/0x10 [ 816.793055][T11140] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 816.793085][T11140] ? __pfx_udf_get_tree+0x10/0x10 [ 816.793137][T11140] vfs_get_tree+0x90/0x2b0 [ 816.793173][T11140] do_new_mount+0x2be/0xb40 [ 816.793219][T11140] ? __pfx_do_new_mount+0x10/0x10 [ 816.793273][T11140] __se_sys_mount+0x2d6/0x3c0 [ 816.793293][T11140] ? irqentry_exit+0x63/0x90 [ 816.793333][T11140] ? __pfx___se_sys_mount+0x10/0x10 [ 816.793368][T11140] ? __x64_sys_mount+0x20/0xc0 [ 816.793394][T11140] do_syscall_64+0xf3/0x230 [ 816.793428][T11140] ? clear_bhb_loop+0x45/0xa0 [ 816.793465][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.793493][T11140] RIP: 0033:0x7efde718d169 [ 816.793519][T11140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.793544][T11140] RSP: 002b:00007efde7f32038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 816.793568][T11140] RAX: ffffffffffffffda RBX: 00007efde73a6080 RCX: 00007efde718d169 [ 816.793585][T11140] RDX: 0000400000000040 RSI: 0000400000004a00 RDI: 0000400000000500 [ 816.793601][T11140] RBP: 00007efde720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 816.793614][T11140] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 816.793628][T11140] R13: 0000000000000000 R14: 00007efde73a6080 R15: 00007ffd299eff58 [ 816.793672][T11140] [ 816.794378][T11140] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 817.285235][T11140] getblk(): invalid block size 512 requested [ 817.379093][T11140] logical block size: 1024 [ 817.455654][T11140] CPU: 0 UID: 0 PID: 11140 Comm: syz.5.1156 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 817.455687][T11140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 817.455701][T11140] Call Trace: [ 817.455710][T11140] [ 817.455719][T11140] dump_stack_lvl+0x241/0x360 [ 817.455756][T11140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.455781][T11140] ? __pfx__printk+0x10/0x10 [ 817.455824][T11140] bdev_getblk+0x59c/0x670 [ 817.455848][T11140] ? __pfx___schedule+0x10/0x10 [ 817.455902][T11140] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 817.455940][T11140] __bread_gfp+0x86/0x400 [ 817.455965][T11140] udf_read_tagged+0xa6/0xe00 [ 817.455987][T11140] ? mark_lock+0x9a/0x360 [ 817.456014][T11140] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 817.456050][T11140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 817.456090][T11140] udf_check_anchor_block+0xba/0x550 [ 817.456131][T11140] ? irqentry_exit+0x63/0x90 [ 817.456171][T11140] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 817.456212][T11140] udf_load_vrs+0xc3d/0x1130 [ 817.456234][T11140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 817.456289][T11140] ? __pfx_udf_load_vrs+0x10/0x10 [ 817.456316][T11140] ? udf_fill_super+0x5c5/0x1cb0 [ 817.456351][T11140] udf_fill_super+0x5f2/0x1cb0 [ 817.456392][T11140] ? __pfx_udf_fill_super+0x10/0x10 [ 817.456441][T11140] ? __pfx_udf_fill_super+0x10/0x10 [ 817.456484][T11140] ? get_tree_bdev_flags+0x3e6/0x5c0 [ 817.456528][T11140] get_tree_bdev_flags+0x48c/0x5c0 [ 817.456561][T11140] ? lockdep_hardirqs_on+0x99/0x150 [ 817.456594][T11140] ? __pfx_udf_fill_super+0x10/0x10 [ 817.456629][T11140] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 817.456658][T11140] ? __pfx_udf_get_tree+0x10/0x10 [ 817.456709][T11140] vfs_get_tree+0x90/0x2b0 [ 817.456744][T11140] do_new_mount+0x2be/0xb40 [ 817.456789][T11140] ? __pfx_do_new_mount+0x10/0x10 [ 817.456838][T11140] __se_sys_mount+0x2d6/0x3c0 [ 817.456856][T11140] ? irqentry_exit+0x63/0x90 [ 817.456891][T11140] ? __pfx___se_sys_mount+0x10/0x10 [ 817.456919][T11140] ? __x64_sys_mount+0x20/0xc0 [ 817.456939][T11140] do_syscall_64+0xf3/0x230 [ 817.456964][T11140] ? clear_bhb_loop+0x45/0xa0 [ 817.456992][T11140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.457014][T11140] RIP: 0033:0x7efde718d169 [ 817.457031][T11140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.457046][T11140] RSP: 002b:00007efde7f32038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 817.457065][T11140] RAX: ffffffffffffffda RBX: 00007efde73a6080 RCX: 00007efde718d169 [ 817.457078][T11140] RDX: 0000400000000040 RSI: 0000400000004a00 RDI: 0000400000000500 [ 817.457089][T11140] RBP: 00007efde720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 817.457099][T11140] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 817.457110][T11140] R13: 0000000000000000 R14: 00007efde73a6080 R15: 00007ffd299eff58 [ 817.457141][T11140] [ 817.461072][T10823] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 817.462831][T11140] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 817.862514][T11140] syz.5.1156: attempt to access beyond end of device [ 817.862514][T11140] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 817.926116][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.967103][T10823] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 817.980403][T11140] syz.5.1156: attempt to access beyond end of device [ 817.980403][T11140] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 818.003108][T11140] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 818.013616][T11140] syz.5.1156: attempt to access beyond end of device [ 818.013616][T11140] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 818.036721][T11140] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 818.051641][T11140] syz.5.1156: attempt to access beyond end of device [ 818.051641][T11140] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 818.190474][T11140] syz.5.1156: attempt to access beyond end of device [ 818.190474][T11140] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 818.372394][T11140] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 818.570145][T11140] syz.5.1156: attempt to access beyond end of device [ 818.570145][T11140] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 818.843771][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 818.874973][T10823] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 818.921502][T11140] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 819.045988][T11140] syz.5.1156: attempt to access beyond end of device [ 819.045988][T11140] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 819.120682][T11140] syz.5.1156: attempt to access beyond end of device [ 819.120682][T11140] nbd5: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 819.204484][T11140] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 819.253429][T11140] syz.5.1156: attempt to access beyond end of device [ 819.253429][T11140] nbd5: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 819.346800][T11140] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 819.425668][T11140] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 819.646176][T10823] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 819.918888][T10749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.513760][T10749] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.168423][ T12] bridge_slave_1: left allmulticast mode [ 821.211571][ T12] bridge_slave_1: left promiscuous mode [ 821.234681][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.270431][ T12] bridge_slave_0: left allmulticast mode [ 821.277792][ T12] bridge_slave_0: left promiscuous mode [ 821.325330][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.360777][ T12] bridge_slave_1: left allmulticast mode [ 821.384711][ T12] bridge_slave_1: left promiscuous mode [ 821.390608][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.431077][ T12] bridge_slave_0: left allmulticast mode [ 821.448016][ T12] bridge_slave_0: left promiscuous mode [ 821.453872][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.556684][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1163'. [ 824.819279][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'. [ 826.787976][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.843912][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 826.876549][ T12] bond0 (unregistering): Released all slaves [ 827.069558][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 827.089154][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 827.098216][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 827.108038][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 827.116764][ T5857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 827.124265][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 827.203963][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.216785][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.227699][ T12] bond0 (unregistering): Released all slaves [ 828.176752][ T12] tipc: Left network mode [ 828.442994][ T8173] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 828.617742][T10823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.018088][ T8173] usb 2-1: device descriptor read/64, error -71 [ 829.193931][T10823] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.205401][ T5857] Bluetooth: hci5: command tx timeout [ 829.274943][ T8173] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 829.476840][ T8173] usb 2-1: device descriptor read/64, error -71 [ 829.598195][ T8173] usb usb2-port1: attempt power cycle [ 829.639732][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.647099][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.693191][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.700472][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.984808][ T8173] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 830.026170][ T8173] usb 2-1: device descriptor read/8, error -71 [ 830.383750][T11218] chnl_net:caif_netlink_parms(): no params data found [ 830.415127][ T8173] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 830.455363][ T8173] usb 2-1: device descriptor read/8, error -71 [ 830.573151][ T8173] usb usb2-port1: unable to enumerate USB device [ 830.761869][ T12] hsr_slave_0: left promiscuous mode [ 830.816960][ T12] hsr_slave_1: left promiscuous mode [ 830.885948][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.921753][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.067523][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.109713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.286961][ T5857] Bluetooth: hci5: command tx timeout [ 831.426570][ T12] hsr_slave_0: left promiscuous mode [ 831.464066][ T12] hsr_slave_1: left promiscuous mode [ 831.492872][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.539691][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.590128][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.612492][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.753745][ T12] veth1_macvtap: left promiscuous mode [ 831.765062][ T12] veth0_macvtap: left promiscuous mode [ 831.770940][ T12] veth1_vlan: left promiscuous mode [ 831.806949][ T12] veth0_vlan: left promiscuous mode [ 831.839025][ T12] veth1_macvtap: left promiscuous mode [ 831.845532][ T12] veth0_macvtap: left promiscuous mode [ 831.866425][ T12] veth1_vlan: left promiscuous mode [ 831.886434][ T12] veth0_vlan: left promiscuous mode [ 832.394559][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'. [ 832.404452][T11271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1179'. [ 832.474822][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'. [ 833.078659][T11271] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1179'. [ 833.365054][ T5857] Bluetooth: hci5: command tx timeout [ 834.145817][T10134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.154482][T10134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.163139][T10134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.179424][T10134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.194481][T10134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 834.202849][T10134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 834.623927][ T12] team0 (unregistering): Port device team_slave_1 removed [ 834.675883][ T12] team0 (unregistering): Port device team_slave_0 removed [ 835.451470][T10134] Bluetooth: hci5: command tx timeout [ 835.758158][ T12] team0 (unregistering): Port device team_slave_1 removed [ 835.813995][ T12] team0 (unregistering): Port device team_slave_0 removed [ 836.259007][T10134] Bluetooth: hci2: command tx timeout [ 838.015434][T11218] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.022656][T11218] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.031610][T11218] bridge_slave_0: entered allmulticast mode [ 838.040510][T11218] bridge_slave_0: entered promiscuous mode [ 838.324953][ T5857] Bluetooth: hci2: command tx timeout [ 838.385189][T11314] nbd5: detected capacity change from 0 to 4 [ 838.391724][T11315] block nbd5: shutting down sockets [ 838.592385][ T1072] blk_print_req_error: 19 callbacks suppressed [ 838.592407][ T1072] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 838.610063][ T1072] buffer_io_error: 19 callbacks suppressed [ 838.610079][ T1072] Buffer I/O error on dev nbd5, logical block 0, async page read [ 838.625592][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 838.645477][T11218] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.656067][T11218] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.664544][T11218] bridge_slave_1: entered allmulticast mode [ 838.674217][T11218] bridge_slave_1: entered promiscuous mode [ 838.684050][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 838.714250][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 838.736986][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 838.751718][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 838.762036][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 838.770572][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 838.780820][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 838.805883][ T9933] ldm_validate_partition_table(): Disk read failed. [ 838.839365][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 838.864772][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 839.802024][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 839.812371][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 839.821140][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 839.846990][T11218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.856343][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 839.864460][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 839.890823][T11218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.900629][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 839.909239][ T9933] Dev nbd5: unable to read RDB block 0 [ 839.915527][ T9933] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 839.924792][ T9933] Buffer I/O error on dev nbd5, logical block 0, async page read [ 839.933313][ T9933] nbd5: unable to read partition table [ 839.941567][ T9933] nbd5: partition table beyond EOD, truncated [ 839.971035][ T9933] ldm_validate_partition_table(): Disk read failed. [ 840.031311][ T9933] Dev nbd5: unable to read RDB block 0 [ 840.082623][ T9933] nbd5: unable to read partition table [ 840.117527][ T9933] nbd5: partition table beyond EOD, truncated [ 840.475333][T10134] Bluetooth: hci2: command tx timeout [ 840.913059][T11218] team0: Port device team_slave_0 added [ 841.607493][T11218] team0: Port device team_slave_1 added [ 842.015187][T11218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.022299][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.048254][ C1] vkms_vblank_simulate: vblank timer overrun [ 842.108401][T11218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.335679][T11283] chnl_net:caif_netlink_parms(): no params data found [ 842.526967][T10134] Bluetooth: hci2: command tx timeout [ 842.713823][T11358] CIFS mount error: No usable UNC path provided in device string! [ 842.713823][T11358] [ 842.724049][T11358] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 843.086339][T11218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.093440][T11218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.157703][T11218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.412945][T11218] hsr_slave_0: entered promiscuous mode [ 846.431146][T11218] hsr_slave_1: entered promiscuous mode [ 846.451233][T11218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.459346][T11390] nbd4: detected capacity change from 0 to 4 [ 846.466989][T11391] block nbd4: shutting down sockets [ 846.480373][ T9933] blk_print_req_error: 19 callbacks suppressed [ 846.480388][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.518354][T11218] Cannot create hsr debugfs directory [ 846.604405][ T9933] buffer_io_error: 19 callbacks suppressed [ 846.604426][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 846.630917][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.640586][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 846.671674][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.689256][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 846.706383][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.800912][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 846.870025][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 846.945820][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 847.062004][T11283] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.091179][ T9933] ldm_validate_partition_table(): Disk read failed. [ 847.094101][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.130741][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.131185][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 847.135246][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.135513][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 847.137414][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.137623][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 847.139801][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.139878][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 847.142174][ T9933] Dev nbd4: unable to read RDB block 0 [ 847.143214][ T9933] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.143422][ T9933] Buffer I/O error on dev nbd4, logical block 0, async page read [ 847.149423][ T9933] nbd4: unable to read partition table [ 847.154373][ T9933] nbd4: partition table beyond EOD, truncated [ 847.501030][T11283] bridge_slave_0: entered allmulticast mode [ 847.689379][ T9933] ldm_validate_partition_table(): Disk read failed. [ 847.691004][T11283] bridge_slave_0: entered promiscuous mode [ 847.845323][ T9933] Dev nbd4: unable to read RDB block 0 [ 847.943098][ T9933] nbd4: unable to read partition table [ 847.944936][T11283] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.060835][ T9933] nbd4: partition table beyond EOD, truncated [ 848.063358][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.150700][T11283] bridge_slave_1: entered allmulticast mode [ 848.316468][T11283] bridge_slave_1: entered promiscuous mode [ 848.833790][T11283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.896611][T11283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.362708][T11283] team0: Port device team_slave_0 added [ 849.615982][T11283] team0: Port device team_slave_1 added [ 850.158638][T11283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.194902][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.220928][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.293570][T11283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.347861][T11283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.394344][T11283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.420553][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.503265][T11283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.931091][T11429] CIFS mount error: No usable UNC path provided in device string! [ 850.931091][T11429] [ 850.941307][T11429] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 853.118935][T11283] hsr_slave_0: entered promiscuous mode [ 853.215696][T11283] hsr_slave_1: entered promiscuous mode [ 853.222326][T11283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 853.296209][T11283] Cannot create hsr debugfs directory [ 855.839067][T11472] CIFS mount error: No usable UNC path provided in device string! [ 855.839067][T11472] [ 855.849322][T11472] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 855.998373][ T12] bridge_slave_1: left allmulticast mode [ 856.054843][ T12] bridge_slave_1: left promiscuous mode [ 856.089591][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.157500][ T12] bridge_slave_0: left allmulticast mode [ 856.163207][ T12] bridge_slave_0: left promiscuous mode [ 856.187508][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.259022][ T12] bridge_slave_1: left allmulticast mode [ 856.265079][ T12] bridge_slave_1: left promiscuous mode [ 856.270899][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.307665][ T12] bridge_slave_0: left allmulticast mode [ 856.313365][ T12] bridge_slave_0: left promiscuous mode [ 856.335321][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.679615][T11495] dlm: no locking on control device [ 861.058788][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.100405][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.118697][ T12] bond0 (unregistering): Released all slaves [ 861.459653][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.492014][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.522674][ T12] bond0 (unregistering): Released all slaves [ 862.305219][ T5897] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 862.483849][ T12] hsr_slave_0: left promiscuous mode [ 862.509099][ T5897] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 862.520362][ T12] hsr_slave_1: left promiscuous mode [ 862.526769][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.536818][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.544247][ T5897] usb 6-1: Product: syz [ 862.551649][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.560229][ T5897] usb 6-1: Manufacturer: syz [ 862.578529][ T5897] usb 6-1: SerialNumber: syz [ 862.594839][ T12] hsr_slave_0: left promiscuous mode [ 862.601230][ T12] hsr_slave_1: left promiscuous mode [ 862.607667][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.616859][ T5897] usb 6-1: config 0 descriptor?? [ 862.653234][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.853758][ T5897] usb 6-1: USB disconnect, device number 6 [ 864.865092][T11536] sctp: [Deprecated]: syz.4.1228 (pid 11536) Use of int in maxseg socket option. [ 864.865092][T11536] Use struct sctp_assoc_value instead [ 865.800180][ T12] team0 (unregistering): Port device team_slave_1 removed [ 866.063512][T11543] ufs: You didn't specify the type of your ufs filesystem [ 866.063512][T11543] [ 866.063512][T11543] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 866.063512][T11543] [ 866.063512][T11543] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 866.095505][T11543] ufs: ufstype=old is supported read-only [ 866.111213][T11543] ufs: ufs_fill_super(): bad magic number [ 867.115622][ T12] team0 (unregistering): Port device team_slave_0 removed [ 868.200863][T11553] dlm: no locking on control device [ 872.014022][T11576] sctp: [Deprecated]: syz.1.1238 (pid 11576) Use of int in maxseg socket option. [ 872.014022][T11576] Use struct sctp_assoc_value instead [ 872.776215][ T12] team0 (unregistering): Port device team_slave_1 removed [ 872.840390][ T12] team0 (unregistering): Port device team_slave_0 removed [ 874.214912][T11218] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 874.267260][T11218] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 875.726519][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.732920][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.968621][T11218] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 876.447416][T11218] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 877.689199][T11612] sctp: [Deprecated]: syz.4.1248 (pid 11612) Use of int in maxseg socket option. [ 877.689199][T11612] Use struct sctp_assoc_value instead [ 879.805760][T11622] slcan: can't register candev [ 879.810814][T11622] Falling back ldisc for ttyS3. [ 880.380638][T10249] Bluetooth: (null): Invalid header checksum [ 880.418538][T10249] Bluetooth: (null): Invalid header checksum [ 881.316636][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.402596][T11218] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.490260][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.497551][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.567797][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.575080][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.665441][T11645] 9pnet_fd: Insufficient options for proto=fd [ 884.676410][T11645] vivid-001: disconnect [ 884.684239][T11644] vivid-001: reconnect [ 884.730643][T11283] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 884.801571][T11283] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 884.840410][T11283] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 885.583758][T11283] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 886.453008][T11218] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 886.546903][T11218] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 887.004391][T11679] can0: slcan on ttyS3. [ 887.672656][T11680] program syz.4.1264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 887.804934][T11672] can0 (unregistered): slcan off ttyS3. [ 889.402767][T11283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.606163][T11283] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.688438][ T2969] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.695756][ T2969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.898488][ T8173] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 890.226824][ T8173] usb 6-1: Using ep0 maxpacket: 8 [ 890.345512][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.352755][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.365293][ T8173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 890.421997][ T8173] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 890.464072][ T8173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.062662][ T8173] usb 6-1: config 0 descriptor?? [ 891.357444][ T8173] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 892.911890][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 892.922950][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 892.934753][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 892.944376][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 892.952835][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 892.960855][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 893.153553][ C0] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 893.164651][T11684] usb 6-1: USB disconnect, device number 7 [ 895.230917][ T5857] Bluetooth: hci1: command tx timeout [ 897.039063][T10134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 897.127521][T10134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 897.146166][T10134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 897.174881][T10134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 897.189811][T10134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 897.203491][T10134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 897.284730][ T5857] Bluetooth: hci1: command tx timeout [ 899.374849][T10134] Bluetooth: hci1: command tx timeout [ 899.445936][T10134] Bluetooth: hci2: command tx timeout [ 900.834947][T10249] bridge_slave_1: left allmulticast mode [ 900.876463][T10249] bridge_slave_1: left promiscuous mode [ 900.882402][T10249] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.137071][T10249] bridge_slave_0: left allmulticast mode [ 901.152498][T10249] bridge_slave_0: left promiscuous mode [ 901.159039][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.444918][T10134] Bluetooth: hci1: command tx timeout [ 901.524935][T10134] Bluetooth: hci2: command tx timeout [ 901.818130][T11792] kvm: kvm [11790]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x2830 [ 903.628325][T10134] Bluetooth: hci2: command tx timeout [ 903.969808][T10249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.992780][T10249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.008875][T10249] bond0 (unregistering): Released all slaves [ 904.069260][T11779] bridge0: port 3(erspan0) entered blocking state [ 904.087843][T11779] bridge0: port 3(erspan0) entered disabled state [ 904.101071][T11779] erspan0: entered allmulticast mode [ 904.416652][T11779] erspan0: entered promiscuous mode [ 904.422454][T11779] bridge0: port 3(erspan0) entered blocking state [ 904.429040][T11779] bridge0: port 3(erspan0) entered forwarding state [ 904.480135][T11719] chnl_net:caif_netlink_parms(): no params data found [ 904.664465][T10249] hsr_slave_0: left promiscuous mode [ 904.709686][T10249] hsr_slave_1: left promiscuous mode [ 904.720914][T10249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.733082][T10249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.685073][T10134] Bluetooth: hci2: command tx timeout [ 907.378212][T10249] team0 (unregistering): Port device team_slave_1 removed [ 908.594100][T10249] team0 (unregistering): Port device team_slave_0 removed [ 911.200545][T11841] syz.4.1298: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 911.237185][T11841] CPU: 0 UID: 0 PID: 11841 Comm: syz.4.1298 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 911.237227][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 911.237250][T11841] Call Trace: [ 911.237263][T11841] [ 911.237280][T11841] dump_stack_lvl+0x241/0x360 [ 911.237324][T11841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 911.237349][T11841] ? __pfx__printk+0x10/0x10 [ 911.237381][T11841] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 911.237411][T11841] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 911.237452][T11841] warn_alloc+0x278/0x410 [ 911.237488][T11841] ? __pfx_warn_alloc+0x10/0x10 [ 911.237525][T11841] ? fq_pie_init+0x429/0x820 [ 911.237556][T11841] ? __get_vm_area_node+0x1c8/0x2d0 [ 911.237578][T11841] ? __get_vm_area_node+0x25c/0x2d0 [ 911.237611][T11841] __vmalloc_node_range_noprof+0x62f/0x1380 [ 911.237685][T11841] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 911.237710][T11841] ? __kasan_kmalloc_large+0x1a/0xa0 [ 911.237746][T11841] ? rcu_is_watching+0x15/0xb0 [ 911.237771][T11841] ? fq_pie_init+0x429/0x820 [ 911.237805][T11841] __kvmalloc_node_noprof+0x398/0x580 [ 911.237828][T11841] ? fq_pie_init+0x429/0x820 [ 911.237859][T11841] ? init_timer_key+0x197/0x320 [ 911.237896][T11841] fq_pie_init+0x429/0x820 [ 911.237930][T11841] ? qdisc_lookup+0x350/0x6b0 [ 911.237960][T11841] ? __pfx_fq_pie_init+0x10/0x10 [ 911.237992][T11841] qdisc_create+0x9d4/0x11a0 [ 911.238040][T11841] ? __pfx_qdisc_create+0x10/0x10 [ 911.238089][T11841] tc_modify_qdisc+0xbbb/0x1f10 [ 911.238149][T11841] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 911.238221][T11841] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 911.238256][T11841] rtnetlink_rcv_msg+0x73f/0xcf0 [ 911.238280][T11841] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 911.238321][T11841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 911.238360][T11841] ? ref_tracker_free+0x643/0x7e0 [ 911.238398][T11841] netlink_rcv_skb+0x206/0x480 [ 911.238425][T11841] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 911.238455][T11841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 911.238520][T11841] ? netlink_deliver_tap+0x2e/0x1b0 [ 911.238549][T11841] netlink_unicast+0x7f6/0x990 [ 911.238599][T11841] ? __pfx_netlink_unicast+0x10/0x10 [ 911.238630][T11841] ? __virt_addr_valid+0x45f/0x530 [ 911.238654][T11841] ? __phys_addr_symbol+0x2f/0x70 [ 911.238675][T11841] ? __check_object_size+0x475/0x720 [ 911.238716][T11841] netlink_sendmsg+0x8b3/0xca0 [ 911.238761][T11841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.238799][T11841] ? aa_sock_msg_perm+0xf3/0x1d0 [ 911.238843][T11841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 911.238865][T11841] __sock_sendmsg+0x221/0x270 [ 911.238900][T11841] ____sys_sendmsg+0x524/0x860 [ 911.238950][T11841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 911.238982][T11841] ? __fget_files+0x2a/0x410 [ 911.239010][T11841] ? __fget_files+0x2a/0x410 [ 911.239047][T11841] __sys_sendmsg+0x269/0x350 [ 911.239082][T11841] ? __pfx_futex_wake+0x10/0x10 [ 911.239122][T11841] ? __pfx___sys_sendmsg+0x10/0x10 [ 911.239232][T11841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 911.239270][T11841] ? do_syscall_64+0x100/0x230 [ 911.239313][T11841] ? do_syscall_64+0xb6/0x230 [ 911.239350][T11841] do_syscall_64+0xf3/0x230 [ 911.239382][T11841] ? clear_bhb_loop+0x45/0xa0 [ 911.239419][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.239447][T11841] RIP: 0033:0x7f396618d169 [ 911.239468][T11841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.239486][T11841] RSP: 002b:00007f3966f90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.239509][T11841] RAX: ffffffffffffffda RBX: 00007f39663a5fa0 RCX: 00007f396618d169 [ 911.239525][T11841] RDX: 0000000000000000 RSI: 00004000000000c0 RDI: 0000000000000008 [ 911.239538][T11841] RBP: 00007f396620e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 911.239552][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.239564][T11841] R13: 0000000000000000 R14: 00007f39663a5fa0 R15: 00007fff3c280d28 [ 911.239607][T11841] [ 911.239615][T11841] Mem-Info: [ 911.659439][T11841] active_anon:9539 inactive_anon:0 isolated_anon:0 [ 911.659439][T11841] active_file:14920 inactive_file:38638 isolated_file:0 [ 911.659439][T11841] unevictable:768 dirty:92 writeback:0 [ 911.659439][T11841] slab_reclaimable:10535 slab_unreclaimable:102238 [ 911.659439][T11841] mapped:32660 shmem:4344 pagetables:1050 [ 911.659439][T11841] sec_pagetables:0 bounce:0 [ 911.659439][T11841] kernel_misc_reclaimable:0 [ 911.659439][T11841] free:1319974 free_pcp:410 free_cma:0 [ 911.705960][T11841] Node 0 active_anon:38156kB inactive_anon:0kB active_file:59644kB inactive_file:154476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130704kB dirty:368kB writeback:0kB shmem:15840kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11428kB pagetables:4200kB sec_pagetables:0kB all_unreclaimable? no [ 911.741460][T11841] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 911.787343][T11841] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 911.815396][T11841] lowmem_reserve[]: 0 2489 2490 0 0 [ 911.820713][T11841] Node 0 DMA32 free:1359280kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:38112kB inactive_anon:0kB active_file:59644kB inactive_file:154168kB unevictable:1536kB writepending:368kB present:3129332kB managed:2549508kB mlocked:0kB bounce:0kB free_pcp:1112kB local_pcp:0kB free_cma:0kB [ 911.861746][T11841] lowmem_reserve[]: 0 0 0 0 0 [ 911.867126][T11841] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 911.912635][T11841] lowmem_reserve[]: 0 0 0 0 0 [ 911.919324][T11841] Node 1 Normal free:3906072kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 911.951132][T11841] lowmem_reserve[]: 0 0 0 0 0 [ 911.956378][T11841] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 911.969560][T11841] Node 0 DMA32: 17*4kB (UE) 4*8kB (UME) 385*16kB (UME) 399*32kB (UME) 534*64kB (UME) 203*128kB (UM) 83*256kB (UME) 54*512kB (UM) 38*1024kB (UM) 6*2048kB (UME) 288*4096kB (UM) = 1358932kB [ 911.988775][T11841] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 912.001102][T11841] Node 1 Normal: 222*4kB (UME) 64*8kB (UME) 32*16kB (UE) 189*32kB (UE) 92*64kB (UME) 28*128kB (UME) 12*256kB (UME) 11*512kB (UME) 9*1024kB (UME) 6*2048kB (UE) 942*4096kB (ME) = 3906072kB [ 912.021145][T11841] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.043199][T11841] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=2 hugepages_size=2048kB [ 912.053102][T11841] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 912.070243][T11841] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 912.081328][T11841] 57905 total pagecache pages [ 912.092156][T11841] 0 pages in swap cache [ 912.097897][T11841] Free swap = 124576kB [ 912.102083][T11841] Total swap = 124996kB [ 912.112530][T11841] 2097051 pages RAM [ 912.117943][T11841] 0 pages HighMem/MovableOnly [ 912.122670][T11841] 427952 pages reserved [ 912.138027][T11841] 0 pages cma reserved [ 913.364021][T11870] slcan: can't register candev [ 913.369177][T11870] Falling back ldisc for ttyS3. [ 913.488110][ T5857] Bluetooth: hci2: command 0x0405 tx timeout [ 914.653896][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.683099][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.702805][T11719] bridge_slave_0: entered allmulticast mode [ 914.744434][T11719] bridge_slave_0: entered promiscuous mode [ 914.771069][T11719] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.012103][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.754848][T11719] bridge_slave_1: entered allmulticast mode [ 915.763253][T11719] bridge_slave_1: entered promiscuous mode [ 916.776479][T11753] chnl_net:caif_netlink_parms(): no params data found [ 916.820540][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.838663][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.035635][T11918] slcan: can't register candev [ 918.040769][T11918] Falling back ldisc for ttyS3. [ 918.045381][T11719] team0: Port device team_slave_0 added [ 918.286432][T11719] team0: Port device team_slave_1 added [ 919.519487][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.546560][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.645031][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.811494][T11753] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.833221][T11753] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.865409][T11753] bridge_slave_0: entered allmulticast mode [ 919.873838][T11753] bridge_slave_0: entered promiscuous mode [ 919.914284][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.936321][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.991894][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.285798][T11753] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.304029][T11753] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.314096][T11753] bridge_slave_1: entered allmulticast mode [ 920.335242][T11753] bridge_slave_1: entered promiscuous mode [ 920.525196][ T5899] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 920.585202][T11961] dlm: no locking on control device [ 920.710534][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 920.752915][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 920.783417][ T5899] usb 2-1: config 0 has no interfaces? [ 920.800520][ T5899] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 920.842179][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.893921][ T5899] usb 2-1: config 0 descriptor?? [ 921.167277][T11753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.226554][T11753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.279775][ T5841] usb 2-1: USB disconnect, device number 13 [ 921.557328][T11719] hsr_slave_0: entered promiscuous mode [ 921.576487][T11719] hsr_slave_1: entered promiscuous mode [ 921.594062][T11719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.612592][T11719] Cannot create hsr debugfs directory [ 921.717601][T11753] team0: Port device team_slave_0 added [ 921.753904][T11753] team0: Port device team_slave_1 added [ 922.726186][T11753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.745178][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.843797][T11753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.329656][T10249] bridge_slave_1: left allmulticast mode [ 923.344843][T10249] bridge_slave_1: left promiscuous mode [ 923.378831][T10249] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.414306][T10249] bridge_slave_0: left allmulticast mode [ 923.429454][T10249] bridge_slave_0: left promiscuous mode [ 923.454264][T10249] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.855542][T11983] slcan: can't register candev [ 925.861181][T11983] Falling back ldisc for ttyS3. [ 926.924351][T10249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.939527][T10249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.951543][T10249] bond0 (unregistering): Released all slaves [ 926.982933][T11753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.991250][T11753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.018423][T11753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.189982][T10249] hsr_slave_0: left promiscuous mode [ 927.214308][T10249] hsr_slave_1: left promiscuous mode [ 927.232858][T10249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.260109][T10249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 927.291932][T12001] dlm: no locking on control device [ 928.782059][T10249] team0 (unregistering): Port device team_slave_1 removed [ 928.940011][T10249] team0 (unregistering): Port device team_slave_0 removed [ 931.011497][T11753] hsr_slave_0: entered promiscuous mode [ 931.040504][T11753] hsr_slave_1: entered promiscuous mode [ 931.077329][T11753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 931.114445][T11753] Cannot create hsr debugfs directory [ 933.268869][T12029] slcan: can't register candev [ 933.274003][T12029] Falling back ldisc for ttyS3. [ 936.095803][T12058] dlm: no locking on control device [ 936.829409][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.857091][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.158016][T11719] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 939.237428][T11719] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 939.595199][T11719] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 939.626741][T11719] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 940.180083][T12087] slcan: can't register candev [ 940.185811][T12087] Falling back ldisc for ttyS3. [ 940.633920][T12089] IPVS: Scheduler module ip_vs_sip not found [ 941.513976][T11753] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 941.866942][T11753] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 941.888991][T11753] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 941.994736][T12105] dlm: no locking on control device [ 942.607924][T11753] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 942.692207][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.951022][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.003362][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.010671][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.789308][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.796573][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.580906][T11753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.982113][T12142] CIFS mount error: No usable UNC path provided in device string! [ 944.982113][T12142] [ 944.992797][T12142] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 945.620380][T11753] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.683760][T10248] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.691042][T10248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.585373][T12150] slcan: can't register candev [ 946.590499][T12150] Falling back ldisc for ttyS3. [ 946.853399][T10248] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.860669][T10248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.743999][T11753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.100041][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 950.116875][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 950.148403][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 950.162223][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 950.176448][ T5857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 950.184000][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 950.303900][T12165] dlm: no locking on control device [ 952.676160][T12211] CIFS mount error: No usable UNC path provided in device string! [ 952.676160][T12211] [ 952.688139][T12211] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 953.071260][T10134] Bluetooth: hci5: command tx timeout [ 953.249243][T12205] can0: slcan on ttyS3. [ 954.535893][T12202] can0 (unregistered): slcan off ttyS3. [ 955.126449][T10134] Bluetooth: hci5: command tx timeout [ 955.232702][T12235] ipt_REJECT: TCP_RESET invalid for non-tcp [ 956.121178][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 956.177039][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 956.188495][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 956.203780][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 956.211798][ T5857] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 956.219628][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 957.215541][ T5857] Bluetooth: hci5: command tx timeout [ 958.418077][ T5857] Bluetooth: hci1: command tx timeout [ 958.694950][T12260] CIFS mount error: No usable UNC path provided in device string! [ 958.694950][T12260] [ 958.705645][T12260] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 958.997806][T12182] chnl_net:caif_netlink_parms(): no params data found [ 959.047821][ T6058] bridge_slave_1: left allmulticast mode [ 959.053546][ T6058] bridge_slave_1: left promiscuous mode [ 959.070335][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.123160][ T6058] bridge_slave_0: left allmulticast mode [ 959.167328][ T6058] bridge_slave_0: left promiscuous mode [ 959.329716][T12263] dlm: no locking on control device [ 959.347223][ T5857] Bluetooth: hci5: command tx timeout [ 959.385741][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.495396][ T5857] Bluetooth: hci1: command tx timeout [ 962.200267][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.372066][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.565604][ T5857] Bluetooth: hci1: command tx timeout [ 962.615949][ T6058] bond0 (unregistering): Released all slaves [ 964.025163][T12300] dlm: no locking on control device [ 964.645930][ T5857] Bluetooth: hci1: command tx timeout [ 964.895213][ T6058] hsr_slave_0: left promiscuous mode [ 964.951571][ T6058] hsr_slave_1: left promiscuous mode [ 965.023774][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.056042][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.188499][T12313] slcan: can't register candev [ 968.193592][T12313] Falling back ldisc for ttyS3. [ 968.957769][T12324] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1400'. [ 969.586703][T12331] CIFS mount error: No usable UNC path provided in device string! [ 969.586703][T12331] [ 969.597020][T12331] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 970.278991][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1400'. [ 970.608194][ T6058] team0 (unregistering): Port device team_slave_1 removed [ 970.796946][ T6058] team0 (unregistering): Port device team_slave_0 removed [ 971.941692][T12336] dlm: no locking on control device [ 972.925086][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060825000: rx timeout, send abort [ 973.435058][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060825000: abort rx timeout. Force session deactivation [ 973.690720][T12241] chnl_net:caif_netlink_parms(): no params data found [ 976.657594][T12182] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.681382][T12182] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.719647][T12182] bridge_slave_0: entered allmulticast mode [ 976.746515][T12182] bridge_slave_0: entered promiscuous mode [ 976.768571][T12182] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.793800][T12182] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.813321][T12182] bridge_slave_1: entered allmulticast mode [ 976.822357][T12182] bridge_slave_1: entered promiscuous mode [ 976.839777][T12241] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.862527][T12241] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.872565][T12241] bridge_slave_0: entered allmulticast mode [ 976.884413][T12241] bridge_slave_0: entered promiscuous mode [ 976.902728][T12241] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.925579][T12241] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.932940][T12241] bridge_slave_1: entered allmulticast mode [ 976.943748][T12241] bridge_slave_1: entered promiscuous mode [ 977.011851][T12182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.056858][T12182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.251958][T12182] team0: Port device team_slave_0 added [ 978.035226][T12389] CIFS mount error: No usable UNC path provided in device string! [ 978.035226][T12389] [ 978.045399][T12389] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 978.256244][T12370] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 978.902689][T12182] team0: Port device team_slave_1 added [ 979.668837][T12241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.703608][T12241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.720627][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 979.731724][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1418'. [ 979.775986][T12182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.782990][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.885236][T12182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 980.245763][T12407] ieee802154 phy0 wpan0: encryption failed: -22 [ 981.203335][T12182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.211965][T12182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.238724][T12182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.287081][T12241] team0: Port device team_slave_0 added [ 981.338566][T12241] team0: Port device team_slave_1 added [ 981.638375][T12241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.656560][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.702974][T12241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.182177][T12417] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 982.843902][T12182] hsr_slave_0: entered promiscuous mode [ 982.866393][T12182] hsr_slave_1: entered promiscuous mode [ 982.872706][T12182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 982.893185][ T5841] kernel write not supported for file bpf-prog (pid: 5841 comm: kworker/1:3) [ 983.222768][T12434] CIFS mount error: No usable UNC path provided in device string! [ 983.222768][T12434] [ 983.233398][T12434] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 983.342930][T12427] devpts: Unknown parameter '[:' [ 983.544512][T12182] Cannot create hsr debugfs directory [ 983.617219][T12433] netlink: 'syz.5.1426': attribute type 1 has an invalid length. [ 984.131111][T12241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.194274][T12241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.235243][T12241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.387158][T12241] hsr_slave_0: entered promiscuous mode [ 985.419356][T12241] hsr_slave_1: entered promiscuous mode [ 985.484479][T12241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 985.515611][T12241] Cannot create hsr debugfs directory [ 988.758625][T12479] CIFS mount error: No usable UNC path provided in device string! [ 988.758625][T12479] [ 988.768765][T12479] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 989.218502][ T6058] bridge_slave_1: left allmulticast mode [ 989.231159][ T6058] bridge_slave_1: left promiscuous mode [ 989.257213][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.306766][ T6058] bridge_slave_0: left allmulticast mode [ 989.332652][ T6058] bridge_slave_0: left promiscuous mode [ 989.350743][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.324457][ T6058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.338614][ T6058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.350884][ T6058] bond0 (unregistering): Released all slaves [ 992.655740][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1447'. [ 992.842861][ T6058] hsr_slave_0: left promiscuous mode [ 992.870721][ T6058] hsr_slave_1: left promiscuous mode [ 992.879088][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.898044][ T6058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 994.725854][ T5857] Bluetooth: hci4: command 0x0406 tx timeout [ 994.971704][T12536] CIFS mount error: No usable UNC path provided in device string! [ 994.971704][T12536] [ 994.982394][T12536] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 995.319361][T12507] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 995.328078][T12507] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 995.345241][ T6058] team0 (unregistering): Port device team_slave_1 removed [ 995.412403][ T6058] team0 (unregistering): Port device team_slave_0 removed [ 995.530810][T12507] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 995.538889][T12507] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 995.582152][T12507] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 995.595689][T12507] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 995.655597][T12507] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 995.661563][T12507] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 997.924854][T12550] erspan0: left allmulticast mode [ 998.037729][T12550] erspan0: left promiscuous mode [ 998.103322][T12550] bridge0: port 3(erspan0) entered disabled state [ 998.204737][ T8] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 998.257821][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.264294][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.596108][T12550] bridge_slave_0: left allmulticast mode [ 998.601834][T12550] bridge_slave_0: left promiscuous mode [ 998.663085][T12550] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.683550][T12550] bridge_slave_1: left allmulticast mode [ 998.690011][T12550] bridge_slave_1: left promiscuous mode [ 998.698737][T12550] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.709830][ T8] usb 5-1: not running at top speed; connect to a high speed hub [ 998.723835][ T8] usb 5-1: config 1 has an invalid interface number: 35 but max is 0 [ 998.739415][ T8] usb 5-1: config 1 has no interface number 0 [ 998.756589][ T8] usb 5-1: config 1 interface 35 has no altsetting 0 [ 998.783967][ T8] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=bf.ea [ 998.792334][T12550] bond0: (slave bond_slave_0): Releasing backup interface [ 998.794331][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.810031][ T8] usb 5-1: Product: syz [ 998.814337][ T8] usb 5-1: Manufacturer: syz [ 998.855222][ T8] usb 5-1: SerialNumber: syz [ 999.005787][T12550] bond0: (slave bond_slave_1): Releasing backup interface [ 999.406581][T12550] team0: Port device team_slave_0 removed [ 999.527655][T12550] team0: Port device team_slave_1 removed [ 999.556169][T12550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 999.567910][T12550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.627369][T12550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.655156][T12550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.993190][T12552] team0: Mode changed to "loadbalance" [ 1000.316942][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 1001.878358][ T8] usb_ehset_test 5-1:1.35: probe with driver usb_ehset_test failed with error -32 [ 1001.896917][ T8] usb 5-1: USB disconnect, device number 5 [ 1002.533248][T12182] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1003.535384][T12182] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1003.673620][T12182] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1003.739337][T12182] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1004.588440][T12599] bridge0: port 4(erspan0) entered blocking state [ 1004.622447][T12599] bridge0: port 4(erspan0) entered disabled state [ 1004.635333][T12599] erspan0: entered allmulticast mode [ 1004.673809][T12599] erspan0: entered promiscuous mode [ 1004.686187][T12599] bridge0: port 4(erspan0) entered blocking state [ 1004.692780][T12599] bridge0: port 4(erspan0) entered forwarding state [ 1006.554200][T12622] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1474'. [ 1006.642948][T12182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.704239][T12182] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.796503][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.803753][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.874483][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.881816][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.118162][T12241] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1007.178340][T12241] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1007.222467][T12241] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1007.238898][T12241] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1008.881222][T12241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.014262][T12241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.179318][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.186591][T10249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.231604][T10249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.238967][T10249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.397248][ T1021] Bluetooth: (null): Invalid header checksum [ 1010.403424][ T1021] Bluetooth: (null): Invalid header checksum [ 1010.481952][ T6058] Bluetooth: (null): Invalid header checksum [ 1010.596763][T10134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1010.603354][ T1021] Bluetooth: (null): Invalid header checksum [ 1010.609144][T10134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1010.622184][T10134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1010.641854][T10134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1010.650498][T10134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1010.658719][T10134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1010.678285][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1010.686743][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1010.693108][ T6465] Bluetooth: (null): Invalid header checksum [ 1010.695042][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1010.720536][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1010.728666][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1010.737195][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1010.816766][T10249] Bluetooth: (null): Invalid header checksum [ 1013.184930][ T5857] Bluetooth: hci2: command tx timeout [ 1015.205102][ T5857] Bluetooth: hci2: command tx timeout [ 1015.422198][T12663] chnl_net:caif_netlink_parms(): no params data found [ 1015.508292][T10248] bridge_slave_1: left allmulticast mode [ 1015.525168][T10248] bridge_slave_1: left promiscuous mode [ 1015.531043][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.618581][T10248] bridge_slave_0: left allmulticast mode [ 1015.644205][T10248] bridge_slave_0: left promiscuous mode [ 1015.670273][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.904673][ T1021] Bluetooth: (null): Invalid header checksum [ 1016.929391][ T1021] Bluetooth: (null): Invalid header checksum [ 1016.954733][ T1021] Bluetooth: (null): Invalid header checksum [ 1017.039256][ T1021] Bluetooth: (null): Invalid header checksum [ 1017.154470][ T12] Bluetooth: (null): Invalid header checksum [ 1017.262184][ T1021] Bluetooth: (null): Invalid header checksum [ 1017.286270][ T5857] Bluetooth: hci2: command tx timeout [ 1017.377030][ T12] Bluetooth: (null): Invalid header checksum [ 1017.407112][T10134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1017.421027][T10134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1017.430227][T10134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1017.440380][T10134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1017.488618][T10134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1017.506686][T10134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.527432][ T12] Bluetooth: (null): Invalid header checksum [ 1019.374175][T10134] Bluetooth: hci2: command tx timeout [ 1019.616574][T10134] Bluetooth: hci1: command tx timeout [ 1020.421419][T10248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1020.441377][T10248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1020.454990][T10248] bond0 (unregistering): Released all slaves [ 1020.742328][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 1021.475205][T10248] hsr_slave_0: left promiscuous mode [ 1021.502068][T10248] hsr_slave_1: left promiscuous mode [ 1021.522483][T10248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1021.543717][T10248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1021.685275][T10134] Bluetooth: hci1: command tx timeout [ 1021.741754][ T1021] Bluetooth: (null): Invalid header checksum [ 1021.768016][ T1021] Bluetooth: (null): Invalid header checksum [ 1021.792440][ T1021] Bluetooth: (null): Invalid header checksum [ 1021.855215][ T1021] Bluetooth: (null): Invalid header checksum [ 1021.966132][ T2969] Bluetooth: (null): Invalid header checksum [ 1022.076581][ T1021] Bluetooth: (null): Invalid header checksum [ 1022.187523][ T6465] Bluetooth: (null): Invalid header checksum [ 1022.308348][ T2969] Bluetooth: (null): Invalid header checksum [ 1022.638138][T10248] team0 (unregistering): Port device team_slave_1 removed [ 1023.730305][T10248] team0 (unregistering): Port device team_slave_0 removed [ 1023.765993][T10134] Bluetooth: hci1: command tx timeout [ 1024.431664][ T8051] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1024.604610][ T8051] usb 6-1: Using ep0 maxpacket: 16 [ 1024.622599][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.644160][ T8051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.701710][ T8051] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1024.765340][ T8051] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1024.795850][ T8051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.860926][ T8051] usb 6-1: config 0 descriptor?? [ 1025.296742][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.305276][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.312544][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.321345][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.329232][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.337217][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.344471][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.369250][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.385623][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.423854][ T8051] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 1025.451792][ T8051] HID 045e:07da: Invalid code 65791 type 1 [ 1025.510272][ T8051] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0004/input/input8 [ 1025.877592][T10134] Bluetooth: hci1: command tx timeout [ 1026.213104][T12758] slcan: can't register candev [ 1026.218802][T12758] Falling back ldisc for ttyS3. [ 1026.292801][ T8051] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 1026.333120][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1514'. [ 1026.414643][T12663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.421926][T12663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.453244][T12663] bridge_slave_0: entered allmulticast mode [ 1026.469364][T12663] bridge_slave_0: entered promiscuous mode [ 1026.650156][T12663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.665415][T12663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.676157][T12663] bridge_slave_1: entered allmulticast mode [ 1026.704122][T12663] bridge_slave_1: entered promiscuous mode [ 1027.043917][T12663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.084911][ T8051] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1027.102396][T12663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.196241][T12663] team0: Port device team_slave_0 added [ 1027.229982][T12663] team0: Port device team_slave_1 added [ 1027.244882][ T8051] usb 5-1: device descriptor read/64, error -71 [ 1027.613275][ T2969] Bluetooth: (null): Invalid header checksum [ 1027.619971][ T8] usb 6-1: USB disconnect, device number 8 [ 1027.634585][ T8051] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1027.652943][ T2969] Bluetooth: (null): Invalid header checksum [ 1027.675540][ T2969] Bluetooth: (null): Invalid header checksum [ 1027.707471][T12663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.740787][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.771407][T12663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.771623][T10247] Bluetooth: (null): Invalid header checksum [ 1027.789407][ T8051] usb 5-1: device descriptor read/64, error -71 [ 1027.808527][T12663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.815829][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.856349][T12663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.882954][T10247] Bluetooth: (null): Invalid header checksum [ 1027.905151][ T8051] usb usb5-port1: attempt power cycle [ 1027.962172][ T35] Bluetooth: (null): Invalid header checksum [ 1028.067576][ T6058] Bluetooth: (null): Invalid header checksum [ 1028.176687][ T6058] Bluetooth: (null): Invalid header checksum [ 1028.254765][ T8051] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1028.408636][ T8051] usb 5-1: device descriptor read/8, error -71 [ 1028.500878][T12663] hsr_slave_0: entered promiscuous mode [ 1028.511517][T12663] hsr_slave_1: entered promiscuous mode [ 1028.522862][T12663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1028.538045][T12663] Cannot create hsr debugfs directory [ 1028.654885][ T8051] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1028.703344][ T8051] usb 5-1: device descriptor read/8, error -71 [ 1029.523663][ T8051] usb usb5-port1: unable to enumerate USB device [ 1029.894268][T12704] chnl_net:caif_netlink_parms(): no params data found [ 1031.337501][T12794] slcan: can't register candev [ 1031.342665][T12794] Falling back ldisc for ttyS3. [ 1031.467454][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 1031.948857][T12704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.988714][T12704] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.000451][T12704] bridge_slave_0: entered allmulticast mode [ 1032.031038][T12704] bridge_slave_0: entered promiscuous mode [ 1032.153004][T12704] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.185901][T12704] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.215612][T12704] bridge_slave_1: entered allmulticast mode [ 1032.242266][T12704] bridge_slave_1: entered promiscuous mode [ 1032.677309][T10248] bridge_slave_1: left allmulticast mode [ 1032.683011][T10248] bridge_slave_1: left promiscuous mode [ 1032.736540][T10248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.770530][T10248] bridge_slave_0: left allmulticast mode [ 1032.783934][T10248] bridge_slave_0: left promiscuous mode [ 1032.813934][T10248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.100962][T12807] netlink: 'syz.5.1526': attribute type 13 has an invalid length. [ 1033.115135][T12807] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1526'. [ 1033.815219][ T1021] Bluetooth: (null): Invalid header checksum [ 1033.837039][ T1021] Bluetooth: (null): Invalid header checksum [ 1033.845854][ T2969] Bluetooth: (null): Invalid header checksum [ 1033.959126][ T2969] Bluetooth: (null): Invalid header checksum [ 1033.980349][T10248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.001362][T10248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.015143][T10248] bond0 (unregistering): Released all slaves [ 1034.041257][T12704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.059871][T12807] syz_tun: refused to change device tx_queue_len [ 1034.071487][ T2969] Bluetooth: (null): Invalid header checksum [ 1034.080943][T12807] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1034.144328][T12704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.177796][ T6058] Bluetooth: (null): Invalid header checksum [ 1034.279475][T10248] hsr_slave_0: left promiscuous mode [ 1034.288311][ T2969] Bluetooth: (null): Invalid header checksum [ 1034.309535][T10248] hsr_slave_1: left promiscuous mode [ 1034.316879][T10248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.327719][T10248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1035.762622][ T8] IPVS: starting estimator thread 0... [ 1035.965144][T12824] IPVS: using max 18 ests per chain, 43200 per kthread [ 1038.012707][T12838] slcan: can't register candev [ 1038.018411][T12838] Falling back ldisc for ttyS3. [ 1038.431990][T10248] team0 (unregistering): Port device team_slave_1 removed [ 1038.556592][T10248] team0 (unregistering): Port device team_slave_0 removed [ 1040.666111][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1533'. [ 1040.871961][T12704] team0: Port device team_slave_0 added [ 1040.929667][T12704] team0: Port device team_slave_1 added [ 1041.172874][T12704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.193664][T12704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.236347][ T35] Bluetooth: (null): Invalid header checksum [ 1041.252583][ T35] Bluetooth: (null): Invalid header checksum [ 1041.263555][ T35] Bluetooth: (null): Invalid header checksum [ 1041.283265][T12704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.295637][ T6017] Bluetooth: (null): Invalid header checksum [ 1041.340654][T12704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.416864][ T6058] Bluetooth: (null): Invalid header checksum [ 1041.488535][T12704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.525503][ T35] Bluetooth: (null): Invalid header checksum [ 1041.531665][T12704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.645524][ T6017] Bluetooth: (null): Invalid header checksum [ 1041.852189][T12663] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1041.908025][T12704] hsr_slave_0: entered promiscuous mode [ 1041.919430][T12704] hsr_slave_1: entered promiscuous mode [ 1041.938667][T12704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.979264][T12704] Cannot create hsr debugfs directory [ 1041.991938][T12663] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1042.196456][T12663] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1042.221160][T12663] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1044.641780][T12663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.390698][T12663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.440891][T10249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.448175][T10249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.098435][ T2969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.105673][ T2969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.699053][T12663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1047.029483][T10249] Bluetooth: (null): Invalid header checksum [ 1047.072203][T10249] Bluetooth: (null): Invalid header checksum [ 1047.118686][T10249] Bluetooth: (null): Invalid header checksum [ 1047.222126][T12704] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1047.479609][ T1156] Bluetooth: (null): Invalid header checksum [ 1047.495148][ T1156] Bluetooth: (null): Invalid header checksum [ 1047.516811][ T1156] Bluetooth: (null): Invalid header checksum [ 1047.522957][ T1156] Bluetooth: (null): Invalid header checksum [ 1047.552546][ T1156] Bluetooth: (null): Invalid header checksum [ 1047.583382][T12704] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1047.920313][T12704] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1047.971664][T12704] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1048.393830][T12663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.546434][T12704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.675391][T12704] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.776882][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.784086][ T1021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.892472][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.899773][ T1021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.323128][T12704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1049.698459][T12663] veth0_vlan: entered promiscuous mode [ 1049.765432][T12663] veth1_vlan: entered promiscuous mode [ 1049.887783][T12663] veth0_macvtap: entered promiscuous mode [ 1049.932365][T12663] veth1_macvtap: entered promiscuous mode [ 1050.978181][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.014659][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.032074][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1051.042695][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1051.071926][T12663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.070522][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.100637][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.120891][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1052.144564][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1052.177214][T12663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.197111][T12704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1052.218159][T12663] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.234679][T12663] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.243433][T12663] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.304890][T12663] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.650496][T12971] bridge0: port 3(erspan0) entered blocking state [ 1053.690898][T12971] bridge0: port 3(erspan0) entered disabled state [ 1053.703426][T12971] erspan0: entered allmulticast mode [ 1053.949145][T12971] erspan0: entered promiscuous mode [ 1053.959555][T12971] bridge0: port 3(erspan0) entered blocking state [ 1053.966249][T12971] bridge0: port 3(erspan0) entered forwarding state [ 1054.068797][T10249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.098438][T10249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.344453][ T1156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.371801][ T1156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.842348][T12704] veth0_vlan: entered promiscuous mode [ 1055.968464][T12704] veth1_vlan: entered promiscuous mode [ 1056.112182][T12704] veth0_macvtap: entered promiscuous mode [ 1056.171824][T12704] veth1_macvtap: entered promiscuous mode [ 1056.313443][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.337335][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.359765][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.370897][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.381605][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.405719][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.433118][T12704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.572685][T13000] netlink: 'syz.8.1048': attribute type 1 has an invalid length. [ 1057.282042][T13005] slcan: can't register candev [ 1057.287823][T13005] Falling back ldisc for ttyS3. [ 1057.425969][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.454012][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.470947][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.481763][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.492835][T12704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.509608][T12704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.561636][T12704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.610445][T12704] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.635010][T12704] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.664143][T12704] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.699340][T12704] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.052008][ T2969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.122811][ T2969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.219755][T10248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.759299][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.835143][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.864722][T10248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.965482][T13138] netlink: 'syz.5.1591': attribute type 1 has an invalid length. [ 1072.255239][ T5987] IPVS: starting estimator thread 0... [ 1072.364648][T13156] IPVS: using max 20 ests per chain, 48000 per kthread [ 1076.713475][T13199] slcan: can't register candev [ 1076.719394][T13199] Falling back ldisc for ttyS3. [ 1076.836905][T13201] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1605'. [ 1078.219872][T13216] netlink: 'syz.9.1608': attribute type 1 has an invalid length. [ 1084.896215][ T5857] Bluetooth: hci1: command 0x0405 tx timeout [ 1088.499886][T13313] slcan: can't register candev [ 1088.507895][T13313] Falling back ldisc for ttyS3. [ 1088.604317][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1630'. [ 1092.750491][T13361] slcan: can't register candev [ 1092.756226][T13361] Falling back ldisc for ttyS3. [ 1092.895876][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1641'. [ 1098.596082][T13417] netlink: 'syz.1.1654': attribute type 2 has an invalid length. [ 1098.608982][T13417] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 1098.617573][T13417] netlink: 'syz.1.1654': attribute type 1 has an invalid length. [ 1098.696506][T13417] loop7: detected capacity change from 0 to 16384 [ 1100.437918][T13418] loop7: detected capacity change from 16384 to 16383 [ 1100.725835][ T5841] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1101.360180][ T5841] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1101.399244][ T5841] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1101.576918][ T5841] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1101.666192][ T5841] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.789075][T13445] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1101.821348][ T5841] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1102.253023][ T5841] usb 10-1: USB disconnect, device number 2 [ 1103.256401][T13464] udevd[13464]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1105.808218][T13502] netlink: 'syz.5.1678': attribute type 1 has an invalid length. [ 1106.723255][T13518] [ 1106.727221][T13518] ============================= [ 1106.732131][T13518] WARNING: suspicious RCU usage [ 1106.738211][T13518] 6.14.0-rc3-next-20250218-syzkaller #0 Not tainted [ 1106.745783][T13518] ----------------------------- [ 1106.750701][T13518] fs/kernfs/mount.c:243 suspicious rcu_dereference_check() usage! [ 1106.759483][T13518] [ 1106.759483][T13518] other info that might help us debug this: [ 1106.759483][T13518] [ 1106.770168][T13518] [ 1106.770168][T13518] rcu_scheduler_active = 2, debug_locks = 1 [ 1106.778855][T13518] 3 locks held by syz.5.1680/13518: [ 1106.784079][T13518] #0: ffff88802411b870 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60 [ 1106.795421][T13518] #1: ffff888033dc40e0 (&type->s_umount_key#59){++++}-{4:4}, at: super_lock+0x196/0x400 [ 1106.805959][T13518] #2: ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 1106.816656][T13518] [ 1106.816656][T13518] stack backtrace: [ 1106.822580][T13518] CPU: 1 UID: 0 PID: 13518 Comm: syz.5.1680 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 1106.822604][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1106.822614][T13518] Call Trace: [ 1106.822621][T13518] [ 1106.822628][T13518] dump_stack_lvl+0x241/0x360 [ 1106.822654][T13518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1106.822674][T13518] ? __pfx__printk+0x10/0x10 [ 1106.822687][T13518] ? do_raw_spin_lock+0x14f/0x370 [ 1106.822727][T13518] lockdep_rcu_suspicious+0x226/0x340 [ 1106.822749][T13518] kernfs_node_dentry+0x24b/0x2d0 [ 1106.822778][T13518] cgroup_do_get_tree+0x248/0x390 [ 1106.822803][T13518] cgroup_get_tree+0xbb/0x230 [ 1106.822829][T13518] vfs_get_tree+0x90/0x2b0 [ 1106.822855][T13518] vfs_cmd_create+0xa0/0x1f0 [ 1106.822873][T13518] ? __se_sys_fsconfig+0xa29/0xf60 [ 1106.822896][T13518] __se_sys_fsconfig+0xa33/0xf60 [ 1106.822927][T13518] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1106.822944][T13518] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1106.822973][T13518] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1106.823008][T13518] ? do_syscall_64+0x100/0x230 [ 1106.823047][T13518] ? __x64_sys_fsconfig+0x20/0xc0 [ 1106.823081][T13518] do_syscall_64+0xf3/0x230 [ 1106.823113][T13518] ? clear_bhb_loop+0x45/0xa0 [ 1106.823140][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.823161][T13518] RIP: 0033:0x7efde718d169 [ 1106.823176][T13518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1106.823189][T13518] RSP: 002b:00007efde7f53038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1106.823205][T13518] RAX: ffffffffffffffda RBX: 00007efde73a5fa0 RCX: 00007efde718d169 [ 1106.823216][T13518] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1106.823225][T13518] RBP: 00007efde720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.823235][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.823244][T13518] R13: 0000000000000000 R14: 00007efde73a5fa0 R15: 00007ffd299eff58 [ 1106.823274][T13518] [ 1107.027345][ C1] vkms_vblank_simulate: vblank timer overrun [ 1107.071335][T13518] [ 1107.073734][T13518] ============================================ [ 1107.079904][T13518] WARNING: possible recursive locking detected [ 1107.086069][T13518] 6.14.0-rc3-next-20250218-syzkaller #0 Not tainted [ 1107.092664][T13518] -------------------------------------------- [ 1107.098821][T13518] syz.5.1680/13518 is trying to acquire lock: [ 1107.104900][T13518] ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0xa2/0x5d0 [ 1107.115048][T13518] [ 1107.115048][T13518] but task is already holding lock: [ 1107.122431][T13518] ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 1107.132229][T13518] [ 1107.132229][T13518] other info that might help us debug this: [ 1107.140299][T13518] Possible unsafe locking scenario: [ 1107.140299][T13518] [ 1107.147775][T13518] CPU0 [ 1107.151064][T13518] ---- [ 1107.154353][T13518] lock(&root->kernfs_rwsem); [ 1107.159138][T13518] lock(&root->kernfs_rwsem); [ 1107.163920][T13518] [ 1107.163920][T13518] *** DEADLOCK *** [ 1107.163920][T13518] [ 1107.172074][T13518] May be due to missing lock nesting notation [ 1107.172074][T13518] [ 1107.180401][T13518] 3 locks held by syz.5.1680/13518: [ 1107.185613][T13518] #0: ffff88802411b870 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x9b2/0xf60 [ 1107.195503][T13518] #1: ffff888033dc40e0 (&type->s_umount_key#59){++++}-{4:4}, at: super_lock+0x196/0x400 [ 1107.205407][T13518] #2: ffff88801bef7148 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_node_dentry+0xc3/0x2d0 [ 1107.215648][T13518] [ 1107.215648][T13518] stack backtrace: [ 1107.221551][T13518] CPU: 0 UID: 0 PID: 13518 Comm: syz.5.1680 Not tainted 6.14.0-rc3-next-20250218-syzkaller #0 [ 1107.221578][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1107.221595][T13518] Call Trace: [ 1107.221603][T13518] [ 1107.221613][T13518] dump_stack_lvl+0x241/0x360 [ 1107.221644][T13518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1107.221668][T13518] ? __pfx__printk+0x10/0x10 [ 1107.221688][T13518] ? lockdep_unlock+0x16a/0x300 [ 1107.221727][T13518] print_deadlock_bug+0x483/0x620 [ 1107.221757][T13518] validate_chain+0x15e2/0x5920 [ 1107.221794][T13518] ? validate_chain+0x15c0/0x5920 [ 1107.221820][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1107.221859][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1107.221883][T13518] ? __lock_acquire+0x1397/0x2100 [ 1107.221917][T13518] ? __pfx_validate_chain+0x10/0x10 [ 1107.221947][T13518] ? mark_lock+0x9a/0x360 [ 1107.221970][T13518] __lock_acquire+0x1397/0x2100 [ 1107.222014][T13518] lock_acquire+0x1ed/0x550 [ 1107.222046][T13518] ? kernfs_dop_revalidate+0xa2/0x5d0 [ 1107.222076][T13518] ? __pfx_lock_acquire+0x10/0x10 [ 1107.222111][T13518] ? __pfx___might_resched+0x10/0x10 [ 1107.222151][T13518] down_read+0xb1/0xa40 [ 1107.222182][T13518] ? kernfs_dop_revalidate+0xa2/0x5d0 [ 1107.222209][T13518] ? __pfx_lock_acquire+0x10/0x10 [ 1107.222241][T13518] ? kernfs_root+0x1c/0x230 [ 1107.222262][T13518] ? __pfx_down_read+0x10/0x10 [ 1107.222319][T13518] ? kernfs_root+0x1c/0x230 [ 1107.222349][T13518] kernfs_dop_revalidate+0xa2/0x5d0 [ 1107.222379][T13518] lookup_one_unlocked+0x23b/0x2d0 [ 1107.222406][T13518] ? __pfx_lookup_one_unlocked+0x10/0x10 [ 1107.222431][T13518] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 1107.222465][T13518] ? nbcon_cpu_emergency_exit+0x6e/0xd0 [ 1107.222486][T13518] ? nbcon_cpu_emergency_exit+0x77/0xd0 [ 1107.222511][T13518] lookup_positive_unlocked+0x2b/0xb0 [ 1107.222536][T13518] kernfs_node_dentry+0x139/0x2d0 [ 1107.222570][T13518] cgroup_do_get_tree+0x248/0x390 [ 1107.222598][T13518] cgroup_get_tree+0xbb/0x230 [ 1107.222630][T13518] vfs_get_tree+0x90/0x2b0 [ 1107.222661][T13518] vfs_cmd_create+0xa0/0x1f0 [ 1107.222687][T13518] ? __se_sys_fsconfig+0xa29/0xf60 [ 1107.222714][T13518] __se_sys_fsconfig+0xa33/0xf60 [ 1107.222746][T13518] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1107.222771][T13518] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1107.222806][T13518] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1107.222841][T13518] ? do_syscall_64+0x100/0x230 [ 1107.222874][T13518] ? __x64_sys_fsconfig+0x20/0xc0 [ 1107.222901][T13518] do_syscall_64+0xf3/0x230 [ 1107.222932][T13518] ? clear_bhb_loop+0x45/0xa0 [ 1107.222964][T13518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1107.222994][T13518] RIP: 0033:0x7efde718d169 [ 1107.223013][T13518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1107.223031][T13518] RSP: 002b:00007efde7f53038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1107.223053][T13518] RAX: ffffffffffffffda RBX: 00007efde73a5fa0 RCX: 00007efde718d169 [ 1107.223070][T13518] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1107.223083][T13518] RBP: 00007efde720e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1107.223097][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1107.223110][T13518] R13: 0000000000000000 R14: 00007efde73a5fa0 R15: 00007ffd299eff58 [ 1107.223135][T13518] [ 1107.679396][ T5987] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1107.689580][ T5987] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz0