last executing test programs: 6m13.388540231s ago: executing program 0 (id=427): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m12.471945056s ago: executing program 0 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delneigh={0x28, 0x1d, 0x1, 0x8a, 0x0, {0x7, 0x0, 0x0, r5, 0x8, 0x12}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x28}}, 0x10) 6m10.457364134s ago: executing program 0 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000540)) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, r1, 0xe985e4df3848afb5, 0x20}, 0x14}}, 0x0) 6m6.675950001s ago: executing program 0 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x9}}, './bus\x00'}) syz_emit_ethernet(0xc4, &(0x7f0000000b00)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x8e, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000000, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af64490"}, {0x5, 0x3, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec712"}]}}}}}}, 0x0) 6m1.870350482s ago: executing program 0 (id=453): timer_create(0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) open(&(0x7f0000000040)='./file1\x00', 0x1a1142, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020}, 0x2020) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 6m0.22660893s ago: executing program 0 (id=455): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) 5m44.264537384s ago: executing program 32 (id=455): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) 4m2.005068186s ago: executing program 2 (id=668): mkdir(&(0x7f0000000340)='./file0\x00', 0x192) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff8000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x6, 0x5, "f06fca79266e82a74b6c5e443a04683cc267a0", 0x6, 0xc}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) 4m1.962500552s ago: executing program 3 (id=669): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = userfaultfd(0x801) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) io_setup(0x8, &(0x7f0000004200)=0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default use'], 0x2a, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0}]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_i']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000100)=0x6) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') umount2(0x0, 0x0) acct(&(0x7f00000000c0)='./file0\x00') 3m58.506800297s ago: executing program 2 (id=676): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 3m58.481844525s ago: executing program 3 (id=677): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000a80)={r2, 0x9, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x10, 0x7, 0x9, r2}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x10000000, 0x0, {{@in6=@private1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@private2, {0x2, 0x0, 0x0, 0xfffffffffffffff7, 0xfffffffffffffffd}, {}, {}, 0x70bd2d, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e22, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, 0x154}}, 0x0) 3m55.994915902s ago: executing program 3 (id=681): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) 3m54.192067917s ago: executing program 2 (id=684): socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f00000003c0)=""/174, 0xae, 0x40000000, &(0x7f00000000c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @local}}, 0x24) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_create(0x0, 0x0, &(0x7f0000000040)) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') read$msr(r5, &(0x7f00000001c0)=""/73, 0x49) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x104, 0x4, 0x3a0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x0}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@remote}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) 3m54.191660615s ago: executing program 3 (id=685): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3d}, 0x4e20, 0x3, 'dh\x00', 0x1, 0x800002, 0x6e}, 0x2c) lsm_get_self_attr(0x65, 0x0, 0x0, 0x0) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 3m50.505694561s ago: executing program 2 (id=690): socket$qrtr(0x2a, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000002240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) socket$netlink(0x10, 0x3, 0x15) mount$fuseblk(0x0, &(0x7f0000004240)='./file0\x00', 0x0, 0x8104a9, 0x0) 3m49.09481535s ago: executing program 3 (id=693): msgget$private(0x0, 0x123) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) read$msr(r0, &(0x7f0000000040)=""/115, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x3}, 0x6) getsockname(r1, 0x0, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=@framed={{}, [@generic={0x20, 0x0, 0xe, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41000}, 0x94) ptrace(0x10, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 3m44.118996254s ago: executing program 2 (id=696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 3m44.118437364s ago: executing program 3 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/23, 0x17) r5 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000004180), 0xff77) 3m43.032840125s ago: executing program 2 (id=701): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) add_key$user(0x0, 0x0, &(0x7f0000000000)="b6b0", 0x2, 0xfffffffffffffffe) iopl(0x3) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mount$9p_unix(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) 3m27.593963743s ago: executing program 33 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="beef915d564c90c200"/23, 0x17) r5 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000004180), 0xff77) 3m27.355121054s ago: executing program 34 (id=701): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) add_key$user(0x0, 0x0, &(0x7f0000000000)="b6b0", 0x2, 0xfffffffffffffffe) iopl(0x3) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mount$9p_unix(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0003006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) 2m42.808341232s ago: executing program 5 (id=787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0xb8) getgid() r3 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2m41.083431979s ago: executing program 5 (id=789): write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x20) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) fcntl$dupfd(r0, 0x0, r0) syz_open_dev$loop(&(0x7f0000000180), 0x8000000000000000, 0x501840) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r1 = gettid() syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80840, 0x1}) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c40) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40004) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = syz_io_uring_setup(0x4b6, 0x0, 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0xfffffff7, 0x0, &(0x7f00000003c0)=[{0x0}], &(0x7f0000000340)=[0x800], 0x1}, 0x20) timer_settime(r3, 0x7909497448d5a97d, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 2m40.075548911s ago: executing program 5 (id=792): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) r3 = socket$kcm(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x400c010) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x3, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd0500a4b4e00d9683dda1d11ea8002d4300400000eb50c0b8c2935782000000000000000000000000000800", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x7fc, 0x2]}}) 2m39.788928565s ago: executing program 5 (id=794): connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m36.052466168s ago: executing program 5 (id=797): syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x0, 0x1, 0x12d}, &(0x7f0000000100), &(0x7f0000000640)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) userfaultfd(0x801) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e27, 0x3, 'dh\x00', 0x1, 0x3, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@empty, 0x4e23, 0x10000, 0x8db, 0x12d5c, 0x12d5c}}, 0x44) pselect6(0x40, &(0x7f0000000000)={0x6, 0x9, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x90001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x9, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) 2m34.714377596s ago: executing program 5 (id=801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x181400, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc7000000) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00') openat(r4, &(0x7f0000000040)='./file0\x00', 0x80042, 0x4) 2m19.629609057s ago: executing program 35 (id=801): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90) r0 = fsopen(&(0x7f00000003c0)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x181400, 0x0) futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000140), 0xc7000000) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00') openat(r4, &(0x7f0000000040)='./file0\x00', 0x80042, 0x4) 19.405623267s ago: executing program 6 (id=971): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0xfffffffffffffffd, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045730, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$rds(0x15, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10) 16.265786754s ago: executing program 1 (id=973): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f}}], 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x6f) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, 0xdb, 0x8784}, 0x90) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010000104000000000200000000940bf1", @ANYRES32=0x0, @ANYBLOB="07800000000000001c0012800b0001006970766c616e00000c000280060001000000000008000500", @ANYRES32=r7], 0x44}}, 0x0) 14.866549139s ago: executing program 1 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_extract_tcp_res(0x0, 0xfffffff7, 0x3ff) r2 = gettid() mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff2000, 0x0) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x3, 0x4048c072, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) 13.422422687s ago: executing program 7 (id=976): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x0}) r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x3529, 0xf7da, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000000)={0x0, r0, 0x0, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) mount(0x0, 0x0, 0x0, 0x200440, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x8002890) r3 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r3, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r3, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r3) 13.211666671s ago: executing program 4 (id=978): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 12.183562113s ago: executing program 1 (id=980): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x3, &(0x7f0000000700)=""/231, 0xe7) 11.871933136s ago: executing program 4 (id=981): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x20000010) socket(0x840000000002, 0x3, 0x6) close(0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) 10.95370253s ago: executing program 7 (id=983): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x3}}, @NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x200}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x120a18af}, @NFULA_CFG_MODE={0xa, 0x2, {0x81}}]}, 0x64}, 0x1, 0x0, 0x0, 0xd010}, 0x8008000) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r6 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x0, &(0x7f0000000340)}) keyctl$set_timeout(0xf, r6, 0x101000) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x5}]}]}, 0x80}}, 0x0) 10.921593262s ago: executing program 1 (id=984): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000009ca) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, 0x0, &(0x7f0000000240)) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0), 0x0) 10.568492064s ago: executing program 6 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={0x3, 0x0, @ioapic={0x4, 0x1, 0xffffffff, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0xfd, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x5, '\x00', 0xa0}, {0x5, 0x6, 0x0, '\x00', 0x4}, {0xa, 0x6, 0x5, '\x00', 0x40}, {0xb8, 0xda, 0xb, '\x00', 0x59}, {0xb, 0x3, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x0, 0x6, 0x4, '\x00', 0x5}, {0xfe, 0x5, 0xd, '\x00', 0xa}, {0x2, 0xb, 0x45, '\x00', 0xc2}, {0xd2, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x6, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x0, 0x6, '\x00', 0xfd}, {0x1b, 0x9, 0x7, '\x00', 0x4}, {0x6, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x1}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0x3, 0xa, '\x00', 0x1}, {0x8a, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x1, 0x4, '\x00', 0x7b}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x0, 0x0, 0x0, 0x4}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x60, r4, 0x1, 0x70bd25, 0x25dfdbfe, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x5}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x4004810) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x90) socket$nl_generic(0x10, 0x3, 0x10) futex(0x0, 0x7, 0x1, 0x0, 0x0, 0x1) 9.404012605s ago: executing program 8 (id=986): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0xfffffec0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x36) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) 8.321756919s ago: executing program 6 (id=987): r0 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='rpc_pipefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f00000000c0)={0x5, 0x3, 0x1, "0000087aba10fdfffffb05001400", 0x56555959}) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x7) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x4, 0x3, 0x0, [0x0, 0x18000000], [0x8200, 0x1]}}, 0xe}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x18603}) 7.692586478s ago: executing program 1 (id=988): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400}, 0x4008840) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 6.6204299s ago: executing program 6 (id=989): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x20, 0x400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 6.610208514s ago: executing program 7 (id=990): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="03c800dcedd75601000000e105437a68ea9576d5118d42b34cda85b79490e248276943b9200b7211ded9450ba1b4c6efab05b8df9684e92dd23d5fb372dc2a05db33e996c171c20625f60557b971528ed226ba08893d475b4b163b608600000000000000"], 0x5) creat(&(0x7f00000002c0)='./file0\x00', 0x0) inotify_init1(0x0) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000280)=[{0x6, 0x6, 0x28, 0x7fff0006}, {0x48, 0x5, 0x74, 0x1000}, {0x5, 0x8, 0x9, 0x6}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2c, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0x1f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x0, 0x0, 0xfffffffc}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400a814}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r4}) 6.482519048s ago: executing program 4 (id=991): r0 = syz_io_uring_setup(0xdaf, &(0x7f0000000180)={0x0, 0x2, 0x13291, 0x0, 0x3b3}, &(0x7f0000000100), &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) socket$kcm(0x2d, 0x2, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000002600)=""/4096, 0x21, 0x1000, 0x1}, 0x28) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) 6.170182329s ago: executing program 7 (id=992): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x40000000}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$unlink(0x9, 0x0, 0x0) unshare(0x2040400) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) write$cgroup_devices(r1, &(0x7f0000000180)={'c', ' *:* ', 'm\x00'}, 0x8) 5.492066857s ago: executing program 8 (id=993): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x44997e9625d2448d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x4, "d1a2d6e7"}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000340)={0x19980330}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) 5.064842299s ago: executing program 4 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 4.25977451s ago: executing program 6 (id=995): close(0xffffffffffffffff) r0 = io_uring_setup(0x69fe, &(0x7f00000000c0)={0x0, 0x4b21, 0x8, 0x1, 0x373}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_io_uring_setup(0x1793, &(0x7f0000000140)={0x0, 0x8e7a, 0x8000, 0x0, 0x21a, 0x0, r0}, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x1, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"}) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000400)=0x1a) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x6) ioctl$TCFLSH(r3, 0x540b, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 3.559811696s ago: executing program 8 (id=996): mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r5 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xa9\x1fg\xf1\x85z{\x1d<\xe2\x1c7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xedn\x8c<5\xcf\x92;\x85)\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\x05\x831\xd3\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xf6\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xc6(\x19\xf8\xb4?Fv\xac\xc7m\xe1\xf68W\x19\x0f\x87\x84\xafK\x91v\xb5\xe7Cf\xe0L\b9\xe2\x15d~R4\xdf\xbb\xfeiH', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x0, 0x1000}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.318526832s ago: executing program 4 (id=997): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x8, @val=@iter={0x0}}, 0x20) 3.314152356s ago: executing program 1 (id=998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = mq_open(&(0x7f0000000480)='!s7l\x00\x00\x00\x10\x1c\x00\x00\x00\xd7\\r\x02\x00\x00\x00\x00\x00\x00\x00\xe0\xdc\xff\xff\xff\xff\xff\xff', 0x40, 0x196, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private2}, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) r2 = syz_io_uring_setup(0xec5, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x4000, &(0x7f00000001c0), 0x1, 0x40}) r5 = socket$netlink(0x10, 0x3, 0x10) openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300"], 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bind$netlink(r5, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe(&(0x7f0000000380)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f00000003c0)) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='0x00000000000000a2:0x0000000000000003:0x0000000000000dd9:0x000000000000002a:0x0000000000000008:0x00000000000000ed:0x000000000000000b:0x00'], 0xbd) ioctl$TCFLSH(r6, 0x540b, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x2, 0x10a5, 0x3, 0x0, 0x0) 3.307647024s ago: executing program 7 (id=999): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffdfe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) readv(r4, 0x0, 0x0) write$proc_mixer(r4, 0x0, 0xff0e) dup3(0xffffffffffffffff, r4, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_fscache}]}}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x20) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, 0x0, 0x44, 0x0) fanotify_mark(0xffffffffffffffff, 0x21, 0x8000008, 0xffffffffffffffff, 0x0) 2.253519463s ago: executing program 6 (id=1000): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000b4e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x88100, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000040)=0x2b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=ANY=[], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x3}, 0xfd}, 0x18) 2.250885574s ago: executing program 8 (id=1010): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) 1.957832124s ago: executing program 8 (id=1001): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x1c00) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @hyper}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x848000000015, 0x805, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r4 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) 302.16751ms ago: executing program 8 (id=1002): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) ioctl$TCXONC(r4, 0x540a, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1000000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r5}}) close_range(r1, 0xffffffffffffffff, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x10, {{@in6=@remote, @in6=@private1, 0x0, 0x0, 0x4e21, 0x0, 0xa, 0x20, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x80, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@local, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@remote, 0x0, 0x32}, 0x0, @in=@empty, 0x800000, 0x3}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3500, 0x3, 0x0, 0x1, 0x0, 0xabf}]}]}, 0x1bc}}, 0x44) 73.161634ms ago: executing program 7 (id=1003): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000240)=@arm64={0x4, 0x9, 0x9, '\x00', 0x10001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') move_mount(r2, &(0x7f00000000c0)='./mnt\x00', r2, 0x0, 0x172) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffe, 0x9}, 0x37, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x4, 0x0, 0x1, 0x10000, 0xcd, 0x3, 0x8, 0x5, 0x20001, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x2, 0x7b8ec57e, 0x2000006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x6, 0x0, 0x0, 0x1000000, 0xffffffff, 0x0, 0x0, 0x9], [0x0, 0x0, 0x4, 0x9, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x9, 0x24, 0x0, 0x200401, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1010, 0x0, 0xf, 0x0, 0x7fff, 0x0, 0x1, 0xffff8000, 0xfffffffe, 0x862, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0xa10000, 0x80000000, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb, 0x80000000, 0x0, 0x0, 0x4], [0x8000, 0x3, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x0, 0x6, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4c44, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1ff, 0x2, 0x8, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffe, 0xfffffff9, 0x17, 0x4], [0xffffeffc, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0xc045, 0x0, 0x0, 0x7, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc, 0xffffffff, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x4, 0x7, 0x8000, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x9]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x1, 0x4, 0x60}, 0x47, [0x3, 0x2a1, 0x6, 0x5, 0x1, 0x3c, 0x4f, 0x8, 0xffffff5b, 0x3000, 0x281, 0xfffffff8, 0x400, 0xe, 0xfffffff7, 0x9, 0x990, 0x6, 0x4, 0x1, 0xfffffff7, 0x9, 0x4, 0x8, 0x3, 0xf9, 0x0, 0x7, 0x5a09, 0x7632, 0x58, 0x1612, 0x47d9, 0x2, 0xf1b, 0x1, 0x0, 0x9, 0x7, 0x5, 0xcf, 0x0, 0x1, 0x0, 0x4, 0x1, 0x0, 0xf, 0x10000, 0x10000, 0xae, 0x34, 0x80000001, 0x1ff, 0x0, 0x893, 0x0, 0x6, 0x7fff, 0xfff, 0xe40c, 0x9, 0x3000, 0xae], [0xa03d, 0x6, 0x0, 0x401, 0xfffffffc, 0x8000, 0x80000001, 0x4, 0x5, 0x7, 0x6, 0x8, 0x3, 0x40, 0x1, 0x2000000, 0xa00, 0x632a, 0x7, 0x10000, 0x3, 0x7, 0x1d46, 0x4, 0x80000000, 0x3, 0x3, 0x8, 0xfffffffa, 0xb6, 0x8, 0x401, 0x4, 0xfffffff9, 0x8, 0x7f, 0x0, 0x5, 0x800, 0x6, 0x10001, 0x325, 0x9, 0x4, 0x5, 0x1, 0x9, 0xf4, 0x8001, 0x1, 0x6, 0xfabd, 0xfffffff8, 0x6, 0x55, 0x8, 0xede4, 0xf, 0x7, 0x80000000, 0xd1, 0x4, 0xe, 0x400], [0x9, 0x5, 0x1, 0xa, 0x7fff, 0x0, 0xd, 0x5, 0xffffffa5, 0x1, 0x2, 0x5, 0x401, 0x40, 0x4, 0x2, 0x1, 0x9, 0xfffffff9, 0x1000, 0x2, 0x0, 0x6, 0x9, 0x7, 0x9, 0x6, 0x9, 0xc14, 0x3, 0x8, 0x5, 0xb5b, 0xd04a, 0x947d, 0x1, 0x80000000, 0x2, 0x6, 0x7, 0xc, 0x80, 0x8, 0x7fffffff, 0xb2f, 0x2, 0x664, 0x3, 0x4, 0x80000001, 0x1, 0x3a92, 0x6, 0x8, 0x4, 0x193f, 0x6, 0x9, 0x9, 0x8001, 0x2, 0x0, 0xb88f, 0x7], [0x3, 0x2a5, 0xdd7, 0x0, 0xe, 0x5, 0x9, 0x5, 0xd, 0xffff0a22, 0x5, 0x7fffffff, 0x4, 0x8, 0xf24, 0x4, 0x58, 0x63, 0x6be, 0x7f, 0x6, 0xd4, 0x3, 0xfff, 0x10001, 0xfff, 0x80000000, 0x6, 0x144, 0x2, 0x5bf, 0x6, 0x2, 0x6, 0x1ff, 0x1, 0x4, 0x1, 0x8001, 0x8, 0x62, 0xfffffffc, 0x2, 0x0, 0x200, 0xff, 0x197cf6e9, 0x3ec78781, 0x1, 0x487, 0x1, 0x6d739670, 0x7, 0x1000, 0x8, 0x81, 0x4, 0x9, 0xfffffff0, 0x4, 0x5, 0xfffffffc, 0x7fff, 0x8]}, 0x45c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=1004): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x4, 0x101801) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xe8e41, 0x0) getrlimit(0x5, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): - 0 [ 95.521497][ T5851] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539763][ T5839] veth0_macvtap: entered promiscuous mode [ 95.555026][ T5849] veth0_vlan: entered promiscuous mode [ 95.563023][ T51] Bluetooth: hci2: command tx timeout [ 95.564303][ T5835] veth1_vlan: entered promiscuous mode [ 95.600574][ T5839] veth1_macvtap: entered promiscuous mode [ 95.630453][ T5849] veth1_vlan: entered promiscuous mode [ 95.643530][ T5157] Bluetooth: hci4: command tx timeout [ 95.649062][ T51] Bluetooth: hci3: command tx timeout [ 95.685800][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.696556][ T5845] veth0_macvtap: entered promiscuous mode [ 95.739601][ T5835] veth0_macvtap: entered promiscuous mode [ 95.749050][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.771280][ T5845] veth1_macvtap: entered promiscuous mode [ 95.814608][ T5835] veth1_macvtap: entered promiscuous mode [ 95.834823][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.845052][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.855053][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.863920][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.886519][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.894340][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.908031][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.908703][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.925905][ T5849] veth0_macvtap: entered promiscuous mode [ 95.951546][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.967282][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.976166][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.985217][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.009886][ T5849] veth1_macvtap: entered promiscuous mode [ 96.052535][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.060423][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.070056][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.109328][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.127970][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.153862][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.195375][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.215849][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.224957][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.234463][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.256845][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.282760][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.291569][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.305766][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.314725][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.346422][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.389734][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.454245][ T5951] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.496289][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.508163][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.529666][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.538155][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.674385][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.718171][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.818827][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.838499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.414764][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.436610][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.483432][ T51] Bluetooth: hci1: command tx timeout [ 97.489829][ T51] Bluetooth: hci0: command tx timeout [ 97.639044][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.666323][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.768512][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.861807][ T5157] Bluetooth: hci3: command tx timeout [ 97.867282][ T5157] Bluetooth: hci4: command tx timeout [ 97.899209][ T51] Bluetooth: hci2: command tx timeout [ 98.005472][ T5967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 98.302534][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.590981][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.693300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.480957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.642953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.788486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.889394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.197296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.207908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 102.322192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.332388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.432354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.433561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.613569][ T6001] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.14'. [ 103.828345][ T5995] syz.0.13 (5995) used greatest stack depth: 19512 bytes left [ 105.413235][ T6016] ptrace attach of ""[6017] was attempted by "./syz-executor exec"[6016] [ 106.283113][ T5840] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.212461][ T5840] usb 3-1: Using ep0 maxpacket: 32 [ 107.800258][ T5840] usb 3-1: device descriptor read/all, error -71 [ 113.136528][ T6069] vlan2: entered promiscuous mode [ 113.147735][ T6069] vlan2: entered allmulticast mode [ 113.159739][ T6069] hsr_slave_1: entered allmulticast mode [ 113.362693][ T6072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 117.290512][ T6108] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 117.297410][ T6108] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 117.312641][ T6108] vhci_hcd vhci_hcd.0: Device attached [ 118.460228][ T6109] vhci_hcd: connection closed [ 118.632073][ T2993] vhci_hcd: stop threads [ 118.642108][ T2993] vhci_hcd: release socket [ 118.656242][ T2993] vhci_hcd: disconnect device [ 118.953780][ T6118] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955 [ 121.171423][ T5952] IPVS: starting estimator thread 0... [ 121.209124][ T6124] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 121.757072][ T6125] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.892935][ T6156] binder: 6154:6156 ioctl 400c620e 200000000600 returned -22 [ 123.937192][ T6156] binder: 6154:6156 ioctl c0306201 2000000003c0 returned -14 [ 128.410089][ T6172] Set syz1 is full, maxelem 65536 reached [ 132.782818][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789321][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.502260][ T6237] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 135.515911][ T6237] Error validating options; rc = [-22] [ 135.880969][ T6242] tipc: Started in network mode [ 136.929368][ T6242] tipc: Node identity 826c39b5314d, cluster identity 4711 [ 137.453179][ T6242] tipc: Enabled bearer , priority 0 [ 138.270374][ T6256] tty tty21: ldisc open failed (-12), clearing slot 20 [ 138.533871][ T6252] syzkaller0: entered promiscuous mode [ 138.539420][ T6252] syzkaller0: entered allmulticast mode [ 138.575165][ T9] tipc: Node number set to 3005299125 [ 138.626511][ T6242] tipc: Resetting bearer [ 138.659198][ T6240] tipc: Resetting bearer [ 139.666293][ T6240] tipc: Disabling bearer [ 141.781437][ T6272] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 142.032256][ T6274] hsr_slave_0: left promiscuous mode [ 142.071040][ T6277] loop6: detected capacity change from 0 to 2560 [ 142.131476][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.187932][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.213298][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.095149][ T6286] trusted_key: syz.2.85 sent an empty control message without MSG_MORE. [ 143.323020][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.331013][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.406592][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.414696][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.422720][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.440609][ T6277] ldm_validate_partition_table(): Disk read failed. [ 143.492748][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.500834][ T6277] Buffer I/O error on dev loop6, logical block 0, async page read [ 143.641017][ T6277] Dev loop6: unable to read RDB block 0 [ 143.654400][ T6277] loop6: unable to read partition table [ 143.661059][ T6277] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 144.859930][ T5208] ldm_validate_partition_table(): Disk read failed. [ 145.093463][ T5208] Dev loop6: unable to read RDB block 0 [ 145.099793][ T5208] loop6: unable to read partition table [ 149.912678][ T6335] random: crng reseeded on system resumption [ 153.431194][ T6357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.103'. [ 154.144281][ T30] audit: type=1326 audit(1751809587.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 154.165611][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.112762][ T30] audit: type=1326 audit(1751809587.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 155.134136][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.142284][ T30] audit: type=1326 audit(1751809587.220:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 155.542883][ T30] audit: type=1326 audit(1751809587.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 155.581428][ T30] audit: type=1326 audit(1751809587.250:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 156.185167][ T30] audit: type=1326 audit(1751809587.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 156.273283][ T30] audit: type=1326 audit(1751809587.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 156.474802][ T6371] mmap: syz.1.108 (6371) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 157.131859][ T30] audit: type=1326 audit(1751809587.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 157.310998][ T30] audit: type=1326 audit(1751809587.310:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 158.095970][ T30] audit: type=1326 audit(1751809587.320:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6358 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 158.473400][ T6385] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 161.680710][ T6409] tipc: Enabled bearer , priority 0 [ 161.699485][ T6409] syzkaller0: entered promiscuous mode [ 161.766359][ T6409] syzkaller0: entered allmulticast mode [ 162.935401][ T6409] tipc: Resetting bearer [ 163.844269][ T6408] tipc: Resetting bearer [ 163.859598][ T6408] tipc: Disabling bearer [ 173.551247][ T6513] Zero length message leads to an empty skb [ 174.833602][ T6531] netlink: 20 bytes leftover after parsing attributes in process `syz.1.146'. [ 177.400244][ T6547] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 177.874583][ T6552] netlink: 'syz.4.153': attribute type 1 has an invalid length. [ 178.509243][ T6561] netlink: 'syz.0.154': attribute type 1 has an invalid length. [ 178.665945][ T6552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.745498][ T6555] bond1: (slave geneve2): making interface the new active one [ 178.758918][ T6555] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 178.815649][ T6568] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 179.036751][ T6560] vlan2: entered allmulticast mode [ 179.043355][ T6560] bond1: entered allmulticast mode [ 179.051512][ T6560] geneve2: entered allmulticast mode [ 179.903887][ T6560] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 181.121148][ T6561] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 182.082059][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 182.082109][ T30] audit: type=1804 audit(1751809614.510:14): pid=6583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.158" name="/newroot/36/file0" dev="tmpfs" ino=202 res=1 errno=0 [ 182.122275][ T5841] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 182.131408][ T5841] Bluetooth: hci1: Injecting HCI hardware error event [ 182.139910][ T5841] Bluetooth: hci1: hardware error 0x00 [ 182.411578][ T6587] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 182.900656][ T6565] veth3: entered promiscuous mode [ 185.081336][ T6608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 185.091584][ T5841] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 187.269489][ T6627] warning: `syz.2.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 190.526264][ T6655] syz.4.173: attempt to access beyond end of device [ 190.526264][ T6655] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 190.539701][ T6655] qnx6: unable to read the first superblock [ 190.547346][ T6655] syz.4.173: attempt to access beyond end of device [ 190.547346][ T6655] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 190.560377][ T6655] qnx6: unable to read the first superblock [ 190.566366][ T6655] qnx6: unable to read the first superblock [ 191.188882][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 191.200778][ T6656] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 191.310760][ T6657] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 191.391736][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 194.206697][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.304615][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.767301][ T9] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 195.904468][ T9] usb 1-1: can't read configurations, error -71 [ 199.949643][ T5840] IPVS: starting estimator thread 0... [ 200.093137][ T6696] IPVS: using max 36 ests per chain, 86400 per kthread [ 202.405639][ T6717] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[6717] [ 202.877529][ T6719] smc: net device bond0 applied user defined pnetid SYZ2 [ 202.888871][ T6719] smc: net device bond0 erased user defined pnetid SYZ2 [ 203.459301][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.194'. [ 204.941356][ T5171] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 205.111703][ T5171] usb 5-1: Using ep0 maxpacket: 8 [ 205.123822][ T5171] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.139654][ T5171] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.289265][ T5171] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.324309][ T5171] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.293667][ T5171] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.302876][ T5171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.367942][ T6742] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 207.376437][ T6743] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 207.850014][ T5171] usb 5-1: can't set config #16, error -71 [ 207.929113][ T5171] usb 5-1: USB disconnect, device number 2 [ 208.507227][ T5922] IPVS: starting estimator thread 0... [ 208.991715][ T6748] IPVS: using max 25 ests per chain, 60000 per kthread [ 209.441447][ T6758] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 209.441582][ T6758] Error validating options; rc = [-22] [ 209.976433][ T6753] nbd1: detected capacity change from 0 to 63 [ 210.457549][ T6755] block nbd1: NBD_DISCONNECT [ 210.498024][ T6763] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 210.720149][ T6755] block nbd1: Disconnected due to user request. [ 210.877252][ T6755] block nbd1: shutting down sockets [ 211.053377][ C0] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.062592][ C0] buffer_io_error: 27 callbacks suppressed [ 211.062601][ C0] Buffer I/O error on dev nbd1, logical block 0, async page read [ 211.076283][ C0] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.085337][ C0] Buffer I/O error on dev nbd1, logical block 1, async page read [ 211.093242][ C0] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.102288][ C0] Buffer I/O error on dev nbd1, logical block 2, async page read [ 211.110050][ C0] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.119099][ C0] Buffer I/O error on dev nbd1, logical block 3, async page read [ 211.158276][ T5846] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.229095][ T5846] Buffer I/O error on dev nbd1, logical block 0, async page read [ 211.721294][ T5846] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.731259][ T5846] Buffer I/O error on dev nbd1, logical block 1, async page read [ 211.797655][ T5846] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.865238][ T5846] Buffer I/O error on dev nbd1, logical block 2, async page read [ 211.882247][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 211.889217][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 211.896026][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.902650][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.982601][ T5846] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 211.992990][ T5846] Buffer I/O error on dev nbd1, logical block 3, async page read [ 212.000939][ T5846] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.027264][ T5846] Buffer I/O error on dev nbd1, logical block 0, async page read [ 212.048273][ T5846] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 212.059074][ T5846] Buffer I/O error on dev nbd1, logical block 1, async page read [ 212.073079][ T5846] ldm_validate_partition_table(): Disk read failed. [ 212.082508][ T5846] Dev nbd1: unable to read RDB block 0 [ 212.090292][ T5846] nbd1: unable to read partition table [ 212.349831][ T5846] ldm_validate_partition_table(): Disk read failed. [ 212.712300][ T6784] erofs (device nullb0): cannot find valid erofs superblock [ 213.006517][ T5846] Dev nbd1: unable to read RDB block 0 [ 213.736609][ T5846] nbd1: unable to read partition table [ 215.439112][ T6817] ptrace attach of "./syz-executor exec"[6818] was attempted by "./syz-executor exec"[6817] [ 216.055674][ T6820] syz_tun: entered allmulticast mode [ 216.195776][ T6819] syz_tun: left allmulticast mode [ 216.873262][ T6826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 219.596061][ T6848] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 219.602668][ T6848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 219.648652][ T6848] vhci_hcd vhci_hcd.0: Device attached [ 219.751180][ T6853] tc_dump_action: action bad kind [ 219.841989][ T5936] vhci_hcd: vhci_device speed not set [ 220.399082][ T6848] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(7) [ 220.405687][ T6848] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 220.445199][ T5936] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 220.492177][ T6848] vhci_hcd vhci_hcd.0: Device attached [ 220.500885][ T6857] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(10) [ 220.507570][ T6857] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 220.562654][ T6856] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(13) [ 220.569383][ T6856] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 221.164070][ T6856] vhci_hcd vhci_hcd.0: Device attached [ 221.219581][ T6848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 221.433679][ T6857] vhci_hcd vhci_hcd.0: Device attached [ 222.322621][ T6856] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 222.697887][ T6872] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 222.946149][ T6859] vhci_hcd: connection closed [ 222.948472][ T756] vhci_hcd: stop threads [ 222.965146][ T6854] vhci_hcd: connection closed [ 222.965851][ T6850] vhci_hcd: connection reset by peer [ 222.971938][ T756] vhci_hcd: release socket [ 222.980684][ T6858] vhci_hcd: connection closed [ 222.988618][ T756] vhci_hcd: disconnect device [ 223.193481][ T756] vhci_hcd: stop threads [ 223.197784][ T756] vhci_hcd: release socket [ 223.906371][ T756] vhci_hcd: disconnect device [ 224.020981][ T756] vhci_hcd: stop threads [ 224.025901][ T756] vhci_hcd: release socket [ 224.030588][ T756] vhci_hcd: disconnect device [ 224.044016][ T756] vhci_hcd: stop threads [ 224.048301][ T756] vhci_hcd: release socket [ 224.111748][ T756] vhci_hcd: disconnect device [ 224.127516][ C1] Unknown status report in ack skb [ 225.226145][ T6895] loop6: detected capacity change from 0 to 2560 [ 225.277946][ T6895] buffer_io_error: 138 callbacks suppressed [ 225.277965][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.391797][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.409837][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.460014][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 225.748301][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 226.492276][ T6908] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 226.504836][ T5936] vhci_hcd: vhci_device speed not set [ 226.763173][ T6916] syz.0.239 uses obsolete (PF_INET,SOCK_PACKET) [ 227.136118][ T61] Bluetooth: hci5: Frame reassembly failed (-84) [ 227.161011][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.274343][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.388372][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.529208][ T6895] ldm_validate_partition_table(): Disk read failed. [ 227.538797][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 227.555397][ T6895] Buffer I/O error on dev loop6, logical block 0, async page read [ 228.521833][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 228.560739][ T6895] Dev loop6: unable to read RDB block 0 [ 228.629256][ T6895] loop6: unable to read partition table [ 228.655659][ T6895] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 231.372491][ T6962] xt_ecn: cannot match TCP bits for non-tcp packets [ 237.183514][ T6997] xt_TCPMSS: Only works on TCP SYN packets [ 239.719485][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 246.169131][ T7068] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 246.308595][ T7070] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 246.322968][ T7068] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.330545][ T7068] IPv6: NLM_F_CREATE should be set when creating new route [ 246.337892][ T7068] IPv6: NLM_F_CREATE should be set when creating new route [ 246.352057][ T7070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 255.813109][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.819560][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.867198][ T7115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.291'. [ 257.909300][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 258.078976][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 259.150409][ T7149] netlink: 830 bytes leftover after parsing attributes in process `syz.2.300'. [ 260.148851][ T7158] futex_wake_op: syz.0.303 tries to shift op by -1; fix this program [ 263.364376][ T30] audit: type=1326 audit(1751809696.440:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 265.107520][ T30] audit: type=1326 audit(1751809696.440:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 265.347518][ T30] audit: type=1326 audit(1751809696.440:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 265.462022][ T30] audit: type=1326 audit(1751809696.440:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 265.711677][ T30] audit: type=1326 audit(1751809696.440:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 265.754628][ T30] audit: type=1326 audit(1751809696.440:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 265.819642][ T30] audit: type=1326 audit(1751809696.470:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 265.854502][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 265.912344][ T7205] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.921280][ T7205] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.930079][ T7205] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.939502][ T7205] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.495451][ T30] audit: type=1326 audit(1751809696.470:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 266.517798][ T30] audit: type=1326 audit(1751809696.470:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 266.564872][ T7205] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.575392][ T7205] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.584471][ T7205] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.593436][ T7205] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.603765][ T30] audit: type=1326 audit(1751809696.470:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7188 comm="syz.1.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 266.708873][ T7215] futex_wake_op: syz.1.318 tries to shift op by -1; fix this program [ 271.523796][ T7240] batman_adv: batadv0: Adding interface: dummy0 [ 271.530151][ T7240] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.555631][ T7240] batman_adv: batadv0: Interface activated: dummy0 [ 271.596672][ T7240] batadv0: mtu less than device minimum [ 271.604035][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.616500][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.628468][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.640441][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.652353][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.664439][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.676444][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.688408][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 271.700371][ T7240] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 276.152913][ T7257] vlan0: entered promiscuous mode [ 276.296552][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 276.508225][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 278.594116][ T7279] Process accounting resumed [ 279.115287][ T7284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 283.379157][ T1210] IPVS: starting estimator thread 0... [ 283.476305][ T7311] IPVS: using max 25 ests per chain, 60000 per kthread [ 287.297437][ T7346] overlay: Unknown parameter 'fsuuid' [ 287.884276][ T7340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.890489][ T7340] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 289.227029][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 289.502651][ T7340] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.508708][ T7340] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 289.698689][ T7340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.710109][ T7340] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 289.730937][ T7340] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.872065][ T5952] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 289.994117][ T7340] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 290.490638][ T5952] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.542060][ T7372] batman_adv: batadv0: Adding interface: dummy0 [ 290.542126][ T7372] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.548575][ T7372] batman_adv: batadv0: Interface activated: dummy0 [ 290.571355][ T7372] net_ratelimit: 10 callbacks suppressed [ 290.571387][ T7372] batadv0: mtu less than device minimum [ 290.573055][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 290.574684][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 290.576238][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 290.577744][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 290.579354][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 290.580875][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 290.582503][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 290.584007][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 290.585604][ T7372] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 291.847331][ T5952] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 291.847389][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 291.847414][ T5952] usb 2-1: Product: syz [ 291.847430][ T5952] usb 2-1: Manufacturer: syz [ 291.847445][ T5952] usb 2-1: SerialNumber: syz [ 292.711243][ T5952] usb 2-1: config 0 descriptor?? [ 293.058210][ T5908] IPVS: starting estimator thread 0... [ 293.148946][ T7382] netlink: 'syz.1.351': attribute type 1 has an invalid length. [ 293.240958][ T5952] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 293.445337][ T7383] IPVS: using max 37 ests per chain, 88800 per kthread [ 293.599040][ T7388] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 293.944083][ T7389] vivid-000: disconnect [ 294.233849][ T7380] vivid-000: reconnect [ 294.273808][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.487936][ T1210] usb 2-1: USB disconnect, device number 2 [ 298.034783][ T7417] process 'syz.0.366' launched './file2' with NULL argv: empty string added [ 298.692540][ T7405] syz.3.361 (7405) used greatest stack depth: 17928 bytes left [ 300.663351][ T7437] ubi31: attaching mtd0 [ 300.669942][ T7437] ubi31: scanning is finished [ 300.674756][ T7437] ubi31: empty MTD device detected [ 301.282113][ T7437] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 301.289772][ T7437] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 301.297201][ T7437] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 301.304293][ T7437] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 301.311867][ T7437] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 301.318731][ T7437] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 301.327158][ T7437] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1589123511 [ 301.337280][ T7437] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 301.351717][ T7445] ubi31: background thread "ubi_bgt31d" started, PID 7445 [ 301.741843][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.376'. [ 304.568365][ T5843] block nbd0: Receive control failed (result -32) [ 304.578714][ T7447] nbd0: detected capacity change from 0 to 63 [ 304.609927][ T7453] block nbd0: NBD_DISCONNECT [ 304.618692][ T6340] block nbd0: Dead connection, failed to find a fallback [ 304.710328][ T7453] block nbd0: Send disconnect failed -32 [ 305.988102][ T6340] block nbd0: shutting down sockets [ 306.001595][ T6340] blk_print_req_error: 138 callbacks suppressed [ 306.001613][ T6340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.497097][ T6340] buffer_io_error: 11 callbacks suppressed [ 306.497616][ T6340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 306.943658][ T55] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 0 [ 306.943749][ T55] Buffer I/O error on dev nbd0, logical block 1, async page read [ 306.943933][ T55] Buffer I/O error on dev nbd0, logical block 2, async page read [ 306.943986][ T55] Buffer I/O error on dev nbd0, logical block 3, async page read [ 306.944941][ T6340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.944982][ T6340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 306.945127][ T6340] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.945154][ T6340] Buffer I/O error on dev nbd0, logical block 1, async page read [ 306.945290][ T6340] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.945317][ T6340] Buffer I/O error on dev nbd0, logical block 2, async page read [ 306.945452][ T6340] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.945485][ T6340] Buffer I/O error on dev nbd0, logical block 3, async page read [ 306.945632][ T6340] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.945658][ T6340] Buffer I/O error on dev nbd0, logical block 0, async page read [ 306.945803][ T6340] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.945830][ T6340] Buffer I/O error on dev nbd0, logical block 1, async page read [ 306.945965][ T6340] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.946111][ T6340] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 306.948665][ T6340] ldm_validate_partition_table(): Disk read failed. [ 306.950699][ T6340] Dev nbd0: unable to read RDB block 0 [ 306.953027][ T6340] nbd0: unable to read partition table [ 307.023422][ T6340] ldm_validate_partition_table(): Disk read failed. [ 307.025459][ T6340] Dev nbd0: unable to read RDB block 0 [ 307.027599][ T6340] nbd0: unable to read partition table [ 308.248940][ T7499] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 308.304877][ T7499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 308.484027][ T7499] gretap1: entered promiscuous mode [ 308.488267][ T7499] bond1: (slave gretap1): making interface the new active one [ 308.489519][ T7499] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 308.868724][ T7499] macvlan2: entered promiscuous mode [ 308.868939][ T7499] macvlan2: entered allmulticast mode [ 309.491669][ T7499] bond1: entered promiscuous mode [ 309.492600][ T7499] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 309.494769][ T7499] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 309.538950][ T7499] bond1: left promiscuous mode [ 310.804181][ T7516] loop6: detected capacity change from 0 to 2560 [ 310.948831][ T5846] ldm_validate_partition_table(): Disk read failed. [ 310.949233][ T5846] Dev loop6: unable to read RDB block 0 [ 310.949688][ T5846] loop6: unable to read partition table [ 310.958348][ T7516] ldm_validate_partition_table(): Disk read failed. [ 310.958589][ T7516] Dev loop6: unable to read RDB block 0 [ 310.958867][ T7516] loop6: unable to read partition table [ 310.968138][ T7516] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 315.120878][ T7554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.212053][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.219758][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.403553][ T7626] Bluetooth: MGMT ver 1.23 [ 324.066896][ T7643] o2cb: This node has not been configured. [ 324.073050][ T7643] o2cb: Cluster check failed. Fix errors before retrying. [ 324.089187][ T7643] (syz.0.418,7643,1):user_dlm_register:674 ERROR: status = -22 [ 324.098482][ T7643] (syz.0.418,7643,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 327.303986][ T7683] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 327.320627][ T7683] VFS: Can't find a romfs filesystem on dev nullb0. [ 327.320627][ T7683] [ 327.999336][ T7671] kvm: pic: non byte write [ 329.296195][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 336.261107][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 338.632919][ T7781] Cannot find add_set index 0 as target [ 340.531050][ T7794] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 340.561395][ T7790] kvm: pic: non byte read [ 340.575941][ T7790] kvm: pic: non byte read [ 340.581182][ T7790] kvm: pic: non byte read [ 340.590113][ T7790] kvm: pic: non byte read [ 340.595500][ T7790] kvm: pic: non byte read [ 340.600363][ T7790] kvm: pic: non byte read [ 340.606178][ T7790] kvm: pic: single mode not supported [ 340.606358][ T7790] kvm: pic: level sensitive irq not supported [ 340.763358][ T7790] kvm: pic: non byte read [ 340.774485][ T7790] kvm: pic: single mode not supported [ 340.774506][ T7790] kvm: pic: level sensitive irq not supported [ 340.780161][ T7790] kvm: pic: non byte read [ 340.793608][ T7790] kvm: pic: non byte read [ 340.798425][ T7790] kvm: pic: non byte read [ 344.643488][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 344.643510][ T30] audit: type=1326 audit(1751809777.680:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396458e929 code=0x7ffc0000 [ 344.874491][ T30] audit: type=1326 audit(1751809777.680:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7834 comm="syz.2.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f396458e929 code=0x7ffc0000 [ 347.352136][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 347.619187][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 351.992541][ T7890] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.480'. [ 353.580332][ T7906] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 353.773876][ T7906] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 357.522826][ T7933] net_ratelimit: 10 callbacks suppressed [ 357.522846][ T7933] netlink: zone id is out of range [ 357.533889][ T7933] netlink: zone id is out of range [ 357.539032][ T7933] netlink: zone id is out of range [ 357.544307][ T7933] netlink: zone id is out of range [ 357.549452][ T7933] netlink: zone id is out of range [ 357.554674][ T7933] netlink: zone id is out of range [ 357.559815][ T7933] netlink: zone id is out of range [ 357.565001][ T7933] netlink: zone id is out of range [ 357.570143][ T7933] netlink: zone id is out of range [ 357.575366][ T7933] netlink: zone id is out of range [ 357.931852][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 357.952528][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 357.964068][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 357.972524][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 357.980090][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 357.993297][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.000644][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.008291][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.016390][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.024614][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.219186][ T7943] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 358.679534][ T7937] chnl_net:caif_netlink_parms(): no params data found [ 359.482208][ T7954] siw: device registration error -23 [ 360.041888][ T5841] Bluetooth: hci5: command tx timeout [ 360.141600][ T7962] overlayfs: missing 'lowerdir' [ 360.685198][ T7967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 360.738197][ T7937] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.761928][ T7937] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.781996][ T7937] bridge_slave_0: entered allmulticast mode [ 360.789368][ T7959] fuse: Bad value for 'rootmode' [ 361.748752][ T7937] bridge_slave_0: entered promiscuous mode [ 362.125063][ T5841] Bluetooth: hci5: command tx timeout [ 362.142471][ T7969] bridge1: port 1(veth3) entered blocking state [ 362.170138][ T7969] bridge1: port 1(veth3) entered disabled state [ 362.218521][ T7969] veth3: entered allmulticast mode [ 362.788394][ T7969] veth3: entered promiscuous mode [ 362.816890][ T7973] bridge1: port 2(veth0_to_bond) entered blocking state [ 362.824636][ T7973] bridge1: port 2(veth0_to_bond) entered disabled state [ 362.956700][ T7973] veth0_to_bond: entered allmulticast mode [ 363.167435][ T7973] veth0_to_bond: entered promiscuous mode [ 363.326090][ T7937] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.395071][ T7937] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.449453][ T7937] bridge_slave_1: entered allmulticast mode [ 363.468393][ T7937] bridge_slave_1: entered promiscuous mode [ 363.522568][ T7967] vlan2: entered allmulticast mode [ 363.527759][ T7967] veth1: entered allmulticast mode [ 363.557124][ T7967] bridge1: port 3(vlan2) entered blocking state [ 363.564084][ T7967] bridge1: port 3(vlan2) entered disabled state [ 363.577657][ T7967] vlan2: entered promiscuous mode [ 363.582937][ T7967] veth1: entered promiscuous mode [ 364.271666][ T5841] Bluetooth: hci5: command tx timeout [ 366.992563][ T7937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.008967][ T5841] Bluetooth: hci5: command tx timeout [ 367.341696][ T7937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.797830][ T8013] SET target dimension over the limit! [ 368.659280][ T7937] team0: Port device team_slave_0 added [ 369.025132][ T7937] team0: Port device team_slave_1 added [ 370.235473][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.277065][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.207582][ T7937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.251759][ T7937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.268004][ T7937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.331980][ T7937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.533928][ T8029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.632548][ T7937] hsr_slave_0: entered promiscuous mode [ 371.649684][ T7937] hsr_slave_1: entered promiscuous mode [ 371.669679][ T7937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.691617][ T7937] Cannot create hsr debugfs directory [ 373.281018][ T8049] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.797619][ T7937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 375.009077][ T7937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 375.036062][ T7937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 375.773387][ T7937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.809750][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'. [ 377.819917][ T8087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.530'. [ 378.415761][ T7937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.446372][ T7937] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.542302][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.548844][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.621498][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.628712][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.735075][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.742280][ T7957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.152425][ T7937] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.162897][ T7937] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.879326][ T8113] netlink: 'syz.2.535': attribute type 1 has an invalid length. [ 382.809758][ T8124] netlink: 68 bytes leftover after parsing attributes in process `syz.1.538'. [ 384.805191][ T7937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.605618][ T8165] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 388.111194][ T8168] evm: overlay not supported [ 391.196292][ T7937] veth0_vlan: entered promiscuous mode [ 391.245992][ T7937] veth1_vlan: entered promiscuous mode [ 391.379425][ T7937] veth0_macvtap: entered promiscuous mode [ 391.392964][ T7937] veth1_macvtap: entered promiscuous mode [ 391.419227][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.441051][ T7937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.593537][ T7937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.603031][ T7937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.612314][ T7937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.621294][ T7937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.873282][ T8225] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 395.369111][ T756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.421840][ T756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.543759][ T8233] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 395.637835][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.655948][ T8237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 396.572192][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.619113][ T8233] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.371678][ T8247] netlink: 'syz.1.565': attribute type 21 has an invalid length. [ 397.594106][ T8237] bond1 (unregistering): Released all slaves [ 398.153049][ T8247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.565'. [ 399.992231][ T8268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.506410][ T8280] xt_socket: unknown flags 0x50 [ 403.388196][ T8300] Illegal XDP return value 4294967274 on prog (id 185) dev N/A, expect packet loss! [ 403.775434][ T8297] netlink: 'syz.5.577': attribute type 1 has an invalid length. [ 406.397908][ T8318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.653649][ T8326] net_ratelimit: 543 callbacks suppressed [ 406.653670][ T8326] TCP: out of memory -- consider tuning tcp_mem [ 408.650619][ T8338] comedi comedi3: dt2801: I/O port conflict (0x1,2) [ 409.142957][ T8338] comedi comedi0: comedi_test: 236 microvolt, 100000 microsecond waveform attached [ 412.026350][ T8365] netlink: 132 bytes leftover after parsing attributes in process `syz.3.593'. [ 413.525871][ T8373] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 413.525871][ T8373] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 415.226408][ T8383] input input8: cannot allocate more than FF_MAX_EFFECTS effects [ 416.833003][ T8392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.644037][ T8387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.401285][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 418.455096][ T8403] loop6: detected capacity change from 0 to 63 [ 418.827898][ T8403] support for the xor transformation has been removed. [ 419.539423][ T8408] sp0: Synchronizing with TNC [ 419.612196][ T5846] buffer_io_error: 175 callbacks suppressed [ 419.612216][ T5846] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.643729][ T5846] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.667814][ T5846] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.775486][ T5846] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.820974][ T5846] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.839793][ T5846] Buffer I/O error on dev loop6, logical block 0, async page read [ 419.905017][ T5846] Buffer I/O error on dev loop6, logical block 3, async page read [ 421.375977][ T8421] bridge2: entered promiscuous mode [ 425.010452][ T30] audit: type=1326 audit(1751809857.660:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8431 comm="syz.5.612" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f520758e929 code=0x0 [ 426.338179][ T8454] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 426.712120][ T5922] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 427.164062][ T5922] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 427.179907][ T5922] usb 2-1: config 0 has no interface number 0 [ 427.234999][ T5922] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 427.264668][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.286084][ T5922] usb 2-1: Product: syz [ 427.299721][ T5922] usb 2-1: Manufacturer: syz [ 427.314406][ T5922] usb 2-1: SerialNumber: syz [ 427.356220][ T5922] usb 2-1: config 0 descriptor?? [ 427.797255][ T5922] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 427.898214][ T5922] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 427.928420][ T5922] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 428.557682][ T8473] usb usb8: usbfs: process 8473 (syz.5.621) did not claim interface 0 before use [ 428.587416][ T5922] usb 2-1: media controller created [ 428.791950][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.939492][ T8467] xt_CT: No such helper "snmp" [ 429.042767][ T5922] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 429.150101][ T5922] usb 2-1: USB disconnect, device number 3 [ 435.584358][ T8517] tty tty29: ldisc open failed (-12), clearing slot 28 [ 436.341879][ T5936] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 436.705853][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 436.917741][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.939104][ T5936] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 437.063187][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.485743][ T5936] usb 4-1: config 0 descriptor?? [ 437.632400][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.638'. [ 437.651798][ T8535] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.660235][ T8535] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.500694][ T5936] hid-multitouch 0003:0EEF:72C4.0001: unknown main item tag 0x0 [ 438.607602][ T5936] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 439.327134][ T8541] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 439.991798][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.998239][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.956409][ T5908] usb 4-1: USB disconnect, device number 2 [ 444.722279][ T30] audit: type=1800 audit(1751809877.650:85): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.649" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 446.187387][ T30] audit: type=1804 audit(1751809879.250:86): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.650" name="/newroot/135/bus/file1" dev="overlay" ino=725 res=1 errno=0 [ 446.595972][ T8593] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 447.221587][ T30] audit: type=1804 audit(1751809879.280:87): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.650" name="/newroot/135/bus/file0" dev="overlay" ino=725 res=1 errno=0 [ 447.246670][ T30] audit: type=1800 audit(1751809879.280:88): pid=8581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.650" name="bus" dev="overlay" ino=728 res=0 errno=0 [ 447.675617][ T5936] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 447.753138][ T5908] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 448.171712][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 448.382470][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.404875][ T5908] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 448.424481][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.434651][ T5908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.461688][ T5936] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 448.467460][ T5908] usb 6-1: Product: syz [ 448.491153][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.511580][ T5908] usb 6-1: Manufacturer: syz [ 448.538820][ T5908] usb 6-1: SerialNumber: syz [ 448.544883][ T5936] usb 2-1: config 0 descriptor?? [ 448.579791][ T5908] usb 6-1: config 0 descriptor?? [ 449.308471][ T8620] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.659'. [ 449.366416][ T8620] sp0: Synchronizing with TNC [ 449.385788][ T5936] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 449.440158][ T5908] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 449.449069][ T5936] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 449.499595][ T5936] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input9 [ 449.851618][ T5886] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 449.986464][ T8628] ======================================================= [ 449.986464][ T8628] WARNING: The mand mount option has been deprecated and [ 449.986464][ T8628] and is ignored by this kernel. Remove the mand [ 449.986464][ T8628] option from the mount to silence this warning. [ 449.986464][ T8628] ======================================================= [ 450.067164][ T8628] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 450.773020][ T5936] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 450.902032][ T5936] usb 2-1: USB disconnect, device number 4 [ 450.954785][ T5886] usb 3-1: config 0 has an invalid interface number: 190 but max is 0 [ 450.971619][ T5886] usb 3-1: config 0 has no interface number 0 [ 450.977778][ T5886] usb 3-1: config 0 interface 190 has no altsetting 0 [ 451.029672][ T5886] usb 3-1: New USB device found, idVendor=0411, idProduct=017f, bcdDevice=85.ac [ 451.084132][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.095166][ T8632] fido_id[8632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 451.131554][ T5886] usb 3-1: Product: syz [ 451.135791][ T5886] usb 3-1: Manufacturer: syz [ 451.140419][ T5886] usb 3-1: SerialNumber: syz [ 451.393874][ T5886] usb 3-1: config 0 descriptor?? [ 452.400100][ T5908] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 455.206290][ T5908] usb 6-1: USB disconnect, device number 2 [ 455.262945][ T5886] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 455.350717][ T5886] usb 3-1: USB disconnect, device number 4 [ 457.323646][ T8646] netlink: 180 bytes leftover after parsing attributes in process `syz.1.665'. [ 457.922411][ T8662] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 458.114393][ T8671] __vm_enough_memory: pid: 8671, comm: syz.5.671, bytes: 21200669622272 not enough memory for the allocation [ 458.158895][ T8659] fuse: Bad value for 'fd' [ 458.434727][ T5915] Process accounting resumed [ 460.856185][ T8659] Process accounting resumed [ 464.182482][ T8714] lo speed is unknown, defaulting to 1000 [ 464.200495][ T8714] lo speed is unknown, defaulting to 1000 [ 464.211725][ T8714] lo speed is unknown, defaulting to 1000 [ 464.983533][ T8714] infiniband syz0: set active [ 464.988541][ T8714] infiniband syz0: added lo [ 464.994238][ T8714] syz0: rxe_create_cq: returned err = -12 [ 465.001339][ T8714] infiniband syz0: Couldn't create ib_mad CQ [ 465.007573][ T8714] infiniband syz0: Couldn't open port 1 [ 465.020363][ T5952] lo speed is unknown, defaulting to 1000 [ 465.036405][ T8714] RDS/IB: syz0: added [ 465.040714][ T8714] smc: adding ib device syz0 with port count 1 [ 465.047052][ T8714] smc: ib device syz0 port 1 has pnetid [ 465.055877][ T8714] lo speed is unknown, defaulting to 1000 [ 465.094846][ T5886] lo speed is unknown, defaulting to 1000 [ 465.221791][ T5936] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 466.344075][ T8714] lo speed is unknown, defaulting to 1000 [ 466.493866][ T8714] lo speed is unknown, defaulting to 1000 [ 466.641679][ T8714] lo speed is unknown, defaulting to 1000 [ 466.789252][ T8714] lo speed is unknown, defaulting to 1000 [ 466.937768][ T8714] lo speed is unknown, defaulting to 1000 [ 467.260162][ T5936] usb 5-1: Using ep0 maxpacket: 32 [ 467.610035][ T5936] usb 5-1: device descriptor read/all, error -71 [ 469.781837][ T8743] xt_TPROXY: Can be used only with -p tcp or -p udp [ 471.301933][ T30] audit: type=1326 audit(1751809904.370:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 472.348311][ T30] audit: type=1326 audit(1751809904.370:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 472.390875][ T30] audit: type=1326 audit(1751809904.370:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc07cf8d290 code=0x7ffc0000 [ 472.879157][ T30] audit: type=1326 audit(1751809904.370:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc07cf90157 code=0x7ffc0000 [ 474.923202][ T30] audit: type=1326 audit(1751809904.370:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 474.946242][ T30] audit: type=1326 audit(1751809904.370:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc07cf90157 code=0x7ffc0000 [ 474.968773][ T30] audit: type=1326 audit(1751809904.370:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc07cf8d58a code=0x7ffc0000 [ 474.990485][ T30] audit: type=1326 audit(1751809904.370:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 475.071640][ T30] audit: type=1326 audit(1751809904.370:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 475.101007][ T30] audit: type=1326 audit(1751809904.400:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8755 comm="syz.3.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc07cf8e929 code=0x7ffc0000 [ 477.852388][ T8779] siw: device registration error -23 [ 478.224444][ T8782] netlink: 'syz.2.701': attribute type 2 has an invalid length. [ 482.800786][ T8812] overlayfs: missing 'workdir' [ 482.844710][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'. [ 482.867003][ T8812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.711'. [ 482.890368][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.711'. [ 486.412755][ T8831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 486.888866][ T8841] capability: warning: `syz.4.716' uses 32-bit capabilities (legacy support in use) [ 488.141381][ T8851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.601367][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.610631][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.620559][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.630192][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.639440][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.648569][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.657771][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.666948][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.676131][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 495.685273][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 497.689114][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.699789][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.707926][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.716687][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.726126][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 497.934302][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 497.949430][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 497.960027][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 497.976548][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 497.988581][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 498.285174][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.913661][ T8940] lo speed is unknown, defaulting to 1000 [ 499.908425][ T5843] Bluetooth: hci1: command tx timeout [ 499.995292][ T5886] IPVS: starting estimator thread 0... [ 500.062574][ T5843] Bluetooth: hci3: command tx timeout [ 500.252640][ T8949] IPVS: using max 27 ests per chain, 64800 per kthread [ 500.332577][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.366500][ T8954] netlink: 'syz.1.735': attribute type 1 has an invalid length. [ 500.519932][ T8954] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.559560][ T8956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.567045][ T8956] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 500.595576][ T8956] bond1: (slave ipip0): Error -95 calling set_mac_address [ 500.649308][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.706032][ T8958] bond1: (slave ip6erspan0): making interface the new active one [ 500.718558][ T8958] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 500.729986][ T8935] lo speed is unknown, defaulting to 1000 [ 500.808519][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.442685][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.449287][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.961782][ T5843] Bluetooth: hci1: command tx timeout [ 502.121726][ T5843] Bluetooth: hci3: command tx timeout [ 502.236470][ T8965] tipc: Started in network mode [ 502.308392][ T8965] tipc: Node identity 4, cluster identity 4711 [ 502.315383][ T8965] tipc: Node number set to 4 [ 503.520360][ T13] bridge_slave_1: left allmulticast mode [ 503.540032][ T13] bridge_slave_1: left promiscuous mode [ 503.748100][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.079123][ T5843] Bluetooth: hci1: command tx timeout [ 504.161382][ T13] bridge_slave_0: left allmulticast mode [ 504.216785][ T5843] Bluetooth: hci3: command tx timeout [ 504.241611][ T13] bridge_slave_0: left promiscuous mode [ 504.247458][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.580692][ T8998] __nla_validate_parse: 42 callbacks suppressed [ 504.580711][ T8998] netlink: 308 bytes leftover after parsing attributes in process `syz.5.743'. [ 504.596861][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.743'. [ 505.011092][ T8999] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.742'. [ 505.091447][ T8999] netlink: zone id is out of range [ 505.124694][ T8999] netlink: zone id is out of range [ 505.390117][ T8999] netlink: get zone limit has 8 unknown bytes [ 506.251672][ T5843] Bluetooth: hci1: command tx timeout [ 506.282307][ T5843] Bluetooth: hci3: command tx timeout [ 507.022465][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 509.364710][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.087651][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.128209][ T13] bond0 (unregistering): Released all slaves [ 510.333964][ T13] bond1 (unregistering): Released all slaves [ 510.361203][ T8998] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 510.399031][ T9043] netlink: 60 bytes leftover after parsing attributes in process `syz.1.749'. [ 510.538000][ T8940] chnl_net:caif_netlink_parms(): no params data found [ 510.567098][ T9047] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 510.587125][ T5915] kernel read not supported for file /vga_arbiter (pid: 5915 comm: kworker/0:5) [ 518.946902][ T8940] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.963955][ T8940] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.981946][ T8940] bridge_slave_0: entered allmulticast mode [ 519.133547][ T8940] bridge_slave_0: entered promiscuous mode [ 519.144140][ T8935] chnl_net:caif_netlink_parms(): no params data found [ 520.198098][ T8940] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.226527][ T8940] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.233860][ T8940] bridge_slave_1: entered allmulticast mode [ 521.163730][ T8940] bridge_slave_1: entered promiscuous mode [ 522.578007][ T9131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.224872][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 523.237149][ T9116] netlink: 28 bytes leftover after parsing attributes in process `syz.4.763'. [ 523.585594][ T8940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 523.616812][ T9139] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 523.660095][ T9139] bond1: entered promiscuous mode [ 523.665300][ T9139] bond1: entered allmulticast mode [ 523.670728][ T9139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 523.996012][ T8940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.477510][ T9160] nfs: Unknown parameter 'ntext' [ 526.085077][ T8940] team0: Port device team_slave_0 added [ 526.367076][ T8935] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.433833][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.984949][ T8935] bridge_slave_0: entered allmulticast mode [ 527.004933][ T8935] bridge_slave_0: entered promiscuous mode [ 527.273731][ T13] hsr_slave_0: left promiscuous mode [ 527.317136][ T13] hsr_slave_1: left promiscuous mode [ 527.323649][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 527.343616][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 527.356978][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.436455][ T9179] trusted_key: encrypted_key: insufficient parameters specified [ 527.895568][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.953117][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.980553][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.571649][ T13] veth1_macvtap: left promiscuous mode [ 529.179791][ T9173] Bluetooth: hci5: command 0x0406 tx timeout [ 529.190773][ T13] veth0_macvtap: left promiscuous mode [ 529.197256][ T13] veth1_vlan: left promiscuous mode [ 529.211744][ T13] veth0_vlan: left promiscuous mode [ 530.691216][ T9200] delete_channel: no stack [ 531.378534][ T9197] delete_channel: no stack [ 531.928463][ T9204] o2cb: This node has not been configured. [ 531.934504][ T9204] o2cb: Cluster check failed. Fix errors before retrying. [ 531.941884][ T9204] (syz.1.780,9204,1):user_dlm_register:674 ERROR: status = -22 [ 531.949591][ T9204] (syz.1.780,9204,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 532.592355][ T13] team0 (unregistering): Port device team_slave_1 removed [ 532.649311][ T13] team0 (unregistering): Port device team_slave_0 removed [ 533.856409][ T8940] team0: Port device team_slave_1 added [ 533.873377][ T8935] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.880634][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.896278][ T8935] bridge_slave_1: entered allmulticast mode [ 533.911414][ T8935] bridge_slave_1: entered promiscuous mode [ 534.932194][ T43] infiniband syz1: ib_query_port failed (-19) [ 535.522969][ T8935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.587992][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.768804][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.795042][ T8940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.808300][ T9221] xfrm0: entered promiscuous mode [ 535.814381][ T9221] xfrm0: entered allmulticast mode [ 536.435284][ T8935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.656660][ T8940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.722970][ T8940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.791584][ T8940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.278737][ T8935] team0: Port device team_slave_0 added [ 538.265544][ T8935] team0: Port device team_slave_1 added [ 538.349247][ T8940] hsr_slave_0: entered promiscuous mode [ 538.399236][ T9249] program syz.5.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 538.423341][ T8940] hsr_slave_1: entered promiscuous mode [ 538.439040][ T8940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.462484][ T8940] Cannot create hsr debugfs directory [ 538.573761][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.607928][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.635727][ T8935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.650065][ T8935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.657522][ T8935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.684523][ T8935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.752452][ T13] IPVS: stop unused estimator thread 0... [ 539.160308][ T8935] hsr_slave_0: entered promiscuous mode [ 539.176253][ T8935] hsr_slave_1: entered promiscuous mode [ 539.187127][ T8935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.195115][ T8935] Cannot create hsr debugfs directory [ 539.506491][ T9264] Invalid logical block size (3) [ 539.710427][ T9272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.793'. [ 544.510415][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.466551][ T9299] capability: warning: `syz.1.800' uses deprecated v2 capabilities in a way that may be insecure [ 546.363635][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.273439][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.433105][ T8940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 547.577341][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.548700][ T8940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 548.717966][ T8940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 548.839133][ T9316] --map-set only usable from mangle table [ 549.265156][ T8935] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 549.515898][ T8935] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 550.327761][ T8935] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 550.480387][ T8940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 551.124490][ T8935] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 551.888274][ T13] bridge_slave_1: left allmulticast mode [ 551.906813][ T13] bridge_slave_1: left promiscuous mode [ 551.928055][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.954985][ T13] bridge_slave_0: left allmulticast mode [ 551.964517][ T13] bridge_slave_0: left promiscuous mode [ 551.972364][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.365868][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.397017][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.416405][ T13] bond0 (unregistering): Released all slaves [ 554.435142][ T9173] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 554.452930][ T9173] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 554.464634][ T9173] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 554.491613][ T9173] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 554.501570][ T9173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 554.662755][ T13] tipc: Left network mode [ 554.672716][ T9400] lo speed is unknown, defaulting to 1000 [ 554.725433][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 554.725453][ T30] audit: type=1326 audit(1751809987.800:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 554.796511][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 554.854994][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 554.882504][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 554.914086][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 554.996845][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 555.061734][ T30] audit: type=1326 audit(1751809987.800:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 555.217924][ T13] IPVS: stopping master sync thread 6568 ... [ 555.451284][ T30] audit: type=1326 audit(1751809987.800:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 555.550855][ T30] audit: type=1326 audit(1751809987.800:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 555.651822][ T30] audit: type=1326 audit(1751809987.800:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 555.778131][ T30] audit: type=1326 audit(1751809987.800:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 555.891665][ T30] audit: type=1326 audit(1751809987.800:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 556.001665][ T30] audit: type=1326 audit(1751809987.800:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 556.569453][ T30] audit: type=1326 audit(1751809987.830:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 556.611000][ T9173] Bluetooth: hci6: command tx timeout [ 556.632944][ T30] audit: type=1326 audit(1751809987.830:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9403 comm="syz.4.811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f854e38e929 code=0x7ffc0000 [ 557.117267][ T9173] Bluetooth: hci7: command tx timeout [ 557.418384][ T9405] lo speed is unknown, defaulting to 1000 [ 558.764622][ T9173] Bluetooth: hci6: command tx timeout [ 559.161655][ T9173] Bluetooth: hci7: command tx timeout [ 559.473826][ T13] hsr_slave_0: left promiscuous mode [ 559.481017][ T13] hsr_slave_1: left promiscuous mode [ 559.490931][ T13] batman_adv: batadv0: Interface deactivated: dummy0 [ 559.498143][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 559.509076][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.532914][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.541153][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.549246][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.588054][ T13] veth1_macvtap: left promiscuous mode [ 559.596006][ T13] veth0_macvtap: left promiscuous mode [ 559.613881][ T13] veth1_vlan: left promiscuous mode [ 560.858903][ T9173] Bluetooth: hci6: command tx timeout [ 561.261761][ T9173] Bluetooth: hci7: command tx timeout [ 561.831348][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 561.840834][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 561.858892][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 561.867528][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 561.879619][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 562.845235][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.852888][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.926810][ T9173] Bluetooth: hci6: command tx timeout [ 563.003920][ T13] team0 (unregistering): Port device team_slave_1 removed [ 563.048942][ T13] team0 (unregistering): Port device team_slave_0 removed [ 563.321749][ T9173] Bluetooth: hci7: command tx timeout [ 564.041782][ T9173] Bluetooth: hci1: command tx timeout [ 564.976867][ T9400] chnl_net:caif_netlink_parms(): no params data found [ 565.127054][ T9461] lo speed is unknown, defaulting to 1000 [ 565.233799][ T9487] netlink: 'syz.4.826': attribute type 10 has an invalid length. [ 565.251106][ T9487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.826'. [ 565.331251][ T9487] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 566.132786][ T9173] Bluetooth: hci1: command tx timeout [ 566.405133][ T9400] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.431620][ T9400] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.438931][ T9400] bridge_slave_0: entered allmulticast mode [ 566.471907][ T9400] bridge_slave_0: entered promiscuous mode [ 566.491329][ T9400] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.515364][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.543584][ T9400] bridge_slave_1: entered allmulticast mode [ 566.567437][ T9400] bridge_slave_1: entered promiscuous mode [ 568.201632][ T9173] Bluetooth: hci1: command tx timeout [ 568.245529][ T9400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.269447][ T9400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.286294][ T13] IPVS: stop unused estimator thread 0... [ 569.845779][ T9405] chnl_net:caif_netlink_parms(): no params data found [ 570.534892][ T9173] Bluetooth: hci1: command tx timeout [ 570.537396][ T9400] team0: Port device team_slave_0 added [ 571.225973][ T9400] team0: Port device team_slave_1 added [ 571.735303][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 571.841567][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.835'. [ 573.103990][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.112851][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.120065][ T9405] bridge_slave_0: entered allmulticast mode [ 573.149392][ T9405] bridge_slave_0: entered promiscuous mode [ 573.714356][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.742116][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.780005][ T9400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.828112][ T9400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.842265][ T9400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.878079][ T9400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.004921][ T9400] hsr_slave_0: entered promiscuous mode [ 574.013528][ T9400] hsr_slave_1: entered promiscuous mode [ 574.034236][ T9400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.048444][ T9400] Cannot create hsr debugfs directory [ 574.152931][ T9564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 574.911966][ T9405] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.921070][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.965843][ T9405] bridge_slave_1: entered allmulticast mode [ 574.974247][ T9405] bridge_slave_1: entered promiscuous mode [ 576.423415][ T9405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.461003][ T9405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.185388][ T9405] team0: Port device team_slave_0 added [ 577.254896][ T9405] team0: Port device team_slave_1 added [ 578.676072][ T9405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.703327][ T9405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.748055][ T9405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 579.060927][ T9605] xt_cgroup: invalid path, errno=-2 [ 579.225538][ T9405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 579.276599][ T9405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 579.434761][ T9405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.925200][ T9461] chnl_net:caif_netlink_parms(): no params data found [ 580.305135][ T9614] omfs: Invalid superblock (0) [ 581.134005][ T9405] hsr_slave_0: entered promiscuous mode [ 581.140864][ T9405] hsr_slave_1: entered promiscuous mode [ 581.190059][ T9405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 581.198038][ T9405] Cannot create hsr debugfs directory [ 582.926229][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.009333][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.038126][ T9461] bridge_slave_0: entered allmulticast mode [ 583.288484][ T9461] bridge_slave_0: entered promiscuous mode [ 583.573213][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.593436][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.600807][ T9461] bridge_slave_1: entered allmulticast mode [ 583.629647][ T9461] bridge_slave_1: entered promiscuous mode [ 584.647374][ T9641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.852'. [ 584.656646][ T9641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.852'. [ 585.486955][ T9461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.066215][ T9461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.426448][ T8886] bridge_slave_1: left allmulticast mode [ 586.449593][ T8886] bridge_slave_1: left promiscuous mode [ 586.476676][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.550722][ T8886] bridge_slave_0: left allmulticast mode [ 586.578151][ T8886] bridge_slave_0: left promiscuous mode [ 586.608301][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.713997][ T8886] bridge_slave_1: left allmulticast mode [ 586.746738][ T8886] bridge_slave_1: left promiscuous mode [ 586.774181][ T8886] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.848167][ T8886] bridge_slave_0: left allmulticast mode [ 586.931013][ T8886] bridge_slave_0: left promiscuous mode [ 586.947567][ T8886] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.913929][ T9691] netlink: 308 bytes leftover after parsing attributes in process `syz.1.861'. [ 588.924045][ T9691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 589.429819][ T8886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.448499][ T8886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.467458][ T8886] bond0 (unregistering): Released all slaves [ 590.759050][ T8886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.800265][ T8886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.833938][ T8886] bond0 (unregistering): Released all slaves [ 590.890334][ T9461] team0: Port device team_slave_0 added [ 590.998610][ T9691] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 591.565062][ T9461] team0: Port device team_slave_1 added [ 594.121273][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.132973][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.241359][ T9461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.489808][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.518859][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.585771][ T9461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.598058][ T9461] hsr_slave_0: entered promiscuous mode [ 595.738294][ T9461] hsr_slave_1: entered promiscuous mode [ 595.865583][ T9461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.142191][ T9461] Cannot create hsr debugfs directory [ 596.332988][ T9733] netlink: 76 bytes leftover after parsing attributes in process `syz.4.870'. [ 596.407621][ T8886] hsr_slave_0: left promiscuous mode [ 596.723033][ T9756] netlink: 308 bytes leftover after parsing attributes in process `syz.4.872'. [ 596.732484][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 597.639259][ T8886] hsr_slave_1: left promiscuous mode [ 597.912368][ T8886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.952905][ T8886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.982013][ T8886] hsr_slave_0: left promiscuous mode [ 597.988496][ T8886] hsr_slave_1: left promiscuous mode [ 597.995122][ T8886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.003203][ T8886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.278431][ T8886] team0 (unregistering): Port device team_slave_1 removed [ 598.307480][ T8886] team0 (unregistering): Port device team_slave_0 removed [ 598.635842][ T8886] team0 (unregistering): Port device team_slave_1 removed [ 598.680900][ T8886] team0 (unregistering): Port device team_slave_0 removed [ 598.876536][ T9756] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 600.937628][ T9400] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 601.165708][ T9400] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 601.437788][ T9400] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 601.499947][ T9400] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 603.351721][ T5908] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 603.751071][ T9400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.772157][ T9405] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 603.804305][ T9405] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 603.835036][ T9405] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 603.872322][ T5908] usb 5-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 603.893662][ T5908] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 1 [ 603.928881][ T5908] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 603.939523][ T9405] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 603.947592][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.962690][ T5908] usb 5-1: Product: syz [ 603.967011][ T5908] usb 5-1: Manufacturer: syz [ 603.972533][ T5908] usb 5-1: SerialNumber: syz [ 604.002212][ T9400] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.108393][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.116387][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.164581][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.171905][ T7957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.360959][ T9461] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 604.863643][ T9461] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 605.197921][ T9461] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 605.241236][ T24] usb 5-1: USB disconnect, device number 5 [ 605.298157][ T9461] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 606.297963][ T9400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 606.349769][ T9405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.454773][ T9405] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.626837][ T9461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.364089][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.371335][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.475350][ T9461] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.817446][ T8886] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.824678][ T8886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.795632][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.802858][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.203816][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.210983][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.029402][ T9885] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 610.208768][ T9400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.130167][ T9405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.360804][ T9400] veth0_vlan: entered promiscuous mode [ 612.419138][ T9400] veth1_vlan: entered promiscuous mode [ 612.530465][ T9461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.698555][ T9400] veth0_macvtap: entered promiscuous mode [ 612.805877][ T9400] veth1_macvtap: entered promiscuous mode [ 612.903240][ T9922] xt_socket: unknown flags 0x8 [ 613.577162][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.646887][ T9400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.057304][ T9461] veth0_vlan: entered promiscuous mode [ 616.108826][ T9461] veth1_vlan: entered promiscuous mode [ 616.467971][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 616.486020][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 616.521903][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 616.531291][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 616.548729][ T9959] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 616.558431][ T9957] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 616.566948][ T9959] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 616.794210][ T9173] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 616.810734][ T9173] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 616.827252][ T9173] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 619.002024][ T9173] Bluetooth: hci6: command tx timeout [ 619.008575][ T9173] Bluetooth: hci3: command tx timeout [ 619.247632][ T9461] veth0_macvtap: entered promiscuous mode [ 620.494665][ T9952] lo speed is unknown, defaulting to 1000 [ 621.086267][ T9173] Bluetooth: hci3: command tx timeout [ 621.091800][ T5843] Bluetooth: hci6: command tx timeout [ 622.623899][ T9994] Invalid source name [ 622.628231][ T9994] UBIFS error (pid: 9994): cannot open "./file0", error -22 [ 623.170539][ T9173] Bluetooth: hci3: command tx timeout [ 623.185142][ T5843] Bluetooth: hci6: command tx timeout [ 623.500328][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 623.518657][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 623.527256][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 623.540792][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 623.549082][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 623.631263][ T9956] lo speed is unknown, defaulting to 1000 [ 624.288259][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.295343][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.241625][ T5843] Bluetooth: hci3: command tx timeout [ 625.242145][ T9173] Bluetooth: hci6: command tx timeout [ 625.524152][ T9997] lo speed is unknown, defaulting to 1000 [ 625.641991][ T9173] Bluetooth: hci7: command tx timeout [ 625.654628][ T7957] bridge_slave_1: left allmulticast mode [ 626.321593][ T7957] bridge_slave_1: left promiscuous mode [ 626.327436][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.352769][T10027] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 626.638627][ T7957] bridge_slave_0: left allmulticast mode [ 626.652372][ T7957] bridge_slave_0: left promiscuous mode [ 626.658235][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.516910][ T7957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.528976][ T7957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.539120][ T7957] bond0 (unregistering): Released all slaves [ 627.731789][ T9173] Bluetooth: hci7: command tx timeout [ 627.895454][ T9952] chnl_net:caif_netlink_parms(): no params data found [ 627.942404][ T7957] hsr_slave_0: left promiscuous mode [ 627.961029][ T7957] hsr_slave_1: left promiscuous mode [ 627.977728][ T7957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.986210][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.000265][ T7957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.008550][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.068460][ T7957] veth1_macvtap: left promiscuous mode [ 628.079331][ T7957] veth0_macvtap: left promiscuous mode [ 628.086999][ T7957] veth1_vlan: left promiscuous mode [ 628.098245][ T7957] veth0_vlan: left promiscuous mode [ 628.740761][ T7957] team0 (unregistering): Port device team_slave_1 removed [ 628.786340][ T7957] team0 (unregistering): Port device team_slave_0 removed [ 629.438676][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.450214][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.458317][ T9952] bridge_slave_0: entered allmulticast mode [ 629.467057][ T9952] bridge_slave_0: entered promiscuous mode [ 629.475987][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.483475][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.490746][ T9952] bridge_slave_1: entered allmulticast mode [ 629.498684][ T9952] bridge_slave_1: entered promiscuous mode [ 629.654629][ T9952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.672632][ T9997] chnl_net:caif_netlink_parms(): no params data found [ 629.693940][ T9956] chnl_net:caif_netlink_parms(): no params data found [ 629.709439][ T9952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.812220][ T9173] Bluetooth: hci7: command tx timeout [ 629.846069][ T9952] team0: Port device team_slave_0 added [ 629.890809][ T9952] team0: Port device team_slave_1 added [ 630.017013][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.029885][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.056626][ T9952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.084730][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.095036][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.125604][ T9952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.235888][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.243431][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.250638][ T9956] bridge_slave_0: entered allmulticast mode [ 630.259387][ T9956] bridge_slave_0: entered promiscuous mode [ 630.317853][ T9997] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.331108][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.338811][ T9997] bridge_slave_0: entered allmulticast mode [ 630.353688][ T9997] bridge_slave_0: entered promiscuous mode [ 630.476308][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.484096][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.495301][ T9956] bridge_slave_1: entered allmulticast mode [ 630.503207][ T9956] bridge_slave_1: entered promiscuous mode [ 630.509811][ T9997] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.519293][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.534476][ T9997] bridge_slave_1: entered allmulticast mode [ 630.542164][ T9997] bridge_slave_1: entered promiscuous mode [ 630.687223][ T9952] hsr_slave_0: entered promiscuous mode [ 630.694320][ T9952] hsr_slave_1: entered promiscuous mode [ 630.700455][ T9952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 630.708488][ T9952] Cannot create hsr debugfs directory [ 630.749934][ T9956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.778210][ T9997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.792832][ T9997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.827122][ T9956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.951167][ T9956] team0: Port device team_slave_0 added [ 630.960949][ T9956] team0: Port device team_slave_1 added [ 630.971114][ T9997] team0: Port device team_slave_0 added [ 630.981259][ T9997] team0: Port device team_slave_1 added [ 631.116369][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.123650][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.149930][ T9956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.180248][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.193709][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.221625][ T9997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.234676][ T9997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.242031][ T9997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.268667][ T9997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.295773][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.305785][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.338963][ T9956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.628291][ T9997] hsr_slave_0: entered promiscuous mode [ 631.635283][ T9997] hsr_slave_1: entered promiscuous mode [ 631.651951][ T9997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.659588][ T9997] Cannot create hsr debugfs directory [ 631.681244][ T9956] hsr_slave_0: entered promiscuous mode [ 631.695916][ T9956] hsr_slave_1: entered promiscuous mode [ 631.708592][ T9956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.719983][ T9956] Cannot create hsr debugfs directory [ 631.888537][ T9173] Bluetooth: hci7: command tx timeout [ 632.195118][ T7957] bridge_slave_1: left allmulticast mode [ 632.200856][ T7957] bridge_slave_1: left promiscuous mode [ 632.216238][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.226345][ T7957] bridge_slave_0: left allmulticast mode [ 632.232663][ T7957] bridge_slave_0: left promiscuous mode [ 632.238472][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.250098][ T7957] bridge_slave_1: left allmulticast mode [ 632.256037][ T7957] bridge_slave_1: left promiscuous mode [ 632.262081][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.273564][ T7957] bridge_slave_0: left allmulticast mode [ 632.279214][ T7957] bridge_slave_0: left promiscuous mode [ 632.285463][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.640342][ T7957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.657756][ T7957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.668057][ T7957] bond0 (unregistering): Released all slaves [ 632.936878][ T7957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 632.947902][ T7957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.960014][ T7957] bond0 (unregistering): Released all slaves [ 633.436602][ T9952] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 633.479453][ T9952] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 633.567556][ T9952] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 633.658500][ T9952] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 633.918100][ T7957] hsr_slave_0: left promiscuous mode [ 633.929249][ T7957] hsr_slave_1: left promiscuous mode [ 633.940378][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.951305][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.974051][ T7957] hsr_slave_0: left promiscuous mode [ 633.979901][ T7957] hsr_slave_1: left promiscuous mode [ 633.987315][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.996788][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.029607][ T7957] veth0_macvtap: left promiscuous mode [ 634.035375][ T7957] veth1_vlan: left promiscuous mode [ 634.040736][ T7957] veth0_vlan: left promiscuous mode [ 634.499097][ T7957] team0 (unregistering): Port device team_slave_1 removed [ 634.549333][ T7957] team0 (unregistering): Port device team_slave_0 removed [ 635.126928][ T7957] team0 (unregistering): Port device team_slave_1 removed [ 635.175684][ T7957] team0 (unregistering): Port device team_slave_0 removed [ 635.865852][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.988776][ T9952] 8021q: adding VLAN 0 to HW filter on device team0 [ 636.024087][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.031250][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 636.166826][ T756] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.174115][ T756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.653904][ T9956] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 636.689280][ T9956] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 636.725801][ T9956] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 636.758850][ T9956] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 636.870070][ T9997] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 636.884132][ T9997] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 636.899090][ T9997] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 636.920561][ T9997] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 636.970102][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.104730][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.156966][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.188452][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.195647][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.239992][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.247202][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.353071][ T9997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.433551][ T9997] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.476634][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.483822][ T7957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.537263][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.544484][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.670091][ T9952] veth0_vlan: entered promiscuous mode [ 637.718035][ T9952] veth1_vlan: entered promiscuous mode [ 637.790178][ T9952] veth0_macvtap: entered promiscuous mode [ 637.829986][ T9952] veth1_macvtap: entered promiscuous mode [ 637.858046][ T9956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.936115][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.967196][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.990582][ T9952] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.009400][ T9952] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.020603][ T9952] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.029877][ T9952] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.238414][ T8903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.261072][ T8903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.335168][ T8903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.347862][ T8903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.387734][ T9997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.545965][T10174] ubi: mtd0 is already attached to ubi31 [ 639.745553][ T9956] veth0_vlan: entered promiscuous mode [ 640.069480][ T9956] veth1_vlan: entered promiscuous mode [ 640.216207][ T9956] veth0_macvtap: entered promiscuous mode [ 640.315723][ T9956] veth1_macvtap: entered promiscuous mode [ 640.489629][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.556589][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.144345][ T9956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.168434][ T9956] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.177612][ T5922] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 641.273034][T10190] netlink: 308 bytes leftover after parsing attributes in process `syz.7.908'. [ 641.283567][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.908'. [ 642.211359][ T9956] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.163771][ T9956] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.621550][T10190] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 644.291275][ T9997] veth0_vlan: entered promiscuous mode [ 644.555178][ T5922] usb 2-1: device descriptor read/all, error -71 [ 644.747858][ T9997] veth1_vlan: entered promiscuous mode [ 646.370969][ T9997] veth0_macvtap: entered promiscuous mode [ 646.387836][ T8877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.420777][ T8877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.080530][ T9997] veth1_macvtap: entered promiscuous mode [ 648.178040][ T8877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.239099][ T8877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.885496][T10223] overlayfs: missing 'lowerdir' [ 648.903943][T10224] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 649.478961][ T9997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.533759][ T9997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.544835][ T9997] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.553702][ T9997] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.563701][ T9997] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.650728][ T9997] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.332449][T10230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 650.436963][ T8877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.949317][ T8877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.973376][ T8903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.550949][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 653.550970][ T30] audit: type=1326 audit(1751810086.370:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 653.582460][ T8903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.111692][ T30] audit: type=1326 audit(1751810086.370:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 655.051648][ T30] audit: type=1326 audit(1751810086.370:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 655.121542][ T30] audit: type=1326 audit(1751810086.370:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 655.204433][ T30] audit: type=1326 audit(1751810086.370:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 655.231639][ T30] audit: type=1326 audit(1751810086.370:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 655.296967][ T30] audit: type=1326 audit(1751810086.370:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 656.431626][ T30] audit: type=1326 audit(1751810086.370:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 657.731497][ T30] audit: type=1326 audit(1751810086.370:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 657.837375][ T30] audit: type=1326 audit(1751810086.380:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 658.863872][ T30] audit: type=1326 audit(1751810086.380:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 658.948201][ T30] audit: type=1326 audit(1751810086.380:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 659.132475][ T30] audit: type=1326 audit(1751810086.380:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 660.454008][ T30] audit: type=1326 audit(1751810086.380:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 660.497825][ T30] audit: type=1326 audit(1751810086.380:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd650390847 code=0x7ffc0000 [ 660.521241][ T30] audit: type=1326 audit(1751810086.380:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd6503907bc code=0x7ffc0000 [ 660.542997][ T30] audit: type=1326 audit(1751810086.380:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd6503906f4 code=0x7ffc0000 [ 660.567788][ T30] audit: type=1326 audit(1751810086.380:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd6503906f4 code=0x7ffc0000 [ 660.849860][ T30] audit: type=1326 audit(1751810086.380:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd65038d58a code=0x7ffc0000 [ 660.892902][ T30] audit: type=1326 audit(1751810086.380:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10254 comm="syz.1.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd65038e929 code=0x7ffc0000 [ 662.100080][T10341] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 663.813368][T10353] netlink: 236 bytes leftover after parsing attributes in process `syz.7.943'. [ 663.822978][T10353] openvswitch: netlink: IP tunnel dst address not specified [ 675.385485][T10434] netlink: 'syz.6.960': attribute type 10 has an invalid length. [ 675.403553][T10434] netlink: 40 bytes leftover after parsing attributes in process `syz.6.960'. [ 675.749034][T10434] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 685.746595][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.895430][T10484] syz.4.969 (10484): drop_caches: 2 [ 685.903142][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.943607][T10530] loop6: detected capacity change from 0 to 524287999 [ 691.408439][T10555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.812167][ T5915] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 699.275151][ T5915] usb 2-1: Using ep0 maxpacket: 16 [ 699.361838][ T5915] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 699.409878][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.439541][ T5915] usb 2-1: config 0 has no interface number 0 [ 699.473284][ T5915] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 699.658460][T10640] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 699.673906][T10640] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.681180][T10640] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.805430][ T31] INFO: task syz.5.801:9295 blocked for more than 143 seconds. [ 699.826995][T10642] [U]  [ 699.858220][ T31] Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 701.053572][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 701.270767][ T31] task:syz.5.801 state:D stack:23496 pid:9295 tgid:9295 ppid:7937 task_flags:0x400040 flags:0x00004006 [ 702.304133][T10643] input: syz0 as /devices/virtual/input/input10 [ 702.591569][ T31] Call Trace: [ 702.594954][ T31] [ 702.597931][ T31] __schedule+0x16a2/0x4cb0 [ 702.621544][ T31] ? schedule+0x165/0x360 [ 702.626063][ T31] ? __pfx___schedule+0x10/0x10 [ 702.630979][ T31] ? schedule+0x91/0x360 [ 702.651649][ T31] schedule+0x165/0x360 [ 702.655878][ T31] schedule_preempt_disabled+0x13/0x30 [ 702.660005][ T5915] usb 2-1: string descriptor 0 read error: -71 [ 702.661367][ T31] __mutex_lock+0x724/0xe80 [ 702.690337][ T31] ? __mutex_lock+0x51b/0xe80 [ 702.695276][ T31] ? nfsd_shutdown_threads+0x4e/0xd0 [ 702.700714][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 702.713237][ T31] ? net_generic+0x1e/0x240 [ 702.737560][ T5915] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 702.744029][ T31] ? net_generic+0x1e/0x240 [ 702.774621][ T31] nfsd_shutdown_threads+0x4e/0xd0 [ 702.804005][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 702.931363][T10648] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 703.715261][ T31] nfsd_umount+0x42/0xd0 [ 703.719565][ T31] deactivate_locked_super+0xb9/0x130 [ 703.768701][ T5915] usb 2-1: config 0 descriptor?? [ 703.781930][ T5915] usb 2-1: can't set config #0, error -71 [ 703.912656][ T31] put_fs_context+0x93/0x790 [ 703.914770][ T5915] usb 2-1: USB disconnect, device number 7 [ 703.917393][ T31] ? __pfx_fscontext_release+0x10/0x10 [ 703.941527][ T31] fscontext_release+0x62/0x80 [ 703.946378][ T31] __fput+0x44c/0xa70 [ 703.950429][ T31] task_work_run+0x1d4/0x260 [ 704.092708][ T31] ? __pfx_task_work_run+0x10/0x10 [ 704.097880][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 704.138190][ T31] exit_to_user_mode_loop+0xec/0x110 [ 704.156907][ T31] do_syscall_64+0x2bd/0x3b0 [ 704.171360][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.181519][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 704.187740][ T31] ? clear_bhb_loop+0x60/0xb0 [ 704.202070][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.237989][ T31] RIP: 0033:0x7f520758e929 [ 704.251814][ T31] RSP: 002b:00007ffe685e74b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 704.260450][ T31] RAX: 0000000000000000 RBX: 00007f52077b7ba0 RCX: 00007f520758e929 [ 704.291170][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 704.327507][ T31] RBP: 00007f52077b7ba0 R08: 00000000000001a8 R09: 00000014685e77af [ 704.337591][ T31] R10: 00000000003ffc34 R11: 0000000000000246 R12: 00000000000856bd [ 704.349881][ T31] R13: 00007f52077b6080 R14: ffffffffffffffff R15: 00007ffe685e75d0 [ 704.360016][ T31] [ 704.368040][ T31] [ 704.368040][ T31] Showing all locks held in the system: [ 704.446812][ T31] 1 lock held by khungtaskd/31: [ 704.476122][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 704.527741][ T31] 2 locks held by kworker/u8:9/2993: [ 704.541914][ T31] #0: ffff8881462ce948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 704.575261][ T31] #1: ffffc9000b917bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 704.609600][ T31] 1 lock held by acpid/5193: [ 704.639571][ T31] #0: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 704.659567][ T31] 2 locks held by getty/5603: [ 704.664747][ T31] #0: ffff888030c140a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 704.675681][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 704.686790][ T31] 2 locks held by syz.0.455/7787: [ 704.692440][ T31] #0: ffffffff8f571030 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.701107][ T31] #1: ffffffff8e41bd08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 704.712686][ T31] 2 locks held by syz.5.801/9295: [ 704.719271][ T31] #0: ffff8880489260e0 (&type->s_umount_key#90){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 704.730433][ T31] #1: ffffffff8e41bd08 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x4e/0xd0 [ 704.740970][ T31] 4 locks held by syz.8.938/10329: [ 704.746586][ T31] #0: ffff888034b34dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 704.757351][ T31] #1: ffff888034b340b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 704.768439][ T31] #2: ffffffff8f672f88 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 704.779415][ T31] #3: ffff88803380cb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 704.790513][ T31] 1 lock held by syz.8.1002/10635: [ 704.800768][ T31] #0: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 704.818658][ T31] 1 lock held by syz.7.1003/10649: [ 704.826098][ T31] #0: ffffffff8ef81b28 (input_mutex){+.+.}-{4:4}, at: __input_unregister_device+0x2d8/0x5e0 [ 704.837420][ T31] 5 locks held by dhcpcd-run-hook/10654: [ 704.843706][ T31] [ 705.012626][ T31] ============================================= [ 705.012626][ T31] [ 705.061567][ T31] NMI backtrace for cpu 1 [ 705.061597][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 705.061624][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.061634][ T31] Call Trace: [ 705.061641][ T31] [ 705.061647][ T31] dump_stack_lvl+0x189/0x250 [ 705.061667][ T31] ? __wake_up_klogd+0xd9/0x110 [ 705.061691][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.061708][ T31] ? __pfx__printk+0x10/0x10 [ 705.061737][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 705.061761][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 705.061779][ T31] ? _printk+0xcf/0x120 [ 705.061801][ T31] ? __pfx__printk+0x10/0x10 [ 705.061823][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 705.061848][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 705.061871][ T31] watchdog+0xfee/0x1030 [ 705.061896][ T31] ? watchdog+0x1de/0x1030 [ 705.061926][ T31] kthread+0x711/0x8a0 [ 705.061949][ T31] ? __pfx_watchdog+0x10/0x10 [ 705.061971][ T31] ? __pfx_kthread+0x10/0x10 [ 705.061993][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.062027][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.062047][ T31] ? __pfx_kthread+0x10/0x10 [ 705.062067][ T31] ret_from_fork+0x3fc/0x770 [ 705.062083][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 705.062101][ T31] ? __switch_to_asm+0x39/0x70 [ 705.062117][ T31] ? __switch_to_asm+0x33/0x70 [ 705.062133][ T31] ? __pfx_kthread+0x10/0x10 [ 705.062171][ T31] ret_from_fork_asm+0x1a/0x30 [ 705.062202][ T31] [ 705.062208][ T31] Sending NMI from CPU 1 to CPUs 0: [ 705.221791][ C0] NMI backtrace for cpu 0 [ 705.221809][ C0] CPU: 0 UID: 0 PID: 8877 Comm: kworker/u8:13 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 705.221830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.221842][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 705.221872][ C0] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 705.221892][ C0] Code: e8 cf 23 49 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 e0 dd f5 10 e8 6b 1f c1 09 89 c3 83 f8 08 73 65 [ 705.221908][ C0] RSP: 0018:ffffc9001af9f400 EFLAGS: 00000293 [ 705.221922][ C0] RAX: 0000000000000000 RBX: ffffffff902fee01 RCX: f81a339c5b9c0300 [ 705.221934][ C0] RDX: ffffc9001af9f501 RSI: ffffffff81729af5 RDI: ffffffff8e13ee20 [ 705.221947][ C0] RBP: dffffc0000000000 R08: ffffc9001af9f598 R09: 0000000000000000 [ 705.221959][ C0] R10: ffffc9001af9f5f8 R11: fffff520035f3ec1 R12: ffffc9001af9f5a8 [ 705.221972][ C0] R13: ffffffff81729af5 R14: ffffffff8e13ee20 R15: ffffffff81729af5 [ 705.221985][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 705.221998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.222010][ C0] CR2: 000055c5a106e078 CR3: 0000000031396000 CR4: 00000000003526f0 [ 705.222024][ C0] Call Trace: [ 705.222030][ C0] [ 705.222037][ C0] ? unwind_next_frame+0xa5/0x2390 [ 705.222055][ C0] lock_release+0x4b/0x3e0 [ 705.222071][ C0] ? deref_stack_reg+0x19f/0x230 [ 705.222091][ C0] ? unwind_next_frame+0xa5/0x2390 [ 705.222108][ C0] unwind_next_frame+0x19a9/0x2390 [ 705.222129][ C0] ? unwind_next_frame+0xa5/0x2390 [ 705.222147][ C0] ? __unwind_start+0xf8/0x760 [ 705.222168][ C0] __unwind_start+0x5b9/0x760 [ 705.222188][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 705.222212][ C0] arch_stack_walk+0xe4/0x150 [ 705.222234][ C0] ? arch_stack_walk+0xe4/0x150 [ 705.222255][ C0] stack_trace_save+0x9c/0xe0 [ 705.222276][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 705.222301][ C0] ? kfree+0x18e/0x440 [ 705.222327][ C0] ? __lock_acquire+0xab9/0xd20 [ 705.222343][ C0] kasan_save_track+0x3e/0x80 [ 705.222396][ C0] ? nsim_dev_trap_report_work+0x7cf/0xb80 [ 705.222419][ C0] kasan_save_free_info+0x46/0x50 [ 705.222438][ C0] __kasan_slab_free+0x62/0x70 [ 705.222461][ C0] kmem_cache_free+0x18f/0x400 [ 705.222508][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 705.222554][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 705.222575][ C0] process_scheduled_works+0xae1/0x17b0 [ 705.222611][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 705.222640][ C0] worker_thread+0x8a0/0xda0 [ 705.222675][ C0] kthread+0x711/0x8a0 [ 705.222700][ C0] ? __pfx_worker_thread+0x10/0x10 [ 705.222720][ C0] ? __pfx_kthread+0x10/0x10 [ 705.222744][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.222770][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.222796][ C0] ? __pfx_kthread+0x10/0x10 [ 705.222820][ C0] ret_from_fork+0x3fc/0x770 [ 705.222839][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 705.222859][ C0] ? __switch_to_asm+0x39/0x70 [ 705.222881][ C0] ? __switch_to_asm+0x33/0x70 [ 705.222902][ C0] ? __pfx_kthread+0x10/0x10 [ 705.222926][ C0] ret_from_fork_asm+0x1a/0x30 [ 705.222958][ C0] [ 705.871577][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 705.878490][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 705.890313][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 705.900375][ T31] Call Trace: [ 705.903658][ T31] [ 705.906593][ T31] dump_stack_lvl+0x99/0x250 [ 705.911184][ T31] ? __asan_memcpy+0x40/0x70 [ 705.915882][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 705.921092][ T31] ? __pfx__printk+0x10/0x10 [ 705.925728][ T31] panic+0x2db/0x790 [ 705.929674][ T31] ? __pfx_panic+0x10/0x10 [ 705.934116][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 705.939960][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 705.945361][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 705.951592][ T31] watchdog+0x102d/0x1030 [ 705.955972][ T31] ? watchdog+0x1de/0x1030 [ 705.960423][ T31] kthread+0x711/0x8a0 [ 705.964518][ T31] ? __pfx_watchdog+0x10/0x10 [ 705.969218][ T31] ? __pfx_kthread+0x10/0x10 [ 705.973826][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 705.979042][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 705.984265][ T31] ? __pfx_kthread+0x10/0x10 [ 705.988892][ T31] ret_from_fork+0x3fc/0x770 [ 705.993503][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 705.998637][ T31] ? __switch_to_asm+0x39/0x70 [ 706.003422][ T31] ? __switch_to_asm+0x33/0x70 [ 706.008206][ T31] ? __pfx_kthread+0x10/0x10 [ 706.012810][ T31] ret_from_fork_asm+0x1a/0x30 [ 706.017695][ T31] [ 706.021046][ T31] Kernel Offset: disabled [ 706.025381][ T31] Rebooting in 86400 seconds..