last executing test programs: 21m22.891103999s ago: executing program 0 (id=359): socket$inet6(0xa, 0x3, 0xff) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x0, &(0x7f0000002400)=ANY=[]) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x85c, 0x1f5100) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000080)={@broadcast, @local, @void, {@llc={0x4, {@llc={0x42, 0x0, 'C', "ea"}}}}}, 0x0) 21m19.517609431s ago: executing program 4 (id=366): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20840, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x52}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000003c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}}, 0x14}, 0x2, 0x34005}, 0x0) 21m19.442618209s ago: executing program 0 (id=367): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) getpid() socket$inet6(0xa, 0x1, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xa6) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000000)={0x1, 0x83, 0x55, 0x0, 0x8}) 21m15.976104272s ago: executing program 0 (id=370): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x10000000010) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) unshare(0x80) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r5], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) 21m11.921349737s ago: executing program 4 (id=373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8]}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) 21m9.780775758s ago: executing program 4 (id=376): syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x121301) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = userfaultfd(0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000053e000/0x2000)=nil, 0x2000, &(0x7f0000000140)='\x00') sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x2fe, 0x0, 0x0, 0x200, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xf0f041, 0x0, '\x00', @ptr}}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xfffffffffffffdf5, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x8], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e24, @broadcast}], 0x20) 21m9.586826955s ago: executing program 0 (id=377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1200, 0x0, 0xfffffec8, 0x0, 0x0, 0x0) 21m7.842585841s ago: executing program 4 (id=379): r0 = io_uring_setup(0x1450, &(0x7f0000000180)={0x0, 0x73d5, 0x80, 0x3, 0x1f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r2, 0x0, 0x0, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'nr0\x00', @local}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000080)={0x1e, 0x4e1b, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x2400d041) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x0, {0x8, 0x7}, 0x8}, 0x1) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10282c9, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21m7.002930595s ago: executing program 0 (id=381): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x8, @val=@iter={0x0}}, 0x20) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x3ffffffffffff7c, 0x0, &(0x7f0000003700)={0x77359400}) 21m2.418215554s ago: executing program 0 (id=386): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x88c0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 21m2.374137864s ago: executing program 4 (id=388): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = gettid() r6 = syz_open_procfs(r5, &(0x7f0000000040)='timerslack_ns\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x600}}, 0x30) 21m0.247902996s ago: executing program 4 (id=391): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x5}}) 20m47.303803968s ago: executing program 32 (id=386): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x10000, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x88c0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x0, 0x0}, 0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 20m44.897869851s ago: executing program 33 (id=391): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0xffd8) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x5}}) 10m58.438632131s ago: executing program 3 (id=1271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0) capset(0x0, &(0x7f0000000040)) r4 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x2e3b, &(0x7f0000000080)={0x0, 0x482b, 0x10100, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000800)=[{0x0}, {0x0}], 0x2}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000000c0)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x80000000005, 0x4, 0x10000, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x3, 0x6, 0x8000000000000000, 0xfffffffffffffffd, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfa2, 0x0, 0xfffffffffffffffb, 0xea4d, 0x375, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0xdeb, 0x0, 0x0, 0x0, 0x71]}) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x12, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xa, 0x8, 0x5, 0x722, 0xe72, 0x8, 0x8, 0x2e, 0x8, {0xffff945a, 0x1}, 0x3, 0xed}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) 10m56.99879083s ago: executing program 3 (id=1275): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bfe000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000080)={0xf000, 0x280000, 0x8}) unshare(0x24020400) unshare(0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r6], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r7}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 10m54.218877797s ago: executing program 3 (id=1278): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400"], 0x48) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, 0x0, 0x2c240, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x8, 0xfffffffffffffffd, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000046842, 0x0) io_setup(0x222, &(0x7f0000000280)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000000)='%', 0x1}]) 10m51.092926008s ago: executing program 3 (id=1282): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRES32], 0x2c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) r8 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) setrlimit(0x8, 0x0) listen(r8, 0x8b) 10m48.102122478s ago: executing program 3 (id=1284): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x1e00) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0xc0049364, &(0x7f0000000180)) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) 10m46.627127405s ago: executing program 3 (id=1287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="009a3610008eecdef60ddb0700000b8f", 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e00)=ANY=[@ANYBLOB="ec0500005a000d030000000000000001040000800c00028008"], 0x5ec}], 0x1}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r7], 0x38}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 10m31.255958239s ago: executing program 34 (id=1287): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="009a3610008eecdef60ddb0700000b8f", 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e00)=ANY=[@ANYBLOB="ec0500005a000d030000000000000001040000800c00028008"], 0x5ec}], 0x1}, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r7], 0x38}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) 3m32.391601042s ago: executing program 7 (id=1955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8]}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) 3m30.943368353s ago: executing program 7 (id=1959): pipe2$9p(&(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r2, &(0x7f0000000000), 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) syz_open_dev$usbfs(&(0x7f0000000100), 0xffff, 0x41) read$msr(r1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xb4, 0x24, 0x10, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x84, 0x2, {{0x2, [0x8, 0xc, 0x5, 0x10, 0xc, 0xa, 0xc, 0x8, 0x5, 0x9, 0x6, 0x2, 0x6, 0x6, 0x10, 0x10], 0x0, [0x6, 0x3, 0x8, 0x9, 0x8, 0x8, 0x0, 0x2, 0x3, 0x9, 0x4, 0x7, 0x9, 0x3ff, 0x9, 0x500], [0x40, 0x21d, 0x0, 0x2, 0x3888, 0x8, 0x0, 0xed, 0x8001, 0x5, 0xfff7, 0x1, 0x3, 0x8, 0x5, 0x4a9]}, [@TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MAX_RATE64={0x28, 0x4, 0x0, 0x1, [{0xc, 0x4, 0xffffffffffffffc5}, {0xc, 0x4, 0x40}, {0xc, 0x4, 0xffffffff}]}]}}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c00", @ANYRES16=r6, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="b0f2b8863af8f1f97bbddf5d122392a9330ccd048371cf406affba93262ce44de2680c5926f38f98"], 0x1c}, 0x1, 0x0, 0x0, 0xc048080}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r8, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m28.449511252s ago: executing program 7 (id=1965): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) 3m27.001897311s ago: executing program 7 (id=1968): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f00000000c0)=0x446, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3m23.990496618s ago: executing program 7 (id=1973): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) write$tun(r4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x9f) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) ioctl$SG_SET_TIMEOUT(r3, 0x2201, 0x0) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m22.518083564s ago: executing program 7 (id=1975): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73ee8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) 3m7.430605652s ago: executing program 35 (id=1975): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x73ee8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x103a02, 0x0) 3m7.418695859s ago: executing program 2 (id=1996): socket(0xa, 0x3, 0x3a) syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc2354000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) close(r3) chdir(0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x2, &(0x7f0000000000)=0x8000, 0x4) syz_open_dev$evdev(&(0x7f0000007bc0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22000600) socket$xdp(0x2c, 0x3, 0x0) unshare(0x2020400) 3m3.735282802s ago: executing program 2 (id=2002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) 3m2.457108357s ago: executing program 2 (id=2004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1200, 0x0, 0xfffffec8, 0x0, 0x0, 0x0) 2m59.144450027s ago: executing program 2 (id=2009): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c890}, 0xbeac10588807b056) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x11) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000040)=""/182, 0xb6}], 0x1) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000050000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0500330002000000080034"], 0x2c}}, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0x0) 2m56.326645946s ago: executing program 2 (id=2012): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x1, @loopback, 0x6}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000540)="52e7df1f4704f528bdf24ee6a39b2a722102ce76681828961d52860d71bc8aef257f0dfcdad7f38ff8ddb8f8678c76a9cdd49dd7ffb36592b231aafc762ab43a279905fe7b7dde182e4ec65a30455e2a498525e0d8f5a45af020fd260c7ad1c99e530f3dd856c386179b70ffd88e1b23e04ae6b0cdc3533cd91cb8053b5570fc4eb67b7e795a72fd5280ab0a4f6ee2820aef8bca06305c30ec5c8dd178a91b687196006550d23cb0f078ac05133ef143082a8ceabe33d6fa0a9305da97198e7656320bf52e825d81ddbcbf1621cbec36221e343648da62f653fbe2e3", 0xdc}, {&(0x7f00000003c0)="a3c455fe19087a0fcec74026c2d9af75d88e77f434bd6e3989df45dca212ab7923123cdb820d5adcd6f2c1656cdc31766761f6329af4477da72c976b6fa801c94c6e6fe96d694241fa8d7489e087e00bd2bfd3dd312ed8eb5c10fea870a44278872c8fcc8408aaf6815e3b401b4873dd65ff8eb4bb", 0x75}, {0x0}, {&(0x7f0000000840)="bdd2f599182d3a43bfd910aba61649ba6c143852ab50f0050d1b44f553816c0e68a6c1c3b1b544b0c6f097ac6aa1d9dc897b412a8f181d5038124d6a0623d51735320399567d984f9a60c77e400f5c82481bb60fc3a06dee5430c490e3b52d3dac61fd7a1358b0ca2b4e0d", 0x6b}, {&(0x7f00000008c0)="e3e12f5ccad28900b90b8e28ba76baca002d965e247d0e13eaf0486f93a35ac314209c55fdc2ae7cea4ce6e2f7cc1686572294912ed668b1d8e813581975ae25fa8cf2034089726079369846ba004b8c90725d676fb008e8d26cdf3f0916514a1806b06b07e84be72c9fb83075772a30b377513ad6278145852517b44d1fcfe0e1dfa4cff7f9dd37600dc0179e28b9de", 0x90}, {&(0x7f0000000480)="244a213dd391d7b2778e3bb84eba0a641aea99a8cee69d8f98b498ded56609fc9cd27a8d4eedaae3c9dba0", 0x2b}, {&(0x7f0000000980)}, {&(0x7f0000000a80)="bd378f96b2db4ba116bd840916ba17fcdc07e937968c9b9dc28794c343c91b081c1ba4279472ddcd85848f2070cc76aa157505dfaeee37", 0x37}], 0x8, &(0x7f0000000b80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hoplimit={{0x14, 0x29, 0x34, 0x2e}}], 0x30}}], 0x1, 0x6001) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(0x0, 0x400, 0x208000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x1, @broadcast, 'lo\x00'}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r7) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r8, 0xc8036ab6d6cbef07, 0x70bd28}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r10, 0xf7, "cd1820ef783cb602de5fbb2eac08f691efac09961ed249282bd7f5afbd4af7bcac897886a25999c2c02d6c93d631b59158d0624f8f1782d217492a9706d13190eee70999fa09ce9ae871d2b67f122f7f628185229fbdc921494494237b0726e79d5eae01e27a12afb6af77ec609c8a066c825b265894ff89583818d5fb055158fb9812ec4ed542f359e509a0ce0b69616b286ee52fe51d0f98ebb24c72859d0e80b0d50a0ceb9be00f0875b399c17b0155eb361917931a339b2f3d8315260c1a60701ad369662c8ea4fd7507e916e7c4b133340b36c173abf628e9d0df19652176605679d13318e68765ee85e8070857003d057a017436"}, &(0x7f0000000040)=0xff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m54.72430927s ago: executing program 2 (id=2014): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffff3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000caa000/0x4000)=nil, 0x183b, &(0x7f0000000400)='\xb3x\xd7,n\x1e\v\xc4\xe84\x04\xcb\xcb#\x80\x83\xb2\'&\xe3\xf1\x97\a\xef\xff`\x1e\x11E\xff\xff\x9b\x9f\x1c\x13w\xd7\xda\x92~i\xf5\x06\x00\xe7;K\x97\xeb\xda\\\t)<\xf4{\x95+A\xf9*\xa0\xd8\x13\x88\xcd\xe2\x86\x8a\x00jrv\xe4\xafY(\xe1\xdb\bF\xbb\xde\x02\x00\x00\x00\x83E/\x00V\xf0\xa8\xf5!_\xe7\xa0\xd0,\x00\x00\xff\xf6\x00\x00\x00\xbd\x03\n\xecT\x03&i\xa6_\xc5>\xdc?\x191#\xf41\x00\x7f\xce\xea]\xc2\x7f!\xd1\xb8\x94\t3S\tm\xe9\xfa\x13\xa7\xe3HI\xed\xf6\xe4\xdc!Aw5\x9ay \xb0\nGoF\xef\xaa\xe8\xec\x1c\x8a\x88\x10U\xd4\x91\xf4\xa7/\x01\x83\xa6~\xcdl\x82\x8ck\x93\x7f\xdc\xdf\x0e\xdc4K8\xe2\x10\xa2N\x91\xe0\xf3\xfb\x1c\xcc`\x87\x11\xc5\xa2\x13>\x9a%\x1c(Q|s\xdd\xd1\x9b\xfb\xf0\xfet\x01\xb9\xb1\x04J\xaf~\xa6:^\x00\x19\xc4P\x80.\xa3\xebM\x13\x03\x13u\xd0\xac\x8c\r\x9f7\x9a\x16\xe6\xba\xec\xdb\x15\xa2-\x9b\xf8\xfc\xee\x10O\xed$t\xa99\'C\xa1') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8004001201", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4004844) 2m39.674695826s ago: executing program 36 (id=2014): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xfffffffffffffff3) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm-aes-ce\x00'}, 0x58) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000caa000/0x4000)=nil, 0x183b, &(0x7f0000000400)='\xb3x\xd7,n\x1e\v\xc4\xe84\x04\xcb\xcb#\x80\x83\xb2\'&\xe3\xf1\x97\a\xef\xff`\x1e\x11E\xff\xff\x9b\x9f\x1c\x13w\xd7\xda\x92~i\xf5\x06\x00\xe7;K\x97\xeb\xda\\\t)<\xf4{\x95+A\xf9*\xa0\xd8\x13\x88\xcd\xe2\x86\x8a\x00jrv\xe4\xafY(\xe1\xdb\bF\xbb\xde\x02\x00\x00\x00\x83E/\x00V\xf0\xa8\xf5!_\xe7\xa0\xd0,\x00\x00\xff\xf6\x00\x00\x00\xbd\x03\n\xecT\x03&i\xa6_\xc5>\xdc?\x191#\xf41\x00\x7f\xce\xea]\xc2\x7f!\xd1\xb8\x94\t3S\tm\xe9\xfa\x13\xa7\xe3HI\xed\xf6\xe4\xdc!Aw5\x9ay \xb0\nGoF\xef\xaa\xe8\xec\x1c\x8a\x88\x10U\xd4\x91\xf4\xa7/\x01\x83\xa6~\xcdl\x82\x8ck\x93\x7f\xdc\xdf\x0e\xdc4K8\xe2\x10\xa2N\x91\xe0\xf3\xfb\x1c\xcc`\x87\x11\xc5\xa2\x13>\x9a%\x1c(Q|s\xdd\xd1\x9b\xfb\xf0\xfet\x01\xb9\xb1\x04J\xaf~\xa6:^\x00\x19\xc4P\x80.\xa3\xebM\x13\x03\x13u\xd0\xac\x8c\r\x9f7\x9a\x16\xe6\xba\xec\xdb\x15\xa2-\x9b\xf8\xfc\xee\x10O\xed$t\xa99\'C\xa1') prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8004001201", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x6) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r3, 0xffffffffffffffff) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x4004844) 24.023626639s ago: executing program 9 (id=2242): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x400, &(0x7f0000000280)='-#\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000019c0)={0x2020}, 0x2020) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000140)=0x8) sendfile(r1, r1, 0x0, 0x40008) 21.922667945s ago: executing program 9 (id=2247): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000002"]) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 20.012390979s ago: executing program 9 (id=2249): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000005) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000580)={0x0, 0x0, 0xbf, 0x9f, ""/159}, &(0x7f0000000640)=0xbf, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2, 0x0, 0x9}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0xe, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdfd, {0x0}, 0xd90f}]}, 0x6}) 17.662878861s ago: executing program 8 (id=2254): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 17.66236187s ago: executing program 9 (id=2255): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, 0x0, &(0x7f0000000000), 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r2, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x98, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x3f0000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xbff3}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x4}]}}]}, 0xc8}, 0x1, 0x7a00}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x7) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x4208, r4) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8993, &(0x7f0000000180)={'bond0\x00', 0x0}) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) r8 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f0000000100)=0xf5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwritev2(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x0, 0x3) 16.434766474s ago: executing program 8 (id=2259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=@deltaction={0x14, 0x31, 0x20, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x4020000) write$bt_hci(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="000b023f3201"], 0x15f) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0xffffffffffffffde, @remote}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r1, 0x1, 0x6, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00'}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="9400250600", 0x5}, {0x0}], 0x2, 0x0, 0x0, 0x600}, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x5811, 0x9, 0xfffffffb, 0xffff}, 0x6f) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffb1) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000200), 0x12) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000700)={'bond0\x00'}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_FREEZE(r7, 0x400c620e, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x58, 0x0, &(0x7f0000000380)=[@exit_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x9, 0x2, 0x3d}, @flat=@weak_handle={0x77682a85, 0x1100}, @fda={0x66646185, 0x2, 0x1, 0x1b}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @request_death={0x400c630e, 0x3}], 0x15, 0x0, &(0x7f0000000480)="127c80974696a1f3b8e442ce29493873a4b02b6103"}) 11.547044264s ago: executing program 6 (id=2262): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1200, 0x0, 0xfffffec8, 0x0, 0x0, 0x0) 10.750790677s ago: executing program 5 (id=2263): mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) waitid(0x0, r1, &(0x7f0000000240), 0x80000000, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x6) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 8.525591005s ago: executing program 5 (id=2265): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r4, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x24, 0x4, 0x41046100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000006d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x1, {0x0, 0x1, 0x20000000, 0x7, 0xfffffffd, 0x6, {0xffffffffffffffff, 0x0, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x6000, 0x0, r6, 0x0, 0x403}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r7, &(0x7f0000000380)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) socket$nl_generic(0x10, 0x3, 0x10) 8.524396391s ago: executing program 9 (id=2266): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000380)="8e255f0d0307ba9a7e697697a6f7cb50597c662673cc58a1ec23f7aa32daa9c362e6f6511868835552a6133955fa6f8dbe1e4adefb75e88df94ce94d1a1561dff843ce5048ef33e91ebc5732dfec647097dea4b49270fb0219b543bf", 0x5c}, {&(0x7f0000000280)="64133fff23c66cc38aace3a11aa4a3e4d0bff5f712b78391ef473839325edf4d18eb1b63e7bad31ec8ea47c4978f0ccd", 0x30}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000000400)="136d95b0f07c52541349a15c9e40a3f521949575de07f2e642e19267821853c8b8b048c5b399852e34f193d2ef25705d198438b1747d1f427ef089be0444e9a8d0b4df2fd6195b9777bd6556bb55b15073d72235b85d3b36e6e9858654d8e27605030793e252dbf9997806293afb14623ac735be3c4e1246aabdfbfd0878cce6db377fd319ca4564d49d", 0x8a}, {&(0x7f00000004c0)="536ba82bff931f41f66bd47a0b347f8b4465d7b7e2f66b9b25720403277456025a7ffb867eeba01e9d79c4e391a783e087f73391ebec9617543b7212df5d1cd026c662866b3ba166fc8613d2eb1e328747c1bc945519c51008a3a342a2aa307b066579b7510180fff8", 0x69}], 0x5}, 0x20008042) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1d, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="01000600000000000000010000001400020077673100"/34], 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="71e0d9c9671c1dee29d8d20bb34ac1fe88b223592e790c0b239e48cbaae43507206e68c5aa5109fcf95ebc903062f8e732d429fa3f2eae", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r4 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r6, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000002200)=ANY=[@ANYBLOB="7f454c4640057f0300000000000000000200060003000000740300000000000040000000000000001002040000000000030000000700380003000200050006000400000001000000090000000000000001000080000000000600000000000000010000000000000001800000000000000e000000000000000100000003000000080000000000000009000000000000000500000000000000080000000000000003000000000000000900000000000000070000000008000002000000000000000000000000000000080000000000000000000000002003000f0000000000000004000000000000000bbd2bed6e29768f4ebfad1401edac6ea4963a1dd2e441fbf0e5fe7f8a1813207d10b3fffc1258fe6d1b5d815f070993ba821f84abff3b81583d2451a3f5aff5edbdd4df08129595b995b4081513a3f1e710e05378dd1f235e19c53567a2fb3544a1b18f2a1b52abb9be694a41c6e0b3e254ff0ec9d099fe195929f634000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001300000000000000000000000000000000000000000000005e000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006b4b57b066d4b400"/1643], 0x665) r7 = socket$nl_rdma(0x10, 0x3, 0x14) recvfrom(r7, 0x0, 0x0, 0xc0000040, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 8.439977901s ago: executing program 8 (id=2267): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$unix(0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_aout(r7, &(0x7f00000008c0)=ANY=[], 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r8, &(0x7f0000000080)='./mnt\x00', r8, &(0x7f0000000100)='./mnt\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="747261395f21198210a27b646e6f3d", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^'}}]}) bind$unix(r1, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') lseek(r9, 0x1000000, 0x0) 8.412238831s ago: executing program 6 (id=2268): ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x1, 0x0, 0x3ff) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x2, 0x0, {0xbd6, 0x5, 0xd9}}, 0x28) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat(0xffffffffffffffff, 0x0, 0x4cfc0, 0x55) r2 = fsopen(&(0x7f0000000240)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r3, 0x4, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x3, @link_local, 'team0\x00'}}, 0x1e) r4 = socket$inet6(0xa, 0x3, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000600)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6, 0xa, 0x1, 0x9b5, 0x0, "b81af436cd0471587fdfb6733a7bd36f2562cbacb1804403be396c70c6d4fd7a3c580cfb59f696fe6595865dbd499d23158dd64f4d5ee4945043a4ce0ff4802d66a7752630daa299e625db14f08cfc11456fca95e920d876a37aeb6453a99f7404723f3bced127dcc4c45a928d3e629ce828afe41df4fcf193ad147131275f5b"}) sendmsg$nl_route(r5, 0x0, 0x980) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) 7.173343297s ago: executing program 5 (id=2269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) shutdown(r0, 0x1) 6.849495276s ago: executing program 1 (id=2270): creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r4}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0xc802, 0x16b) mlockall(0x7) 6.186006219s ago: executing program 6 (id=2271): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) unshare(0x2040400) r0 = eventfd(0x3) sync_file_range(r0, 0xffffffffffff0700, 0xfffffffffffffffd, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x24000059) socket$netlink(0x10, 0x3, 0x8000000004) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r3, 0x4b52, &(0x7f0000000040)={0xfa, &(0x7f0000000000)=[{}]}) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 5.161677742s ago: executing program 1 (id=2272): syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fanotify_mark(0xffffffffffffffff, 0x105, 0x2a, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x3) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) 5.047845093s ago: executing program 5 (id=2273): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4(r3, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r5 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) mkdir(0x0, 0xff0c) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x170) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x6, 0x0, 0x5, 0x9, 0x8001, 0x176f, 0x0, 0x0, 0x4}}, 0x50) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) 4.842838951s ago: executing program 8 (id=2274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r6, 0xc0345642, &(0x7f0000000140)={0x8, "6416ac8cdac02b48f71fbb94ad76b0f728ea6b8a673cea9837200f1593ffec73", 0x2, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r9], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) r10 = syz_open_dev$vim2m(&(0x7f0000000380), 0x80000003, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34324142, 0x0, 0x0, [{}, {}, {}, {0x4}, {}, {0x6}, {0x0, 0x1}]}}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) 4.842544152s ago: executing program 1 (id=2275): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000002080)={0x14}, 0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001a40)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x3, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x42}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r6, 0x89e1, &(0x7f0000000080)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000300)={0x1}, 0x8, 0x800) syz_io_uring_setup(0xffffffff, 0x0, 0x0, &(0x7f0000000300)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80b00000005010400000000000000000300008054020100030000000080000002ff060007"], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) 4.673891111s ago: executing program 6 (id=2276): mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) waitid(0x0, r1, &(0x7f0000000240), 0x80000000, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000000c0)=0x6) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() sendmsg$unix(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 3.226611254s ago: executing program 1 (id=2277): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000005) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000009640), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x1, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000580)={0x0, 0x0, 0xbf, 0x9f, ""/159}, &(0x7f0000000640)=0xbf, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2, 0x0, 0x9}) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0xe, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdfd, {0x0}, 0xd90f}]}, 0x6}) 2.787254747s ago: executing program 5 (id=2278): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1200, 0x0, 0xfffffec8, 0x0, 0x0, 0x0) 2.453866841s ago: executing program 8 (id=2279): recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000300) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r2, &(0x7f00000001c0)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xffff}]}}}]}, 0x44}}, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f0000000180)={0x1}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x2c, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0x0, 'sh\x00', 0x13, 0x84, 0x47}, 0x2c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r8, 0x800448d2, &(0x7f0000000240)={0x3, &(0x7f00000004c0)=[{@fixed}, {@fixed}, {@fixed}]}) 2.126871064s ago: executing program 6 (id=2280): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x0) fanotify_mark(r3, 0x105, 0x2a, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x14) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x890b, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x1ff) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setpriority(0x2, 0x0, 0x3) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x8000, 0x1, 0x56555941, 0x3, 0x9, [{0x3, 0x10001}, {0x54, 0x5}, {0x4, 0x7}, {0x2, 0x3}, {0x9, 0x5}, {0x2, 0x10000}, {0x5, 0x400}, {0xc, 0x3000000}], 0xd, 0x3, 0x3, 0x1, 0x7}}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16) 1.166502796s ago: executing program 1 (id=2281): socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7ffc, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) syz_emit_ethernet(0x52, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x2, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000080)={0x20071026}, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400191809004beafd0d3602028447000b4e230f02000500a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_UPDELAY={0x8, 0x4, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x44880) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(r6, 0x40096101, &(0x7f0000000100)={{}, 0x7}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r0}, @IFLA_MASTER={0x8, 0xa, r0}]}, 0x44}}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@enum64={0x6, 0x1, 0x0, 0x13, 0x1, 0x2, [{0x1000000, 0x2, 0xb}]}]}, {0x0, [0x2e, 0x2e, 0x30, 0x30, 0x2e, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x6}, 0x28) timer_create(0x3, 0x0, &(0x7f0000044000)) 449.72505ms ago: executing program 6 (id=2282): socket$inet(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xfffffffffffffe34) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, 0x0) setpgid(0x0, r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000480)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80000}) 429.526978ms ago: executing program 9 (id=2283): socket(0x2, 0x3, 0x100000001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) socket$key(0xf, 0x3, 0x2) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$tmpfs(0x0, &(0x7f0000004f80)='.\x00', &(0x7f0000000040), 0x4481, &(0x7f0000000080)={[{@nr_blocks={'nr_blocks', 0x3d, [0x25]}}]}) ioctl$sock_bt_hci(r4, 0x800448d3, &(0x7f00000004c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x7d1e02, 0x90) sendfile(r3, r1, 0x0, 0x101) socket$inet6(0xa, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x97) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x7f, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0xffffffff, 0xff000000, 0xff], [0xffffffff, 0xff, 0x0, 0xff], 'syzkaller1\x00', 'hsr0\x00', {0xff}, {}, 0x3a, 0x4, 0x5, 0x46}, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0x0, 0x0, [@empty, @dev={0xfe, 0x80, '\x00', 0x43}, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x100000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 287.470624ms ago: executing program 1 (id=2284): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket(0x1f, 0x1, 0x3b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x44000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x9065, @loopback, 0x7fffffff}, 0x1c) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0xffffffff, @loopback, 0x7}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bd2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000240)=':', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) shutdown(r1, 0x1) 79.020273ms ago: executing program 8 (id=2285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000000)) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x11, r4, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000140)) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000040)) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) read$FUSE(0xffffffffffffffff, &(0x7f00000015c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) semget$private(0x0, 0x1, 0x2a8) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xd8}], 0x1) 0s ago: executing program 5 (id=2286): syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fanotify_mark(0xffffffffffffffff, 0x105, 0x2a, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0x3) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04093120"], 0x7) kernel console output (not intermixed with test programs): roblem. [ 905.756749][T12487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.768817][T12487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.775847][T12487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.802488][T12487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.232727][T12796] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input15 [ 906.947923][T12799] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1272'. [ 907.062940][T12485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.074357][T12804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1273'. [ 907.085819][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.134790][T12485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.299648][T12487] hsr_slave_0: entered promiscuous mode [ 907.337773][T12487] hsr_slave_1: entered promiscuous mode [ 907.374483][T12485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.385403][T12485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.435457][T12485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.370176][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.250371][T12485] hsr_slave_0: entered promiscuous mode [ 909.259381][T12485] hsr_slave_1: entered promiscuous mode [ 909.456445][T12485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.464191][T12485] Cannot create hsr debugfs directory [ 910.070829][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.294428][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.162615][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.523796][T12490] Bluetooth: hci3: command 0x0406 tx timeout [ 919.951329][ T49] bridge_slave_1: left allmulticast mode [ 919.959773][ T49] bridge_slave_1: left promiscuous mode [ 920.041521][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.086706][ T49] bridge_slave_0: left allmulticast mode [ 920.098404][ T49] bridge_slave_0: left promiscuous mode [ 920.123820][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.197857][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.209885][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.221101][ T49] bond0 (unregistering): Released all slaves [ 922.421076][T10791] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 923.124782][T12931] sch_fq: defrate 4294967295 ignored. [ 923.192514][ T49] hsr_slave_0: left promiscuous mode [ 923.202713][T10791] usb 3-1: unable to get BOS descriptor or descriptor too short [ 923.224098][ T49] hsr_slave_1: left promiscuous mode [ 923.224455][T10791] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 923.232377][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 923.245129][T10791] usb 3-1: can't read configurations, error -71 [ 923.253349][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.272438][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 923.279959][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 923.348453][ T49] veth1_macvtap: left promiscuous mode [ 923.354535][ T49] veth0_macvtap: left promiscuous mode [ 923.365415][ T49] veth1_vlan: left promiscuous mode [ 923.376009][ T49] veth0_vlan: left promiscuous mode [ 926.871487][ T49] team0 (unregistering): Port device team_slave_1 removed [ 927.529655][ T49] team0 (unregistering): Port device team_slave_0 removed [ 928.036941][T12973] /dev/nullb0: Can't open blockdev [ 928.442224][T12971] ceph: No mds server is up or the cluster is laggy [ 928.449186][ T48] libceph: connect (1)[c::]:6789 error -101 [ 928.458790][ T48] libceph: mon0 (1)[c::]:6789 connect error [ 928.778129][T12976] Cannot find del_set index 1 as target [ 930.569583][T12487] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 930.755737][T12487] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 931.646437][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.676837][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.260492][T10743] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 932.289246][T10743] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 932.304320][T10743] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 932.326225][T10743] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 932.355877][T10743] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 932.620404][T13003] lo speed is unknown, defaulting to 1000 [ 933.011847][T13003] lo speed is unknown, defaulting to 1000 [ 934.441168][T12490] Bluetooth: hci5: command tx timeout [ 934.567193][T10743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 934.578697][T10743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 934.605555][T10743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 934.625585][ T9742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 934.635716][ T9742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 934.656583][ T9742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 934.666700][ T9742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 934.676077][ T9742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 934.689513][ T9742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 934.700275][ T9742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 935.145049][T13029] lo speed is unknown, defaulting to 1000 [ 935.183875][T13029] lo speed is unknown, defaulting to 1000 [ 935.183875][T13030] lo speed is unknown, defaulting to 1000 [ 935.451814][T13030] lo speed is unknown, defaulting to 1000 [ 936.791283][ T9742] Bluetooth: hci5: command tx timeout [ 936.796878][ T9742] Bluetooth: hci2: command tx timeout [ 936.805005][ T9742] Bluetooth: hci4: command tx timeout [ 937.026620][T13003] chnl_net:caif_netlink_parms(): no params data found [ 938.620353][ T5987] bridge_slave_1: left allmulticast mode [ 938.639001][ T5987] bridge_slave_1: left promiscuous mode [ 938.661282][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.705709][ T5987] bridge_slave_0: left allmulticast mode [ 938.711708][ T5987] bridge_slave_0: left promiscuous mode [ 938.717598][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.841284][ T9742] Bluetooth: hci2: command tx timeout [ 938.841465][T12490] Bluetooth: hci5: command tx timeout [ 938.846962][ T51] Bluetooth: hci4: command tx timeout [ 938.937211][ T5987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.959755][ T5987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.973078][ T5987] bond0 (unregistering): Released all slaves [ 938.990290][T13003] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.997683][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.005810][T13003] bridge_slave_0: entered allmulticast mode [ 939.015075][T13003] bridge_slave_0: entered promiscuous mode [ 939.059334][T13003] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.067081][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.080869][T13003] bridge_slave_1: entered allmulticast mode [ 939.089676][T13003] bridge_slave_1: entered promiscuous mode [ 939.181075][ T5987] hsr_slave_0: left promiscuous mode [ 939.200895][ T5987] hsr_slave_1: left promiscuous mode [ 939.217932][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.226403][ T5987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.506116][T13091] kAFS: No cell specified [ 939.979030][ T5987] team0 (unregistering): Port device team_slave_1 removed [ 940.778291][ T5987] team0 (unregistering): Port device team_slave_0 removed [ 940.921196][ T51] Bluetooth: hci4: command tx timeout [ 940.926752][ T51] Bluetooth: hci2: command tx timeout [ 940.932580][ T51] Bluetooth: hci5: command tx timeout [ 941.735592][T13029] chnl_net:caif_netlink_parms(): no params data found [ 941.790106][T13094] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 941.800332][T13094] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 942.440463][T13003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.747126][T13003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.011108][T12490] Bluetooth: hci2: command tx timeout [ 943.016816][T12490] Bluetooth: hci4: command tx timeout [ 943.440059][T13030] chnl_net:caif_netlink_parms(): no params data found [ 944.820243][T13003] team0: Port device team_slave_0 added [ 945.027609][T13003] team0: Port device team_slave_1 added [ 946.082977][T13029] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.090391][T13029] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.099967][T13029] bridge_slave_0: entered allmulticast mode [ 946.110211][T13029] bridge_slave_0: entered promiscuous mode [ 946.371301][T13029] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.378689][T13029] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.395725][T13029] bridge_slave_1: entered allmulticast mode [ 946.404874][T13029] bridge_slave_1: entered promiscuous mode [ 946.613226][T13140] ubi31: detaching mtd0 [ 947.474363][T13140] ubi31: mtd0 is detached [ 947.544428][T13003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.551585][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.579227][T13003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.749055][T13029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.758186][T10803] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 947.784246][T13003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.800407][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.861363][T13003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.901077][T10803] usb 3-1: Using ep0 maxpacket: 16 [ 947.922429][T10803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 947.935180][T10803] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 947.961812][T10803] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 947.965925][T13029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.970889][T10803] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 947.970911][T10803] usb 3-1: Manufacturer: syz [ 948.095591][T10803] usb 3-1: config 0 descriptor?? [ 948.218536][T13030] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.229130][T13030] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.239337][T13030] bridge_slave_0: entered allmulticast mode [ 948.254656][T13030] bridge_slave_0: entered promiscuous mode [ 948.410706][T13003] hsr_slave_0: entered promiscuous mode [ 948.428224][T13003] hsr_slave_1: entered promiscuous mode [ 948.452538][T13030] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.474641][T13030] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.483786][T13030] bridge_slave_1: entered allmulticast mode [ 948.494810][T13030] bridge_slave_1: entered promiscuous mode [ 949.063458][T13029] team0: Port device team_slave_0 added [ 949.074795][T13029] team0: Port device team_slave_1 added [ 949.092407][T13030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.106193][T13030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.160593][T13030] team0: Port device team_slave_0 added [ 949.173632][T13030] team0: Port device team_slave_1 added [ 949.359426][T13029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.366780][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.393898][T13029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.408066][T13029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.415693][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.442077][T13029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 949.514912][T13029] hsr_slave_0: entered promiscuous mode [ 949.522532][T13029] hsr_slave_1: entered promiscuous mode [ 949.573508][T10803] usb 3-1: USB disconnect, device number 5 [ 949.592583][T13029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 949.600287][T13029] Cannot create hsr debugfs directory [ 949.612699][T13030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 950.116099][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.142918][T13030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 950.157787][T13030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.165263][T13030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.205159][T13030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.363802][T13170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1332'. [ 953.340075][T13030] hsr_slave_0: entered promiscuous mode [ 953.556813][T13030] hsr_slave_1: entered promiscuous mode [ 953.563784][T13030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.571716][T13030] Cannot create hsr debugfs directory [ 953.655123][T13193] overlay: Unknown parameter '/' [ 957.360743][ T9660] bridge_slave_1: left allmulticast mode [ 957.367410][ T9660] bridge_slave_1: left promiscuous mode [ 957.377223][ T9660] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.993618][ T9660] bridge_slave_0: left allmulticast mode [ 958.203381][ T9660] bridge_slave_0: left promiscuous mode [ 958.211217][ T9660] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.750741][T13235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 959.653528][ T9660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.704235][ T9660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.715816][ T9660] bond0 (unregistering): Released all slaves [ 960.015956][T13257] overlay: Unknown parameter '/' [ 960.777634][ T9660] hsr_slave_0: left promiscuous mode [ 960.793356][ T9660] hsr_slave_1: left promiscuous mode [ 960.810566][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.856419][ T9660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.868947][T13282] netlink: 'syz.1.1349': attribute type 4 has an invalid length. [ 963.213883][ T9660] team0 (unregistering): Port device team_slave_1 removed [ 963.311690][ T9660] team0 (unregistering): Port device team_slave_0 removed [ 963.455682][T13286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.710872][T13298] Device name cannot be null; rc = [-22] [ 964.718280][T13298] overlayfs: failed to clone lowerpath [ 966.317355][T13003] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 967.258057][T13003] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 967.479912][T13003] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 967.514650][T13003] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 968.150503][T13340] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 13340 comm: syz.2.1359) [ 968.167106][ T30] audit: type=1800 audit(2000000960.584:198): pid=13340 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1359" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=36045 res=0 errno=0 [ 968.647640][T13003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.716759][T13003] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.795596][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.802831][ T9492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.497159][ T9492] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.504411][ T9492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.671928][T13029] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 970.032298][T13029] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 970.225786][T13029] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 970.354970][T13029] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 971.396352][T13030] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 971.459690][T13030] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 971.546074][T13030] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 972.032700][T13030] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 972.371508][T13003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.948382][T13029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.009157][T13029] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.105579][ T9485] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.112809][ T9485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.507950][T12763] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.515192][T12763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.066689][T13030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.329662][T13030] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.420997][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.428181][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.498720][T13029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.267416][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.274663][ T9660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.418809][T13459] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1373'. [ 976.429039][T13459] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 976.592352][T13003] veth0_vlan: entered promiscuous mode [ 976.683284][T13003] veth1_vlan: entered promiscuous mode [ 976.759679][T13029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.836329][T13003] veth0_macvtap: entered promiscuous mode [ 976.848874][ T30] audit: type=1326 audit(2000000969.264:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13463 comm="syz.1.1374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x0 [ 976.867099][T13003] veth1_macvtap: entered promiscuous mode [ 976.919971][T13003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.966492][T13003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 977.012074][T13003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.043349][T13003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.057728][T13003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.068675][T13003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.178449][T13030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.466429][ T9485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.516200][ T9485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.665561][ T30] audit: type=1326 audit(2000000970.084:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 977.692549][T13487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 977.703931][ T9660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.751369][ T9660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.773700][ T30] audit: type=1326 audit(2000000970.084:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 977.829183][T13029] veth0_vlan: entered promiscuous mode [ 977.891174][ T30] audit: type=1326 audit(2000000970.084:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 977.946762][ T30] audit: type=1326 audit(2000000970.084:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 978.015600][T13029] veth1_vlan: entered promiscuous mode [ 978.024499][ T30] audit: type=1326 audit(2000000970.084:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 978.239791][ T30] audit: type=1326 audit(2000000970.084:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 979.227431][T13029] veth0_macvtap: entered promiscuous mode [ 979.249427][ T30] audit: type=1326 audit(2000000970.084:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 979.340548][T13029] veth1_macvtap: entered promiscuous mode [ 980.073070][ T30] audit: type=1326 audit(2000000970.084:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 980.211541][T13029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.255091][ T30] audit: type=1326 audit(2000000970.084:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13486 comm="syz.1.1375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f090598e929 code=0x7ffc0000 [ 980.314784][T13029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.419354][T13029] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.517795][T13029] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.531336][T13029] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.540214][T13029] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.738924][T13521] siw: device registration error -23 [ 982.196969][T13030] veth0_vlan: entered promiscuous mode [ 983.203564][T13030] veth1_vlan: entered promiscuous mode [ 984.183879][T13545] tmpfs: Bad value for 'mpol' [ 984.739500][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.753382][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.168849][T13030] veth0_macvtap: entered promiscuous mode [ 985.451105][ T9660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.538656][ T9660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.580354][T13030] veth1_macvtap: entered promiscuous mode [ 985.681193][T13030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.718314][T13030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.755151][T13030] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.881191][T13030] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.895940][T13030] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.922089][T13030] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.912275][T10803] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 987.985526][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.080148][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.145230][T10803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.244530][T10803] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 988.269642][T10803] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 988.287160][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.288733][T10803] usb 3-1: Product: syz [ 988.304142][T10803] usb 3-1: Manufacturer: syz [ 988.309140][T10803] usb 3-1: SerialNumber: syz [ 988.327228][T10803] usb 3-1: config 0 descriptor?? [ 988.460270][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.525235][T10803] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 989.541301][T11763] udevd[11763]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 990.313456][T13594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.558056][T10804] usb 3-1: USB disconnect, device number 6 [ 991.879096][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 991.879115][ T30] audit: type=1326 audit(2000000983.664:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13609 comm="syz.6.1398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e9878e929 code=0x0 [ 993.117214][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.136169][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.144566][ T51] Bluetooth: hci2: command tx timeout [ 993.742112][T13636] could not allocate digest TFM handle poly1305-generic [ 996.600053][T13663] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 997.998698][T13682] xt_nat: multiple ranges no longer supported [ 1004.085808][T13726] netlink: 'syz.5.1417': attribute type 11 has an invalid length. [ 1009.601941][T13755] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1009.686727][T13760] Cannot find add_set index 1 as target [ 1009.987631][T13766] overlay: Unknown parameter '/' [ 1011.211228][T13762] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 1015.421120][ T30] audit: type=1326 audit(2000001007.834:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13806 comm="syz.5.1434" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3861f8e929 code=0x0 [ 1017.996995][T13841] overlay: Unknown parameter '/' [ 1018.629894][T13843] No such timeout policy "syz0" [ 1020.005204][T13859] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1442'. [ 1021.530597][T13878] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1026.694913][T13912] xt_TCPMSS: Only works on TCP SYN packets [ 1032.528083][T13947] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1032.546969][T13947] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1463'. [ 1034.084123][T13958] Bluetooth: (null): Invalid header checksum [ 1034.629274][ T1344] Bluetooth: (null): Invalid header checksum [ 1034.645182][ T1344] Bluetooth: (null): Invalid header checksum [ 1034.674507][ T1344] Bluetooth: (null): Invalid header checksum [ 1034.704109][ T1344] Bluetooth: (null): Invalid header checksum [ 1034.717403][ T1344] Bluetooth: (null): Invalid header checksum [ 1034.738699][ T1344] Bluetooth: (null): Invalid header checksum [ 1035.805402][T13965] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd5": -EINTR [ 1037.665374][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 1037.683764][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1468'. [ 1037.718225][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1468'. [ 1041.024905][T14007] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1475'. [ 1041.524209][T14016] bond_slave_0: entered promiscuous mode [ 1041.530592][T14016] bond_slave_1: entered promiscuous mode [ 1041.537021][T14016] macvlan2: entered promiscuous mode [ 1041.542476][T14016] bond0: entered promiscuous mode [ 1041.558093][T14016] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1042.802431][T14013] trusted_key: encrypted_key: insufficient parameters specified [ 1043.882546][T14027] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd6": -EINTR [ 1045.783231][T14022] overlay: Unknown parameter '/' [ 1046.316533][T12490] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1 [ 1047.191971][T14055] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1050.361804][T12490] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1050.371308][T12490] Bluetooth: hci4: Injecting HCI hardware error event [ 1050.381587][ T51] Bluetooth: hci4: hardware error 0x00 [ 1051.956337][T14075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1489'. [ 1051.967308][T14075] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1489'. [ 1052.998746][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1053.163125][T14085] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd2": -EINTR [ 1053.994766][T14102] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1494'. [ 1054.182135][T14104] overlay: Unknown parameter '/' [ 1054.591629][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.597993][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.101578][ T30] audit: type=1326 audit(2000001048.074:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14099 comm="syz.2.1497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc14038e929 code=0x0 [ 1056.485677][T14119] siw: device registration error -23 [ 1056.682486][T12490] Bluetooth: hci5: command 0x0406 tx timeout [ 1060.469063][ T9008] schedule_timeout: wrong timeout value fffffffffffffffc [ 1060.958332][ T9008] CPU: 1 UID: 0 PID: 9008 Comm: vivid-000-vid-o Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1060.958357][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.958367][ T9008] Call Trace: [ 1060.958374][ T9008] [ 1060.958381][ T9008] dump_stack_lvl+0x189/0x250 [ 1060.958407][ T9008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1060.958424][ T9008] ? __pfx__printk+0x10/0x10 [ 1060.958455][ T9008] schedule_timeout+0x1e1/0x270 [ 1060.958476][ T9008] ? __pfx_schedule_timeout+0x10/0x10 [ 1060.958510][ T9008] ? prepare_to_wait_event+0x437/0x480 [ 1060.958540][ T9008] vivid_thread_vid_out+0x139f/0x1c90 [ 1060.958595][ T9008] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 1060.958624][ T9008] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1060.958645][ T9008] ? __kthread_parkme+0x7b/0x200 [ 1060.958664][ T9008] ? __kthread_parkme+0x1a1/0x200 [ 1060.958690][ T9008] kthread+0x711/0x8a0 [ 1060.958714][ T9008] ? __pfx_vivid_thread_vid_out+0x10/0x10 [ 1060.958730][ T9008] ? __pfx_kthread+0x10/0x10 [ 1060.958753][ T9008] ? _raw_spin_unlock_irq+0x23/0x50 [ 1060.958775][ T9008] ? lockdep_hardirqs_on+0x9c/0x150 [ 1060.958796][ T9008] ? __pfx_kthread+0x10/0x10 [ 1060.958818][ T9008] ret_from_fork+0x3fc/0x770 [ 1060.958838][ T9008] ? __pfx_ret_from_fork+0x10/0x10 [ 1060.958861][ T9008] ? __switch_to_asm+0x39/0x70 [ 1060.958879][ T9008] ? __switch_to_asm+0x33/0x70 [ 1060.958896][ T9008] ? __pfx_kthread+0x10/0x10 [ 1060.958917][ T9008] ret_from_fork_asm+0x1a/0x30 [ 1060.958948][ T9008] [ 1063.033044][T14172] overlay: Unknown parameter '/' [ 1065.166655][T14185] tmpfs: Bad value for 'mpol' [ 1065.745026][T14199] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1067.337310][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1520'. [ 1067.462518][T14211] overlayfs: missing 'lowerdir' [ 1067.549497][T14212] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1072.531135][T14236] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1072.960953][ T30] audit: type=1326 audit(2000001064.974:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14228 comm="syz.2.1523" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc14038e929 code=0x0 [ 1074.333049][T14240] overlay: Unknown parameter '/' [ 1074.481743][T14241] overlay: Unknown parameter '/' [ 1077.443985][T14245] cgroup: fork rejected by pids controller in /syz6 [ 1079.790287][T14248] delete_channel: no stack [ 1080.922701][T14274] overlayfs: failed to clone upperpath [ 1080.952905][ T30] audit: type=1326 audit(2000001073.364:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1081.046777][ T30] audit: type=1326 audit(2000001073.394:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1081.227982][ T30] audit: type=1326 audit(2000001073.394:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1081.538808][ T30] audit: type=1326 audit(2000001073.394:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1081.789502][ T30] audit: type=1326 audit(2000001073.394:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1082.022477][ T30] audit: type=1326 audit(2000001073.394:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1082.258668][ T30] audit: type=1326 audit(2000001073.404:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1082.512623][ T30] audit: type=1326 audit(2000001073.404:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1082.947218][ T30] audit: type=1326 audit(2000001073.404:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1083.302527][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.380459][ T30] audit: type=1326 audit(2000001073.404:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14275 comm="syz.2.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc14038e929 code=0x7ffc0000 [ 1084.198794][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.592784][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.690627][T14299] overlay: Unknown parameter '/' [ 1085.351560][T14297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1086.568169][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.432749][T12490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1088.444695][T12490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1088.454945][T12490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1088.463706][T12490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1088.471692][T12490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1088.531482][T14325] lo speed is unknown, defaulting to 1000 [ 1088.539267][T14325] lo speed is unknown, defaulting to 1000 [ 1088.802217][T10793] hid (null): unknown global tag 0xe [ 1089.133761][T10793] hid (null): unknown global tag 0xe [ 1089.159965][T10793] hid (null): unknown global tag 0xe [ 1089.188399][T10793] hid (null): invalid report_count 617643861 [ 1090.512248][T10793] hid-generic 0DD1:B19E:FFFFFF00.0001: unknown global tag 0xe [ 1090.521068][T10793] hid-generic 0DD1:B19E:FFFFFF00.0001: item 0 0 1 14 parsing failed [ 1090.526582][T12490] Bluetooth: hci1: command tx timeout [ 1090.530041][T10793] hid-generic 0DD1:B19E:FFFFFF00.0001: probe with driver hid-generic failed with error -22 [ 1090.548236][T14342] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1547'. [ 1091.576464][ T13] bridge_slave_1: left allmulticast mode [ 1091.598206][ T13] bridge_slave_1: left promiscuous mode [ 1091.633499][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.643739][ T13] bridge_slave_0: left allmulticast mode [ 1091.649499][ T13] bridge_slave_0: left promiscuous mode [ 1091.656463][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.193271][T14359] overlay: Unknown parameter '/' [ 1092.621366][T12490] Bluetooth: hci1: command tx timeout [ 1092.922029][T14357] syz.7.1550: attempt to access beyond end of device [ 1092.922029][T14357] nbd7: rw=0, sector=6, nr_sectors = 2 limit=0 [ 1093.376479][T14357] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1094.751084][T12490] Bluetooth: hci1: command tx timeout [ 1096.761087][T12490] Bluetooth: hci1: command tx timeout [ 1098.845760][T14410] atomic_op ffff88802ff0e998 conn xmit_atomic 0000000000000000 [ 1099.464474][T14421] overlay: Unknown parameter '/' [ 1101.715106][T14439] fuse: Bad value for 'fd' [ 1101.734890][T14439] Invalid source name [ 1101.739205][T14439] UBIFS error (pid: 14439): cannot open "./file0", error -22 [ 1101.773810][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'. [ 1102.262409][T14438] program syz.7.1566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1102.509374][ T13] bond0 (unregistering): left promiscuous mode [ 1102.515801][ T13] bond_slave_0: left promiscuous mode [ 1102.522276][ T13] bond_slave_1: left promiscuous mode [ 1102.805981][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.819943][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.849090][ T13] bond0 (unregistering): Released all slaves [ 1104.053937][T14439] team0: Port device team_slave_1 removed [ 1104.955034][ T5964] libceph: connect (1)[c::]:6789 error -22 [ 1105.251486][ T5964] libceph: mon0 (1)[c::]:6789 connect error [ 1105.310432][T14460] ceph: No mds server is up or the cluster is laggy [ 1106.408957][T14478] Invalid ELF header magic: != ELF [ 1107.363118][ T48] IPVS: starting estimator thread 0... [ 1107.448533][T14485] overlay: Unknown parameter '/' [ 1107.611304][T14484] IPVS: using max 27 ests per chain, 64800 per kthread [ 1108.206726][T14488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1576'. [ 1109.379138][T14325] chnl_net:caif_netlink_parms(): no params data found [ 1109.831058][ T13] hsr_slave_0: left promiscuous mode [ 1109.837946][ T13] hsr_slave_1: left promiscuous mode [ 1109.852328][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.860143][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.902798][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.921240][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.132716][ T13] veth1_macvtap: left promiscuous mode [ 1110.731040][ T13] veth0_macvtap: left promiscuous mode [ 1110.736922][ T13] veth1_vlan: left promiscuous mode [ 1110.746867][ T13] veth0_vlan: left promiscuous mode [ 1111.251898][T14521] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1113.617181][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1113.697701][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1114.381801][T14546] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd2": -EINTR [ 1115.801081][T14568] overlay: Unknown parameter '/' [ 1116.998750][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1117.005840][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.448408][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.477337][T14325] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.593390][T14325] bridge_slave_0: entered allmulticast mode [ 1117.850925][T14325] bridge_slave_0: entered promiscuous mode [ 1118.057129][T14325] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.078630][T14325] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.089372][T14325] bridge_slave_1: entered allmulticast mode [ 1118.133036][T14325] bridge_slave_1: entered promiscuous mode [ 1118.363742][T14325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.421354][T14325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.549461][T14605] syz.7.1597(14605): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1120.568772][T14607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1120.584723][T14325] team0: Port device team_slave_0 added [ 1120.916581][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1595'. [ 1121.999718][T14325] team0: Port device team_slave_1 added [ 1122.649985][T14624] syz.5.1598: attempt to access beyond end of device [ 1122.649985][T14624] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1122.770436][T14623] kthread_run failed with err -4 [ 1122.871978][T14325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.890952][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.082042][T14325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.224225][T14325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.340355][T14325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.414238][T14325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.745468][T14641] overlay: Unknown parameter '/' [ 1125.395053][T14651] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd7": -EINTR [ 1125.395981][T14650] kthread_run failed with err -4 [ 1125.911023][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'. [ 1126.489008][T14325] hsr_slave_0: entered promiscuous mode [ 1127.221860][T14672] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 1127.229650][T14672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1605'. [ 1127.430717][T14325] hsr_slave_1: entered promiscuous mode [ 1127.444261][T14325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1127.452600][T14325] Cannot create hsr debugfs directory [ 1129.676862][T14699] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1131.127605][T14715] siw: device registration error -23 [ 1132.026554][T12490] Bluetooth: hci5: unexpected event for opcode 0x2031 [ 1132.600380][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1132.600399][ T30] audit: type=1804 audit(2000001125.014:294): pid=14725 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.1613" name="file0" dev="tmpfs" ino=2616 res=1 errno=0 [ 1133.483208][T14733] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1615'. [ 1133.489645][T14725] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1133.821020][T14725] ref_ctr increment failed for inode: 0xa38 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888068b7d000 [ 1135.260974][T14748] loop6: detected capacity change from 0 to 524287999 [ 1136.238672][T14757] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1620'. [ 1136.309949][T14757] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1136.393663][T14748] Dev loop6: unable to read RDB block 8 [ 1136.402733][T14748] loop6: unable to read partition table [ 1136.408659][T14748] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1136.608952][T14325] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1137.026433][T14773] syz.5.1622: attempt to access beyond end of device [ 1137.026433][T14773] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1137.436230][T14325] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1137.988446][T14325] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1138.320095][T14325] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1139.440326][T14325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1139.716123][T14325] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.346668][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.353898][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.422483][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.429744][ T5987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1140.854417][T14822] xt_SECMARK: invalid mode: 2 [ 1141.524046][T14813] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1141.739255][T14830] omfs: Invalid superblock (0) [ 1144.683059][T14855] overlay: Unknown parameter '/' [ 1145.529882][T14856] syz.7.1634: attempt to access beyond end of device [ 1145.529882][T14856] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1146.795697][T14873] IPVS: stopping master sync thread 14875 ... [ 1147.246370][T14879] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1149.141110][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1149.261679][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1149.276514][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1149.357523][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1149.373948][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1149.443083][T10791] libceph: connect (1)[c::]:6789 error -101 [ 1149.539158][T10791] libceph: mon0 (1)[c::]:6789 connect error [ 1149.650478][T14897] ceph: No mds server is up or the cluster is laggy [ 1149.927409][T14887] lo speed is unknown, defaulting to 1000 [ 1149.942682][T14887] lo speed is unknown, defaulting to 1000 [ 1150.726282][T14915] program syz.7.1641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1151.401164][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 1151.579951][ T51] Bluetooth: hci2: command tx timeout [ 1154.377174][T14943] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1154.445494][ T30] audit: type=1326 audit(2000001146.834:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14937 comm="syz.5.1646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3861f8e929 code=0x0 [ 1155.083723][ T51] Bluetooth: hci2: command tx timeout [ 1156.261160][T14946] overlay: Unknown parameter '/' [ 1157.171304][ T51] Bluetooth: hci2: command tx timeout [ 1157.315365][T14954] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1649'. [ 1157.325572][T14954] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1159.255787][ T51] Bluetooth: hci2: command tx timeout [ 1160.407895][T14985] program syz.7.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1161.587324][T14887] chnl_net:caif_netlink_parms(): no params data found [ 1162.268458][T10793] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1163.020994][T10793] usb 3-1: device descriptor read/64, error -71 [ 1163.075898][ T9501] bridge_slave_1: left allmulticast mode [ 1163.118775][ T9501] bridge_slave_1: left promiscuous mode [ 1163.125064][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.191764][ T9501] bridge_slave_0: left allmulticast mode [ 1163.197485][ T9501] bridge_slave_0: left promiscuous mode [ 1163.204369][ T9501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.179669][T15022] siw: device registration error -23 [ 1165.415106][T15035] overlay: Unknown parameter '/' [ 1166.161464][ T30] audit: type=1326 audit(2000001157.884:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15028 comm="syz.1.1659" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f090598e929 code=0x0 [ 1169.053023][ T9501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1169.077385][ T9501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.092234][ T9501] bond0 (unregistering): Released all slaves [ 1169.155718][T15075] overlay: Unknown parameter '/' [ 1169.774783][T14887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.790997][T14887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.798315][T14887] bridge_slave_0: entered allmulticast mode [ 1169.831549][T14887] bridge_slave_0: entered promiscuous mode [ 1169.844161][T15015] veth0_vlan: entered allmulticast mode [ 1169.885657][T15016] ªªªªªª: renamed from vlan0 [ 1170.088747][T14887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.097535][T14887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.898445][T14887] bridge_slave_1: entered allmulticast mode [ 1170.995127][T14887] bridge_slave_1: entered promiscuous mode [ 1171.013169][T15088] veth0_vlan: entered allmulticast mode [ 1171.029212][T15089] ªªªªªª: renamed from vlan0 [ 1171.284371][T15090] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1171.603949][T15096] netlink: 716 bytes leftover after parsing attributes in process `syz.2.1667'. [ 1171.660084][T14887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1171.668417][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 1172.898971][ T9501] hsr_slave_0: left promiscuous mode [ 1173.416827][ T9501] hsr_slave_1: left promiscuous mode [ 1173.437306][ T9501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1173.467432][ T9501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.322470][T15125] xt_TCPMSS: Only works on TCP SYN packets [ 1175.371007][ T9742] Bluetooth: hci2: command 0x0405 tx timeout [ 1176.106750][T15145] Bluetooth: hci1: Frame reassembly failed (-90) [ 1176.158492][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 1176.520698][ T9501] team0 (unregistering): Port device team_slave_1 removed [ 1176.584493][ T9501] team0 (unregistering): Port device team_slave_0 removed [ 1177.250259][T14887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.407000][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.413911][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.599286][T14887] team0: Port device team_slave_0 added [ 1177.625546][T14887] team0: Port device team_slave_1 added [ 1178.200983][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 1178.209854][ T9742] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1178.418654][T14887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.446736][T14887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.501907][T14887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1178.527834][T14887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1178.583271][T14887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.892264][T14887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.258623][T15169] bond_slave_0: entered promiscuous mode [ 1180.264502][T15169] bond_slave_1: entered promiscuous mode [ 1180.274242][T15169] macvlan2: entered promiscuous mode [ 1180.279653][T15169] bond0: entered promiscuous mode [ 1180.285544][T15169] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1180.294429][T15169] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1180.301737][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1677'. [ 1180.393808][T15176] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1180.592056][T14887] hsr_slave_0: entered promiscuous mode [ 1180.608023][T14887] hsr_slave_1: entered promiscuous mode [ 1180.621852][T14887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1180.632623][T14887] Cannot create hsr debugfs directory [ 1181.748047][T15200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1683'. [ 1182.894521][T15190] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1681'. [ 1186.179351][T15243] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 1188.260446][T15264] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1188.778089][T15275] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1695'. [ 1190.034755][T14887] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1190.520307][T14887] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1190.887262][T15300] overlay: Unknown parameter '/' [ 1191.156875][T15302] JFS: discard option not supported on device [ 1191.216810][T15302] Mount JFS Failure: -22 [ 1191.221270][T15302] jfs_mount failed w/return code = -22 [ 1191.671476][T14887] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1192.067760][T14887] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1192.499993][T14887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.537074][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1701'. [ 1192.549652][T15324] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1701'. [ 1193.164306][T14887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.252058][T12763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.259305][T12763] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.288387][T12763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.295636][T12763] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.346427][T15358] syz.2.1706: attempt to access beyond end of device [ 1195.346427][T15358] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1195.553106][T14887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.073330][T10791] libceph: connect (1)[c::]:6789 error -101 [ 1196.270185][T10791] libceph: mon0 (1)[c::]:6789 connect error [ 1196.494961][T15373] ceph: No mds server is up or the cluster is laggy [ 1198.541403][T15389] overlay: Unknown parameter '/' [ 1200.935225][T15399] xt_hashlimit: overflow, rate too high: 0 [ 1201.217429][T15395] syz.5.1711: attempt to access beyond end of device [ 1201.217429][T15395] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1201.237141][T15395] hfsplus: unable to find HFS+ superblock [ 1203.588392][T15418] ceph: No mds server is up or the cluster is laggy [ 1203.603426][T10803] libceph: connect (1)[c::]:6789 error -101 [ 1203.631197][T10803] libceph: mon0 (1)[c::]:6789 connect error [ 1203.892316][T14887] veth0_vlan: entered promiscuous mode [ 1204.223828][T14887] veth1_vlan: entered promiscuous mode [ 1204.611508][T15436] netlink: 'syz.7.1718': attribute type 12 has an invalid length. [ 1209.548743][T15459] overlay: Unknown parameter '/' [ 1211.882563][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1211.894650][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1211.905784][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1211.915678][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1211.929221][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1212.770420][T15479] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1213.323889][T15469] lo speed is unknown, defaulting to 1000 [ 1213.343403][T15469] lo speed is unknown, defaulting to 1000 [ 1213.641033][T15484] netlink: 'syz.5.1731': attribute type 10 has an invalid length. [ 1213.651888][T15484] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1731'. [ 1213.666313][T15484] dummy0: entered promiscuous mode [ 1213.722892][T15484] bridge0: port 3(dummy0) entered blocking state [ 1213.738751][T15484] bridge0: port 3(dummy0) entered disabled state [ 1214.310943][T15494] netlink: 'syz.7.1734': attribute type 7 has an invalid length. [ 1214.603514][ T9742] Bluetooth: hci1: command tx timeout [ 1214.641836][T10799] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1214.672977][T15484] dummy0: entered allmulticast mode [ 1214.699025][T15484] bridge0: port 3(dummy0) entered blocking state [ 1214.705621][T15484] bridge0: port 3(dummy0) entered forwarding state [ 1214.780100][T15494] : entered promiscuous mode [ 1214.840961][T10799] usb 3-1: Using ep0 maxpacket: 16 [ 1215.054828][T10799] usb 3-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 1215.101183][T10799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.304560][T10799] usb 3-1: Product: syz [ 1215.365295][T10799] usb 3-1: Manufacturer: syz [ 1215.417531][T10799] usb 3-1: SerialNumber: syz [ 1215.679946][T10799] usb 3-1: config 0 descriptor?? [ 1216.741062][ T9742] Bluetooth: hci1: command tx timeout [ 1217.655541][T10799] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1217.769545][T10799] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1218.110475][T10799] usb 3-1: USB disconnect, device number 9 [ 1218.617287][T15523] No buffer was provided with the request [ 1218.792621][ T9742] Bluetooth: hci1: command tx timeout [ 1219.948700][T15469] chnl_net:caif_netlink_parms(): no params data found [ 1220.585366][T15545] overlay: Unknown parameter '/' [ 1220.862290][ T9742] Bluetooth: hci1: command tx timeout [ 1222.495005][ T13] bridge_slave_1: left allmulticast mode [ 1222.628161][ T13] bridge_slave_1: left promiscuous mode [ 1222.642059][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.485073][ T13] bridge_slave_0: left allmulticast mode [ 1223.512616][ T13] bridge_slave_0: left promiscuous mode [ 1223.532213][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1223.630933][T15572] input: syz1 as /devices/virtual/input/input19 [ 1223.673535][T15572] netlink: 'syz.5.1746': attribute type 3 has an invalid length. [ 1223.841996][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1746'. [ 1224.209055][T15583] syz.2.1748: attempt to access beyond end of device [ 1224.209055][T15583] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 1224.222130][T15583] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 1225.893096][T15588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1750'. [ 1226.019826][ T48] IPVS: starting estimator thread 0... [ 1226.190862][T15593] IPVS: using max 33 ests per chain, 79200 per kthread [ 1226.343005][T15599] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1228.791796][ T9742] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 1230.038074][T15621] __vm_enough_memory: pid: 15621, comm: syz.2.1755, bytes: 21200564641792 not enough memory for the allocation [ 1231.203769][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1231.215972][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1231.397939][T15628] overlayfs: failed to clone upperpath [ 1231.776701][ T13] bond0 (unregistering): Released all slaves [ 1231.798880][T15469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.808162][T15469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.820095][T15469] bridge_slave_0: entered allmulticast mode [ 1231.837048][T15469] bridge_slave_0: entered promiscuous mode [ 1231.848349][T15469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.879017][T15469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.909422][T15469] bridge_slave_1: entered allmulticast mode [ 1231.917816][T15469] bridge_slave_1: entered promiscuous mode [ 1232.002265][ T13] hsr_slave_0: left promiscuous mode [ 1232.021572][ T13] hsr_slave_1: left promiscuous mode [ 1232.029485][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1232.045593][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1232.089139][ T13] veth1_vlan: left promiscuous mode [ 1232.103626][ T13] veth0_vlan: left promiscuous mode [ 1232.331550][ T30] audit: type=1326 audit(2000001224.734:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15629 comm="syz.1.1758" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x0 [ 1233.203947][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1233.288776][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1234.337505][T15572] netlink: 'syz.5.1746': attribute type 3 has an invalid length. [ 1234.346359][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1746'. [ 1235.819389][T15469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1235.894200][T15469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1236.126363][T15661] syz.5.1763: attempt to access beyond end of device [ 1236.126363][T15661] nbd5: rw=0, sector=6, nr_sectors = 2 limit=0 [ 1236.139318][T15661] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 1236.753948][T15667] syz.7.1765: attempt to access beyond end of device [ 1236.753948][T15667] loop7: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 1236.767751][T15667] hfsplus: unable to find HFS+ superblock [ 1238.349911][T15469] team0: Port device team_slave_0 added [ 1238.395991][T15469] team0: Port device team_slave_1 added [ 1238.860886][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.874811][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.373264][ T9742] Bluetooth: hci5: unexpected event for opcode 0x2031 [ 1240.314672][T15469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.500780][T15699] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1240.550992][T15469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.676439][T15469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.694696][T15469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1240.723145][T15469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1240.837151][T15469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.284508][T15469] hsr_slave_0: entered promiscuous mode [ 1243.372927][T15469] hsr_slave_1: entered promiscuous mode [ 1243.385643][T15469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1243.419099][T15469] Cannot create hsr debugfs directory [ 1244.125751][T15469] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1244.148630][T15469] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1244.174046][T15469] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1244.192928][T15469] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1244.295872][T15469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.316712][T15469] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.338981][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.346182][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.359946][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.367234][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.678270][T15469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.048842][T15469] veth0_vlan: entered promiscuous mode [ 1245.069033][T15469] veth1_vlan: entered promiscuous mode [ 1245.122474][T15469] veth0_macvtap: entered promiscuous mode [ 1245.138118][T15469] veth1_macvtap: entered promiscuous mode [ 1245.189624][T15469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.213838][T15469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.234122][T15469] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.253151][T15469] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.267045][T15469] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.277171][T15469] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.430115][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.447128][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1245.496549][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1245.505668][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.001051][T15802] xt_hashlimit: max too large, truncated to 1048576 [ 1248.008121][T15802] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1248.655945][T15801] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/nbd5": -EINTR [ 1248.874803][T15807] syz.6.1776: attempt to access beyond end of device [ 1248.874803][T15807] nbd6: rw=0, sector=6, nr_sectors = 2 limit=0 [ 1248.897281][T15807] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 1254.560090][T15870] futex_wake_op: syz.7.1792 tries to shift op by -1; fix this program [ 1255.395218][T15874] program syz.5.1791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1259.041028][ T30] audit: type=1800 audit(2000001251.414:298): pid=15904 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.1800" name="nullb0" dev="tmpfs" ino=2932 res=0 errno=0 [ 1259.795084][T15611] libceph: connect (1)[c::]:6789 error -101 [ 1259.801382][T15611] libceph: mon0 (1)[c::]:6789 connect error [ 1259.969184][T15909] ceph: No mds server is up or the cluster is laggy [ 1260.274888][T15918] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1801'. [ 1260.672492][T15917] macvtap1: entered allmulticast mode [ 1260.678030][T15917] veth0_macvtap: entered allmulticast mode [ 1261.967436][T15930] : entered promiscuous mode [ 1266.267520][T15955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1810'. [ 1267.524856][T15965] tty tty24: ldisc open failed (-12), clearing slot 23 [ 1269.188748][T15611] libceph: connect (1)[c::]:6789 error -101 [ 1269.366062][T15611] libceph: mon0 (1)[c::]:6789 connect error [ 1269.466587][T15975] ceph: No mds server is up or the cluster is laggy [ 1269.849305][T15986] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1816'. [ 1270.385814][T15980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1815'. [ 1276.698690][T16034] syz.7.1826: attempt to access beyond end of device [ 1276.698690][T16034] nbd7: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1278.333811][T16053] overlay: Unknown parameter '/' [ 1279.717334][T16045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1828'. [ 1279.881887][T16067] netlink: 4972 bytes leftover after parsing attributes in process `syz.1.1831'. [ 1279.916602][T16067] openvswitch: netlink: Message has 16 unknown bytes. [ 1280.112184][T16072] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1832'. [ 1282.172927][T16094] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1282.812062][T16097] Cannot find map_set index 0 as target [ 1285.331774][T16096] program syz.2.1839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1285.361309][ T30] audit: type=1326 audit(2000001277.764:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16116 comm="syz.1.1843" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f090598e929 code=0x0 [ 1285.707282][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1844'. [ 1285.716552][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1844'. [ 1286.207528][T16101] delete_channel: no stack [ 1286.299883][T16124] syz.6.1844 (16124) used greatest stack depth: 16528 bytes left [ 1288.599467][ T30] audit: type=1800 audit(2000001280.244:300): pid=16138 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.1847" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1290.095590][T16155] overlay: Unknown parameter '/' [ 1290.917043][T16161] program syz.5.1852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1292.967502][ T5987] tipc: Subscription rejected, illegal request [ 1293.285059][T16171] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1294.738886][T16181] Cannot find add_set index 0 as target [ 1294.759579][T16181] loop6: detected capacity change from 0 to 524287999 [ 1294.781759][T15648] buffer_io_error: 570 callbacks suppressed [ 1294.781810][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1294.846196][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1294.869099][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1295.005605][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1295.127469][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1295.186645][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1295.218677][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1295.251486][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1295.282048][T15648] ldm_validate_partition_table(): Disk read failed. [ 1295.315562][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1295.343947][T15648] Buffer I/O error on dev loop6, logical block 0, async page read [ 1295.418758][T15648] Dev loop6: unable to read RDB block 0 [ 1295.425267][T15648] loop6: unable to read partition table [ 1295.440578][T16181] ldm_validate_partition_table(): Disk read failed. [ 1295.556245][T16191] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1295.580830][T16191] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1295.959078][T16181] Dev loop6: unable to read RDB block 0 [ 1296.022168][T16181] loop6: unable to read partition table [ 1296.040106][T16181] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1298.050458][T16207] syz.2.1864: attempt to access beyond end of device [ 1298.050458][T16207] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1298.146030][T16215] bridge0: port 4(netdevsim0) entered blocking state [ 1298.153005][T16215] bridge0: port 4(netdevsim0) entered disabled state [ 1298.159924][T16215] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1298.169642][T16215] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1298.179480][T16215] bridge0: port 4(netdevsim0) entered blocking state [ 1298.186964][T16215] bridge0: port 4(netdevsim0) entered forwarding state [ 1299.237447][ T9742] Bluetooth: hci1: link tx timeout [ 1299.243281][ T9742] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1300.286633][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.700995][ T51] Bluetooth: hci1: link tx timeout [ 1300.707651][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1300.739113][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.092333][ T51] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 1301.507179][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1303.299711][T16250] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1870'. [ 1303.310989][T16250] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1308.730654][T16280] vlan0: entered promiscuous mode [ 1313.202099][T16300] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd2": -EINTR [ 1313.378125][T16305] overlayfs: failed to clone upperpath [ 1313.795741][T16323] veth0_vlan: entered allmulticast mode [ 1314.917699][T16324] ªªªªªª: renamed from vlan0 [ 1318.241654][T16333] overlay: Unknown parameter '/' [ 1318.999763][T16347] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1325.761158][T16385] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1326.282247][T16403] CIFS: iocharset name too long [ 1326.810996][T16404] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1906'. [ 1328.295792][ T1344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1328.354050][ T1344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.821461][T16443] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1334.618322][T16455] random: crng reseeded on system resumption [ 1334.729951][T16467] No control pipe specified [ 1335.446563][T16455] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1339.668890][T16505] 9pnet_fd: Insufficient options for proto=fd [ 1340.824305][T16514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1934'. [ 1341.311922][T16525] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1935'. [ 1343.810383][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 1343.986266][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1940'. [ 1344.850374][T16549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1939'. [ 1353.304272][T16612] binder: 16611:16612 ioctl c0306201 200000000540 returned -14 [ 1356.280893][ T9742] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 1356.959927][T16654] program syz.5.1963 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1359.874663][T16671] netlink: 'syz.7.1968': attribute type 1 has an invalid length. [ 1359.882652][T16671] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1968'. [ 1361.238680][T16688] program syz.7.1973 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1361.726193][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.867041][ T9742] Bluetooth: hci5: unexpected event for opcode 0x2031 [ 1365.594884][T16718] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1978'. [ 1366.815892][T16728] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1367.002278][T16724] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1980'. [ 1370.863811][T16747] dvmrp8: entered allmulticast mode [ 1370.911944][T16751] dvmrp8: left allmulticast mode [ 1372.298533][T16754] loop6: detected capacity change from 0 to 524287999 [ 1374.032919][T16772] netlink: 'syz.2.1987': attribute type 4 has an invalid length. [ 1377.508527][T16796] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1992'. [ 1377.517916][T16796] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1377.613019][T16799] program syz.6.1995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1379.171300][T16809] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1380.162987][T16816] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2006'. [ 1380.226425][T16816] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1380.409797][T16824] overlay: Unknown parameter '/' [ 1380.556953][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1380.697517][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1380.709844][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1380.719040][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1380.729876][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1381.982030][T16827] lo speed is unknown, defaulting to 1000 [ 1382.083198][T16827] lo speed is unknown, defaulting to 1000 [ 1382.762713][ T51] Bluetooth: hci2: command tx timeout [ 1385.028922][T16857] program syz.6.2007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1385.048866][ T51] Bluetooth: hci2: command tx timeout [ 1385.896589][T16858] program syz.5.2008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1385.936575][T12765] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1387.081247][ T51] Bluetooth: hci2: command tx timeout [ 1387.797879][T16871] slcan: can't register candev [ 1387.803103][T16871] Falling back ldisc for ttyS3. [ 1388.009496][T12765] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.730013][T16876] Falling back ldisc for ttyprintk. [ 1388.761592][T16827] chnl_net:caif_netlink_parms(): no params data found [ 1389.240892][ T51] Bluetooth: hci2: command tx timeout [ 1389.605782][T12765] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.809952][T16890] overlay: Unknown parameter '/' [ 1389.842297][T12765] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.890185][T16891] netlink: 'syz.2.2014': attribute type 10 has an invalid length. [ 1390.872376][T16898] : entered promiscuous mode [ 1391.085684][T16904] TCP: TCP_TX_DELAY enabled [ 1391.097609][T16904] program syz.6.2017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1391.484348][T16827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.499305][T16827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.541060][T16827] bridge_slave_0: entered allmulticast mode [ 1391.593489][T16827] bridge_slave_0: entered promiscuous mode [ 1391.615158][T16827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.627359][T16827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.638585][T16827] bridge_slave_1: entered allmulticast mode [ 1391.804096][T16827] bridge_slave_1: entered promiscuous mode [ 1392.763933][T16912] program syz.6.2020 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1393.543407][T16827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.698745][T16827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.809866][T16926] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 1394.816532][T16926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1394.824981][T16926] vhci_hcd vhci_hcd.0: Device attached [ 1394.854197][T16926] 9pnet_fd: Insufficient options for proto=fd [ 1396.836818][T10793] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 1396.991015][T16927] vhci_hcd: connection reset by peer [ 1396.999474][ T1344] vhci_hcd: stop threads [ 1397.017867][ T1344] vhci_hcd: release socket [ 1397.039499][T16827] team0: Port device team_slave_0 added [ 1397.164804][ T1344] vhci_hcd: disconnect device [ 1397.257454][T16827] team0: Port device team_slave_1 added [ 1398.723982][T16950] overlay: Unknown parameter '/' [ 1398.902720][T12765] bridge_slave_1: left allmulticast mode [ 1399.500891][T12765] bridge_slave_1: left promiscuous mode [ 1399.621708][T12765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.759467][T12765] bridge_slave_0: left allmulticast mode [ 1400.743476][T12765] bridge_slave_0: left promiscuous mode [ 1400.970531][T12765] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.031223][T10793] vhci_hcd: vhci_device speed not set [ 1403.856227][T17001] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1404.082725][T17001] evm: overlay not supported [ 1406.920393][T12765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.939641][T12765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.956444][T12765] bond0 (unregistering): Released all slaves [ 1406.969648][ T9742] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1406.984212][ T9742] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1406.993777][T16827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.008446][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.013495][ T9742] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1407.034419][ C0] vkms_vblank_simulate: vblank timer overrun [ 1407.038303][T16827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.044772][ T9742] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1407.050612][T16827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.065795][ T9742] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1407.106139][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.153044][T16827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.304635][ T9009] vivid-000: reconnect [ 1407.322335][T12765] : left promiscuous mode [ 1407.401435][T12490] Bluetooth: hci2: command 0x0405 tx timeout [ 1407.502225][T17027] syz.5.2040: attempt to access beyond end of device [ 1407.502225][T17027] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1407.585814][T17030] netlink: 'syz.1.2042': attribute type 1 has an invalid length. [ 1407.735007][T16827] hsr_slave_0: entered promiscuous mode [ 1407.746422][T15526] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1407.755671][T16827] hsr_slave_1: entered promiscuous mode [ 1407.771611][T16827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1407.781792][T16827] Cannot create hsr debugfs directory [ 1407.926398][T15526] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.944006][T15526] usb 7-1: config 0 has no interfaces? [ 1407.949547][T15526] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1407.960505][T17017] lo speed is unknown, defaulting to 1000 [ 1408.010502][T15526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.043754][T15526] usb 7-1: config 0 descriptor?? [ 1408.122268][T17017] lo speed is unknown, defaulting to 1000 [ 1409.170571][T12490] Bluetooth: hci4: command tx timeout [ 1409.305660][T12765] hsr_slave_0: left promiscuous mode [ 1409.345065][T12765] hsr_slave_1: left promiscuous mode [ 1409.364317][T12765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.390334][T12765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1409.426051][T12765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1409.461512][T12765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.496414][T12765] veth0_macvtap: left allmulticast mode [ 1409.502626][T12765] veth1_macvtap: left promiscuous mode [ 1409.884359][T12765] veth0_macvtap: left promiscuous mode [ 1409.890577][T12765] veth1_vlan: left promiscuous mode [ 1410.497953][T15611] usb 7-1: USB disconnect, device number 2 [ 1410.765338][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2048'. [ 1411.198131][T12765] team0 (unregistering): Port device team_slave_1 removed [ 1411.258269][T12765] team0 (unregistering): Port device team_slave_0 removed [ 1411.321011][T12490] Bluetooth: hci4: command tx timeout [ 1412.338240][T17084] overlay: Unknown parameter '/' [ 1413.062374][T16827] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1413.128338][T16827] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1413.194484][T16827] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1413.490872][T12490] Bluetooth: hci4: command tx timeout [ 1414.014039][T17094] program syz.5.2051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1414.077401][T16827] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1414.743671][T17100] netlink: 136 bytes leftover after parsing attributes in process `syz.6.2050'. [ 1414.771076][T17100] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1414.963188][T12765] IPVS: stop unused estimator thread 0... [ 1415.042688][T16827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1415.057248][T17118] syz.5.2053: attempt to access beyond end of device [ 1415.057248][T17118] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1415.239508][T17017] chnl_net:caif_netlink_parms(): no params data found [ 1415.354074][T16827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1415.380949][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.388187][T12765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1415.529084][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.536336][T12765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1415.563309][T12490] Bluetooth: hci4: command tx timeout [ 1416.643060][T17017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1416.673093][T17017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.699360][T17017] bridge_slave_0: entered allmulticast mode [ 1416.709688][T17017] bridge_slave_0: entered promiscuous mode [ 1416.832452][T17017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1416.839672][T17017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.847260][T17017] bridge_slave_1: entered allmulticast mode [ 1416.860581][T17017] bridge_slave_1: entered promiscuous mode [ 1417.643515][T17017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.663421][T17017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.710448][T17017] team0: Port device team_slave_0 added [ 1417.724986][T17017] team0: Port device team_slave_1 added [ 1417.965857][T17156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1417.976720][T17156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2058'. [ 1419.020123][T17017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.027561][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.054162][T17017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.126000][T17169] overlay: Unknown parameter '/' [ 1419.284984][T17017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.345426][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1419.527668][T17017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.902029][T17017] hsr_slave_0: entered promiscuous mode [ 1422.908781][T17017] hsr_slave_1: entered promiscuous mode [ 1422.930265][T17017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1423.130320][T17017] Cannot create hsr debugfs directory [ 1423.191438][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.203621][T17185] program syz.6.2065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1425.255610][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1425.917251][T17218] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2069'. [ 1426.250160][T16827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.445013][T17238] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1426.453269][T17238] overlayfs: failed to set xattr on upper [ 1426.459066][T17238] overlayfs: ...falling back to redirect_dir=nofollow. [ 1426.466081][T17238] overlayfs: ...falling back to index=off. [ 1426.472018][T17238] overlayfs: ...falling back to uuid=null. [ 1427.195176][T17017] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1427.364576][T17017] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1427.766464][T17017] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1427.808257][T17017] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1428.621918][T17274] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2074'. [ 1428.668999][T17274] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1428.744906][T17276] ip6tnl1: entered promiscuous mode [ 1428.750250][T17276] ip6tnl1: entered allmulticast mode [ 1429.014964][T17017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.066893][T17017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.100374][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.107679][ T5987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.353522][T16827] veth0_vlan: entered promiscuous mode [ 1430.668327][ T9660] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.675607][ T9660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1430.982319][T16827] veth1_vlan: entered promiscuous mode [ 1432.004508][T17017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1432.015538][T17017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1432.185857][T17307] /dev/nullb0: Can't lookup blockdev [ 1432.226770][T16827] veth0_macvtap: entered promiscuous mode [ 1432.279647][T16827] veth1_macvtap: entered promiscuous mode [ 1432.805449][T16827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.857266][T16827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.896601][T16827] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.960736][T16827] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.013675][T16827] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.039254][T16827] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.109013][T17017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.505865][ T9660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.536185][ T9660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.624340][ T9501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.660562][ T9501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.172855][T17017] veth0_vlan: entered promiscuous mode [ 1434.193902][T17017] veth1_vlan: entered promiscuous mode [ 1435.909435][T17017] veth0_macvtap: entered promiscuous mode [ 1435.950586][T17017] veth1_macvtap: entered promiscuous mode [ 1435.994832][T17017] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.066278][ T30] audit: type=1326 audit(2000001429.473:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17337 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ab8e929 code=0x7ffc0000 [ 1436.146358][T17017] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.181639][ T30] audit: type=1326 audit(2000001429.473:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17337 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ab8e929 code=0x7ffc0000 [ 1436.212023][T17017] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.250794][T17017] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.259610][T17017] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.310329][ T30] audit: type=1326 audit(2000001429.483:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17337 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f238ab8e929 code=0x7ffc0000 [ 1436.386424][ T30] audit: type=1326 audit(2000001429.483:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17337 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ab8e929 code=0x7ffc0000 [ 1436.430862][T17017] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.438692][ T30] audit: type=1326 audit(2000001429.483:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17337 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f238ab8e929 code=0x7ffc0000 [ 1436.728873][ T30] audit: type=1326 audit(2000001430.143:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17337 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ab8e929 code=0x7ffc0000 [ 1436.872958][ T30] audit: type=1326 audit(2000001430.143:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17337 comm="syz.6.2083" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f238ab8e929 code=0x7ffc0000 [ 1436.955968][ T9489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.114876][ T9489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.852751][T12765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.884564][T12765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.316805][T17367] program syz.8.2085 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1439.120168][T17375] : entered promiscuous mode [ 1441.394182][T17385] netlink: 512 bytes leftover after parsing attributes in process `syz.8.2088'. [ 1443.289933][T17404] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2090'. [ 1443.419208][T17404] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1447.320213][T17439] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1448.895619][T10793] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1449.506871][T17464] ptrace attach of "./syz-executor exec"[16827] was attempted by " [ 1449.638491][T17464] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2104'. [ 1449.729697][ C1] vkms_vblank_simulate: vblank timer overrun [ 1450.478006][T17462] syz.9.2103: vmalloc error: size 4198400, failed to allocated page array size 8200, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1450.758657][T17478] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.370544][T12490] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 1452.399972][T17462] CPU: 0 UID: 0 PID: 17462 Comm: syz.9.2103 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1452.399999][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1452.400008][T17462] Call Trace: [ 1452.400013][T17462] [ 1452.400020][T17462] dump_stack_lvl+0x189/0x250 [ 1452.400040][T17462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1452.400051][T17462] ? __pfx__printk+0x10/0x10 [ 1452.400065][T17462] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1452.400078][T17462] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1452.400091][T17462] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1452.400107][T17462] warn_alloc+0x214/0x310 [ 1452.400121][T17462] ? __pfx_warn_alloc+0x10/0x10 [ 1452.400135][T17462] ? __get_vm_area_node+0x28f/0x300 [ 1452.400150][T17462] ? frame_vector_create+0x62/0x110 [ 1452.400165][T17462] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1452.400195][T17462] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1452.400212][T17462] ? rcu_is_watching+0x15/0xb0 [ 1452.400224][T17462] ? frame_vector_create+0x62/0x110 [ 1452.400235][T17462] ? frame_vector_create+0x62/0x110 [ 1452.400245][T17462] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1452.400259][T17462] ? frame_vector_create+0x62/0x110 [ 1452.400275][T17462] frame_vector_create+0x62/0x110 [ 1452.400287][T17462] vb2_create_framevec+0x37/0xd0 [ 1452.400298][T17462] vb2_vmalloc_get_userptr+0x108/0x450 [ 1452.400312][T17462] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 1452.400323][T17462] __buf_prepare+0xf4c/0x4740 [ 1452.400344][T17462] ? __pfx___buf_prepare+0x10/0x10 [ 1452.400365][T17462] ? rcu_is_watching+0x15/0xb0 [ 1452.400375][T17462] ? trace_sched_exit_tp+0x38/0x120 [ 1452.400389][T17462] ? __schedule+0x16c0/0x4cb0 [ 1452.400411][T17462] ? preempt_schedule_irq+0xb5/0x150 [ 1452.400456][T17462] vb2_core_prepare_buf+0xad/0x2c0 [ 1452.400468][T17462] __video_do_ioctl+0xc9b/0xdb0 [ 1452.400485][T17462] ? __pfx___video_do_ioctl+0x10/0x10 [ 1452.400504][T17462] video_usercopy+0x86e/0x14f0 [ 1452.400521][T17462] ? __pfx___video_do_ioctl+0x10/0x10 [ 1452.400533][T17462] ? __pfx_video_usercopy+0x10/0x10 [ 1452.400543][T17462] ? smack_file_ioctl+0x2a9/0x340 [ 1452.400565][T17462] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1452.400584][T17462] v4l2_ioctl+0x18a/0x1e0 [ 1452.400597][T17462] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1452.400613][T17462] __se_sys_ioctl+0xfc/0x170 [ 1452.400635][T17462] do_syscall_64+0xfa/0x3b0 [ 1452.400651][T17462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.400666][T17462] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1452.400682][T17462] ? clear_bhb_loop+0x60/0xb0 [ 1452.400711][T17462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.400727][T17462] RIP: 0033:0x7fc331f8e929 [ 1452.400757][T17462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.400771][T17462] RSP: 002b:00007fc332e31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1452.400791][T17462] RAX: ffffffffffffffda RBX: 00007fc3321b6160 RCX: 00007fc331f8e929 [ 1452.400806][T17462] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 000000000000000c [ 1452.400817][T17462] RBP: 00007fc332010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1452.400827][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.400837][T17462] R13: 0000000000000000 R14: 00007fc3321b6160 R15: 00007ffda7b448d8 [ 1452.400868][T17462] [ 1453.234624][T17462] Mem-Info: [ 1453.237762][T17462] active_anon:4392 inactive_anon:10666 isolated_anon:0 [ 1453.237762][T17462] active_file:21269 inactive_file:38852 isolated_file:0 [ 1453.237762][T17462] unevictable:768 dirty:327 writeback:0 [ 1453.237762][T17462] slab_reclaimable:6546 slab_unreclaimable:107103 [ 1453.237762][T17462] mapped:35349 shmem:9256 pagetables:1584 [ 1453.237762][T17462] sec_pagetables:0 bounce:0 [ 1453.237762][T17462] kernel_misc_reclaimable:0 [ 1453.237762][T17462] free:1292584 free_pcp:8178 free_cma:0 [ 1453.283295][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.387845][T17462] Node 0 active_anon:17568kB inactive_anon:31664kB active_file:84720kB inactive_file:155408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126200kB dirty:1308kB writeback:0kB shmem:24488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13312kB pagetables:6216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1453.421722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.480185][T17462] Node 1 active_anon:0kB inactive_anon:0kB active_file:356kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1453.511709][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.681424][T17462] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1453.710775][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.274339][T17462] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1454.280227][T17462] Node 0 DMA32 free:1232484kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17564kB inactive_anon:40724kB active_file:82952kB inactive_file:155340kB unevictable:1536kB writepending:1360kB present:3129332kB managed:2560896kB mlocked:0kB bounce:0kB free_pcp:34428kB local_pcp:16660kB free_cma:0kB [ 1454.312960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.634125][T17462] lowmem_reserve[]: 0 0 1 1 1 [ 1454.654258][T17462] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1768kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1454.683318][ C0] vkms_vblank_simulate: vblank timer overrun [ 1455.224672][T17462] lowmem_reserve[]: 0 0 0 0 0 [ 1455.232868][T17462] Node 1 Normal free:3921644kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:356kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1455.263374][ C0] vkms_vblank_simulate: vblank timer overrun [ 1455.371343][T17462] lowmem_reserve[]: 0 0 0 0 0 [ 1455.545902][T17462] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1455.569074][T17462] Node 0 DMA32: 2*4kB (ME) 8*8kB (ME) 590*16kB (UME) 766*32kB (UME) 466*64kB (UME) 257*128kB (UME) 133*256kB (UME) 75*512kB (UME) 32*1024kB (UME) 6*2048kB (UM) 247*4096kB (M) = 1225960kB [ 1456.191470][T17462] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1456.204147][T17462] Node 1 Normal: 211*4kB (UME) 56*8kB (UME) 56*16kB (UME) 217*32kB (UME) 81*64kB (UME) 38*128kB (UME) 20*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 5*2048kB (UME) 946*4096kB (M) = 3921644kB [ 1456.222797][ C0] vkms_vblank_simulate: vblank timer overrun [ 1456.319628][T17513] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2114'. [ 1456.411210][T17462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1456.469114][T17462] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1456.488995][T17462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1456.511904][T17462] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1456.756119][T17462] 67740 total pagecache pages [ 1456.778424][T17462] 0 pages in swap cache [ 1456.823142][T17462] Free swap = 124996kB [ 1456.827329][T17462] Total swap = 124996kB [ 1456.995416][T17462] 2097051 pages RAM [ 1456.999251][T17462] 0 pages HighMem/MovableOnly [ 1457.999897][T17462] 424720 pages reserved [ 1458.010773][T17462] 0 pages cma reserved [ 1460.695867][T12490] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 1462.467874][T12490] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 1463.892421][T17585] input: syz1 as /devices/virtual/input/input30 [ 1464.745056][T17591] netlink: 'syz.1.2128': attribute type 8 has an invalid length. [ 1466.709357][ T51] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 1467.593548][T17631] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2135'. [ 1477.691473][T17720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2149'. [ 1478.496242][T17724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1479.410096][T17720] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1479.420137][T17720] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1479.429052][T17720] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1479.437910][T17720] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1479.699557][T17736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.898576][T17716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1481.720426][ T51] Bluetooth: hci1: connection err: -111 [ 1482.253487][T17767] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1484.621491][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.224343][T17797] overlay: Unknown parameter '/' [ 1490.686777][T17847] warn_alloc: 1 callbacks suppressed [ 1490.686798][T17847] syz.9.2169: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1490.704832][T17846] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1490.839856][T17847] CPU: 0 UID: 0 PID: 17847 Comm: syz.9.2169 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1490.839888][T17847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1490.839900][T17847] Call Trace: [ 1490.839946][T17847] [ 1490.839954][T17847] dump_stack_lvl+0x189/0x250 [ 1490.839980][T17847] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1490.840009][T17847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1490.840029][T17847] ? __pfx__printk+0x10/0x10 [ 1490.840053][T17847] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1490.840075][T17847] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1490.840105][T17847] warn_alloc+0x214/0x310 [ 1490.840133][T17847] ? __pfx_warn_alloc+0x10/0x10 [ 1490.840161][T17847] ? __get_vm_area_node+0x28f/0x300 [ 1490.840186][T17847] ? frame_vector_create+0x62/0x110 [ 1490.840214][T17847] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 1490.840270][T17847] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1490.840300][T17847] ? rcu_is_watching+0x15/0xb0 [ 1490.840321][T17847] ? frame_vector_create+0x62/0x110 [ 1490.840342][T17847] ? frame_vector_create+0x62/0x110 [ 1490.840362][T17847] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 1490.840387][T17847] ? frame_vector_create+0x62/0x110 [ 1490.840417][T17847] frame_vector_create+0x62/0x110 [ 1490.840441][T17847] vb2_create_framevec+0x37/0xd0 [ 1490.840460][T17847] vb2_vmalloc_get_userptr+0x108/0x450 [ 1490.840486][T17847] ? __pfx_vb2_vmalloc_get_userptr+0x10/0x10 [ 1490.840506][T17847] __buf_prepare+0xf4c/0x4740 [ 1490.840546][T17847] ? __pfx___buf_prepare+0x10/0x10 [ 1490.840581][T17847] ? is_bpf_text_address+0x26/0x2b0 [ 1490.840601][T17847] ? is_bpf_text_address+0x292/0x2b0 [ 1490.840615][T17847] ? is_bpf_text_address+0x26/0x2b0 [ 1490.840632][T17847] ? kernel_text_address+0xa5/0xe0 [ 1490.840665][T17847] ? __lock_acquire+0xab9/0xd20 [ 1490.840756][T17847] vb2_core_prepare_buf+0xad/0x2c0 [ 1490.840780][T17847] __video_do_ioctl+0xc9b/0xdb0 [ 1490.840814][T17847] ? __pfx___video_do_ioctl+0x10/0x10 [ 1490.840852][T17847] video_usercopy+0x86e/0x14f0 [ 1490.840884][T17847] ? __pfx___video_do_ioctl+0x10/0x10 [ 1490.840906][T17847] ? __pfx_video_usercopy+0x10/0x10 [ 1490.840924][T17847] ? smack_file_ioctl+0x2a9/0x340 [ 1490.840965][T17847] ? __fget_files+0x2a/0x420 [ 1490.840981][T17847] ? __fget_files+0x3a0/0x420 [ 1490.841001][T17847] v4l2_ioctl+0x18a/0x1e0 [ 1490.841022][T17847] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1490.841042][T17847] __se_sys_ioctl+0xfc/0x170 [ 1490.841068][T17847] do_syscall_64+0xfa/0x3b0 [ 1490.841085][T17847] ? lockdep_hardirqs_on+0x9c/0x150 [ 1490.841109][T17847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.841127][T17847] ? clear_bhb_loop+0x60/0xb0 [ 1490.841149][T17847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.841167][T17847] RIP: 0033:0x7fc331f8e929 [ 1490.841184][T17847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.841198][T17847] RSP: 002b:00007fc332def038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1490.841219][T17847] RAX: ffffffffffffffda RBX: 00007fc3321b6320 RCX: 00007fc331f8e929 [ 1490.841233][T17847] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 000000000000000a [ 1490.841245][T17847] RBP: 00007fc332010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1490.841257][T17847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.841268][T17847] R13: 0000000000000001 R14: 00007fc3321b6320 R15: 00007ffda7b448d8 [ 1490.841298][T17847] [ 1491.189596][T17847] Mem-Info: [ 1491.193136][T17847] active_anon:5595 inactive_anon:6982 isolated_anon:0 [ 1491.193136][T17847] active_file:21283 inactive_file:38852 isolated_file:0 [ 1491.193136][T17847] unevictable:768 dirty:351 writeback:0 [ 1491.193136][T17847] slab_reclaimable:6499 slab_unreclaimable:107023 [ 1491.193136][T17847] mapped:31563 shmem:6717 pagetables:1668 [ 1491.193136][T17847] sec_pagetables:0 bounce:0 [ 1491.193136][T17847] kernel_misc_reclaimable:0 [ 1491.193136][T17847] free:1293190 free_pcp:10250 free_cma:0 [ 1491.239401][T17847] Node 0 active_anon:22380kB inactive_anon:27928kB active_file:84776kB inactive_file:155408kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126160kB dirty:1404kB writeback:0kB shmem:25332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13456kB pagetables:6552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1491.278062][T17847] Node 1 active_anon:0kB inactive_anon:0kB active_file:356kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1491.309872][T17847] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1491.341028][T17847] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1491.347470][T17847] Node 0 DMA32 free:1235748kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22376kB inactive_anon:27988kB active_file:83008kB inactive_file:155340kB unevictable:1536kB writepending:1380kB present:3129332kB managed:2560896kB mlocked:0kB bounce:0kB free_pcp:40512kB local_pcp:18268kB free_cma:0kB [ 1491.385556][T17847] lowmem_reserve[]: 0 0 1 1 1 [ 1491.391242][T17847] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1768kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1491.421068][T17847] lowmem_reserve[]: 0 0 0 0 0 [ 1491.426345][T17847] Node 1 Normal free:3921644kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:356kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1491.476196][T17847] lowmem_reserve[]: 0 0 0 0 0 [ 1491.483679][T17847] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1491.497271][T17847] Node 0 DMA32: 2869*4kB (UME) 848*8kB (UME) 765*16kB (UME) 626*32kB (UME) 515*64kB (UME) 284*128kB (UME) 155*256kB (UME) 92*512kB (UME) 45*1024kB (UME) 8*2048kB (UM) 236*4096kB (UM) = 1235748kB [ 1491.518218][T17847] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1491.530600][T17847] Node 1 Normal: 211*4kB (UME) 56*8kB (UME) 56*16kB (UME) 217*32kB (UME) 81*64kB (UME) 38*128kB (UME) 20*256kB (UME) 10*512kB (UME) 7*1024kB (UME) 5*2048kB (UME) 946*4096kB (M) = 3921644kB [ 1491.560625][T17847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.585736][T17847] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1491.601369][T17847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1491.613183][T17847] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1491.626451][T17847] 65698 total pagecache pages [ 1491.634451][T17847] 0 pages in swap cache [ 1491.639487][T17847] Free swap = 124996kB [ 1491.645219][T17847] Total swap = 124996kB [ 1491.650535][T17847] 2097051 pages RAM [ 1491.656717][T17847] 0 pages HighMem/MovableOnly [ 1491.666231][T17847] 424720 pages reserved [ 1491.673446][T17847] 0 pages cma reserved [ 1492.989436][T17872] IPv6: NLM_F_CREATE should be specified when creating new route [ 1494.084391][ T51] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 1494.790412][T17883] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1494.797077][T17883] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1494.848115][T17889] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(14) [ 1494.854780][T17889] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1494.883746][T17883] vhci_hcd vhci_hcd.0: Device attached [ 1494.899639][T17889] vhci_hcd vhci_hcd.0: Device attached [ 1494.959917][T17883] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1494.974463][T17883] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(17) [ 1494.981119][T17883] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1495.000750][T17896] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(20) [ 1495.007396][T17896] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1495.035094][T17889] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1495.045155][T17883] vhci_hcd vhci_hcd.0: Device attached [ 1495.814956][ T51] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 1495.934545][T17896] vhci_hcd vhci_hcd.0: Device attached [ 1495.961153][T15611] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1496.081810][T17900] vhci_hcd: connection closed [ 1496.082312][T17897] vhci_hcd: connection closed [ 1496.098216][T17891] vhci_hcd: connection closed [ 1496.112940][T17884] vhci_hcd: connection reset by peer [ 1496.125388][T12765] vhci_hcd: stop threads [ 1496.129685][T12765] vhci_hcd: release socket [ 1496.340977][T12765] vhci_hcd: disconnect device [ 1496.352917][T12765] vhci_hcd: stop threads [ 1496.357242][T12765] vhci_hcd: release socket [ 1497.094129][T12765] vhci_hcd: disconnect device [ 1497.191199][T12765] vhci_hcd: stop threads [ 1497.195508][T12765] vhci_hcd: release socket [ 1497.215777][T12765] vhci_hcd: disconnect device [ 1498.206514][T12765] vhci_hcd: stop threads [ 1498.231499][T12765] vhci_hcd: release socket [ 1498.652460][T17920] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1499.240672][T12765] vhci_hcd: disconnect device [ 1500.997595][T17944] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 1502.814144][T15611] vhci_hcd: vhci_device speed not set [ 1507.162231][T12490] Bluetooth: hci2: command 0x0405 tx timeout [ 1511.381049][T18007] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2197'. [ 1514.150449][T18033] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1514.953168][T18034] random: crng reseeded on system resumption [ 1515.069265][T18042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.115624][T18042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.208058][T18042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.228982][T18042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.633202][T18049] netlink: 136 bytes leftover after parsing attributes in process `syz.5.2202'. [ 1515.642595][T18049] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1515.890698][ T48] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1515.999598][T18067] program syz.9.2207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1517.290678][T10791] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1517.350673][ T48] usb 9-1: Using ep0 maxpacket: 8 [ 1517.362103][ T48] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1517.380676][ T48] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1517.391064][ T48] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1517.420660][ T48] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1517.460901][ T48] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1517.470764][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.546993][T18078] loop2: detected capacity change from 0 to 7 [ 1517.561169][T10791] usb 10-1: Using ep0 maxpacket: 32 [ 1517.574235][T17974] Dev loop2: unable to read RDB block 7 [ 1517.580024][T17974] loop2: unable to read partition table [ 1517.582945][T10791] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1517.589252][T17974] loop2: partition table beyond EOD, truncated [ 1517.612927][T10791] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1517.624621][T18078] Dev loop2: unable to read RDB block 7 [ 1517.660228][T10791] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1517.690642][T10791] usb 10-1: config 1 has no interface number 0 [ 1517.720060][T10791] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1517.799361][ T48] usb 9-1: GET_CAPABILITIES returned 0 [ 1517.813512][ T48] usbtmc 9-1:16.0: can't read capabilities [ 1517.823350][T18078] loop2: unable to read partition table [ 1517.829238][T18078] loop2: partition table beyond EOD, truncated [ 1517.835906][T10791] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1517.835958][T10791] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1517.835978][T10791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.365241][T10791] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1518.406755][T10791] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1518.661800][T18078] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1518.832628][T18050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1519.520934][T10791] snd_usb_pod 10-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1519.680900][T18050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1520.173438][ T5969] usb 9-1: USB disconnect, device number 2 [ 1523.063753][T18119] netlink: 'syz.5.2217': attribute type 11 has an invalid length. [ 1523.071890][T18119] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2217'. [ 1524.180395][T16899] usb 10-1: USB disconnect, device number 2 [ 1524.298170][T16899] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1524.921911][ T51] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 1526.250759][T18145] program syz.5.2220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1529.102790][T18136] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2222'. [ 1529.111952][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2222'. [ 1529.192026][T18136] overlayfs: failed to clone upperpath [ 1529.548210][T18162] netlink: 844 bytes leftover after parsing attributes in process `syz.9.2226'. [ 1532.600617][T18193] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2227'. [ 1532.600643][T18193] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 1534.466726][T18187] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1534.477689][T18184] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1535.474263][T18211] overlayfs: overlapping lowerdir path [ 1536.090745][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2234'. [ 1536.101313][T18223] vcan0: entered promiscuous mode [ 1536.106477][T18223] vcan0: entered allmulticast mode [ 1538.116213][ T51] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 1539.157931][T18249] syz.5.2238 (18249): drop_caches: 2 [ 1539.177252][T18249] syz.5.2238 (18249): drop_caches: 2 [ 1540.019164][ T51] Bluetooth: hci2: unexpected event for opcode 0x2031 [ 1542.806773][T18278] overlayfs: failed to resolve './file1': -2 [ 1546.054525][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.737249][T18313] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2251'. [ 1550.770777][ T51] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 1552.695771][T18347] binder: 18333:18347 ioctl 400c620e 0 returned -14 [ 1552.897978][T18355] 9pnet_fd: Insufficient options for proto=fd [ 1556.020326][T18377] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2266'. [ 1557.458866][T18394] Device name cannot be null; rc = [-22] [ 1557.947772][T18399] veth1_macvtap: left promiscuous mode [ 1557.980480][T18399] macsec0: entered promiscuous mode [ 1557.985959][T18399] macsec0: entered allmulticast mode [ 1558.049041][T18399] veth1_macvtap: entered promiscuous mode [ 1558.098538][T18399] veth1_macvtap: entered allmulticast mode [ 1558.132073][T18399] macsec0: left promiscuous mode [ 1558.166197][T18399] macsec0: left allmulticast mode [ 1558.184144][T18399] veth1_macvtap: left allmulticast mode [ 1560.903096][T18426] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.2275'. [ 1562.247084][T18451] IPVS: set_ctl: invalid protocol: 44 172.20.20.36:0 [ 1563.183381][ T51] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 1563.857793][T18467] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1564.596184][T18478] [ 1564.598602][T18478] ====================================================== [ 1564.605633][T18478] WARNING: possible circular locking dependency detected [ 1564.612675][T18478] 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 Not tainted [ 1564.619792][T18478] ------------------------------------------------------ [ 1564.626817][T18478] syz.6.2282/18478 is trying to acquire lock: [ 1564.632886][T18478] ffff88806b683140 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x735/0xe50 [ 1564.642678][T18478] [ 1564.642678][T18478] but task is already holding lock: [ 1564.650050][T18478] ffff888024847088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1564.659391][T18478] [ 1564.659391][T18478] which lock already depends on the new lock. [ 1564.659391][T18478] [ 1564.669792][T18478] [ 1564.669792][T18478] the existing dependency chain (in reverse order) is: [ 1564.678805][T18478] [ 1564.678805][T18478] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1564.686028][T18478] lock_acquire+0x120/0x360 [ 1564.691059][T18478] __mutex_lock+0x182/0xe80 [ 1564.696084][T18478] kernfs_seq_start+0x55/0x3c0 [ 1564.701374][T18478] seq_read_iter+0x3ef/0xe10 [ 1564.706486][T18478] copy_splice_read+0x54f/0x9b0 [ 1564.711864][T18478] splice_file_to_pipe+0x273/0x440 [ 1564.717503][T18478] do_sendfile+0x475/0x7e0 [ 1564.722439][T18478] __se_sys_sendfile64+0x13e/0x190 [ 1564.728069][T18478] do_syscall_64+0xfa/0x3b0 [ 1564.733093][T18478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.739508][T18478] [ 1564.739508][T18478] -> #2 (&p->lock){+.+.}-{4:4}: [ 1564.746552][T18478] lock_acquire+0x120/0x360 [ 1564.751584][T18478] __mutex_lock+0x182/0xe80 [ 1564.756605][T18478] seq_read_iter+0xb7/0xe10 [ 1564.761629][T18478] copy_splice_read+0x54f/0x9b0 [ 1564.767006][T18478] splice_file_to_pipe+0x273/0x440 [ 1564.772641][T18478] do_sendfile+0x475/0x7e0 [ 1564.777594][T18478] __se_sys_sendfile64+0x13e/0x190 [ 1564.783239][T18478] do_syscall_64+0xfa/0x3b0 [ 1564.788266][T18478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.794682][T18478] [ 1564.794682][T18478] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1564.802080][T18478] lock_acquire+0x120/0x360 [ 1564.807104][T18478] __mutex_lock+0x182/0xe80 [ 1564.812126][T18478] anon_pipe_write+0x16a/0x1360 [ 1564.817492][T18478] __kernel_write_iter+0x3ec/0x860 [ 1564.823125][T18478] __kernel_write+0xef/0x150 [ 1564.828237][T18478] autofs_notify_daemon+0x748/0xe50 [ 1564.833960][T18478] autofs_wait+0x11dc/0x1870 [ 1564.839079][T18478] autofs_mount_wait+0x16b/0x330 [ 1564.844540][T18478] autofs_d_automount+0x393/0x720 [ 1564.850091][T18478] __traverse_mounts+0x308/0x5b0 [ 1564.855547][T18478] step_into+0x534/0xf30 [ 1564.860310][T18478] path_openat+0x1bc6/0x3830 [ 1564.865422][T18478] do_filp_open+0x1fa/0x410 [ 1564.870467][T18478] do_sys_openat2+0x121/0x1c0 [ 1564.875690][T18478] __x64_sys_openat+0x138/0x170 [ 1564.881071][T18478] do_syscall_64+0xfa/0x3b0 [ 1564.886099][T18478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.892516][T18478] [ 1564.892516][T18478] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1564.900271][T18478] validate_chain+0xb9b/0x2140 [ 1564.905570][T18478] __lock_acquire+0xab9/0xd20 [ 1564.910771][T18478] lock_acquire+0x120/0x360 [ 1564.915795][T18478] __mutex_lock+0x182/0xe80 [ 1564.920816][T18478] autofs_notify_daemon+0x735/0xe50 [ 1564.926540][T18478] autofs_wait+0x11dc/0x1870 [ 1564.931658][T18478] autofs_mount_wait+0x16b/0x330 [ 1564.937118][T18478] autofs_d_automount+0x393/0x720 [ 1564.942664][T18478] __traverse_mounts+0x308/0x5b0 [ 1564.948121][T18478] step_into+0x534/0xf30 [ 1564.952887][T18478] path_lookupat+0x163/0x430 [ 1564.957995][T18478] filename_lookup+0x212/0x570 [ 1564.963274][T18478] kern_path+0x35/0x50 [ 1564.967886][T18478] lookup_bdev+0xc0/0x280 [ 1564.972739][T18478] resume_store+0x169/0x460 [ 1564.977767][T18478] kernfs_fop_write_iter+0x378/0x4f0 [ 1564.983576][T18478] vfs_write+0x54b/0xa90 [ 1564.988340][T18478] ksys_write+0x145/0x250 [ 1564.993190][T18478] do_syscall_64+0xfa/0x3b0 [ 1564.998211][T18478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.004626][T18478] [ 1565.004626][T18478] other info that might help us debug this: [ 1565.004626][T18478] [ 1565.014851][T18478] Chain exists of: [ 1565.014851][T18478] &sbi->pipe_mutex --> &p->lock --> &of->mutex [ 1565.014851][T18478] [ 1565.026935][T18478] Possible unsafe locking scenario: [ 1565.026935][T18478] [ 1565.034376][T18478] CPU0 CPU1 [ 1565.039734][T18478] ---- ---- [ 1565.045093][T18478] lock(&of->mutex); [ 1565.049072][T18478] lock(&p->lock); [ 1565.055395][T18478] lock(&of->mutex); [ 1565.061894][T18478] lock(&sbi->pipe_mutex); [ 1565.066397][T18478] [ 1565.066397][T18478] *** DEADLOCK *** [ 1565.066397][T18478] [ 1565.074541][T18478] 4 locks held by syz.6.2282/18478: [ 1565.079732][T18478] #0: ffff88803474ab78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 1565.088795][T18478] #1: ffff8880236d2428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1565.097690][T18478] #2: ffff888024847088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1565.107448][T18478] #3: ffff88814129ee18 (kn->active#59){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1565.117482][T18478] [ 1565.117482][T18478] stack backtrace: [ 1565.123368][T18478] CPU: 1 UID: 0 PID: 18478 Comm: syz.6.2282 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 1565.123387][T18478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1565.123397][T18478] Call Trace: [ 1565.123404][T18478] [ 1565.123411][T18478] dump_stack_lvl+0x189/0x250 [ 1565.123431][T18478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1565.123447][T18478] ? __pfx__printk+0x10/0x10 [ 1565.123464][T18478] ? print_lock_name+0xde/0x100 [ 1565.123483][T18478] print_circular_bug+0x2ee/0x310 [ 1565.123502][T18478] check_noncircular+0x134/0x160 [ 1565.123520][T18478] validate_chain+0xb9b/0x2140 [ 1565.123551][T18478] __lock_acquire+0xab9/0xd20 [ 1565.123566][T18478] ? autofs_notify_daemon+0x735/0xe50 [ 1565.123586][T18478] lock_acquire+0x120/0x360 [ 1565.123598][T18478] ? autofs_notify_daemon+0x735/0xe50 [ 1565.123617][T18478] ? preempt_schedule_irq+0xde/0x150 [ 1565.123641][T18478] __mutex_lock+0x182/0xe80 [ 1565.123653][T18478] ? autofs_notify_daemon+0x735/0xe50 [ 1565.123673][T18478] ? autofs_notify_daemon+0x6e5/0xe50 [ 1565.123694][T18478] ? autofs_notify_daemon+0x735/0xe50 [ 1565.123713][T18478] ? __pfx___mutex_lock+0x10/0x10 [ 1565.123727][T18478] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1565.123739][T18478] ? from_kgid_munged+0x1f4/0x6a0 [ 1565.123760][T18478] ? __pfx_from_kgid_munged+0x10/0x10 [ 1565.123778][T18478] ? kasan_save_track+0x4f/0x80 [ 1565.123796][T18478] ? __kasan_kmalloc+0x93/0xb0 [ 1565.123813][T18478] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 1565.123832][T18478] ? autofs_wait+0xd32/0x1870 [ 1565.123849][T18478] ? autofs_notify_daemon+0x3d1/0xe50 [ 1565.123870][T18478] autofs_notify_daemon+0x735/0xe50 [ 1565.123888][T18478] ? do_syscall_64+0xfa/0x3b0 [ 1565.123903][T18478] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1565.123934][T18478] ? __raw_spin_lock_init+0x45/0x100 [ 1565.123952][T18478] ? autofs_wait+0xe13/0x1870 [ 1565.123972][T18478] autofs_wait+0x11dc/0x1870 [ 1565.123990][T18478] ? d_walk+0x2c0/0x780 [ 1565.124008][T18478] ? __pfx_autofs_wait+0x10/0x10 [ 1565.124026][T18478] ? preempt_schedule_common+0x83/0xd0 [ 1565.124046][T18478] ? preempt_schedule+0xae/0xc0 [ 1565.124064][T18478] ? __pfx_preempt_schedule+0x10/0x10 [ 1565.124087][T18478] autofs_mount_wait+0x16b/0x330 [ 1565.124107][T18478] autofs_d_automount+0x393/0x720 [ 1565.124128][T18478] __traverse_mounts+0x308/0x5b0 [ 1565.124145][T18478] step_into+0x534/0xf30 [ 1565.124160][T18478] ? lookup_slow+0x5e/0x70 [ 1565.124176][T18478] ? __pfx_step_into+0x10/0x10 [ 1565.124190][T18478] ? walk_component+0x190/0x400 [ 1565.124205][T18478] path_lookupat+0x163/0x430 [ 1565.124222][T18478] filename_lookup+0x212/0x570 [ 1565.124238][T18478] ? __pfx_filename_lookup+0x10/0x10 [ 1565.124261][T18478] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1565.124279][T18478] ? getname_kernel+0x146/0x2f0 [ 1565.124294][T18478] ? getname_kernel+0x20e/0x2f0 [ 1565.124308][T18478] kern_path+0x35/0x50 [ 1565.124322][T18478] lookup_bdev+0xc0/0x280 [ 1565.124336][T18478] ? rcu_is_watching+0x15/0xb0 [ 1565.124352][T18478] ? __pfx_lookup_bdev+0x10/0x10 [ 1565.124365][T18478] ? kstrndup+0xbf/0x160 [ 1565.124382][T18478] resume_store+0x169/0x460 [ 1565.124401][T18478] ? irqentry_exit+0x74/0x90 [ 1565.124421][T18478] ? __pfx_resume_store+0x10/0x10 [ 1565.124440][T18478] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1565.124460][T18478] ? __pfx_resume_store+0x10/0x10 [ 1565.124476][T18478] ? sysfs_file_kobj+0x1a/0x230 [ 1565.124506][T18478] ? kobj_attr_store+0x4f/0x90 [ 1565.124523][T18478] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1565.124554][T18478] kernfs_fop_write_iter+0x378/0x4f0 [ 1565.124575][T18478] vfs_write+0x54b/0xa90 [ 1565.124594][T18478] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1565.124612][T18478] ? __pfx_vfs_write+0x10/0x10 [ 1565.124633][T18478] ? __fget_files+0x2a/0x420 [ 1565.124648][T18478] ksys_write+0x145/0x250 [ 1565.124667][T18478] ? __pfx_ksys_write+0x10/0x10 [ 1565.124683][T18478] ? rcu_is_watching+0x15/0xb0 [ 1565.124699][T18478] ? do_syscall_64+0xbe/0x3b0 [ 1565.124713][T18478] do_syscall_64+0xfa/0x3b0 [ 1565.124727][T18478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.124741][T18478] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1565.124755][T18478] ? clear_bhb_loop+0x60/0xb0 [ 1565.124770][T18478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.124784][T18478] RIP: 0033:0x7f238ab8e929 [ 1565.124799][T18478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.124812][T18478] RSP: 002b:00007f238b9c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1565.124827][T18478] RAX: ffffffffffffffda RBX: 00007f238adb6160 RCX: 00007f238ab8e929 [ 1565.124838][T18478] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000009 [ 1565.124848][T18478] RBP: 00007f238ac10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1565.124857][T18478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1565.124866][T18478] R13: 0000000000000000 R14: 00007f238adb6160 R15: 00007fff31fcdf78 [ 1565.124882][T18478] [ 1565.925455][T18478] block device autoloading is deprecated and will be removed. [ 1565.933945][T18478] PM: Image not found (code -22) [ 1566.025798][ T51] Bluetooth: hci5: unexpected event for opcode 0x2031 [ 1566.472694][T18472] tmpfs: Bad value for 'nr_blocks' [ 1566.480090][T18472] xt_CT: You must specify a L4 protocol and not use inversions on it