last executing test programs: 23.75444671s ago: executing program 4 (id=591): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) r6 = gettid() r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) shutdown(r7, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r6}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0xf2a, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(r4, 0x0, 0x20) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="50010000000000000000000000000000060000000000000002000000000000000600000000000000060000000000000005000000ffffffff090000000000000003000000000000000e010000000000000400000000000000000000000000000008000000000000000001000003000000040000000020000005000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="030000000700000000000000040000"], 0x0, 0x0, 0x0}) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="6486d3a62e281f65f1b6304e0b0f73f542e5f01c9c295fea54496855d7077eae3d95f7492b0d2acd291d404f67cec9fa8359305bf17b9415256495c5a9f7b7e42bcf6bdd8ea805e8e22ffc1d0c445fa296f8faaae70c814bdd7aba9084b8a71e5350ab46099b90ed5654d19820f87b3516afe6bd9c5871d3d1b51319a0f5bea63703306ffc1dfcfcd3b054c880859cb9b691ce1f6cc09910", 0x98, 0x40, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 21.419408395s ago: executing program 4 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x42081}, 0x0) syz_emit_ethernet(0x1b7, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, "7341050e7e5f47539b830ee88eecfd16"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0x7ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 20.608246038s ago: executing program 0 (id=597): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r7, 0x5608, 0x3) r8 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) pread64(r8, &(0x7f0000001500)=""/4075, 0xfeb, 0x7fff) r10 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) listen(r10, 0x8b) ioctl$sock_TIOCOUTQ(r10, 0x5411, 0x0) 18.725770919s ago: executing program 1 (id=599): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000300), 0x8000000011d, 0x2) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}}) r6 = socket(0x28, 0x5, 0x0) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r7, 0x4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) accept4$unix(r7, 0x0, 0x0, 0x800) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x0, 0x300}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) socket(0x10, 0x3, 0x0) 18.128762631s ago: executing program 0 (id=600): r0 = fsopen(&(0x7f0000000040)='befs\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0xb, 0x6, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2008, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, 0x0, 0x4040004) mkdirat(0xffffffffffffff9c, 0x0, 0xd7b706656310aba8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff0}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20048800) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000002c0)='\xfc\x05\x00\x00gvWq3K\ao\xa1\xb43\xd5\x7f\xc5|,\xe7\n^\'4\xa5\xc0\x84\x97\xb8\x17Z\xa0.\xefd\x94M\xf7\xbc\x02\x13\xf2\x15\xeb\xe6\xb8\xc9\xaeq\xb2\xe0x\x83w\xaeo\x9b6,\x88\xaa\xb2\x15\xeaM\xdf\xae\x0e5G\xc7O\x15\xb1\xa4\x95n\x11\xb4\x86\xd3\x92\x95^$-\x9ce|\xb0\xa4\xc1\x04,\xd8\x1e', &(0x7f0000000100)='noblock_\x7fG\x14T]validity', 0x0) 17.381926015s ago: executing program 4 (id=602): syz_open_dev$swradio(0x0, 0x1, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x25) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(0x0) r1 = open$dir(&(0x7f0000000180)='./bus\x00', 0x400000, 0x100) mkdirat(r1, 0x0, 0x199) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r2 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e24, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r4, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0, r4}}, 0x18) pread64(r2, &(0x7f0000000440)=""/123, 0x7b, 0x1) 17.288310439s ago: executing program 1 (id=603): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) rmdir(&(0x7f0000000040)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) clock_adjtime(0x0, &(0x7f0000000b00)={0xfd0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x41}) r2 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) sendmmsg(r4, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x8) sendfile(r6, r7, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r8, 0x8, 0x1) getdents64(r8, &(0x7f0000000280)=""/158, 0x9e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 13.584081557s ago: executing program 2 (id=604): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="7f", 0x1}], 0x1, 0x11, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) socket$netlink(0x10, 0x3, 0x8) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 13.495166638s ago: executing program 3 (id=605): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 12.442232706s ago: executing program 1 (id=606): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc090507"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 12.362280274s ago: executing program 0 (id=607): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) 11.576641294s ago: executing program 3 (id=608): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) syz_usb_connect$cdc_ecm(0x2, 0x50, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x24004800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5f0, 0xd0, 0x0, 0x3c0, 0xd0, 0x220, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@private1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'caif0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x150, 0x0, {0x5002}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x3}}, @common=@unspec=@connbytes={{0x38}, {[{0x1}, {0xfffffffffffffffa}], 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@loopback, 0x29, 0x37}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'wlan0\x00', {}, {}, 0x32, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x6, 0x1, [0x0, 0x7, 0x1ff, 0x7f, 0x7f, 0x7, 0x1, 0x799c, 0xd, 0x7, 0x2, 0x100, 0x1, 0xf6ee, 0xffff, 0x7f], 0xa}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 11.444508021s ago: executing program 0 (id=609): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000003c0)='cpuacct.usage_user\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x2}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000380)={0x0, 0x1, 0x103fc, 0x2, r0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x0, 0xffffffff) sendto$inet6(r5, &(0x7f00000001c0)="725951f2236d0380bb566268646505b5a28446937c7b729e3ecd128c99421cc175e510957e3901bf9e6ccd4b1b0194886e6b53ed422d2915494c600c586a31843aa6aafe0b1f68ad17c754be0760601b3cd5b5d55be293ebc124a0d7b084136943e78fc20eab78b4cbf59b135228a4ff697531cd883a0163d3c696f766ad2cb99ea8f38992899f2005853e2e27744cc65f94e4e3c145d30e9559b82fcd62c4112c34a15a55aed7452c50fbeb", 0xac, 0x4000005, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @empty, 0x2d1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x40800, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r7, 0x0, 0x0) 10.743195521s ago: executing program 2 (id=610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x1, 0x8, 0x6, 0x8, {{0x9, 0x4, 0x0, 0x18, 0x24, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0x10}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x3, 0xd3}]}}}}}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xda, &(0x7f0000000340)=""/218, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) 9.452547424s ago: executing program 4 (id=611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0xd]}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7], [0x2b8]}) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0x7, 0x2, 0x7f, 0x6, 0x3ff, 0x1000, 0x5, 0x60}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x402, @private2, 0x8}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) 9.399953083s ago: executing program 0 (id=612): timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) umount2(&(0x7f0000000380)='./file1\x00', 0x4) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r3}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 9.204805062s ago: executing program 2 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000080000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x42081}, 0x0) syz_emit_ethernet(0x1b7, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, "7341050e7e5f47539b830ee88eecfd16"}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x9200}, @TCA_FLOW_XOR={0x8, 0x7, 0x7ff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 9.200143204s ago: executing program 1 (id=623): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_timeval(r0, 0x1, 0x42, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x43) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r2, &(0x7f0000000080)='S', 0x1, 0x8000, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000004c00)=ANY=[@ANYBLOB="12012e02069c4e082505a0a45b3e0102030109021b0001fd0940ef09048c0001e9d51c03cc090507"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 8.210339469s ago: executing program 4 (id=614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c"], 0x20}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) copy_file_range(r4, &(0x7f0000000000)=0x3ff, r4, 0x0, 0x6, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x203, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x40010, r1, 0xcd230000) ioctl$USBDEVFS_REAPURBNDELAY(r5, 0x4008550d, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}}, 0x0) getpid() 8.150230445s ago: executing program 3 (id=615): r0 = epoll_create1(0x0) r1 = signalfd4(r0, &(0x7f0000000300)={[0x2]}, 0x8, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0x10000000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mlock(&(0x7f0000ff7000/0x3000)=nil, 0x3000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r4 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = fsopen(0x0, 0x1) sendfile(r5, r5, &(0x7f0000000180)=0x3ff, 0x4) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, 0x0, 0x0, 0xffffffffffffff9c) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz1\x00', 0x1ff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_wakeup_irq', 0x8000, 0x4) preadv(r6, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x1, 0xd04) mkdirat$cgroup(r6, &(0x7f0000000080)='syz0\x00', 0x1ff) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) socket$inet6_sctp(0xa, 0x1, 0x84) 6.812350871s ago: executing program 2 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000180)={0x401}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x800, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r3 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x9b0906, 0x0, '\x00', @p_u16=0x0}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xeb, 0xfe, 0xae, 0x10, 0x1a0a, 0x101, 0x301d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc6, 0x0, 0x0, 0xfb, 0xa3, 0x5d}}]}}]}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x38, 0x1406, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080) wait4(r0, 0xfffffffffffffffc, 0x8, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) 6.780716753s ago: executing program 0 (id=617): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) syz_usb_connect$cdc_ecm(0x2, 0x50, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5f0, 0xd0, 0x0, 0x3c0, 0xd0, 0x220, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@private1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'caif0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x150, 0x0, {0x5002}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x3}}, @common=@unspec=@connbytes={{0x38}, {[{0x1}, {0xfffffffffffffffa}], 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@loopback, 0x29, 0x37}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'wlan0\x00', {}, {}, 0x32, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x6, 0x1, [0x0, 0x7, 0x1ff, 0x7f, 0x7f, 0x7, 0x1, 0x799c, 0xd, 0x7, 0x2, 0x100, 0x1, 0xf6ee, 0xffff, 0x7f], 0xa}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 4.934798038s ago: executing program 3 (id=618): add_key$user(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='hugetlbfs\x00', 0x80000, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$9p_unix(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x802ca2, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=unix,@']) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0x1, 0x40008c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000040)=0x7, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r2, 0x200}, &(0x7f0000000280)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, r4) request_key(&(0x7f0000000c00)='asymmetric\x00', &(0x7f0000000c40)={'syz', 0x2}, &(0x7f0000000c80)='gcm(aes)\x00', r5) r6 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000004000000df7f000001"], 0x48) 4.417480683s ago: executing program 1 (id=619): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) faccessat2(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x300) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x5, 0x0, 0x0, 0x1}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r4, &(0x7f0000000700)=""/90, 0x20000) socket(0x18, 0x3, 0x7f) 4.414245086s ago: executing program 4 (id=620): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001b00)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) process_madvise(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="7f", 0x1}], 0x1, 0x11, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in=@private=0xa010102, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) socket$netlink(0x10, 0x3, 0x8) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'veth1_vlan\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3.189315877s ago: executing program 2 (id=621): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fanotify_mark(0xffffffffffffffff, 0x1, 0x40000011, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x400, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400b881}, 0x3000c81c) r3 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[], 0x76) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) r5 = dup3(r4, r3, 0x0) finit_module(r4, 0x0, 0x100000000000000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)={0x114, 0x1b, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0xf}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, 0x0) ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000040)) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, 0x0, 0x1}) 3.014220744s ago: executing program 3 (id=622): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r2 = syz_clone(0x80008000, 0x0, 0xffd3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x2}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x11}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x28}}, 0x844) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400007daa8c38fc9bb94f000000010007000006000001000700"/36], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4800) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000002001801000020646c4300000000002020207b1af8ff00000000"], 0x0, 0x3d76, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 2.082025108s ago: executing program 2 (id=624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x1, 0x8, 0x6, 0x8, {{0x9, 0x4, 0x0, 0x18, 0x24, 0x65, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@rr={0x7, 0x3, 0x10}, @ra={0x94, 0x4}, @cipso={0x86, 0x6, 0x2}, @lsrr={0x83, 0x3, 0xd3}]}}}}}) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x7, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xda, &(0x7f0000000340)=""/218, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4f1}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) 2.069157549s ago: executing program 1 (id=625): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x42, 0x9, 0xfffffffc, 0x25dfdbfd, {0x3}}, 0x14}}, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x204400, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) getpid() openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) getuid() getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f00000006c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000700), &(0x7f0000000740)=0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r8 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r8, r7, 0x0, 0x0, 0x0}, 0x30) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000900)) sendmsg$netlink(r2, 0x0, 0x40) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) 0s ago: executing program 3 (id=626): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_setup(0x648, &(0x7f00000000c0)={0x0, 0x7510, 0x1000, 0x3, 0x969}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, 0x0, 0x118) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) io_uring_enter(r3, 0x4201, 0xcb, 0xf, &(0x7f0000000000)={[0x40000000]}, 0x8) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) syz_usb_connect$cdc_ecm(0x2, 0x50, 0x0, &(0x7f0000000280)={0x0, 0x0, 0xb, &(0x7f00000002c0)={0x5, 0xf, 0xb, 0x2, [@ptm_cap={0x3}, @ptm_cap={0x3}]}}) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x8, 0x6, 0x5f0, 0xd0, 0x0, 0x3c0, 0xd0, 0x220, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@private1, @private2, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'caif0\x00', {}, {}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x108, 0x150, 0x0, {0x5002}, [@common=@unspec=@connlabel={{0x28}, {0x0, 0x3}}, @common=@unspec=@connbytes={{0x38}, {[{0x1}, {0xfffffffffffffffa}], 0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv6=@loopback, 0x29, 0x37}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [0xff], 'veth1_to_batadv\x00', 'wlan0\x00', {}, {}, 0x32, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x3}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x3, 0x6, 0x1, [0x0, 0x7, 0x1ff, 0x7f, 0x7f, 0x7, 0x1, 0x799c, 0xd, 0x7, 0x2, 0x100, 0x1, 0xf6ee, 0xffff, 0x7f], 0xa}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @HL={0x28, 'HL\x00', 0x0, {0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 73.217899][ T5807] cgroup: Unknown subsys name 'net' [ 73.349035][ T5807] cgroup: Unknown subsys name 'cpuset' [ 73.357507][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.815309][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.656875][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.668080][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.699067][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.708884][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.716883][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.725784][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.733317][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.741037][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.749477][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.750298][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.756995][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.764528][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.778062][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.786656][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.787556][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.801548][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.801854][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.815956][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.817863][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.840453][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.848616][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.855308][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.859364][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.887929][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.896105][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.519682][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 79.602982][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 79.623229][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 79.730915][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 79.817502][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 79.903448][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.910775][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.919208][ T5819] bridge_slave_0: entered allmulticast mode [ 79.928810][ T5819] bridge_slave_0: entered promiscuous mode [ 79.951628][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.958859][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.966237][ T5817] bridge_slave_0: entered allmulticast mode [ 79.973185][ T5817] bridge_slave_0: entered promiscuous mode [ 80.003359][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.010807][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.018415][ T5819] bridge_slave_1: entered allmulticast mode [ 80.026476][ T5819] bridge_slave_1: entered promiscuous mode [ 80.049364][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.056578][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.063754][ T5817] bridge_slave_1: entered allmulticast mode [ 80.071906][ T5817] bridge_slave_1: entered promiscuous mode [ 80.090302][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.097885][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.107054][ T5825] bridge_slave_0: entered allmulticast mode [ 80.114081][ T5825] bridge_slave_0: entered promiscuous mode [ 80.178624][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.186057][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.193173][ T5825] bridge_slave_1: entered allmulticast mode [ 80.200985][ T5825] bridge_slave_1: entered promiscuous mode [ 80.224486][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.237519][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.267128][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.282544][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.323532][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.331929][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.340491][ T5823] bridge_slave_0: entered allmulticast mode [ 80.348417][ T5823] bridge_slave_0: entered promiscuous mode [ 80.388608][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.422806][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.430281][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.437524][ T5823] bridge_slave_1: entered allmulticast mode [ 80.444620][ T5823] bridge_slave_1: entered promiscuous mode [ 80.456591][ T5817] team0: Port device team_slave_0 added [ 80.467617][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.489460][ T5819] team0: Port device team_slave_0 added [ 80.497347][ T5819] team0: Port device team_slave_1 added [ 80.543555][ T5817] team0: Port device team_slave_1 added [ 80.563725][ T5825] team0: Port device team_slave_0 added [ 80.582228][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.589716][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.596977][ T5830] bridge_slave_0: entered allmulticast mode [ 80.603887][ T5830] bridge_slave_0: entered promiscuous mode [ 80.613407][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.636181][ T5825] team0: Port device team_slave_1 added [ 80.663724][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.671385][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.678666][ T5830] bridge_slave_1: entered allmulticast mode [ 80.687407][ T5830] bridge_slave_1: entered promiscuous mode [ 80.696631][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.743126][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.750314][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.776280][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.789494][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.796911][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.823045][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.861154][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.868646][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.894697][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.907373][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.914338][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.935564][ T5140] Bluetooth: hci4: command tx timeout [ 80.940596][ T5836] Bluetooth: hci0: command tx timeout [ 80.945702][ T5827] Bluetooth: hci1: command tx timeout [ 80.951303][ T5836] Bluetooth: hci2: command tx timeout [ 80.956520][ T5833] Bluetooth: hci3: command tx timeout [ 80.962892][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.980453][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.987671][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.013874][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.033229][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.040551][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.066863][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.092960][ T5823] team0: Port device team_slave_0 added [ 81.132840][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.144362][ T5823] team0: Port device team_slave_1 added [ 81.195956][ T5825] hsr_slave_0: entered promiscuous mode [ 81.202628][ T5825] hsr_slave_1: entered promiscuous mode [ 81.212220][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.246139][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.253105][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.279216][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.325227][ T5817] hsr_slave_0: entered promiscuous mode [ 81.331459][ T5817] hsr_slave_1: entered promiscuous mode [ 81.338010][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.346914][ T5817] Cannot create hsr debugfs directory [ 81.353094][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.360244][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.387127][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.458382][ T5819] hsr_slave_0: entered promiscuous mode [ 81.464555][ T5819] hsr_slave_1: entered promiscuous mode [ 81.470902][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.478803][ T5819] Cannot create hsr debugfs directory [ 81.506578][ T5830] team0: Port device team_slave_0 added [ 81.551718][ T5830] team0: Port device team_slave_1 added [ 81.562814][ T5823] hsr_slave_0: entered promiscuous mode [ 81.569715][ T5823] hsr_slave_1: entered promiscuous mode [ 81.576587][ T5823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.584160][ T5823] Cannot create hsr debugfs directory [ 81.798507][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.809718][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.843140][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.864192][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.871579][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.897611][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.106735][ T5830] hsr_slave_0: entered promiscuous mode [ 82.113290][ T5830] hsr_slave_1: entered promiscuous mode [ 82.119861][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.127523][ T5830] Cannot create hsr debugfs directory [ 82.359146][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.371265][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.401547][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.425482][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.497711][ T5819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.519361][ T5819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.533013][ T5819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.557446][ T5819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.610061][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.621962][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.632874][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.658107][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.751392][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.792357][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.803198][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.814231][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.903417][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.925188][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.939608][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.949477][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.975458][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.017359][ T5833] Bluetooth: hci2: command tx timeout [ 83.022788][ T5833] Bluetooth: hci3: command tx timeout [ 83.028882][ T5827] Bluetooth: hci0: command tx timeout [ 83.034702][ T5837] Bluetooth: hci1: command tx timeout [ 83.040108][ T5837] Bluetooth: hci4: command tx timeout [ 83.056494][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.070413][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.108524][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.115744][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.149950][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.177851][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.191910][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.199029][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.208887][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.216047][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.268315][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.275508][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.320849][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.330965][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.382100][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.389284][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.402652][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.409766][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.450829][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.480053][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.528324][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.535604][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.602702][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.609924][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.736214][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.793760][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.844415][ T5817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.883576][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.918477][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.925689][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.963091][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.970292][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.051296][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.096944][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.162555][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.269548][ T5819] veth0_vlan: entered promiscuous mode [ 84.312663][ T5819] veth1_vlan: entered promiscuous mode [ 84.322136][ T5825] veth0_vlan: entered promiscuous mode [ 84.367183][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.380595][ T5825] veth1_vlan: entered promiscuous mode [ 84.421034][ T5823] veth0_vlan: entered promiscuous mode [ 84.471763][ T5819] veth0_macvtap: entered promiscuous mode [ 84.498774][ T5819] veth1_macvtap: entered promiscuous mode [ 84.517199][ T5823] veth1_vlan: entered promiscuous mode [ 84.590204][ T5825] veth0_macvtap: entered promiscuous mode [ 84.638158][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.649762][ T5825] veth1_macvtap: entered promiscuous mode [ 84.671408][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.694138][ T5819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.712393][ T5819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.721322][ T5819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.736061][ T5819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.784230][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.805958][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.820035][ T5823] veth0_macvtap: entered promiscuous mode [ 84.831580][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.862724][ T5823] veth1_macvtap: entered promiscuous mode [ 84.878260][ T5825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.887432][ T5825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.896912][ T5825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.906843][ T5825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.997716][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.050025][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.080758][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.087133][ T5817] veth0_vlan: entered promiscuous mode [ 85.095826][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.101286][ T5833] Bluetooth: hci3: command tx timeout [ 85.103168][ T5140] Bluetooth: hci0: command tx timeout [ 85.109736][ T5833] Bluetooth: hci1: command tx timeout [ 85.114582][ T5827] Bluetooth: hci2: command tx timeout [ 85.127162][ T5837] Bluetooth: hci4: command tx timeout [ 85.142979][ T5823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.153594][ T5823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.164250][ T5823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.173660][ T5823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.201322][ T5830] veth0_vlan: entered promiscuous mode [ 85.219351][ T5830] veth1_vlan: entered promiscuous mode [ 85.264006][ T5817] veth1_vlan: entered promiscuous mode [ 85.274231][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.283362][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.304896][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.312748][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.396852][ T5817] veth0_macvtap: entered promiscuous mode [ 85.442779][ T5830] veth0_macvtap: entered promiscuous mode [ 85.457350][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.481912][ T5817] veth1_macvtap: entered promiscuous mode [ 85.540557][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.546449][ T5830] veth1_macvtap: entered promiscuous mode [ 85.549293][ T4774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.581398][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.599987][ T4774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.664426][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.687695][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.834527][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.861173][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.569950][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.605298][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.618799][ T5830] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.627722][ T5830] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.645829][ T5830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.667596][ T5830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.626427][ T5837] Bluetooth: hci1: command tx timeout [ 87.631874][ T5837] Bluetooth: hci3: command tx timeout [ 87.637751][ T5140] Bluetooth: hci4: command tx timeout [ 87.643236][ T5837] Bluetooth: hci0: command tx timeout [ 87.643249][ T5827] Bluetooth: hci2: command tx timeout [ 87.678130][ T1211] cfg80211: failed to load regulatory.db [ 88.722363][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.765108][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.773852][ T5817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.844757][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.025141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.025251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.325516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.363178][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.414806][ T4774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.426213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.431730][ T5971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 90.450529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.505184][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.513630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.523376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.567880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.661476][ T4774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.722602][ T4774] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.741470][ T4774] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.800028][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.820807][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.907002][ T4774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.916599][ T4774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.088522][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.969397][ T43] IPVS: starting estimator thread 0... [ 93.015947][ T5992] tmpfs: Unknown parameter 'usrquota_block' [ 93.442624][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.554171][ T5991] IPVS: using max 41 ests per chain, 98400 per kthread [ 94.857195][ T6003] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5'. [ 94.868250][ T6003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5'. [ 97.891560][ T6021] sit0: entered promiscuous mode [ 98.859545][ T6021] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 98.907161][ T6021] netlink: 1 bytes leftover after parsing attributes in process `syz.2.16'. [ 100.496962][ T6040] lo speed is unknown, defaulting to 1000 [ 100.504608][ T6040] lo speed is unknown, defaulting to 1000 [ 100.513235][ T6040] lo speed is unknown, defaulting to 1000 [ 100.525538][ T6040] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.541797][ T6040] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 100.671332][ T6040] lo speed is unknown, defaulting to 1000 [ 100.679611][ T6040] lo speed is unknown, defaulting to 1000 [ 100.686609][ T6040] lo speed is unknown, defaulting to 1000 [ 100.693361][ T6040] lo speed is unknown, defaulting to 1000 [ 100.700625][ T6040] lo speed is unknown, defaulting to 1000 [ 100.888817][ T6044] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 100.904523][ T6044] qnx6: wrong signature (magic) in superblock #1. [ 100.930727][ T6044] qnx6: unable to read the first superblock [ 101.767039][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 101.780442][ T6049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 102.416696][ T6057] Zero length message leads to an empty skb [ 103.739118][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 104.210123][ T6066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.311413][ T10] IPVS: starting estimator thread 0... [ 104.344017][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 104.352945][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 104.371033][ T6060] syz.4.25 (6060) used greatest stack depth: 19280 bytes left [ 104.474902][ T6068] IPVS: using max 37 ests per chain, 88800 per kthread [ 104.906243][ T6073] binder: BINDER_SET_CONTEXT_MGR already set [ 104.912437][ T6073] binder: 6070:6073 ioctl 4018620d 200000000040 returned -16 [ 105.702679][ T6088] program syz.2.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.729026][ T6088] program syz.2.30 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.739381][ T6088] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 106.990427][ T6094] veth1_macvtap: left promiscuous mode [ 107.650141][ T6101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 110.045727][ T6120] hub 8-0:1.0: USB hub found [ 110.070309][ T6120] hub 8-0:1.0: 1 port detected [ 110.511771][ T6122] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.520842][ T6122] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.529705][ T6122] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.550085][ T6122] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.249787][ T6137] netlink: 52 bytes leftover after parsing attributes in process `syz.0.41'. [ 112.264590][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.274134][ T6137] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.411902][ T6138] IPv6: Can't replace route, no match found [ 116.075358][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 118.062507][ T6170] process 'syz.0.46' launched '/dev/fd/12' with NULL argv: empty string added [ 118.106205][ T30] audit: type=1400 audit(1751536793.942:2): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=6166 comm="syz.0.46" path="socket:[8662]" dev="sockfs" ino=8662 [ 118.532848][ T30] audit: type=1400 audit(1751536793.972:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="w" requested=w pid=6166 comm="syz.0.46" saddr=127.0.0.1 daddr=127.0.0.1 netif=lo [ 118.878073][ T6176] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.896090][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 120.670888][ T6180] syz.1.48: attempt to access beyond end of device [ 120.670888][ T6180] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 120.684999][ T6180] gfs2: error -5 reading superblock [ 122.792869][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.54'. [ 124.319325][ T6200] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.589905][ T6218] syz.1.56: attempt to access beyond end of device [ 124.589905][ T6218] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 124.604217][ T6218] syz.1.56: attempt to access beyond end of device [ 124.604217][ T6218] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 124.617577][ T6218] Mount JFS Failure: -5 [ 124.621878][ T6218] jfs_mount failed w/return code = -5 [ 126.252801][ T6226] i2c i2c-0: Invalid block write size 34 [ 126.270870][ T6226] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 126.472613][ T6226] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.525496][ T6240] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.771061][ T6255] netlink: 'syz.1.62': attribute type 4 has an invalid length. [ 130.741095][ T6247] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.120062][ T30] audit: type=1326 audit(1751536806.782:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 132.181204][ T30] audit: type=1326 audit(1751536806.782:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 132.223540][ T30] audit: type=1326 audit(1751536806.782:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 132.254719][ T30] audit: type=1326 audit(1751536806.782:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 132.299617][ T30] audit: type=1326 audit(1751536806.782:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 132.363091][ T30] audit: type=1326 audit(1751536806.782:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 132.781220][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794769][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.935703][ T30] audit: type=1326 audit(1751536806.782:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 132.962865][ T30] audit: type=1326 audit(1751536806.782:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 133.484862][ T30] audit: type=1326 audit(1751536806.792:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 134.181598][ T30] audit: type=1326 audit(1751536806.792:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6261 comm="syz.2.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54d378e929 code=0x7ffc0000 [ 134.493026][ T6270] syz.0.68 uses obsolete (PF_INET,SOCK_PACKET) [ 134.925160][ T6288] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.934146][ T6288] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.943110][ T6288] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.951975][ T6288] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.487157][ T6304] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 137.284380][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.784569][ T6304] team0: Port device bond0 added [ 138.517833][ T6307] vivid-007: ================= START STATUS ================= [ 138.525710][ T6307] vivid-007: Enable Output Cropping: true [ 138.531674][ T6307] vivid-007: Enable Output Composing: true [ 138.538203][ T6307] vivid-007: Enable Output Scaler: true [ 138.543754][ T6307] vivid-007: Tx RGB Quantization Range: Automatic [ 138.550175][ T6307] vivid-007: Transmit Mode: HDMI [ 138.555121][ T6307] vivid-007: Hotplug Present: 0x00000000 [ 138.560744][ T6307] vivid-007: RxSense Present: 0x00000000 [ 138.566399][ T6307] vivid-007: EDID Present: 0x00000000 [ 138.571763][ T6307] vivid-007: ================== END STATUS ================== [ 140.895857][ T6336] program syz.1.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.951274][ T6336] program syz.1.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.961650][ T6336] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 141.048645][ T6345] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 141.084731][ T6345] qnx6: wrong signature (magic) in superblock #1. [ 141.091557][ T6345] qnx6: unable to read the first superblock [ 142.249266][ T1211] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.684794][ T1211] usb 4-1: device descriptor read/64, error -71 [ 143.834795][ T1211] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 146.331256][ T6384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 147.286898][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.89'. [ 147.844098][ T6393] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.407095][ T6408] netlink: 68 bytes leftover after parsing attributes in process `syz.1.95'. [ 151.450199][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 153.257634][ T6430] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 153.281609][ T6430] qnx6: wrong signature (magic) in superblock #1. [ 153.288355][ T6430] qnx6: unable to read the first superblock [ 153.936240][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 153.945148][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 153.955249][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 154.030689][ T6438] netlink: 'syz.4.101': attribute type 11 has an invalid length. [ 154.038741][ T6438] netlink: 224 bytes leftover after parsing attributes in process `syz.4.101'. [ 156.657091][ T5837] Bluetooth: hci2: connection err: -111 [ 156.979648][ T6451] syz.1.104 (6451) used greatest stack depth: 17000 bytes left [ 157.291992][ T6466] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.052983][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.106'. [ 159.630505][ T6476] random: crng reseeded on system resumption [ 163.400901][ T6508] kernel profiling enabled (shift: 17) [ 164.497027][ T6515] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 164.514649][ T6515] qnx6: wrong signature (magic) in superblock #1. [ 164.521138][ T6515] qnx6: unable to read the first superblock [ 166.801753][ T6533] netlink: 'syz.3.120': attribute type 6 has an invalid length. [ 168.404465][ T6545] netlink: 'syz.3.124': attribute type 16 has an invalid length. [ 168.413879][ T6545] netlink: 'syz.3.124': attribute type 17 has an invalid length. [ 168.535811][ T6525] delete_channel: no stack [ 168.773011][ T1211] lo speed is unknown, defaulting to 1000 [ 168.898754][ T6548] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 168.907622][ T6548] netlink: 228 bytes leftover after parsing attributes in process `syz.4.126'. [ 168.999991][ T6549] /dev/nullb0: Can't open blockdev [ 170.059743][ T6553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.470545][ T6556] syz.0.125: attempt to access beyond end of device [ 170.470545][ T6556] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 170.660567][ T6556] gfs2: error -5 reading superblock [ 183.664943][ T6636] hugetlbfs: syz.0.142 (6636): Using mlock ulimits for SHM_HUGETLB is obsolete [ 184.135406][ T6642] netlink: 84 bytes leftover after parsing attributes in process `syz.1.143'. [ 186.317590][ T6655] syz.2.145: attempt to access beyond end of device [ 186.317590][ T6655] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 186.331065][ T6655] hfsplus: unable to find HFS+ superblock [ 187.383513][ T6660] Bluetooth: MGMT ver 1.23 [ 194.306501][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.312931][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.390502][ T6692] ceph: No mds server is up or the cluster is laggy [ 201.534820][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 201.540944][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 201.549182][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 201.555906][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 203.240588][ T6753] Bluetooth: hci5: Frame reassembly failed (-84) [ 203.242252][ T6751] warning: `syz.3.163' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 203.263269][ T6751] netlink: 'syz.3.163': attribute type 1 has an invalid length. [ 205.143970][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 205.334945][ T5836] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 205.745945][ T6778] netlink: 452 bytes leftover after parsing attributes in process `syz.3.168'. [ 208.152959][ T6780] netlink: 200 bytes leftover after parsing attributes in process `syz.2.170'. [ 208.339046][ T6780] netlink: 44 bytes leftover after parsing attributes in process `syz.2.170'. [ 212.264718][ T6801] netlink: 44 bytes leftover after parsing attributes in process `syz.0.174'. [ 212.373414][ T6801] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 212.751683][ T6809] hub 8-0:1.0: USB hub found [ 212.768358][ T6809] hub 8-0:1.0: 1 port detected [ 213.636543][ T6819] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 213.663390][ T6819] CIFS mount error: No usable UNC path provided in device string! [ 213.663390][ T6819] [ 213.673545][ T6819] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 215.259204][ T6830] i2c i2c-0: Invalid block write size 34 [ 215.290127][ T6830] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 215.719187][ T6835] capability: warning: `syz.4.183' uses 32-bit capabilities (legacy support in use) [ 216.951532][ T6830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.896815][ T6844] netlink: 'syz.4.184': attribute type 6 has an invalid length. [ 220.139368][ T6855] virtio-fs: tag not found [ 223.661467][ T6876] ======================================================= [ 223.661467][ T6876] WARNING: The mand mount option has been deprecated and [ 223.661467][ T6876] and is ignored by this kernel. Remove the mand [ 223.661467][ T6876] option from the mount to silence this warning. [ 223.661467][ T6876] ======================================================= [ 223.697649][ T6876] kAFS: No cell specified [ 223.946116][ T6873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.964296][ T6873] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 225.482942][ T6873] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.738504][ T6873] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 226.020197][ T6873] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.040110][ T6873] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 226.199895][ T6873] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.226742][ T6873] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 226.459650][ T6903] overlayfs: missing 'lowerdir' [ 226.945533][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 227.082966][ T6873] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 227.115872][ T6873] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 227.495536][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 228.534746][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 228.540817][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 229.435077][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 229.664751][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 230.094484][ T6925] i2c i2c-0: Invalid block write size 34 [ 230.137678][ T6925] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 230.303814][ T6925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.151727][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 231.157918][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 231.357861][ T6937] hub 8-0:1.0: USB hub found [ 231.365059][ T6937] hub 8-0:1.0: 1 port detected [ 231.796640][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 232.818898][ T6950] IPVS: stopping backup sync thread 6951 ... [ 232.824748][ T6951] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 235.187902][ T6959] x_tables: duplicate underflow at hook 3 [ 236.595687][ T6976] overlay: Unknown parameter '/' [ 236.698956][ T6977] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 238.447314][ T6993] netlink: 'syz.1.217': attribute type 4 has an invalid length. [ 238.455005][ T6993] netlink: 17 bytes leftover after parsing attributes in process `syz.1.217'. [ 239.194817][ T6989] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.216'. [ 240.365947][ T5925] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 240.449178][ T7007] vivid-000: ================= START STATUS ================= [ 240.457093][ T7007] vivid-000: Radio HW Seek Mode: Bounded [ 240.468389][ T7007] vivid-000: Radio Programmable HW Seek: false [ 240.475215][ T7007] vivid-000: RDS Rx I/O Mode: Block I/O [ 240.480981][ T7007] vivid-000: Generate RBDS Instead of RDS: false [ 240.488280][ T7007] vivid-000: RDS Reception: true [ 240.493991][ T7007] vivid-000: RDS Program Type: 0 inactive [ 240.500761][ T7007] vivid-000: RDS PS Name: inactive [ 240.511144][ T7007] vivid-000: RDS Radio Text: inactive [ 240.517459][ T7007] vivid-000: RDS Traffic Announcement: false inactive [ 240.525033][ T7007] vivid-000: RDS Traffic Program: false inactive [ 240.531934][ T7007] vivid-000: RDS Music: false inactive [ 240.538128][ T7007] vivid-000: ================== END STATUS ================== [ 240.766295][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 240.872684][ T5925] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 240.903237][ T5925] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 240.921459][ T5925] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 240.950391][ T5925] usb 4-1: Product: syz [ 240.974846][ T5925] usb 4-1: Manufacturer: syz [ 240.997986][ T5925] usb 4-1: SerialNumber: syz [ 241.026945][ T5925] usb 4-1: config 0 descriptor?? [ 241.123961][ T1211] IPVS: starting estimator thread 0... [ 241.743391][ T7019] IPVS: using max 28 ests per chain, 67200 per kthread [ 241.881904][ T7018] random: crng reseeded on system resumption [ 245.173235][ T5925] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 245.210725][ T5925] gspca_sunplus: reg_w_riv err -71 [ 245.233424][ T5925] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 246.366284][ T5925] usb 4-1: USB disconnect, device number 4 [ 249.196434][ T7051] program syz.4.228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 250.071382][ T7062] tty tty24: ldisc open failed (-12), clearing slot 23 [ 252.029617][ T7078] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 253.761741][ T7070] delete_channel: no stack [ 255.361145][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.367550][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.835526][ T7109] random: crng reseeded on system resumption [ 261.668726][ T7142] netlink: 'syz.4.249': attribute type 10 has an invalid length. [ 261.679924][ T7142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.691332][ T7142] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 263.115794][ T7161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.350432][ T7159] bridge0: port 3(syz_tun) entered blocking state [ 263.357305][ T7159] bridge0: port 3(syz_tun) entered disabled state [ 263.364064][ T7159] syz_tun: entered allmulticast mode [ 263.372123][ T7159] syz_tun: entered promiscuous mode [ 263.379117][ T7159] bridge0: port 3(syz_tun) entered blocking state [ 263.385937][ T7159] bridge0: port 3(syz_tun) entered forwarding state [ 263.466346][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.892084][ T7153] syz_tun: entered allmulticast mode [ 263.902219][ T7147] syz_tun: left allmulticast mode [ 266.461329][ T7182] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 266.478704][ T7182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.494295][ T7182] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 268.266287][ T7196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.260'. [ 268.949995][ T7203] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 268.979994][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.006740][ T7203] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 269.831068][ T7210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.950029][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 269.959257][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 270.079331][ T1211] IPVS: starting estimator thread 0... [ 271.014548][ T7211] IPVS: using max 31 ests per chain, 74400 per kthread [ 271.234338][ T7221] netlink: 'syz.2.267': attribute type 10 has an invalid length. [ 275.299588][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 275.327571][ T7248] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 277.324952][ T7271] netlink: 'syz.2.275': attribute type 10 has an invalid length. [ 280.780989][ T7290] program syz.0.282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.101046][ T7308] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 281.130451][ T7308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.157106][ T7308] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 282.700135][ T7313] 9pnet_fd: Insufficient options for proto=fd [ 283.874871][ T7334] capability: warning: `syz.0.290' uses deprecated v2 capabilities in a way that may be insecure [ 284.049129][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 284.049173][ T30] audit: type=1326 audit(1751536960.282:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7328 comm="syz.0.290" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f847258e929 code=0x0 [ 285.513564][ T7327] mmap: syz.4.289 (7327) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 285.580123][ T7350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.038504][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.676899][ T7350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.946180][ T7360] pim6reg: entered allmulticast mode [ 286.968733][ T7360] pim6reg: left allmulticast mode [ 288.393786][ T7361] program syz.1.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 294.171534][ T7404] netlink: 52 bytes leftover after parsing attributes in process `syz.0.307'. [ 295.699493][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056421800: rx timeout, send abort [ 296.208622][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056421800: abort rx timeout. Force session deactivation [ 296.914634][ T7421] netlink: 32 bytes leftover after parsing attributes in process `syz.2.311'. [ 300.260423][ T7431] netlink: 'syz.1.312': attribute type 10 has an invalid length. [ 302.546246][ T7431] team0: Port device wlan1 added [ 304.521150][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 304.972706][ T7457] : entered promiscuous mode [ 305.412262][ T7462] netlink: 48 bytes leftover after parsing attributes in process `syz.1.318'. [ 305.567270][ T30] audit: type=1326 audit(1751536981.678:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7454 comm="syz.1.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1fc78e929 code=0x0 [ 306.141856][ T6002] Bluetooth: (null): Invalid header checksum [ 306.317062][ T6002] Bluetooth: (null): Invalid header checksum [ 306.476534][ T6002] Bluetooth: (null): Invalid header checksum [ 308.190873][ T7475] netlink: 'syz.2.323': attribute type 10 has an invalid length. [ 313.697834][ T7510] tty tty3: ldisc open failed (-12), clearing slot 2 [ 315.849359][ T7543] netlink: 'syz.4.335': attribute type 10 has an invalid length. [ 316.622723][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.629233][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.658108][ T30] audit: type=1326 audit(1751536993.021:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7539 comm="syz.2.334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f54d378e929 code=0x0 [ 316.753120][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 317.855759][ T5827] Bluetooth: hci2: command 0x0406 tx timeout [ 318.491562][ T7556] program syz.2.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.523329][ T7555] program syz.2.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.533478][ T7555] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 319.658163][ T7566] lo speed is unknown, defaulting to 1000 [ 321.998596][ T7587] netlink: 'syz.0.343': attribute type 3 has an invalid length. [ 322.060863][ T7588] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 322.068823][ T7588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.076115][ T7588] IPv6: NLM_F_CREATE should be set when creating new route [ 327.359557][ T7619] random: crng reseeded on system resumption [ 327.721462][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.729192][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.260844][ T7619] xt_CT: No such helper "snmp" [ 328.349139][ T7622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.372912][ T7622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.912178][ T7622] bond0: (slave batadv0): Releasing backup interface [ 329.067033][ T5827] Bluetooth: hci3: unexpected cc 0x2007 length: 100 > 2 [ 329.075050][ T5827] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 330.989797][ T7647] loop6: detected capacity change from 0 to 524287487 [ 331.792765][ T5827] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 331.895198][ T7648] loop6: detected capacity change from 524287487 to 0 [ 332.005428][ T7647] Buffer I/O error on dev loop6, logical block 0, async page read [ 332.172185][ T7647] ldm_validate_partition_table(): Disk read failed. [ 332.183030][ T7647] Dev loop6: unable to read RDB block 0 [ 332.978323][ T7647] loop6: unable to read partition table [ 333.135652][ T5827] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 333.146426][ T5827] Bluetooth: hci3: Injecting HCI hardware error event [ 333.154575][ T5827] Bluetooth: hci3: hardware error 0x00 [ 333.757813][ T7647] loop6: partition table beyond EOD, truncated [ 333.778685][ T7647] loop_reread_partitions: partition scan of loop6 (^L A;b@֔:Bw<gnf. -ӑ.i >^.dDd) failed (rc=-5) [ 334.067189][ T7677] hsr0: entered promiscuous mode [ 334.072840][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 334.460429][ T7684] syz.0.367 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 334.949204][ T7677] hsr_slave_0: left promiscuous mode [ 335.091350][ T7677] hsr_slave_1: left promiscuous mode [ 335.173555][ T5827] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 335.609351][ T7677] hsr0 (unregistering): left promiscuous mode [ 335.881671][ T7694] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 340.475974][ T7712] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 343.803143][ T7737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 344.209417][ T7740] loop9: detected capacity change from 0 to 7 [ 344.222113][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.235630][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.245079][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.254717][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.263068][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.277581][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.287254][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.297670][ T7740] ldm_validate_partition_table(): Disk read failed. [ 344.304605][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.315814][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.326801][ T7740] Buffer I/O error on dev loop9, logical block 0, async page read [ 344.340741][ T7740] Dev loop9: unable to read RDB block 0 [ 344.359073][ T7740] loop9: unable to read partition table [ 344.369464][ T7740] loop9: partition table beyond EOD, truncated [ 344.375830][ T7740] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 344.375830][ T7740] ) failed (rc=-5) [ 346.841582][ T10] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 347.025149][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 347.059911][ T30] audit: type=1326 audit(1751537023.434:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 347.082527][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 347.131856][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64 [ 347.144082][ T7764] netlink: 116 bytes leftover after parsing attributes in process `syz.1.384'. [ 347.325275][ T30] audit: type=1326 audit(1751537023.454:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 347.674891][ T7771] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 347.682592][ T7771] netlink: 144 bytes leftover after parsing attributes in process `syz.2.386'. [ 347.691781][ T7771] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 347.699573][ T7771] netlink: 'syz.2.386': attribute type 2 has an invalid length. [ 347.707354][ T7771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.386'. [ 348.128763][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 348.296205][ T30] audit: type=1326 audit(1751537023.484:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 348.317719][ T30] audit: type=1326 audit(1751537023.484:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 348.608448][ T7769] syz.2.386: attempt to access beyond end of device [ 348.608448][ T7769] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 348.621418][ T7769] hfs: can't find a HFS filesystem on dev nbd2 [ 348.717742][ T30] audit: type=1326 audit(1751537023.484:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 348.922985][ T10] usb 5-1: string descriptor 0 read error: -71 [ 348.929230][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 348.947551][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 348.959142][ T30] audit: type=1326 audit(1751537023.484:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 349.019687][ T30] audit: type=1326 audit(1751537023.484:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 349.040896][ C0] vkms_vblank_simulate: vblank timer overrun [ 349.081233][ T7777] syz_tun: entered allmulticast mode [ 349.102157][ T10] usb 5-1: can't set config #1, error -71 [ 349.623379][ T10] usb 5-1: USB disconnect, device number 2 [ 349.632327][ T30] audit: type=1326 audit(1751537023.484:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 349.900885][ T7776] syz_tun: left allmulticast mode [ 350.150280][ T7792] NILFS (nullb0): couldn't find nilfs on the device [ 350.177756][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 350.186706][ T7792] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 350.588667][ T30] audit: type=1326 audit(1751537023.484:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 351.035580][ T30] audit: type=1326 audit(1751537023.484:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7763 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1fc78e929 code=0x7ffc0000 [ 351.056890][ C0] vkms_vblank_simulate: vblank timer overrun [ 352.187220][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 352.187239][ T30] audit: type=1326 audit(1751537027.644:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 352.216405][ T30] audit: type=1326 audit(1751537027.644:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.115363][ T30] audit: type=1326 audit(1751537027.654:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.115412][ T30] audit: type=1326 audit(1751537027.654:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.115452][ T30] audit: type=1326 audit(1751537027.654:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.115491][ T30] audit: type=1326 audit(1751537027.654:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.115529][ T30] audit: type=1326 audit(1751537027.654:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.115567][ T30] audit: type=1326 audit(1751537027.654:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.115611][ T30] audit: type=1326 audit(1751537027.654:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.115650][ T30] audit: type=1326 audit(1751537027.654:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7797 comm="syz.3.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa398e929 code=0x7ffc0000 [ 353.821627][ T980] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 354.083705][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 354.095900][ T980] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 354.095942][ T980] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 354.095978][ T980] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 354.095999][ T980] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.214327][ T5827] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 354.736340][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 356.176286][ T7809] ttynull ttynull: ldisc open failed (-12), clearing slot 0 [ 356.473664][ T1211] usb 1-1: USB disconnect, device number 2 [ 357.352231][ T7854] new mount options do not match the existing superblock, will be ignored [ 357.381146][ T7854] option changes via remount are deprecated (pid=7841 comm=syz.2.401) [ 357.973061][ T7856] IPVS: ip_vs_add_dest(): server weight less than zero [ 360.996421][ T7875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 361.708212][ T7873] overlayfs: overlapping lowerdir path [ 362.348625][ T7886] overlay: Unknown parameter '/' [ 363.465062][ T7891] trusted_key: syz.1.409 sent an empty control message without MSG_MORE. [ 366.896630][ T7922] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 367.657579][ T7937] No such timeout policy "syz1" [ 368.358539][ T7931] libceph: resolve '. [ 368.358539][ T7931] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 368.358539][ T7931] ' (ret=-3): failed [ 368.782630][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 371.125497][ T7966] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 373.324837][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 375.875111][ T8004] overlay: Unknown parameter '/' [ 377.144691][ T8014] netdevsim netdevsim3: Direct firmware load for JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F failed with error -2 [ 377.165431][ T8014] netdevsim netdevsim3: Falling back to sysfs fallback for: JngkNq>*x(O@ēƙaWfV! _)ADIwC7;gB|hV`f?:VmUWX:SZ;˩6h?Aeim/S6_C?F [ 378.056388][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.102897][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.807086][ T8024] lo speed is unknown, defaulting to 1000 [ 379.815917][ T8024] lo speed is unknown, defaulting to 1000 [ 380.007314][ T8024] lo speed is unknown, defaulting to 1000 [ 380.124510][ T8024] infiniband syz2: set active [ 380.129373][ T8024] infiniband syz2: added lo [ 380.134824][ T8024] syz2: rxe_create_cq: returned err = -12 [ 380.140724][ T8024] infiniband syz2: Couldn't create ib_mad CQ [ 380.146992][ T8024] infiniband syz2: Couldn't open port 1 [ 380.166494][ T8024] RDS/IB: syz2: added [ 380.170766][ T8024] smc: adding ib device syz2 with port count 1 [ 380.177736][ T8024] smc: ib device syz2 port 1 has pnetid [ 380.185171][ T8024] lo speed is unknown, defaulting to 1000 [ 380.309891][ T8024] lo speed is unknown, defaulting to 1000 [ 380.430702][ T8024] lo speed is unknown, defaulting to 1000 [ 380.552007][ T8024] lo speed is unknown, defaulting to 1000 [ 380.672409][ T8024] lo speed is unknown, defaulting to 1000 [ 380.848681][ T6015] lo speed is unknown, defaulting to 1000 [ 380.863496][ T6015] lo speed is unknown, defaulting to 1000 [ 381.397515][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.033314][ T8031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.217782][ T8046] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 383.227997][ T8057] netlink: 20 bytes leftover after parsing attributes in process `syz.2.443'. [ 383.692520][ T1211] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 383.989026][ T1211] usb 5-1: Using ep0 maxpacket: 16 [ 384.188727][ T1211] usb 5-1: too many configurations: 29, using maximum allowed: 8 [ 384.487421][ T1211] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 384.652605][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.660672][ T1211] usb 5-1: Product: syz [ 384.712667][ T1211] usb 5-1: Manufacturer: syz [ 384.717312][ T1211] usb 5-1: SerialNumber: syz [ 384.831099][ T8069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.546572][ T1211] r8152-cfgselector 5-1: Unknown version 0x0000 [ 386.117100][ T1211] r8152-cfgselector 5-1: config 0 descriptor?? [ 386.268411][ T1211] r8152-cfgselector 5-1: can't set config #0, error -71 [ 386.280407][ T1211] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 388.430483][ T8093] ntfs3(nullb0): Primary boot signature is not NTFS. [ 388.439198][ T8093] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 391.247927][ T8110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.734041][ T8102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.028950][ T8128] batadv_slave_1: entered promiscuous mode [ 393.853690][ T8126] batadv_slave_1: left promiscuous mode [ 395.015396][ T8140] netlink: 2 bytes leftover after parsing attributes in process `syz.2.463'. [ 395.167540][ T10] libceph: connect (1)[c::]:6789 error -101 [ 395.223069][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 395.634453][ T8137] ceph: No mds server is up or the cluster is laggy [ 397.271947][ T8157] ptrace attach of "./syz-executor exec"[5819] was attempted by "./syz-executor exec"[8157] [ 397.365437][ T8157] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 397.377053][ T8157] overlayfs: failed to set xattr on upper [ 397.387510][ T8157] overlayfs: ...falling back to redirect_dir=nofollow. [ 397.394602][ T8157] overlayfs: ...falling back to index=off. [ 397.400508][ T8157] overlayfs: ...falling back to uuid=null. [ 397.406753][ T8157] overlayfs: maximum fs stacking depth exceeded [ 399.206238][ T8171] netlink: 'syz.3.469': attribute type 10 has an invalid length. [ 400.142350][ T8182] x_tables: duplicate underflow at hook 3 [ 401.722432][ T8197] new mount options do not match the existing superblock, will be ignored [ 401.742127][ T8197] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 402.069472][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.323028][ T8189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.491707][ T8209] netlink: 72 bytes leftover after parsing attributes in process `syz.1.477'. [ 403.437799][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 404.082051][ T8219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.481'. [ 404.091433][ T8219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'. [ 404.155157][ T8219] binder: 8213:8219 ioctl c0306201 200000000140 returned -11 [ 405.697280][ T8229] veth0_vlan: entered allmulticast mode [ 405.736022][ T8229] veth0_vlan: left promiscuous mode [ 405.828890][ T8229] veth0_vlan: entered promiscuous mode [ 405.843885][ T8231] netlink: 'syz.4.484': attribute type 10 has an invalid length. [ 409.043493][ T8256] netlink: 36 bytes leftover after parsing attributes in process `syz.1.490'. [ 409.058012][ T8256] netlink: 41 bytes leftover after parsing attributes in process `syz.1.490'. [ 411.600111][ T8273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.743137][ T8262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.821559][ T8281] netlink: 52 bytes leftover after parsing attributes in process `syz.1.505'. [ 411.833230][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.841158][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.551739][ T8262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.253239][ T8289] netlink: 'syz.2.496': attribute type 9 has an invalid length. [ 413.273207][ T8289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.908200][ T8307] overlayfs: failed to resolve 'smackfsroot=': -2 [ 420.436741][ T8341] sp0: Synchronizing with TNC [ 420.895558][ T8351] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 420.943275][ T8350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.891789][ T8371] hub 8-0:1.0: USB hub found [ 424.025706][ T8371] hub 8-0:1.0: 1 port detected [ 424.449079][ T8374] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 424.458004][ T8374] openvswitch: netlink: Flow actions attr not present in new flow. [ 425.304255][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.3.516'. [ 425.315843][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 425.341921][ T8378] syz.3.516: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 425.361852][ T8378] CPU: 0 UID: 0 PID: 8378 Comm: syz.3.516 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 425.361878][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.361901][ T8378] Call Trace: [ 425.361911][ T8378] [ 425.361920][ T8378] dump_stack_lvl+0x189/0x250 [ 425.361969][ T8378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.361994][ T8378] ? __pfx__printk+0x10/0x10 [ 425.362013][ T8378] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 425.362039][ T8378] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 425.362068][ T8378] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 425.362096][ T8378] warn_alloc+0x214/0x310 [ 425.362119][ T8378] ? stack_depot_save_flags+0x429/0x900 [ 425.362143][ T8378] ? __pfx_warn_alloc+0x10/0x10 [ 425.362167][ T8378] ? kasan_save_track+0x4f/0x80 [ 425.362185][ T8378] ? xskq_create+0x56/0x170 [ 425.362210][ T8378] ? xsk_init_queue+0xb0/0x110 [ 425.362228][ T8378] ? xsk_setsockopt+0x43f/0x710 [ 425.362247][ T8378] ? do_sock_setsockopt+0x257/0x3e0 [ 425.362264][ T8378] ? __x64_sys_setsockopt+0x18b/0x220 [ 425.362281][ T8378] ? do_syscall_64+0xfa/0x3b0 [ 425.362302][ T8378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.362328][ T8378] __vmalloc_node_range_noprof+0x125/0x12f0 [ 425.362392][ T8378] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.362421][ T8378] ? __kasan_kmalloc+0x93/0xb0 [ 425.362450][ T8378] vmalloc_user_noprof+0xad/0xf0 [ 425.362471][ T8378] ? xskq_create+0xbf/0x170 [ 425.362493][ T8378] xskq_create+0xbf/0x170 [ 425.362517][ T8378] xsk_init_queue+0xb0/0x110 [ 425.362541][ T8378] xsk_setsockopt+0x43f/0x710 [ 425.362564][ T8378] ? __pfx_xsk_setsockopt+0x10/0x10 [ 425.362583][ T8378] ? __lock_acquire+0xab9/0xd20 [ 425.362621][ T8378] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 425.362640][ T8378] ? __pfx_xsk_setsockopt+0x10/0x10 [ 425.362662][ T8378] do_sock_setsockopt+0x257/0x3e0 [ 425.362684][ T8378] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 425.362708][ T8378] ? __fget_files+0x2a/0x420 [ 425.362745][ T8378] __x64_sys_setsockopt+0x18b/0x220 [ 425.362775][ T8378] do_syscall_64+0xfa/0x3b0 [ 425.362796][ T8378] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.362819][ T8378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.362835][ T8378] ? clear_bhb_loop+0x60/0xb0 [ 425.362856][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.362872][ T8378] RIP: 0033:0x7faaa398e929 [ 425.362893][ T8378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.362908][ T8378] RSP: 002b:00007faaa470f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 425.362927][ T8378] RAX: ffffffffffffffda RBX: 00007faaa3bb6080 RCX: 00007faaa398e929 [ 425.362940][ T8378] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 425.362951][ T8378] RBP: 00007faaa3a10b39 R08: 0000000000000052 R09: 0000000000000000 [ 425.362963][ T8378] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.362974][ T8378] R13: 0000000000000000 R14: 00007faaa3bb6080 R15: 00007ffe12c185e8 [ 425.363005][ T8378] [ 425.363016][ T8378] Mem-Info: [ 425.671573][ T8378] active_anon:8874 inactive_anon:11293 isolated_anon:0 [ 425.671573][ T8378] active_file:13620 inactive_file:41686 isolated_file:0 [ 425.671573][ T8378] unevictable:770 dirty:441 writeback:0 [ 425.671573][ T8378] slab_reclaimable:10396 slab_unreclaimable:103737 [ 425.671573][ T8378] mapped:39736 shmem:15854 pagetables:1218 [ 425.671573][ T8378] sec_pagetables:0 bounce:0 [ 425.671573][ T8378] kernel_misc_reclaimable:0 [ 425.671573][ T8378] free:1292985 free_pcp:18408 free_cma:0 [ 425.717511][ T8378] Node 0 active_anon:35496kB inactive_anon:45172kB active_file:54016kB inactive_file:166744kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:158788kB dirty:1764kB writeback:0kB shmem:61880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12492kB pagetables:4704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 425.751347][ T8378] Node 1 active_anon:0kB inactive_anon:0kB active_file:464kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 425.783231][ T8378] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.812269][ T8378] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 425.818051][ T8378] Node 0 DMA32 free:1258444kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35492kB inactive_anon:45132kB active_file:52240kB inactive_file:166676kB unevictable:1544kB writepending:1764kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:54408kB local_pcp:32732kB free_cma:0kB [ 425.850743][ T8378] lowmem_reserve[]: 0 0 1 1 1 [ 425.855469][ T8378] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1776kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 425.884944][ T8378] lowmem_reserve[]: 0 0 0 0 0 [ 425.889651][ T8378] Node 1 Normal free:3898128kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:464kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19184kB local_pcp:9056kB free_cma:0kB [ 425.920813][ T8378] lowmem_reserve[]: 0 0 0 0 0 [ 425.925558][ T8378] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 425.938200][ T8378] Node 0 DMA32: 340*4kB (UM) 102*8kB (UM) 18*16kB (UME) 333*32kB (UME) 19*64kB (UME) 15*128kB (UME) 12*256kB (UE) 28*512kB (UM) 10*1024kB (UM) 7*2048kB (M) 293*4096kB (M) = 1258368kB [ 425.956350][ T8378] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 425.968716][ T8378] Node 1 Normal: 208*4kB (UME) 48*8kB (UM) 43*16kB (UME) 169*32kB (UME) 48*64kB (UE) 15*128kB (UME) 7*256kB (UME) 4*512kB (ME) 3*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3898128kB [ 425.986796][ T8378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.996362][ T8378] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 426.005659][ T8378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.015220][ T8378] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 426.024511][ T8378] 71157 total pagecache pages [ 426.029432][ T8378] 0 pages in swap cache [ 426.033589][ T8378] Free swap = 124996kB [ 426.037726][ T8378] Total swap = 124996kB [ 426.041896][ T8378] 2097051 pages RAM [ 426.045678][ T8378] 0 pages HighMem/MovableOnly [ 426.050331][ T8378] 424582 pages reserved [ 426.054483][ T8378] 0 pages cma reserved [ 427.100035][ T8392] block device autoloading is deprecated and will be removed. [ 429.248579][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'. [ 430.396548][ T8412] fuse: Bad value for 'fd' [ 430.464594][ T5827] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 430.762400][ T8418] input: syz1 as /devices/virtual/input/input9 [ 431.608280][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.778599][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.949636][ T8425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 433.754771][ T8428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.818439][ T8428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.835814][ T8428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.853154][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.861831][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.040663][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.897923][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.083751][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.538646][ T8449] netfs: Couldn't get user pages (rc=-14) [ 436.881268][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.121400][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.558327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.116622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.176879][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.515182][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.521505][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.573317][ T8470] veth0_to_team: entered promiscuous mode [ 439.579110][ T8470] veth0_to_team: entered allmulticast mode [ 440.388182][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.668165][ T8475] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 440.677048][ T8475] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 440.742320][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.760741][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 440.760757][ T30] audit: type=1326 audit(1751537117.597:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8466 comm="syz.1.541" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1fc78e929 code=0x0 [ 441.568615][ T8490] netlink: 256 bytes leftover after parsing attributes in process `syz.1.541'. [ 441.661229][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.663007][ T8490] netlink: 'syz.1.541': attribute type 4 has an invalid length. [ 442.936904][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.779523][ T5836] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 444.140989][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.149198][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.947227][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.959135][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.071875][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.522650][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.638433][ T8524] IPVS: Error joining to the multicast group [ 447.816370][ T5836] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 447.825747][ T5836] Bluetooth: hci2: Injecting HCI hardware error event [ 447.940313][ T5836] Bluetooth: hci2: hardware error 0x00 [ 448.134843][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.202576][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.283122][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.294609][ T8520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.596990][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.131901][ T5836] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 450.611138][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.648507][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.784037][ T5890] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 451.310902][ T5890] usb 3-1: unable to get BOS descriptor or descriptor too short [ 451.518833][ T5890] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 451.539914][ T5890] usb 3-1: can't read configurations, error -71 [ 451.755813][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.913325][ T8555] unsupported nlmsg_type 40 [ 452.417636][ T8560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.438880][ T5890] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 452.534355][ T8551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.336552][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.538374][ T5890] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 453.589263][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.625552][ T5890] usb 3-1: Product: syz [ 453.640111][ T5890] usb 3-1: Manufacturer: syz [ 453.644750][ T5890] usb 3-1: SerialNumber: syz [ 453.680155][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.711320][ T5890] usb 3-1: config 0 descriptor?? [ 453.751312][ T5890] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 453.881159][ T8572] netlink: 'syz.1.561': attribute type 10 has an invalid length. [ 454.341484][ T5890] gspca_sunplus: reg_r err -110 [ 454.380228][ T5890] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 454.388927][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.711584][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.719708][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.131982][ T8591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 456.143704][ T8591] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 456.690613][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.045579][ T8598] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0) [ 457.114394][ T30] audit: type=1326 audit(1751537133.962:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.4.566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5d398e929 code=0x0 [ 457.864538][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.249579][ T8600] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[8600] [ 458.428614][ T8587] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 458.435618][ T8587] overlayfs: failed to set xattr on upper [ 458.442143][ T8587] overlayfs: ...falling back to redirect_dir=nofollow. [ 458.449186][ T8587] overlayfs: ...falling back to index=off. [ 458.455028][ T8587] overlayfs: ...falling back to uuid=null. [ 458.460821][ T8587] overlayfs: maximum fs stacking depth exceeded [ 458.478413][ T8595] delete_channel: no stack [ 458.499239][ T8599] usb 3-1: USB disconnect, device number 3 [ 458.948338][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.726154][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.875448][ T8611] pim6reg: entered allmulticast mode [ 459.896981][ T8611] pim6reg: left allmulticast mode [ 459.968602][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.011496][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.923283][ T8630] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 461.935354][ T8630] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 461.947454][ T8630] bridge_slave_0: default FDB implementation only supports local addresses [ 462.064222][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.763968][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.007067][ T30] audit: type=1800 audit(1751537139.847:138): pid=8637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.574" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 463.080427][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.129184][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.633445][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.641613][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.646709][ T8646] netlink: 'syz.4.575': attribute type 10 has an invalid length. [ 465.831329][ T8648] hub 8-0:1.0: USB hub found [ 465.838174][ T8648] hub 8-0:1.0: 1 port detected [ 466.416212][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.747739][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.771147][ T1014] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.780422][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.794034][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.802227][ T44] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.818943][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.835062][ T8650] veth0: entered promiscuous mode [ 466.851903][ T8651] veth0: left promiscuous mode [ 467.605452][ T8668] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 469.521215][ T5890] net_ratelimit: 17 callbacks suppressed [ 469.521234][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.357677][ T5190] udevd[5190]: worker [8044] terminated by signal 33 (Unknown signal 33) [ 470.366334][ T5190] udevd[5190]: worker [8044] failed while handling '/devices/virtual/block/loop0' [ 470.434891][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.711614][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.767987][ T8680] uprobe: syz.1.581:8680 failed to unregister, leaking uprobe [ 471.728743][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.280632][ T6984] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.306370][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.314497][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.568816][ T1211] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.582713][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.590852][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.466024][ T8703] 9pnet_fd: Insufficient options for proto=fd [ 473.477676][ T8701] nftables ruleset with unbound set [ 474.865101][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.594'. [ 474.920242][ T8722] macsec1: entered allmulticast mode [ 474.925690][ T8722] bridge0: entered allmulticast mode [ 474.936287][ T8722] bridge0: port 3(macsec1) entered blocking state [ 474.943498][ T8722] bridge0: port 3(macsec1) entered disabled state [ 475.344651][ T5905] net_ratelimit: 1 callbacks suppressed [ 475.344669][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.358420][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.408082][ T8722] bridge0: left allmulticast mode [ 475.527984][ T8720] netlink: 'syz.3.590': attribute type 10 has an invalid length. [ 475.614758][ T24] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 475.760017][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.891341][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.951293][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.109606][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 476.135975][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.155921][ T24] usb 2-1: config 0 descriptor?? [ 476.356702][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.132457][ T8733] hub 8-0:1.0: USB hub found [ 477.139302][ T8733] hub 8-0:1.0: 1 port detected [ 477.458100][ T5836] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 477.536459][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.708995][ T24] usb 2-1: USB disconnect, device number 4 [ 478.056635][ T8740] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 478.758304][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.806092][ T6523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.820776][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.830939][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.842810][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.207912][ T8742] : renamed from vxcan1 (while UP) [ 480.582961][ T8754] overlayfs: missing 'lowerdir' [ 480.729885][ T8761] overlayfs: missing 'lowerdir' [ 482.197854][ T5925] net_ratelimit: 3 callbacks suppressed [ 482.197876][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.414904][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.256108][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.268115][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.279406][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.292562][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.303373][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.313465][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.323739][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.333365][ T8769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.003749][ T1211] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 486.176053][ T1211] usb 2-1: unable to get BOS descriptor or descriptor too short [ 486.217329][ T1211] usb 2-1: not running at top speed; connect to a high speed hub [ 486.670994][ T1211] usb 2-1: config 253 has an invalid interface number: 140 but max is 0 [ 486.826852][ T1211] usb 2-1: config 253 has an invalid descriptor of length 204, skipping remainder of the config [ 487.524940][ T1211] usb 2-1: config 253 has no interface number 0 [ 487.531284][ T1211] usb 2-1: config 253 interface 140 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.713551][ T8599] net_ratelimit: 1273 callbacks suppressed [ 487.713582][ T8599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.098703][ T1211] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=3e.5b [ 488.125166][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.170256][ T1211] usb 2-1: Product: syz [ 488.196995][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.207180][ T1211] usb 2-1: Manufacturer: syz [ 488.244668][ T1211] usb 2-1: SerialNumber: syz [ 488.262770][ T1211] usb 2-1: can't set config #253, error -71 [ 488.272289][ T1211] usb 2-1: USB disconnect, device number 5 [ 489.283101][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.681297][ T8806] hub 8-0:1.0: USB hub found [ 489.697378][ T8806] hub 8-0:1.0: 1 port detected [ 491.394796][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.069399][ T6015] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 492.124917][ T8819] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 492.593801][ T5897] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 492.783479][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.133399][ T6015] usb 2-1: device descriptor read/all, error -71 [ 493.153413][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 493.169210][ T5897] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 493.324228][ T5897] usb 3-1: config 0 has no interface number 0 [ 493.355877][ T5897] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 493.471730][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.852451][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.876193][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.159143][ T5897] usb 3-1: Product: syz [ 494.179319][ T8837] page: refcount:3 mapcount:0 mapping:ffff888022d0cd78 index:0x2 pfn:0x30492 [ 494.191299][ T5897] usb 3-1: Manufacturer: syz [ 494.204823][ T8837] memcg:ffff88801ceea580 [ 494.263868][ T8837] aops:def_blk_aops ino:fa00000 [ 494.270442][ T8837] flags: 0xfff000000000b9(locked|waiters|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 494.287847][ T8837] raw: 00fff000000000b9 ffffea0000c124c8 ffff88801cea4e28 ffff888022d0cd78 [ 494.300634][ T5897] usb 3-1: SerialNumber: syz [ 494.353370][ T8837] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff88801ceea580 [ 494.404372][ T5897] usb 3-1: config 0 descriptor?? [ 494.411048][ T8837] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 494.431507][ T8837] page_owner tracks the page as allocated [ 494.437681][ T5897] usb 3-1: can't set config #0, error -71 [ 494.444310][ T8837] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 8837, tgid 8831 (syz.4.620), ts 494178122654, free_ts 493366781140 [ 494.466821][ T8837] post_alloc_hook+0x240/0x2a0 [ 494.472088][ T8838] openvswitch: netlink: Flow actions attr not present in new flow. [ 494.498755][ T5897] usb 3-1: USB disconnect, device number 4 [ 494.660446][ T8837] get_page_from_freelist+0x21d5/0x22b0 [ 494.687979][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.757328][ T8847] Invalid ELF header magic: != ELF [ 494.768593][ T8847] netlink: 'syz.2.621': attribute type 1 has an invalid length. [ 494.776414][ T8847] netlink: 224 bytes leftover after parsing attributes in process `syz.2.621'. [ 495.224608][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.236286][ T8837] __alloc_frozen_pages_noprof+0x181/0x370 [ 495.283468][ T8837] alloc_pages_mpol+0x232/0x4a0 [ 495.288953][ T8837] alloc_pages_noprof+0xa9/0x190 [ 495.300054][ T8837] folio_alloc_noprof+0x1e/0x30 [ 495.306659][ T8837] filemap_alloc_folio_noprof+0xdf/0x470 [ 495.318042][ T8837] page_cache_ra_order+0x5e5/0xc70 [ 495.422689][ T8837] do_sync_mmap_readahead+0x4b5/0x5f0 [ 496.103390][ T8837] filemap_fault+0x62a/0x1200 [ 496.133380][ T8837] __do_fault+0x135/0x390 [ 496.137744][ T8837] __handle_mm_fault+0x198b/0x5620 [ 496.142834][ T8837] handle_mm_fault+0x2d5/0x7f0 [ 496.303401][ T8837] do_user_addr_fault+0x764/0x1390 [ 496.308565][ T8837] exc_page_fault+0x76/0xf0 [ 496.313050][ T8837] asm_exc_page_fault+0x26/0x30 [ 496.355465][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.364131][ T8837] page last free pid 980 tgid 980 stack trace: [ 496.370295][ T8837] __free_frozen_pages+0xc65/0xe60 [ 496.509862][ T8837] __slab_free+0x326/0x400 [ 497.356959][ T5925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.374055][ T8837] qlist_free_all+0x97/0x140 [ 497.406057][ T8837] kasan_quarantine_reduce+0x148/0x160 [ 497.423493][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.433508][ T8837] __kasan_slab_alloc+0x22/0x80 [ 497.438458][ T8837] __kmalloc_cache_noprof+0x1be/0x3d0 [ 497.477831][ T8837] kobject_uevent_env+0x27c/0x8c0 [ 497.482885][ T8837] rpc_sysfs_client_destroy+0xcd/0x140 [ 497.550622][ T8837] rpc_free_client_work+0xc0/0x2f0 [ 497.579651][ T8837] process_scheduled_works+0xae1/0x17b0 [ 497.616243][ T8837] worker_thread+0x8a0/0xda0 [ 497.630796][ T8837] kthread+0x711/0x8a0 [ 497.653096][ T8837] ret_from_fork+0x3fc/0x770 [ 497.678193][ T8837] ret_from_fork_asm+0x1a/0x30 [ 497.688367][ T8837] ------------[ cut here ]------------ [ 497.694285][ T8837] kernel BUG at mm/filemap.c:3442! [ 497.818856][ T8837] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 497.825137][ T8837] CPU: 0 UID: 0 PID: 8837 Comm: syz.4.620 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 497.837031][ T8837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.847075][ T8837] RIP: 0010:filemap_fault+0x117d/0x1200 [ 497.852605][ T8837] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 8d 6b 29 00 e9 81 fc ff ff e8 a3 13 c8 ff 48 89 df 48 c7 c6 a0 30 94 8b e8 d4 ae 0d 00 90 <0f> 0b e8 8c 13 c8 ff 48 8b 3c 24 48 c7 c6 20 37 94 8b e8 bc ae 0d [ 497.872200][ T8837] RSP: 0018:ffffc9001c74f6e0 EFLAGS: 00010246 [ 497.878253][ T8837] RAX: 69a2a63646747000 RBX: ffffea0000c12480 RCX: 0000000000000000 [ 497.886206][ T8837] RDX: 0000000000000000 RSI: ffffffff8d96e815 RDI: 00000000ffffffff [ 497.894159][ T8837] RBP: ffffc9001c74f818 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e [ 497.902112][ T8837] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: dffffc0000000000 [ 497.910067][ T8837] R13: 1ffffd4000182491 R14: ffffea0000c12498 R15: ffffea0000c12488 [ 497.918019][ T8837] FS: 00007fc5d17f66c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 497.926941][ T8837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.933522][ T8837] CR2: 00005555611ae5c8 CR3: 0000000032cae000 CR4: 00000000003526f0 [ 497.941478][ T8837] Call Trace: [ 497.944741][ T8837] [ 497.947655][ T8837] ? __pfx_filemap_fault+0x10/0x10 [ 497.952757][ T8837] __do_fault+0x135/0x390 [ 497.957072][ T8837] __handle_mm_fault+0x198b/0x5620 [ 497.962171][ T8837] ? __pfx___handle_mm_fault+0x10/0x10 [ 497.967613][ T8837] ? find_vma+0xe7/0x160 [ 497.971834][ T8837] ? __pfx_find_vma+0x10/0x10 [ 497.976492][ T8837] handle_mm_fault+0x2d5/0x7f0 [ 497.981237][ T8837] do_user_addr_fault+0x764/0x1390 [ 497.986331][ T8837] exc_page_fault+0x76/0xf0 [ 497.990822][ T8837] asm_exc_page_fault+0x26/0x30 [ 497.995660][ T8837] RIP: 0010:__put_user_4+0xd/0x20 [ 498.000686][ T8837] Code: 66 89 01 31 c9 0f 01 ca e9 00 3b 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 d7 3a 03 00 90 90 90 90 90 90 90 90 90 90 [ 498.020274][ T8837] RSP: 0018:ffffc9001c74fc98 EFLAGS: 00050206 [ 498.026324][ T8837] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000012b8 [ 498.034276][ T8837] RDX: 0000000000000000 RSI: ffffffff8db5a681 RDI: ffffffff8be1b940 [ 498.042225][ T8837] RBP: ffffc9001c74feb0 R08: 0000000000000000 R09: ffffffff820a3bc0 [ 498.050174][ T8837] R10: ffffc9001c74f940 R11: ffffffffa02019cc R12: 0000200000001280 [ 498.058126][ T8837] R13: 0000000000040000 R14: 0000200000000480 R15: 0000000000000038 [ 498.066083][ T8837] ? __might_fault+0xb0/0x130 [ 498.070752][ T8837] __sys_sendmmsg+0x25f/0x430 [ 498.075418][ T8837] ? __pfx___sys_sendmmsg+0x10/0x10 [ 498.080594][ T8837] ? do_futex+0x333/0x420 [ 498.084903][ T8837] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 498.090791][ T8837] ? rcu_is_watching+0x15/0xb0 [ 498.095538][ T8837] __x64_sys_sendmmsg+0xa0/0xc0 [ 498.100370][ T8837] do_syscall_64+0xfa/0x3b0 [ 498.104855][ T8837] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.110036][ T8837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.116087][ T8837] ? clear_bhb_loop+0x60/0xb0 [ 498.120747][ T8837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.126620][ T8837] RIP: 0033:0x7fc5d398e929 [ 498.131026][ T8837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.150626][ T8837] RSP: 002b:00007fc5d17f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 498.159030][ T8837] RAX: ffffffffffffffda RBX: 00007fc5d3bb6080 RCX: 00007fc5d398e929 [ 498.166986][ T8837] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000006 [ 498.174941][ T8837] RBP: 00007fc5d3a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 498.182890][ T8837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.190839][ T8837] R13: 0000000000000000 R14: 00007fc5d3bb6080 R15: 00007ffd51b7c1e8 [ 498.198795][ T8837] [ 498.201799][ T8837] Modules linked in: [ 498.205845][ T8837] ---[ end trace 0000000000000000 ]--- [ 498.290454][ T8837] RIP: 0010:filemap_fault+0x117d/0x1200 [ 498.309830][ T8837] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 8d 6b 29 00 e9 81 fc ff ff e8 a3 13 c8 ff 48 89 df 48 c7 c6 a0 30 94 8b e8 d4 ae 0d 00 90 <0f> 0b e8 8c 13 c8 ff 48 8b 3c 24 48 c7 c6 20 37 94 8b e8 bc ae 0d [ 498.339959][ T8837] RSP: 0018:ffffc9001c74f6e0 EFLAGS: 00010246 [ 498.346478][ T8837] RAX: 69a2a63646747000 RBX: ffffea0000c12480 RCX: 0000000000000000 [ 498.365927][ T8837] RDX: 0000000000000000 RSI: ffffffff8d96e815 RDI: 00000000ffffffff [ 498.375613][ T8837] RBP: ffffc9001c74f818 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e [ 498.383901][ T8837] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: dffffc0000000000 [ 498.391969][ T8837] R13: 1ffffd4000182491 R14: ffffea0000c12498 R15: ffffea0000c12488 [ 498.401219][ T8837] FS: 00007fc5d17f66c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 498.410435][ T8837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.433717][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.446921][ T8837] CR2: 0000001b2f51dff8 CR3: 0000000032cae000 CR4: 00000000003526f0 [ 498.466909][ T8837] Kernel panic - not syncing: Fatal exception [ 498.473225][ T8837] Kernel Offset: disabled [ 498.477535][ T8837] Rebooting in 86400 seconds..