last executing test programs: 23m39.302026307s ago: executing program 32 (id=276): wait4(0x0, 0x0, 0x20000000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getpgid(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) tee(0xffffffffffffffff, r3, 0x80000001, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)='\"', 0x1}], 0x1, 0x1) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000300)={@initdev}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) r4 = open$dir(&(0x7f0000000280)='./file0\x00', 0x941, 0x1a) open_tree(r4, &(0x7f00000002c0)='./file0\x00', 0x100) 23m21.147041769s ago: executing program 33 (id=311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x88100, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) ioctl$SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000040)=0x2b) ioctl$SNDCTL_TMR_START(r2, 0x5402) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006e40)="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", 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800000000000064512c"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000022c0)=ANY=[], 0x1c}}, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000300)={0x50, 0x0, 0x400, {0x7, 0x2b, 0xee, 0xffffffff90800000, 0x2, 0x3, 0x0, 0x3, 0x0, 0x0, 0x2, 0xfffff801}}, &(0x7f0000000380)={0x18, 0x0, 0x80000001, {0x7f}}, &(0x7f00000003c0)={0x18, 0x0, 0xa0, {0x1}}, 0x0, &(0x7f0000000480)={0x18, 0x0, 0xffffffffffffffff, {0x2}}, &(0x7f00000004c0)={0x28, 0xffffffffffffffda, 0xff, {{0xffffffff00000000, 0xff, 0x2}}}, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1d0000000000450000000000000004006370752e70726573f375726500"], &(0x7f0000000640)={0x20, 0x0, 0x7, {0x0, 0x2}}, &(0x7f0000000700)={0x78, 0xfffffffffffffffe, 0x0, {0x0, 0x38a, 0x0, {0x6, 0x1, 0x2, 0x4, 0x7, 0x9, 0x6, 0xbec2, 0x7, 0x1000, 0x8, 0x0, 0x0, 0xdefe, 0x5}}}, &(0x7f0000000840)={0x90, 0x0, 0x7f, {0x6, 0x3, 0x200, 0x1, 0x5, 0x5, {0x3, 0x3b, 0x2, 0x1, 0x5, 0x3, 0x1, 0x3, 0xfc5, 0x8000, 0x9, 0x0, 0x0, 0x1, 0x1}}}, &(0x7f0000002280)=ANY=[@ANYBLOB="36428b77d6e6eef9046798786aabec69de6b22d1c645a59617"], &(0x7f0000000d40)=ANY=[@ANYBLOB="b0020000feffffff0200000000000000010000000000000003000000000000000400000000000000030000000000000003000000030000000500000000000000ffff000000000000060000000000000009000000000000000200000000000000040000000000000007000000000000007c090000002000000000003e", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000001f8ffff000000000400000000000000e50b0000000000000f000000050000002f6465762f6370752f232f6d737200000300000000000000030000000000000001000080000000000300000000000000ffff00000800000006000000000000001e7f0000000000000e00000000000000010100000000000001000000010000000101000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000020000100000000000000030081000000000009000000000000800e000000090000005d5e402e21232e232ac128242f5b0000050000000000000002000000000000007f0000000000000009000000000000f900000000ff479957d484de19bdffffff060000000000abfa8f000008000000000000002ea40000000000000900000000000000400000000000000009000000000800000200000009000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0004000005000000000000000300000000000000080900000000"], 0x0, &(0x7f0000001340)={0x20, 0xffffffffffffffda, 0x6, {0x96, 0x4, 0x8, 0x8000}}, &(0x7f0000001380)={0x130, 0xfffffffffffffffe, 0x9, {0x9, 0x0, 0x0, '\x00', {0x2000, 0x6, 0x10000, 0x0, 0x0, 0xee01, 0x8000, '\x00', 0x7, 0x6, 0x47, 0x6, {0x4, 0x9}, {0x3, 0x9}, {0x8000009, 0x3}, {0xa, 0x5}, 0x600, 0x38e, 0x0, 0x9b23}}}}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 22m28.1785131s ago: executing program 34 (id=387): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x1e, 0x80004, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 22m12.009468688s ago: executing program 0 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0xb}, 0x8) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 22m9.871898058s ago: executing program 0 (id=447): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) capset(0x0, &(0x7f0000000500)={0xd0, 0x9, 0x8, 0x4, 0xcda, 0xc98}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000010) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0) 22m7.797000634s ago: executing program 0 (id=449): chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r4 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) setrlimit(0x7, &(0x7f0000000400)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xf) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) shmctl$SHM_LOCK(r3, 0xb) socket$nl_route(0x10, 0x3, 0x0) 22m6.699105863s ago: executing program 0 (id=452): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r3, &(0x7f0000002540)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r7, r6, 0x25, 0x8, @val=@iter={0x0}}, 0x20) 22m4.937862287s ago: executing program 0 (id=455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x7}, {0x0, 0xc8, 0x7}}}}, 0xa) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 22m2.364202471s ago: executing program 0 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = shmget$private(0x0, 0x400000, 0x40, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000fed000/0x3000)=nil, 0x400c) mremap(&(0x7f00003df000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x4000800) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x3, {}, {0x3, 0x8, 0x5, 0x55, 0x3, 0x87, "000005b5"}, 0x7, 0x2, {&(0x7f00000002c0)=[{0x9, 0x6, {0x0}, 0x9}, {0x5, 0x1bb, {0x0}, 0x8}]}, 0x7f}) accept4$inet6(r2, 0x0, &(0x7f00000003c0), 0x800) 21m47.212843587s ago: executing program 35 (id=467): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = shmget$private(0x0, 0x400000, 0x40, &(0x7f000000e000/0x400000)=nil) shmat(r1, &(0x7f0000fed000/0x3000)=nil, 0x400c) mremap(&(0x7f00003df000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x70bd25, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x4000800) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x1, 0x3, {}, {0x3, 0x8, 0x5, 0x55, 0x3, 0x87, "000005b5"}, 0x7, 0x2, {&(0x7f00000002c0)=[{0x9, 0x6, {0x0}, 0x9}, {0x5, 0x1bb, {0x0}, 0x8}]}, 0x7f}) accept4$inet6(r2, 0x0, &(0x7f00000003c0), 0x800) 16m40.779174109s ago: executing program 7 (id=966): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001300)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x2}, 0x8) 16m39.37352268s ago: executing program 7 (id=969): socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x80079a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x24a6}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2fb74000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) keyctl$set_reqkey_keyring(0xf, 0xfffffffb) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) 16m34.807488456s ago: executing program 7 (id=978): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x1000000, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 16m28.979058939s ago: executing program 7 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 16m26.139470961s ago: executing program 7 (id=992): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$MAP_CREATE(0x0, 0x0, 0x13) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000300)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r1 = socket(0x10, 0x5, 0x3ff) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x240048d5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d08, 0xffffffffffffffff) set_mempolicy(0x8006, 0x0, 0x5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000300)={r3, 0x11, "a5e49c655b78596116de78f9bc1fb4a7c5"}, &(0x7f0000000340)=0x19) 16m24.136457641s ago: executing program 7 (id=998): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket(0x2a, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) shmctl$IPC_STAT(0x0, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) syz_emit_ethernet(0x5f2, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x5bc, 0x0, 0x0, @private2, @local, {[], "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"}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) write$dsp(r1, 0x0, 0x0) 16m21.994783551s ago: executing program 36 (id=998): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) socket(0x2a, 0x3, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) shmctl$IPC_STAT(0x0, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x20801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) syz_emit_ethernet(0x5f2, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x5bc, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af5"}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) write$dsp(r1, 0x0, 0x0) 16m21.96449175s ago: executing program 6 (id=1004): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r4, 0x0, 0x0) r5 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) fchmod(r5, 0x100) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x1fe, 0x121040) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000580)=ANY=[@ANYRES64=r8, @ANYRES64=r7, @ANYRESOCT=r6, @ANYRESHEX=r6]) 16m17.458829176s ago: executing program 6 (id=1007): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffff8, 0x0, 0x1) 16m15.173527642s ago: executing program 6 (id=1011): prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$uid(0x3, 0x0, 0x4007) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 16m14.01762564s ago: executing program 6 (id=1015): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 16m11.470077703s ago: executing program 6 (id=1026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)="5f7327a543a8f33e22", 0x9}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8051) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4048001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffff}, {0x1, 0x9}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 16m7.135940893s ago: executing program 6 (id=1023): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) 16m5.636953641s ago: executing program 37 (id=1023): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0xffff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000007112050000000000950000000000000009163048f482bb991247fcd8226ed2896d773370ccecab8227aecfd8dfb518d003891d4341a5fbc0794b1e94abfca12e8928ae7ed902a982f8bb7b48d849ff6f43fc36ddc758d9935ffc220046f42093cd9a6549fcbed35814f89580b4c516961f7611e1f438393a6ace0b65d0af75c08f8260f9e96b40979455cd1cbebfc22b9d739a0b17b982a77bebf66876fb3fefe9ea63f25d5b5626186e3798589aa8525966889a7333f95ddbc26cd26a9e3216b1dc5f15ed0fc4177c9f1da71f6bf78383a8b1b0a01658a3113d4c1fa4af84324d498042bb5599400a99bc45473babb97f42337761451fd4525ada619ef4608bf6ec0970"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) 6m49.297239854s ago: executing program 5 (id=1853): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0xfd, 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) process_vm_writev(0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)=[{&(0x7f00000018c0)=""/4096, 0x1000}], 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_create(0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) close(r3) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) 6m48.029140261s ago: executing program 5 (id=1856): syz_open_procfs(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc", @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4004, 0xffffffffffffffff, 0x2}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db5", 0x5c}, {0x0}, {&(0x7f0000000040)}, {0x0}, {0x0}], 0x5}}], 0x1, 0xc0) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000380), &(0x7f0000000400)=@tcp6, 0x1}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, 0x0, 0x57) 6m45.108013806s ago: executing program 5 (id=1862): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3}, 0x65) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(0xffffffffffffffff, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x8000000) socket$kcm(0x29, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) getpid() getpid() openat$cgroup(r0, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000000000010000000400fc800c00018008000600ffff0000080002800400728008000900"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 6m43.182751772s ago: executing program 5 (id=1864): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x101, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r3 = fsopen(&(0x7f0000000000)='devpts\x00', 0x1) setrlimit(0x7, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) 6m37.203414779s ago: executing program 5 (id=1870): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x2, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x0, 0xf7, 0xf9, 0x8a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d2cf"}, {0x5, 0x24, 0x0, 0x621c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x2}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x3, 0x53, 0xee, 0x97, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xaf9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x2, 0x2, 0x8}]}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0xc, [@generic={0x2, 0x1}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6, 0x9, 0xfe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x7, 0xe}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r3, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x5a) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r2, 0x24020000) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x0) 6m31.934891733s ago: executing program 5 (id=1878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x10041) 6m13.051378941s ago: executing program 38 (id=1878): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x4b, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42d97f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef969bcbd8e4700616"}, 0xd8) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x10041) 2m36.971969254s ago: executing program 4 (id=2199): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x60401) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x0, 0xff, 0x0, 0xffc0, 0x3}, &(0x7f0000000180)=0x20) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$nl_route(0x10, 0x3, 0x0) 2m35.94554939s ago: executing program 4 (id=2202): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="dc00000002000005ffffff00aaaa06000008004500002200000000002f907800001f38e0000001a00086dd"], 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xe, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7794b0ed934a040a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000000)={r3, 0xa001}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES8, @ANYRES64, @ANYRES32], 0x50) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, 0x0, 0x0}, 0x20) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0xf1504}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000a0a01"], 0x14}}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 2m34.502860288s ago: executing program 4 (id=2205): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') read$msr(r7, &(0x7f0000000300)=""/238, 0xee) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xb}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0900000000000000000007000000140001800500020001"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000540)={'ip6tnl0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x3, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x80, 0x8, 0x0, 0x9}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="68a7bdfa97b59d0cce9085ac9280000300", @ANYRES16=r10, @ANYBLOB="000429bd7000fddbdf2502000000140006800600010002000000080006000800000048000680060005004e210000060005004e23000008000700", @ANYRES32=r11, @ANYBLOB="1400040000000000000000000000ffff000000000500020006000000080006000200000008000300e000000204000680180001801400040000000000000000000000ffffac1e01010c000180080006000100000008000300040000001800018014000400ff0200000000000000000000000000010800040001000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000}, 0x24008850) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) 2m32.125088819s ago: executing program 4 (id=2206): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x10000, @local, 0x3}, 0x1c) ftruncate(0xffffffffffffffff, 0xf09) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x18, 0x0, "50e4d101a949f3f4d3479fb3110fbb83dc7a2414e74ef9c682c427e1a542df3531062020eb16da11d6707d82272beab27a1da6e527cceef0e7db687b56729c203d01b7693f6d4c81a64de132e818dea3"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in, 0x0, 0x0, 0x0, 0x0, "d3d87bc1779df0260137ffea3b267abe0be604d99164ceede9ce200eb018abebbf99a8ae25b276a23593abc5bfbcd104244b1bcd3f8dcc8bb1afb8237f33ee41a904e61d65a7bacfec9dc935544d3f64"}, 0xd8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x88}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x100, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_USERDATA={0x17, 0xc, "341df8b4527a1e6e1226673b77828304290b5f"}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x4}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xd}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x11c}}, 0x800) 2m30.730300941s ago: executing program 4 (id=2210): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b900, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) socket(0x11, 0x2, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x4) socket$tipc(0x1e, 0x5, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r7, 0xc02054a5, &(0x7f0000000100)={0x5, 0xffffffffffffffff, 'id1\x00'}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48800) 2m28.296481888s ago: executing program 4 (id=2213): r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000003fc0)=ANY=[@ANYBLOB="040427aaaaaaaaaa10be"], 0xd) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8001, &(0x7f0000000340)=0x3, 0xfffffffffffffffe) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x40002, 0x2, {0xd, @pix={0x4, 0x100, 0x30323953, 0x6, 0x46, 0x2, 0xe, 0x2, 0x1, 0x6, 0x2, 0x5}}, 0x6}) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff6900000000000100000018009b3900000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, 0x0) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4000054) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x4) 2m13.097667331s ago: executing program 39 (id=2213): r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000003fc0)=ANY=[@ANYBLOB="040427aaaaaaaaaa10be"], 0xd) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8001, &(0x7f0000000340)=0x3, 0xfffffffffffffffe) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x40002, 0x2, {0xd, @pix={0x4, 0x100, 0x30323953, 0x6, 0x46, 0x2, 0xe, 0x2, 0x1, 0x6, 0x2, 0x5}}, 0x6}) iopl(0x3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff6900000000000100000018009b3900000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, 0x0) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4000054) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x54880}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xa888}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x4) 28.170776255s ago: executing program 8 (id=2369): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) connect$unix(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fd03000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r5}, 0x10) r6 = io_uring_setup(0x204b, &(0x7f0000005740)={0x0, 0x1e, 0x3080, 0x0, 0x200027d}) io_uring_register$IORING_UNREGISTER_RING_FDS(r6, 0x15, &(0x7f0000003300)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000d0b9ad3bd9d9b60e00594b8e69afdd9761c35750f3eb69e663867f97cc1100c37845e67a92375fa22e615468dc2f32b9025d6fdd5ade", @ANYRES32=0x0], 0xfc}}, 0x0) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 26.909295579s ago: executing program 8 (id=2372): getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xfd59}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c) pidfd_send_signal(0xffffffffffffffff, 0x3a, &(0x7f0000000080)={0x37, 0xfffffffc, 0x6}, 0x0) r2 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x150, 0x194, 0x194, 0x150, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @remote, 0x0, 0x0, 'veth1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffe00, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) getdents64(r4, &(0x7f0000000f80)=""/4092, 0xffc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r6 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) 25.629008794s ago: executing program 9 (id=2374): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x480) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x1000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) write$UHID_INPUT(r4, &(0x7f0000000a00)={0x8, {"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", 0x1000}}, 0x1006) 20.793905226s ago: executing program 3 (id=2379): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) bind$llc(r4, 0x0, 0x0) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 19.90812948s ago: executing program 8 (id=2381): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) 19.877697302s ago: executing program 9 (id=2383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) r0 = getpid() r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x402300, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r1, 0x3b66, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a320000"], 0x78}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) socket$netlink(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) 18.653048774s ago: executing program 8 (id=2384): openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x303100, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0xf1, 0x4) 16.720407784s ago: executing program 9 (id=2386): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000300)={0x1d, r4, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r3, &(0x7f0000000640)={0x1d, r4, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 16.587171613s ago: executing program 3 (id=2387): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe60, 0x2, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x1}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0x20}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x401}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x1d4ce113}, {}, {0x400}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000000}, {}, {0x2}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x400000}, {}, {}, {}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x3}, {0x0, 0x0, 0x3}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x4000) ioctl$FS_IOC_SETFLAGS(r0, 0x541b, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002301000034020000020000000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) 12.931542296s ago: executing program 1 (id=2389): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf0524001c620d240f0100000000020005f29011cc03080353ee97050a2401f90a00020102092403060703020208"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x100}}) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 11.389533049s ago: executing program 9 (id=2390): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x6}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x101900, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000071401000000000000000000050060"], 0x18}}, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, &(0x7f0000e5f000)) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRESOCT=r2], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600060600000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000680)={0xa, @sliced={0x35ab, [0x68ab, 0x9, 0xffff, 0x2, 0x0, 0x6, 0x10, 0xfff8, 0x3, 0x5, 0x4, 0x80, 0x1, 0xc6, 0xd941, 0x5, 0x800, 0xfff9, 0x71dc, 0x5, 0x5, 0x2, 0x2, 0x0, 0x1, 0xfffd, 0x3, 0x7, 0x978a, 0x5, 0x8, 0x7, 0x7, 0x7fff, 0x8, 0x2, 0xe1, 0x6, 0x9, 0x0, 0xfff9, 0x101, 0xe30b, 0xfffc, 0x4, 0x81, 0x6, 0x5], 0x200}}) 10.087986758s ago: executing program 8 (id=2392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r1) r6 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_enter(r6, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='attr/exec\x00') read$FUSE(r7, &(0x7f00000020c0)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @multicast1}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={r8, 0x4}, &(0x7f0000000340)=0x8) fstat(r0, &(0x7f0000000140)) socket$inet(0x2b, 0x801, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff020002000000000800040001000000", 0x24) 9.303696491s ago: executing program 1 (id=2393): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 9.303106975s ago: executing program 9 (id=2394): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x12) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x80, 0x1) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x20, 0x4001c00) 8.594306574s ago: executing program 9 (id=2396): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x402300, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a320000"], 0x78}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 8.443337923s ago: executing program 8 (id=2397): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="c66dd220cbdeb68f27c1f98bf43fd861bcf841572658a3308737983b31a434673f1003eeeb6d9b934bcd19cf754f4882114d61e15354449f763f772e86c9e2252731f7a098faad2accca3e470845b32918bcf530f9474d3cd610d9028cb7b247d3a73d887719f70554d8976c10784c8073e521a80b5ebe7501d6c3b6b5cf9a498a1e97b8201ac756e5f35d71bdd4d196e73cae0cc34c7140cde8380de823e8c76662f0844f549818b5ef6c732b8f412b79273508b69f2e6a653709b4d9bded080b6c15ca5c5b8ff23309e05d460dfb40403f60a3e5a0e1d4e1aa59d53823a047427673267e79d40fdd6f12ef696fe22887d24087373f64987e48ba20e7f47d1f08871e0c22a02593156648fc106c4529d8cf17c71d473f4ad43992b1cdbf5cfaaf1ce401d5ad8b9c6bdc3c60a88a91c52f5aae74a5d25e0cd738fd80169a98b84d4d24a7e86c9d8e4c3e3ff1a9fc44a87558aeb7acbfec13a26a4b121b2cb9ae628c682aa4c44311c45a673bab25880665d6cdf589e5c5415794c4fd6b940e7a44df93a34a684183581c850fbe97ef8c1de852ea836e0db1a104b498d6dd8fdf65c606e772de2e9dfe46a418fac3c0bdd72916c951e3df04f2ae85839305be2a86aebcf4898b6e49c27df6033ad2b8651279ceb20c779716240d3d0fef3bb6c417a8c6f75398a91942d8ab11f21f5795767650a96e246c7244f8e4935e9c01349616a098ae810487d657fd095beee05a36812f39f4266f25f4508e80f19a4aec7116f1d8bc48bc2c1f0f96ff34b66a965d428852766b78f1e7eb0260bbb355cc0859af6988ff7efa0b3fede3d5f2f2147ffae4a5eb58a7585b596270334c360a1547787a95634e13d59bf53f51f48e75a6a3e48f8348f4cb495d9699dfdf8cc71668c5b9622578100f7163394cb3171fc8a6c1e7f88f08b8c3cf4b0cd9a1bc16bd1488ebe43199d97cdf4bbcde8a06a79c5af6ff2ebf1a04add74830cfac0b946514b18de249e934dd8a1a96fce085320fa857c853480170208533acd3d41c4384a932eeccd4ce7d09827efae4c0d19d00c5b48943c4d877017be59434dae6bef767fb9ffd073c2261b06c0f23a0c77a5bcb1f5738dceb6abee00bd7c649f6ebc64b4b8b948319a22ed4add48eedda8a2cd1bad6799e1d9ed778e5ce22d5fead0cd06806cb4b7b5661f9db6bcf9ddcdc9e49e0e6a8ec98fc42c660d5d75311fb9c9d06074611ebbdbea45672dd78760ed92d0e95c1d5ae234d674dc3ffaeef3d928aa4b93c0fe55fa886bd3f2371a5bb22c4dd6b8bc13250490cf279d4e56b646dec4eaa53951d55f602c1f4081d49316f6bcb35aad0453b44c7f266e99838683404859bc372d1df5f1512f35558b3706b32093b72a78a40c8a188852a0b5aca11a34ba23195cb598ca595f243c260392cd793b65dda856f81be1b54d873a0366407ac26687262d6bda693e058f598bde80e304c83dd0c2fd0e634ff15e1ca4e2918bfa8e3a626aee7b5e445aa7fae096595fe58032c993eb06ce49c1045b1f132f2c90d6e23b76076838ad7ed7a6a74245d7ad72b38bdc04e458d3908d1d272f23fe18f68ad746e5440cfbcc3b7ad477dccd6fb2db536df0e4d24480d2765e724ca06cbde7e01cd32e36681796a454c801adc1b25b501cc4aaae778f3783dad15d12e656b09bb3d8f37efc86cc7faea5e51913902faed79ae5973f4413e275f78e7e66099f9e41bd73a07445a780dde0b189308e3b83d1a3cf5aef2d3e11fcad930eb6c60ebb899b22cdbd539412b2371d28a4331394d8f29d8b16f94ffd91d4eb5c278e7f6b4024fcc7af9dfde1b3c915b06dae683760fad05d6638c6389fdd19a9b12956c11e9b9ea7d30e09b13d9f681e012f1e41746341a61b71ac6c333b29883ca2cd1aaa3c02e66c85de1e3b2b7e77b0dd1469ab9db5c17beb2d33862db20fd77de685a1e70ba55b0d9cf4b2d3d1196196b5317324e5f189605baa37493c9586b7e475865b4bb21b335e8b291b9dea17f6afc1cd84618b189567817511de821a866a00b62c62516b716cf55dcf7f5b7d7520306fe03f00cc61b7dc297886459d74bedb8ac1d05cc506db74d018c877da735481c318224fd06f349b59f69b0d2d017c817e5a1f934d263789d418eb69c772d923b01a6a4a6afbba4a6980fbf7cddd84f8e4392eaccb98cdd30488919ea6d492d32f9ca4233649117474f4116f6ca4cb762d524c0f92bbb40d3f430dbd50dba20adda8b4170a73c3b66257c412311a7bd3ea3ecca0da47a7a00ef0a464ee0a4b2402b61db833f3cfe1847b9630de47f331d575f6e3c6fb44a9021700c6d8055ea982a05a5ba6a91a41e7445fdba7ac09202fee733a5c216b3c3090991225b98178508d1985832f8e7dae58482ec0fa2215c935bd0ef9f03c0ed3caf97bf4de023605aa8535f1e88e841471bd8842084c6715a3fd3acd07ec9c43f635e5f868d82cdc6f9424ed978d39e72cc92535c2637164f15e9a67770389535ba46cbf786189562908872274ba126b313bd1c0780e9d0ca38956d1277b58f04eaa1f97ed8c6c83d9c05df0df8b43da930707a84662e480a33d1868edc9ff65368d51fda828ad29ecbd3b2cc0ddb0aad251b4736f872ba5f066617a9e9675ed7f80685544af44c677b9d39a1a353984ea4ccbf36d759b490f8dcd5621e573baaa2c03ef367f543ca5d36d1c9d33d4762bb0b1e02ec67d3511582d69b06a57d15f5260fab5ed8d9361948eabf88d9e776a18c5c4f2d42bb46373861b613db9a91ccff8fbd563ddb37f0738fa1723c23c85cac0f9eb53a41d115fe0339eed3167f59b2f2f0739cf9c0ba5769b18a213d5809bccadecee6e781811bf584c22a6557516d12bd58420f5c67c673fdf0888ab31edcee3198927b5b87a63f89f7a07d1da8cb946f0a87e7d3bb455c888f394d17694378446c9073e54368564dc546b6c930ae17afcc8360cb2e31d87ad8923f60033aa637a399707398ffa51645ab1d9963c29375c834746004ac16d24d8f006e9674e45da3d938de524857c57fd39b22678f39096309527ed22c41677a65a67dc0998a8babc9cb688a56628d09a732773d9019d92399415e93852a12d66ccbfa571837b7689c7cc50026ed643a89c8f1bdef6d01016e6e1c21bb779db52c2254f5dae40ff173943ba62ce343ec035d93d5c92c64884d654777cf6995dd0c485c7c132db383769ae1f35f1980654d2b47e92b1862f653eeb81ada4eed6c9d0fe9da3d7db5dfb4d66b2d576676beddc4394ade2acf55f9ec24aee7c4c77138e799f62deb19367ce226a66715da515479b176c9ca06c739566d279142ce2163b8835c840a3de6e2d275b5d5a948b26ec8faa6cf322c5038fc00fb0a27f0b76b5e305780c9145e99feadf571bf8d87dc93ea0f8ff3bc246b16d4e43256507abc7ccc92e113a037ab13855058ba1e0770b90f52e0740c157d68963b3d236f681454589385c6124bddf948c5aa2e147a3543c301dc6d82acb504f76239c890b7d3d76dbd7c26445ab6fe66f9f71d95f4f0d6c51533ce4b05353ef27178f6b6813366189ff4cc19cc5c9f7aca4d6b6f3b5b213e828cbf8b8b5cacb42ade1fa2594cc4ccd3457a45a5b19926f17b9061c9072fdce96afbd3f2bbecc6dfbdf9d9b3e1a621e65a7cdf0a97cb0223b220b39a88b7414ce91e5fb52f3c9c7e10199ffc8fad826d40a798ecaebbd8881c1605f986bb0af06f416280f63f3a3c28d399d13c21e6d79501cbbfcc9483a73a931e91358807fbebefd39b466cb9f251fa4fc7d5f4fd2d87d4604c9750593d3a801b963085ad7aaa91e023977742b728d292b046d0bd49f81717a686f10096e154681b85aeb81a26fa8f46bf3dfdf5dc7c7ca37aa3da37e53a105be5935640baff476453f53ffcf786894eac35d1933a5e97fb9b6d975f9fbe7914d09dc948d305005eb4aba3a9b8cdefb30dbb3300f46041db06567956ba4327280721addb17425a2b223e81bc41467cb413cebbe16818468eeb5b24b6cd79ec4787f693f3c301e5dd10747bea13bf042d6fde42d18c48fec0e3e43454799da1d5501130fc98917fed27d696ae85a39debdb67d5b3d70a82a2097095476e24211757626c91a29e917796766bc4016456c4acf0436b6c02055778ce7f34e605264f7d6d1321072c4ba341866ac6f78e9b99a30478eb7f09a17f4fb3e23184e878c2f60d2c18617185007841778c7c256750a287ec0bbdd20bd37ab50538e43a5929456d336fb46a04593765b2692ba15e7b71b97788970a7903e12088211098bd356132862a4d586508b4aac077d3acd4f77c67d9066b436d14b20d3e2870cb19cdad5581de2e08da761fc95755c43cf0dc2cff84e6a3a8fa2d0390fcfee285a133b37ac7b2fefd0d3665b1705784187e228579680be97982194329136fb72d8b61cdeaa88f3dfc835ae22167c0130529fe81043b0e1c3aebccb1f4aadc28cb484f850158504439d389d1e559ff424217dc031d422a8b7b51731db75dc541e16fed8fae14f58c1f9c8d0fb91a685245ba558c1aeb243aa728db51c3f3aa6d8f7a4a547b8d95018402283a59a45173e7696f02304954ebfb43c2215f180c8e47e433e5262e279fdb63405c81b0f128b7d6a095ff5f85690331d94d34923a3e8beef5cccbf7b208b2a0aa898f9a32b2f1bb55aca4eaaefcdf09acd871f4b88feb535be87dfdbb5ad45ff3c26a2765230011d90baa4b5d5baaac5519f9013c8fd497d57083403ee6eb0c4e23428cf3846bd34d69840d021196f9a9a4fc101016fe2d4fbf4ec23c11e9d737c5e6d2cc3da7e0981c00ea9df07ed88ab05b7821033b2d311f2fe0525176660d0a33b0eb23a57f5b1d41e2c1698ac7bfe5f59c27792f899fd39610052b705862e798a27084450edfccd180a13d8adf8072430e9305f41b0a67bd1784b6ba9450b1e872794e0b7b55b22a2f649f83270b98d0a0137694fec0d16ec2ebf37c72d9398d231a71e40c912428929a29a433dc0fdcb697f64e07540da92067b1b5a7735fb7fb8ac8da2591fa44b676bbaa32ef5e6cc11f1b2ab3b262d9bc4b2082e081ee50fe71def63cf6e2d588bb8d66a8daa8c8a30ca07d2956463e1affc76003e4bacc632cdeee50098fe80cd7485fefed6eab639d8c42a1357fefae5a5a779fad536474e3bdebf6aab699552e807ffd8a44030f439756748dee9ddf19a6cbf5f75307b03c5ef4185a31a41583fb4ca3699e06319371c5d932d6e5f4e1bf77c02c70564d2140f7510e183ba2fa7ead8a9b8cfb085a9d0fa7dbca7561bd9dc1e5c1a1da0322982ff29c0fa2cc33bea18646445cc59b44965a01570b7b739d730df8f1f2cfe3558e7102de13994d6745ef8f91965265fbe0d29c3f381e1eb9c63242962a4409ddb0a4946ef9ce5b0eda90f8365362681943247a0d87d9b7fbbdd26d4902be34068499b6e2ab2ea746634402e1065c8cb9c32a211d10fc2796f1a7045c59b9cbc4771dbf56a5c38303f93951194d06a1b8cce31dd4869a148ae90a797d09de168e47974ed9699eab3a6424781f481d03cf1046df28b454af02df72c0f56c693343a82f7f383afb3ac452200ff155444010f6c988de71e3fb6f079bc6ac2bfab6ff451242b7e3e70578b8206529816764206d47115cda77b3e356e54f825ec745017ea8c3dcb412523b754b951d19fc075ec66012cceff51da925af9079f547e840c3f2774239cce5fd6533f3ee8d194812de2d4499ef18c4bebfa8d7273307d7aa0ac09e6ebfd95ba99946a585a4bd4afef8bb0b52857e8415a32b42e0a9ccb0749599d7a43cec793b22c96b3de91534c905456b25a5972124b83c7d8f0520cd71c5544e49afab26cccacdb7e112f0af1acbcb2b68760c7538aa6c990814d7cf7bde5ddd618bfd55bfbdd968e53e28f94042fafa2796b5bf2d1be612c81dbafbf90b0728b4b06fe216aab91b8898780ab06cff75be5239c39ac836dbdb5482222e61ff5971ea492c5b5ef509720fc886f8a07a9232653d427d176574c99d65244f1618fdaab109f732e1e1295391a25f9b750c9761bbceb81d316d9f9dcd555afb762191b7e173f06a4d8f4d97ab88b9ae19f6c85c361b8b5cbe91a3493cae594063ed457f3be99772485b34d3308da4e751e58a14cf7c771d8e5be77f88c7567af095caae1eb83d259cea709ea5441047ce96f0e21faf89ed491bba5d0dcc6bc33a07237fbef2fe671447ce14e16a1cae4361938767ce65ecfe0c63e1261cce5fbf603a2537d21b50c9a3a3ed6a7cf112a0586a653b43f813912a226aa4722f7edaf8dda5553efb22721dc71924aa73bf232c2439b1d806d3beaf157442643c81ce2b551b82d63cbcd4195029e2f63aef127ed4df0bffd41665d86213512557ce90ee54fcd01078a6a19085bde6a0343595f540b1ff610bd7a5a2d695bdc5e508cbf544d15cf5920b3e405ef4e10e6651c5ffff039adde2f805143b78916188fec05cadac443c93447d23bb25b0a0cfc787754a20f7efcdee5798de939b758f238f15c23f2622b8ed682378017c8f251dda0261baa33c6262d42d6365e68e85d43a46d92aaf04acee203c09487755df49f07ea1129782b1be0feb6f011bb914266fe2cf5361c377fe33a491089f701ac61bcab2bfa3bbe8bf7b0b834dba1bf187ab78fca751b57f1bddfc670c80d83c34c3461d823d7762b45ff0accc3af21b38137276d4e4d7a5d0a075902865f17f084cfa94cc28f70ee7296e216401b172184df0e060dd61be91efcdbeb03b4a6699c88a16ebb18f3e938cb458a377e29a3f3cbdaaf121e278b691c02b6f0dc790510840b3970b1f905b421a1cb376043cc7511e70e94cc63941ed0f864b4118592878538e12e986b9abaaf2ed588ad5f0e5e0851ffc29ef21aed080eb6f35fa10052f27767d0ddf3fea5a08c14657d68a9c3e6cba422d93a6aff222c40eee9f3c9fcb03a310453b616a80c48646f7d196433736fedcfc2ff4fa1a43bf9f8fc0a0660cf9f79fd0d8e106591a2319cff5eb0a5be578d178e0e184a9eca92991ca63bf1e9c5b1c56dba3c836975a74d9eb9b763ce7c5dc753cde77fb2d048e3656a15f9aa7f9dea249c4a3dc0456b64533513e69861fcb9f4348d78acd5b8ce1f3c41271b8551ba4d5754fbb123862236bc94192a5306c29adb2b0b053cd7d4deaa1be6c61f75bca27b53765a7356dd34a48437d5e5b356d48db64749243fea9b1f44e4625fe7ce820dc9f1a6022d77198e6e917cd4f5e23622d5b3b2fafd4f9be0b85db21371f5d35c7c651a616a8351a02dbfa74f9d273a0eb7d2ab9fca254bd28509b3d6f5420108cabc42d9a5670779dfdfb78afe74cd87fdf8e3be937e6c6981eb88156f5cbc91e4b92f8d65a151ee3307cce381dc189c54a29d21c9fa9f512c50dbc9f1c0ddb43b6b10d5190b8169f9e06f7c60a2103c9c3fa3fe0d1cab8358cf4ddf95d5e26fbed636b2f1f474b7d10426afb5aa21948f7486e0df5275ffa6c091c46c3868703c4e30e1a15a8d27a708b6d5fa7d123f1524c221fb93b5f9f8d87b0286de38c6112a05d1f07706923b531e335db326ff756acf6cf9a5e5352953d112a842d7b2f05d296f644b01bca413f2686dbdea6b2cc6dd8115e22d832af742eb801ee61f6b90f93d227b694fe474385125801d6eb58867c15246faa6c0a1cae0b05f104fb2e97476c73a79185796e0c26bb1b59527aba4b79db6ec99f1650898b996e068329d17b94730cd6ab79a3d77d80e5ed78eecc7d680b5425231357f24c46fd01732052eb18737634915131c7ffcdb0b48a35d8761c402ff5b56aa1a9080b46836e4a888c86d7a260fb6cc2f3b9f68d52201531220bbfe0e7b2890a390acb33831fa1126b88dceb126a555181edbfa4680cadb08d38abe00c91980ce68ab58274ec28eaa697f8a4d7d6db744d8c9daac2035d40a5eb565e12c8be5c2bc1d725f713d45a03ac14ceaf91bb1c5dddcac87553b9d22e23d738742e3bf994412ab153f66ddea53a35c9ec19c555a49ae1aea112a70ddc10201258536ba93ae0dc7fb60d51ffbbe9e96eb8eeea6878e3784dcd686fc0db4516249cdfcb9f6d880fdcf8f86cdadd23ea7455b3b7e3a0e8affc9b61be59814f8e32175c869adaf7dbb5acb4c994e2269d2657011e8751c5c0e6e97e9eda4e8e6c309e842c8ea01c20de3c5f4f6372cc8cb7cdf2b0e3519155e4c662fc8572c36d9d3b7eb3ee19e985bfab9eb20e077c20dec4172e584357cc54f9cd49742e0b31d1fed87812f19efa9ae81ebebb021df0c280aa9790d2f1acb94b38f268ca7861b1da63cbb86daaeac3a5b067c86fc532a1db230a29578563f16dee5b4267f9d474c81c9ad762216452cb3a37c8ed44cbaab2e4b9a9583b134da3a64390fe5f76946879a1757d127e6e10b3b3042de48189350d844ede16134c770dba47cf56483cc14e2cfc93fc11f47cd33b06b720f531efdd1ff1254966b68fc46645ec3b45c2a60427e69ba1d710f25571522ba90622315f9f0cad33f8b1a1053a45aa07964892621ecc9256b7c4e21716e546c235fdb618f339b55c377a30b61a9add4e3b5657e3433a6feaff5b67ef34771ae6d04449b5228b6b99ce7237996b307613d14602d76f21a58a55cdc71a1f348ca18265634f094012bf4eae241df634d7424de578eb4c4199de382f2795c17eefa11ac2ad4625be7263373de4bbe189d42fa51953652d433323b9e6110f00c7cb44e4e7df1e6e1cc421c5cc5e78eac4009824d73b4bf0a0340ebd883acb90e928f6034d6a44edee021abc40726df358ef83429351f46aaf10b63b0a5f4c68bdf4e425f8ce7c6a8ad95dc4874836a56a298f586a602ad7b33350fabaacfda30b80210432dc6b59cb807d50782399624d624bbb5e759c09daec8ab3afbff204f62f94754e377cca96b00ba4842d52d8f12a5ce7d1dd81b760c1c5392f739d91f8bdc8c290090fc6e3221ee69abd2648b6c7a818e8a0d04ffd83464f7b26002e4d5614392848205fc0e766713e4c65f46ec2f9d221e98fdeaa5c329d8a0e7481690164fa1ad829ce9dd2eec2fe92231b33415c3f564161353ea7f823e3dc97c9e905f40d693082be719aff77b3b35a832ed3fc16e3bf57305fbabfbbadea1d33ece1f05ba482d3dcc391e0c709c02c335a6289a8deb035fd5b99edde61f0d936631e21251eb65c1dc23574a7a8f9ba8fd0b6c958ee146954cdab3daf90c17ffe92aef5390b4e19d32fef469e9e60ef8ea16af6b66dab7de1d6ddfeeb602cd69d8f32e4d5f06bfaebe7f000d62abc793ad34d77d1369c63785e93c2ff205769589011208ed6affc73dda9287bc8f4d9e27d33038b699431f56285f92fd9f02e78745fcdca4a4840dcfc307bf8f1806146d954ed5ccc8a66edf2179e2a5356624b3b30f8f78839ddc9940794acce40290e5eb73dbb52fe1c633e88d1492aedc69b351912a0890b63eda0d8756a5b7c47c740fcd73a0f419fa363fbf0cd3fcdd38f0fd055627932c998421f086ee0cbe0520b2f2fd6d38fce1575a2c90fef9f81aa23fc7c4c5625d6f46fbfd02ac31cd1620a92c43b7884e4a050e5ef5bb9b8f9825a159bb0370c828519ef71090e09ab43ff2bd2cc75563fb9073eadcfd869f0d9b6986e4320b1986ce3f19a3f5dce202f8c13757726e5d6a9fc9e2b0b357625362fb873709fb307ee51bc58494857fdd3811f6a8aee0086b0a62da4e327c698e5639e373567d5eefc76e0d6725272527cdbc01a2b40e7511ac986e32bb7e48558756dca3b944855fd9dfdbb2358a52e53769817cad50af13d8a5941c41f6bd121cb267acdc461c500855c6f6c0750367c62dd32fa41595a6070e728f1915bab951e5536ff8230a0608ac96c2e19a5c1415209a3774c091174f575bc937d544d495370294aaffc5e6be76364c7a212bbb4ec7f3bd38db75a159b68e2b3075ae6bb68ffa02e6bfb42553b505da20f133b2855572b7e6f8f3de240d9ab1ff32b3d9825f087774f4932024be806b78f059d4b3b40414df456aef405d1cffb2f3604834dae38932d830298df7045d404f005f5edf81061850808d4998f6ce80bc7569081765875d908d4b6a0edcb434317543a4f5954a5e0e5b7c4da75cb369e2810e2aebf950b973ad3380bca5d0de8311e59a6ed3f01d8f7c1b39060fddc7ac1febe659626ed7ad27dcee7b3d409b9f84e4f55ceb2e462f55627857f8c485c35c9abdc2fa87c4281365790ecdf1971f3a285ea0bb2038ae91d927729f4bf847bf0fc724b002cb029d2a57b89218bd4a763ab01902b7b48cb609cf3b9ad8fb568aef0ceff20c5def1a4faee11d33d304e2227b83f3ab06f0b9fa5502b1d9c6fe2a34bf9abb9a5b13928800149488cead47e48c754c75a061d5ea8a515f7f55611b0c048b88c9772ca4b1eb3d6fc931801990f1611e9b1171223527dceccfe8cfd72600a88a8486e088e21c30b997af1b60b55bc5443cecb18c2dcf54dbca3ac34f10ad2be9d755679519bb674b42904be579df62436bcf06de4cfd636d592840d674d11195edeb4dfe61370e9a9453378957fdecf2115ee008224fb8c97fcd051ddb1ed8d0419b950f2cd085bf1debaafb2a46cf65be863939cffde741797fdf64c17f3b447464be0e6bb90324c4c65b3cf66958a15d537a1675dffbc4e41f7a6c92ed27c5ef0dd0dcce6f96225b4e0ece510ce00f9611e395215e116026499dce3417cee3fbde0106b2a6fbd5937423124f6549c2206afc2ad1df5bedcc5e1371ed2b9f09f76576589450b09dd990811c59c3f848c1a4fccdfe686968903edffbc010eb73f55ac5a675fa3db70db12c826c8b7360617d8abeacefa6e2a8da62e4f304543cc9217fe1b0ec4fb044ca849802c4a140b91cc056d566c8670e4600941a54b2eb8643ff206c3401c0bd9838a025545227ae3e6bcb47fa3dcd1b40d8a0917f63744fb1ec2b72211c6cfda13248b2d0b4232e4fe7015cc42d4928f07ca9161640102f22236cca7ca3b81ffc81c4ff20532b5203e0d94771b8d0ec70e637135fdbb788fa8b4704e11d3c6083a45f51efd8560c0e63435516586aa82eaa998c140767d3ce35491e301c12f74583c61cd4d2ef1caa6fea3e353637cdeb3332d964155c9d32f826829a7174ab06c44e32063e46ce742b7027cffb8999302b602949c60496a0bf3c7cdf859d4ba51102674414867af614cffb88ac177dfbdb6131f7370dcb851002cec1742fb1561257716850c9ed3b075a6c023bcf05b5d580ac8e5d7ab7e5b1723212c681989e5f91958b635e0d076634584920c1b98d7f6ea0ddded6be9eb74de778b3c57c36b18e0c56c3a051014e09fac70ce6a7b0f042f5eeca8b8885e500bcb41f6fd974e5f6888859abdf3600706a3de9fce060c3069600c63106aff24210461c5d3423fa4e350041fd166902ad86bdba8cf965917f7e3ab019e1911d8013dad576465319c4e04b89b5ee1d07f54705718592d6aa453558294743daa8dba33159fb0e291829ac220562b007597e067e5f65841563673b69cc1d549f50e9efbdf256d797fe8c7d09596c167a45d", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000b1000040"]) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) 8.393793871s ago: executing program 1 (id=2398): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0xd44, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 8.168095893s ago: executing program 3 (id=2399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)='\b', 0x1}], 0x1) r1 = getpid() r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x402300, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a320000"], 0x78}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) socket$netlink(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x52) 8.026059167s ago: executing program 2 (id=2400): timer_create(0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup2(r1, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_FPEXC(0x45, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000000)) lseek(0xffffffffffffffff, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x94) 7.321245643s ago: executing program 1 (id=2401): socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x315500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000300)={0x1d, r5, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r4, &(0x7f0000000640)={0x1d, r5, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) close_range(r2, 0xffffffffffffffff, 0x0) 6.253781803s ago: executing program 2 (id=2402): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e26, 0xfffff001, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES64], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$key(0xf, 0x3, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(0xffffffffffffffff, 0xc4c03d09, 0x0) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) sendmsg$inet6(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='h', 0x1}], 0x1}, 0x0) recvmmsg(r2, 0x0, 0x0, 0x10101, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.149738292s ago: executing program 2 (id=2403): r0 = socket(0x2c, 0x80000, 0x3c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x3, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24000040) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000002040)=ANY=[@ANYRES16, @ANYBLOB="000229bd7000fddbdf2583000000", @ANYBLOB="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"], 0x2650}, 0x1, 0x0, 0x0, 0x4}, 0x4810) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4ed8ee5a90e2bf26, 0x4c831, 0xffffffffffffffff, 0x0) 4.114828956s ago: executing program 2 (id=2404): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x10, [0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2]}}) setsockopt$inet_mreq(r4, 0x0, 0x23, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48840}, 0x4000010) 3.773523874s ago: executing program 3 (id=2405): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) ioprio_set$pid(0x3, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0x559af05a10134899, 0x0, {{0x4, 0x1, 0x5, 0xa, 0x3, 0x1, {0x1, 0x180, 0x8, 0x9, 0x100, 0x7cf4, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xbff, 0x1}}, {0x0, 0x10}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080)=0x2, 0x7f03) bind$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) eventfd(0xffffffff) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x20000001, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, 0x0}) r5 = getpgrp(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)={0x0, r5}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.910828152s ago: executing program 2 (id=2406): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1c0, 0x12, 0x60d, 0x0, 0x202, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @local, [], [], 'ip6erspan0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x1}, {0x1, 0x1, 0x2}, 0x9, 0x7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x6}, {0x0, 0x41}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x8840) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = getpid() sched_rr_get_interval(r3, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) syz_io_uring_setup(0x3, 0x0, &(0x7f0000000240), &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e08"], 0xb) r5 = openat$sequencer2(0xffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, 0x0) 2.031250379s ago: executing program 1 (id=2407): openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x303100, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) sched_setaffinity(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x1d) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x80, 0x1, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0xf1, 0x4) 1.715479087s ago: executing program 3 (id=2408): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x2, 0x3, 0x6) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x1800, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x802c, @mcast2, 0x5}, 0x1c) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}, 0x1, 0x0, 0x0, 0x4081}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="4604", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.589381448s ago: executing program 2 (id=2409): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$can_raw(0x1d, 0x3, 0x1) socket(0x18, 0x5, 0x86b0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf555}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1000}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x477}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040890}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_vmscan_lru_shrink_inactive\x00', r4, 0x0, 0x8000}, 0x18) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'cpu'}]}, 0x5) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r9, 0x800000000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 799.553266ms ago: executing program 1 (id=2410): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000000) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 0s ago: executing program 3 (id=2411): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) epoll_create(0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r1, 0x8943, &(0x7f0000000000)) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, r4}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r7, &(0x7f0000001a00)=[{{&(0x7f00000003c0)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)=""/180, 0xb4}], 0x1, &(0x7f0000000600)=""/105, 0x69}, 0x4}, {{&(0x7f0000000740)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/254, 0xfe}, {&(0x7f0000000a00)=""/200, 0xc8}, {&(0x7f0000000b00)=""/186, 0xba}, {&(0x7f0000000bc0)=""/192, 0xc0}], 0x4, &(0x7f0000000c80)=""/15, 0xf}, 0x7}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)=""/201, 0xc9}, {&(0x7f0000000dc0)=""/243, 0xf3}], 0x2}, 0x1}, {{&(0x7f0000000f00)=@nfc_llcp, 0x80, &(0x7f0000001140)=[{&(0x7f0000000f80)=""/199, 0xc7}, {0x0}, {&(0x7f00000010c0)=""/102, 0x66}], 0x3}, 0x8000}, {{&(0x7f0000001240)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001700)=[{&(0x7f00000015c0)=""/99, 0x63}, {&(0x7f0000001640)=""/141, 0x8d}], 0x2, &(0x7f0000001740)=""/115, 0x73}, 0x4}, {{&(0x7f00000017c0)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000001840)=""/52, 0x34}, {&(0x7f0000001880)=""/158, 0x9e}, {0x0}], 0x4, &(0x7f0000001980)=""/90, 0x5a}, 0x7}], 0x6, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001c80)=ANY=[@ANYRES16=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x20000841) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=ANY=[], 0x7}}, 0x4000000) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=ANY=[@ANYRESHEX=r0], 0x10}}, 0x4040) kernel console output (not intermixed with test programs): ] ? xsk_init_queue+0xb0/0x110 [ 1382.541857][T16545] ? xsk_setsockopt+0x43f/0x710 [ 1382.541876][T16545] ? do_sock_setsockopt+0x257/0x3e0 [ 1382.541894][T16545] ? __x64_sys_setsockopt+0x18b/0x220 [ 1382.541911][T16545] ? do_syscall_64+0xfa/0x3b0 [ 1382.541932][T16545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.541958][T16545] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1382.542013][T16545] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1382.542042][T16545] ? __kasan_kmalloc+0x93/0xb0 [ 1382.542071][T16545] vmalloc_user_noprof+0xad/0xf0 [ 1382.542093][T16545] ? xskq_create+0xbf/0x170 [ 1382.542115][T16545] xskq_create+0xbf/0x170 [ 1382.542141][T16545] xsk_init_queue+0xb0/0x110 [ 1382.542165][T16545] xsk_setsockopt+0x43f/0x710 [ 1382.542190][T16545] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1382.542208][T16545] ? __lock_acquire+0xab9/0xd20 [ 1382.542241][T16545] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1382.542259][T16545] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1382.542282][T16545] do_sock_setsockopt+0x257/0x3e0 [ 1382.542305][T16545] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1382.542328][T16545] ? __fget_files+0x2a/0x420 [ 1382.542359][T16545] __x64_sys_setsockopt+0x18b/0x220 [ 1382.542385][T16545] do_syscall_64+0xfa/0x3b0 [ 1382.542407][T16545] ? lockdep_hardirqs_on+0x9c/0x150 [ 1382.542430][T16545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.542463][T16545] ? clear_bhb_loop+0x60/0xb0 [ 1382.542486][T16545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.542503][T16545] RIP: 0033:0x7fe4b598e929 [ 1382.542521][T16545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1382.542537][T16545] RSP: 002b:00007fe4b680c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1382.542557][T16545] RAX: ffffffffffffffda RBX: 00007fe4b5bb6320 RCX: 00007fe4b598e929 [ 1382.542570][T16545] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1382.542580][T16545] RBP: 00007fe4b5a10b39 R08: 0000000000000052 R09: 0000000000000000 [ 1382.542592][T16545] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.542604][T16545] R13: 0000000000000000 R14: 00007fe4b5bb6320 R15: 00007ffde9214598 [ 1382.542636][T16545] [ 1382.542643][T16545] Mem-Info: [ 1382.851859][T16545] active_anon:3177 inactive_anon:12743 isolated_anon:0 [ 1382.851859][T16545] active_file:16843 inactive_file:44651 isolated_file:0 [ 1382.851859][T16545] unevictable:768 dirty:177 writeback:0 [ 1382.851859][T16545] slab_reclaimable:8479 slab_unreclaimable:116179 [ 1382.851859][T16545] mapped:40344 shmem:10004 pagetables:1626 [ 1382.851859][T16545] sec_pagetables:0 bounce:0 [ 1382.851859][T16545] kernel_misc_reclaimable:0 [ 1382.851859][T16545] free:1274190 free_pcp:11518 free_cma:0 [ 1382.897662][T16545] Node 0 active_anon:12708kB inactive_anon:50972kB active_file:67004kB inactive_file:178604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161284kB dirty:708kB writeback:0kB shmem:38480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12904kB pagetables:6340kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1382.931655][T16545] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1382.963172][T16545] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1382.992023][T16545] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1382.997792][T16545] Node 0 DMA32 free:1179692kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12704kB inactive_anon:50928kB active_file:65224kB inactive_file:178544kB unevictable:1536kB writepending:704kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:31688kB local_pcp:25584kB free_cma:0kB [ 1383.030418][T16545] lowmem_reserve[]: 0 0 1 1 1 [ 1383.035296][T16545] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1383.064426][T16545] lowmem_reserve[]: 0 0 0 0 0 [ 1383.069164][T16545] Node 1 Normal free:3901700kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14376kB local_pcp:4292kB free_cma:0kB [ 1383.100311][T16545] lowmem_reserve[]: 0 0 0 0 0 [ 1383.105009][T16545] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1383.117662][T16545] Node 0 DMA32: 2040*4kB (UE) 1859*8kB (UME) 1197*16kB (UME) 895*32kB (UME) 720*64kB (UME) 105*128kB (UME) 61*256kB (UME) 41*512kB (UME) 19*1024kB (UM) 9*2048kB (UM) 238*4096kB (M) = 1179688kB [ 1383.136880][T16545] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1383.148722][T16545] Node 1 Normal: 223*4kB (UME) 59*8kB (UME) 45*16kB (UME) 181*32kB (UME) 45*64kB (UME) 16*128kB (UME) 1*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3901700kB [ 1383.167227][T16545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.176792][T16545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1383.186111][T16545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1383.195670][T16545] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1383.204937][T16545] 71494 total pagecache pages [ 1383.209659][T16545] 0 pages in swap cache [ 1383.213795][T16545] Free swap = 124996kB [ 1383.217973][T16545] Total swap = 124996kB [ 1383.222120][T16545] 2097051 pages RAM [ 1383.225962][T16545] 0 pages HighMem/MovableOnly [ 1383.230620][T16545] 424582 pages reserved [ 1383.234755][T16545] 0 pages cma reserved [ 1383.751673][T16553] random: crng reseeded on system resumption [ 1386.242166][T12494] team0 (unregistering): Port device team_slave_1 removed [ 1386.687330][T12494] team0 (unregistering): Port device team_slave_0 removed [ 1388.873822][T16369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.894673][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.940337][T16369] bridge_slave_0: entered allmulticast mode [ 1388.957340][T16369] bridge_slave_0: entered promiscuous mode [ 1388.991258][T16524] vlan2: entered allmulticast mode [ 1389.010196][T16524] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1389.057590][T16573] netlink: 'syz.1.2036': attribute type 1 has an invalid length. [ 1389.067806][T16573] netlink: 'syz.1.2036': attribute type 2 has an invalid length. [ 1389.197068][T16333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.204354][T16333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.242966][T16333] bridge_slave_0: entered allmulticast mode [ 1389.364946][T16333] bridge_slave_0: entered promiscuous mode [ 1389.428706][T16333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.445348][T16333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.452734][T16333] bridge_slave_1: entered allmulticast mode [ 1389.673447][T16333] bridge_slave_1: entered promiscuous mode [ 1389.730668][T16369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.800432][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.865592][T16369] bridge_slave_1: entered allmulticast mode [ 1389.898771][T16590] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1389.911706][T16590] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1389.964700][T16369] bridge_slave_1: entered promiscuous mode [ 1391.161805][T16369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.221518][T16601] No source specified [ 1391.571970][T16333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1391.597278][T16369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1391.965444][T11349] Bluetooth: hci0: command tx timeout [ 1392.041167][T16333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.136850][T16369] team0: Port device team_slave_0 added [ 1392.146925][T16369] team0: Port device team_slave_1 added [ 1395.377338][T16624] syz.8.2043 (16624): drop_caches: 2 [ 1395.388729][T16624] syz.8.2043 (16624): drop_caches: 2 [ 1396.610767][T16369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.653509][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.014428][T16369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.038512][T16333] team0: Port device team_slave_0 added [ 1397.049453][T16333] team0: Port device team_slave_1 added [ 1397.059202][T16369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.071249][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1397.163772][T16369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.007650][T16665] vivid-000: disconnect [ 1398.386244][T16657] vivid-000: reconnect [ 1398.515432][T16333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1398.535312][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.577167][T16333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1398.590153][T16333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1398.597499][T16333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1398.634953][T16333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.186170][T16369] hsr_slave_0: entered promiscuous mode [ 1401.192892][T16369] hsr_slave_1: entered promiscuous mode [ 1401.444543][T16369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.477260][T16369] Cannot create hsr debugfs directory [ 1401.499608][T16333] hsr_slave_0: entered promiscuous mode [ 1401.506631][T16333] hsr_slave_1: entered promiscuous mode [ 1401.521289][T16333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.536085][T16333] Cannot create hsr debugfs directory [ 1405.236475][T16728] random: crng reseeded on system resumption [ 1406.449128][T13328] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 1406.528439][T16730] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1406.549751][T16711] ceph: No mds server is up or the cluster is laggy [ 1406.559495][T16730] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.688571][T16730] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1406.718789][T16731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.777150][T16731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1406.807999][T16731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.830403][T16731] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1407.914960][T12494] bridge_slave_1: left allmulticast mode [ 1407.934161][T12494] bridge_slave_1: left promiscuous mode [ 1407.945451][T12494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.958407][T12494] bridge_slave_0: left allmulticast mode [ 1407.964203][T12494] bridge_slave_0: left promiscuous mode [ 1407.996368][T12494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.332413][T12494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1408.705679][T12494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1408.780811][T16754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1409.018704][T12494] bond0 (unregistering): Released all slaves [ 1410.341053][T12494] hsr_slave_0: left promiscuous mode [ 1410.381167][T12494] hsr_slave_1: left promiscuous mode [ 1410.399302][T12494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.441791][T12494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1412.454644][T16788] netlink: 'syz.8.2070': attribute type 11 has an invalid length. [ 1412.845678][T14329] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1413.067892][T14329] usb 2-1: config 0 has an invalid interface number: 170 but max is 0 [ 1413.081622][T14329] usb 2-1: config 0 has no interface number 0 [ 1413.083638][T12494] team0 (unregistering): Port device team_slave_1 removed [ 1413.089416][T14329] usb 2-1: config 0 interface 170 has no altsetting 0 [ 1413.109987][T14329] usb 2-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf [ 1413.122146][T14329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.142176][T14329] usb 2-1: config 0 descriptor?? [ 1413.161285][T14329] usb 2-1: bad CDC descriptors [ 1413.197105][T12494] team0 (unregistering): Port device team_slave_0 removed [ 1414.239660][T16333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1414.629737][T16333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1414.991827][T16333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1415.048775][T16333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1415.240940][T16806] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1415.249342][T16806] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1415.736396][T14329] usb 2-1: USB disconnect, device number 15 [ 1415.759686][T16333] kthread_run failed with err -4 [ 1417.791850][T16842] trusted_key: encrypted_key: insufficient parameters specified [ 1419.161918][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1419.179370][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1419.189561][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1419.198526][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1419.212392][ T5833] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1419.741740][T16848] lo speed is unknown, defaulting to 1000 [ 1419.760389][T16848] lo speed is unknown, defaulting to 1000 [ 1420.968853][T16848] chnl_net:caif_netlink_parms(): no params data found [ 1421.326825][ T5833] Bluetooth: hci2: command tx timeout [ 1421.676537][T12494] bridge_slave_1: left allmulticast mode [ 1421.692594][T12494] bridge_slave_1: left promiscuous mode [ 1421.704717][T12494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.727658][T12494] bridge_slave_0: left allmulticast mode [ 1421.744843][T12494] bridge_slave_0: left promiscuous mode [ 1421.757435][T12494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.885550][ T5931] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1422.102167][T11349] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1422.114211][T11349] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1422.125506][T11349] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1422.145093][T11349] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1422.153331][T11349] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1422.295660][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 1422.321664][ T5931] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1422.321963][T12494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.343264][ T5931] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1422.353976][ T5931] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1422.366994][ T5931] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1422.380860][ T5931] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1422.390875][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.457200][T16898] loop9: detected capacity change from 0 to 7 [ 1422.479875][T16898] buffer_io_error: 4 callbacks suppressed [ 1422.479894][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.494652][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.503772][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.512437][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.522393][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.531450][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.540017][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.548565][T16898] ldm_validate_partition_table(): Disk read failed. [ 1422.555697][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.564922][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.599954][T16898] Buffer I/O error on dev loop9, logical block 0, async page read [ 1422.610535][T16898] Dev loop9: unable to read RDB block 0 [ 1422.618294][T16898] loop9: unable to read partition table [ 1422.625550][T16898] loop9: partition table beyond EOD, truncated [ 1422.632053][T16898] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1422.632053][T16898] ) failed (rc=-5) [ 1423.016544][T12494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.040921][T12494] bond0 (unregistering): Released all slaves [ 1423.171744][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.181617][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.196798][ T5931] usb 3-1: GET_CAPABILITIES returned 0 [ 1423.224983][ T5931] usbtmc 3-1:16.0: can't read capabilities [ 1423.407663][T11349] Bluetooth: hci2: command tx timeout [ 1423.473044][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 1423.473088][ T30] audit: type=1326 audit(1751487351.570:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1423.554797][ T30] audit: type=1326 audit(1751487351.570:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1423.656511][ T30] audit: type=1326 audit(1751487351.570:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1423.728743][ T30] audit: type=1326 audit(1751487351.570:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1423.757238][T16908] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2085'. [ 1423.794579][T16883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.801261][T16893] lo speed is unknown, defaulting to 1000 [ 1423.804330][T16848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.914274][ T30] audit: type=1326 audit(1751487351.570:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1423.936275][T16883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.942137][T16848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.021697][ T30] audit: type=1326 audit(1751487351.570:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1424.027879][T16848] bridge_slave_0: entered allmulticast mode [ 1424.075280][ T30] audit: type=1326 audit(1751487351.570:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1424.075651][ T30] audit: type=1326 audit(1751487351.880:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1424.122460][ T30] audit: type=1326 audit(1751487351.930:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16903 comm="syz.8.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1424.150398][T16848] bridge_slave_0: entered promiscuous mode [ 1424.161655][T16909] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2085'. [ 1424.173969][ T5931] usb 3-1: USB disconnect, device number 14 [ 1424.211499][T16893] lo speed is unknown, defaulting to 1000 [ 1424.220987][T16848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.232518][T16848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.245896][T16848] bridge_slave_1: entered allmulticast mode [ 1424.254238][T16848] bridge_slave_1: entered promiscuous mode [ 1424.376330][T11349] Bluetooth: hci4: command tx timeout [ 1424.796705][T12494] hsr_slave_0: left promiscuous mode [ 1424.804477][T12494] hsr_slave_1: left promiscuous mode [ 1425.007954][T12494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.039450][T12494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.495787][T11349] Bluetooth: hci2: command tx timeout [ 1426.343744][T12494] team0 (unregistering): Port device team_slave_1 removed [ 1426.566233][T11349] Bluetooth: hci4: command tx timeout [ 1426.813208][T12494] team0 (unregistering): Port device team_slave_0 removed [ 1427.062868][T16848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1427.238513][T16848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1427.585737][T11349] Bluetooth: hci2: command tx timeout [ 1428.688912][T11349] Bluetooth: hci4: command tx timeout [ 1429.109796][T16848] team0: Port device team_slave_0 added [ 1429.116101][ T30] audit: type=1326 audit(1751487357.230:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16938 comm="syz.2.2095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x7fc00000 [ 1429.159226][T16848] team0: Port device team_slave_1 added [ 1429.960730][T16848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1429.978856][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.095407][T16848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.195066][T16848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.210221][T16848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1430.237510][T16848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1430.330446][T16957] 9pnet_fd: Insufficient options for proto=fd [ 1430.765472][T11349] Bluetooth: hci4: command tx timeout [ 1431.232618][T16848] hsr_slave_0: entered promiscuous mode [ 1431.250352][T16848] hsr_slave_1: entered promiscuous mode [ 1431.268235][T16848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1431.289869][T16848] Cannot create hsr debugfs directory [ 1431.505694][T16893] chnl_net:caif_netlink_parms(): no params data found [ 1432.195032][T16968] tipc: Enabling of bearer rejected, already enabled [ 1432.203186][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2100'. [ 1432.694589][T16977] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1432.706715][T16977] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1432.712852][T16977] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1432.712852][T16977] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1432.731940][T16977] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1432.743349][T16977] CUSE: DEVNAME unspecified [ 1433.172312][ T30] audit: type=1326 audit(1751487360.870:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16972 comm="syz.1.2102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4b598e929 code=0x0 [ 1433.317189][T16980] overlayfs: missing 'lowerdir' [ 1434.217702][T16991] new mount options do not match the existing superblock, will be ignored [ 1434.685125][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2104'. [ 1435.037788][ T30] audit: type=1804 audit(1751487362.980:84): pid=16993 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.2104" name="/newroot/378/file0" dev="tmpfs" ino=2082 res=1 errno=0 [ 1435.545036][T16990] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1436.423616][T16893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.016111][T16893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.023473][T16893] bridge_slave_0: entered allmulticast mode [ 1437.031726][T16893] bridge_slave_0: entered promiscuous mode [ 1437.114138][T17006] warn_alloc: 1 callbacks suppressed [ 1437.114157][T17006] syz.1.2107: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1437.160706][T16893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.194510][T16893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.211242][T17006] CPU: 0 UID: 0 PID: 17006 Comm: syz.1.2107 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1437.211269][T17006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1437.211280][T17006] Call Trace: [ 1437.211289][T17006] [ 1437.211297][T17006] dump_stack_lvl+0x189/0x250 [ 1437.211331][T17006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1437.211355][T17006] ? __pfx__printk+0x10/0x10 [ 1437.211374][T17006] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1437.211401][T17006] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1437.211428][T17006] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1437.211455][T17006] warn_alloc+0x214/0x310 [ 1437.211476][T17006] ? stack_depot_save_flags+0x40/0x900 [ 1437.211500][T17006] ? __pfx_warn_alloc+0x10/0x10 [ 1437.211523][T17006] ? kasan_save_track+0x4f/0x80 [ 1437.211542][T17006] ? xskq_create+0x56/0x170 [ 1437.211559][T17006] ? xsk_init_queue+0xb0/0x110 [ 1437.211586][T17006] ? xsk_setsockopt+0x43f/0x710 [ 1437.211604][T17006] ? do_sock_setsockopt+0x257/0x3e0 [ 1437.211619][T17006] ? __x64_sys_setsockopt+0x18b/0x220 [ 1437.211635][T17006] ? do_syscall_64+0xfa/0x3b0 [ 1437.211657][T17006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.211682][T17006] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1437.211733][T17006] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1437.211756][T17006] ? xskq_create+0x56/0x170 [ 1437.211779][T17006] ? __kasan_kmalloc+0x93/0xb0 [ 1437.211801][T17006] vmalloc_user_noprof+0xad/0xf0 [ 1437.211822][T17006] ? xskq_create+0xbf/0x170 [ 1437.211843][T17006] xskq_create+0xbf/0x170 [ 1437.211868][T17006] xsk_init_queue+0xb0/0x110 [ 1437.211891][T17006] xsk_setsockopt+0x43f/0x710 [ 1437.211913][T17006] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1437.211930][T17006] ? __lock_acquire+0xab9/0xd20 [ 1437.211959][T17006] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1437.211975][T17006] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1437.211994][T17006] do_sock_setsockopt+0x257/0x3e0 [ 1437.212015][T17006] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1437.212035][T17006] ? __fget_files+0x2a/0x420 [ 1437.212060][T17006] __x64_sys_setsockopt+0x18b/0x220 [ 1437.212089][T17006] do_syscall_64+0xfa/0x3b0 [ 1437.212112][T17006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.212129][T17006] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1437.212146][T17006] ? clear_bhb_loop+0x60/0xb0 [ 1437.212166][T17006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.212181][T17006] RIP: 0033:0x7fe4b598e929 [ 1437.212196][T17006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1437.212210][T17006] RSP: 002b:00007fe4b684e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1437.212228][T17006] RAX: ffffffffffffffda RBX: 00007fe4b5bb6160 RCX: 00007fe4b598e929 [ 1437.212241][T17006] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1437.212247][T17006] RBP: 00007fe4b5a10b39 R08: 0000000000000052 R09: 0000000000000000 [ 1437.212254][T17006] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.212260][T17006] R13: 0000000000000000 R14: 00007fe4b5bb6160 R15: 00007ffde9214598 [ 1437.212276][T17006] [ 1437.212312][T17006] Mem-Info: [ 1437.215510][T16893] bridge_slave_1: entered allmulticast mode [ 1437.233417][T17006] active_anon:3177 inactive_anon:9703 isolated_anon:0 [ 1437.233417][T17006] active_file:19343 inactive_file:42173 isolated_file:0 [ 1437.233417][T17006] unevictable:768 dirty:208 writeback:0 [ 1437.233417][T17006] slab_reclaimable:6586 slab_unreclaimable:115164 [ 1437.233417][T17006] mapped:33372 shmem:7179 pagetables:1716 [ 1437.233417][T17006] sec_pagetables:0 bounce:0 [ 1437.233417][T17006] kernel_misc_reclaimable:0 [ 1437.233417][T17006] free:1277203 free_pcp:13790 free_cma:0 [ 1437.259672][T16893] bridge_slave_1: entered promiscuous mode [ 1437.264653][T17006] Node 0 active_anon:12708kB inactive_anon:38912kB active_file:77004kB inactive_file:168692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133396kB dirty:832kB writeback:0kB shmem:27180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12704kB pagetables:6600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1437.773287][T16893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.777456][T17006] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1437.816366][T17017] vivid-000: disconnect [ 1437.822150][T17017] vivid-000: reconnect [ 1437.890539][T17006] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1437.899734][T16893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.978830][T17006] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1437.992866][T17006] Node 0 DMA32 free:1191128kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12704kB inactive_anon:51076kB active_file:75232kB inactive_file:168632kB unevictable:1536kB writepending:816kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:27628kB local_pcp:8204kB free_cma:0kB [ 1438.037165][T17006] lowmem_reserve[]: 0 0 1 1 1 [ 1438.043448][T17006] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1438.168371][T17006] lowmem_reserve[]: 0 0 0 0 0 [ 1438.173264][T17006] Node 1 Normal free:3900664kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15360kB local_pcp:9568kB free_cma:0kB [ 1438.215861][T17006] lowmem_reserve[]: 0 0 0 0 0 [ 1438.220676][T17006] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1438.244285][T17006] Node 0 DMA32: 631*4kB (UME) 908*8kB (UME) 846*16kB (UME) 676*32kB (UME) 894*64kB (UME) 165*128kB (UME) 83*256kB (UME) 51*512kB (UME) 26*1024kB (UM) 15*2048kB (UM) 238*4096kB (UM) = 1202844kB [ 1438.405331][T17006] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1438.426661][T17006] Node 1 Normal: 3*4kB (ME) 6*8kB (ME) 17*16kB (UME) 193*32kB (UME) 51*64kB (UME) 16*128kB (UME) 1*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3900716kB [ 1438.446655][T17006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1438.456494][T17006] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1439.065289][T17006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1439.075486][T17006] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1439.126128][T17006] 71542 total pagecache pages [ 1439.130982][T17006] 0 pages in swap cache [ 1439.135962][T17006] Free swap = 124996kB [ 1439.156895][T16893] team0: Port device team_slave_0 added [ 1439.163102][T17006] Total swap = 124996kB [ 1439.168366][T17006] 2097051 pages RAM [ 1439.176338][T17006] 0 pages HighMem/MovableOnly [ 1439.181760][T16893] team0: Port device team_slave_1 added [ 1439.188947][T17006] 424582 pages reserved [ 1439.195407][T17006] 0 pages cma reserved [ 1439.559570][T17024] lo speed is unknown, defaulting to 1000 [ 1439.586290][T17024] lo speed is unknown, defaulting to 1000 [ 1439.614924][T16893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.623098][T16893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.669215][T16893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.883365][T16893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.896193][T16893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1440.054168][T17032] loop9: detected capacity change from 0 to 7 [ 1440.064544][T17032] buffer_io_error: 9 callbacks suppressed [ 1440.064561][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.079569][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.088343][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.096890][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.106447][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.115770][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.124512][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.133034][T17032] ldm_validate_partition_table(): Disk read failed. [ 1440.140202][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.174007][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.182824][T17032] Buffer I/O error on dev loop9, logical block 0, async page read [ 1440.191862][T17032] Dev loop9: unable to read RDB block 0 [ 1440.198546][T17032] loop9: unable to read partition table [ 1440.205951][T17032] loop9: partition table beyond EOD, truncated [ 1440.212671][T17032] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1440.212671][T17032] ) failed (rc=-5) [ 1440.354577][T16893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.450150][T12494] bridge_slave_1: left allmulticast mode [ 1440.517056][T12494] bridge_slave_1: left promiscuous mode [ 1440.695634][T12494] bridge0: port 2(bridge_slave_1) entered disabled state [ 1440.844053][T12494] bridge_slave_0: left allmulticast mode [ 1440.854838][T12494] bridge_slave_0: left promiscuous mode [ 1440.887476][T12494] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.174505][T12494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.187277][T12494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.843580][T12494] bond0 (unregistering): Released all slaves [ 1442.091862][T12494] hsr_slave_0: left promiscuous mode [ 1442.113626][T12494] hsr_slave_1: left promiscuous mode [ 1442.147532][T12494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.165827][T12494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.482498][T12494] team0 (unregistering): Port device team_slave_1 removed [ 1442.569111][T12494] team0 (unregistering): Port device team_slave_0 removed [ 1443.020068][T16893] hsr_slave_0: entered promiscuous mode [ 1443.035929][T16893] hsr_slave_1: entered promiscuous mode [ 1443.042784][T16893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1443.065775][T16893] Cannot create hsr debugfs directory [ 1443.194937][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2116'. [ 1443.845428][ T30] audit: type=1804 audit(1751487371.480:85): pid=17052 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2116" name="/newroot/174/file0" dev="tmpfs" ino=969 res=1 errno=0 [ 1447.270665][T16848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1448.564834][T17075] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 1448.576921][T17075] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 1448.582798][T17075] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 1448.582798][T17075] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 1448.602062][T17075] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 1448.613431][T17075] CUSE: DEVNAME unspecified [ 1449.062645][T16848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1449.091464][T16848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1449.580662][T17079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1449.733346][T16848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1455.964848][T16848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.419119][T16848] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.641540][T16848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1457.652278][T16848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1457.697987][T12947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.705252][T12947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.849620][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.856893][T12947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.887419][T17134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1457.894090][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1457.901531][T17143] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11) [ 1457.908147][T17143] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1457.923476][T17143] vhci_hcd vhci_hcd.0: Device attached [ 1457.923476][T17134] vhci_hcd vhci_hcd.0: Device attached [ 1458.153000][ T9696] vhci_hcd: vhci_device speed not set [ 1458.381466][ T9696] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1458.545397][T17150] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 1458.552034][T17150] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1458.575596][T17150] vhci_hcd vhci_hcd.0: Device attached [ 1458.660483][T17134] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 1458.667219][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1458.721180][T17134] vhci_hcd vhci_hcd.0: Device attached [ 1458.876028][T17150] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1458.905331][T17143] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(17) [ 1458.911998][T17143] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1459.614740][T17134] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1459.631684][T17143] vhci_hcd vhci_hcd.0: Device attached [ 1459.640161][T16893] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1459.702888][T16893] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1459.869003][T17134] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(24) [ 1459.875675][T17134] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1459.897929][T17134] vhci_hcd vhci_hcd.0: Device attached [ 1459.906169][T16893] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1460.025257][T17173] vivid-000: disconnect [ 1460.057808][T17173] vivid-000: reconnect [ 1460.435098][T17169] vhci_hcd: connection closed [ 1460.435935][T17152] vhci_hcd: connection closed [ 1460.440808][T17161] vhci_hcd: connection closed [ 1460.446215][T17145] vhci_hcd: connection closed [ 1460.448605][T17140] vhci_hcd: connection reset by peer [ 1460.461958][T17156] vhci_hcd: connection closed [ 1460.474009][T12477] vhci_hcd: stop threads [ 1460.549926][T16893] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1460.559019][T12477] vhci_hcd: release socket [ 1460.563839][T12477] vhci_hcd: disconnect device [ 1460.580519][T12477] vhci_hcd: stop threads [ 1460.629293][T12477] vhci_hcd: release socket [ 1460.650017][T12477] vhci_hcd: disconnect device [ 1460.672886][T12477] vhci_hcd: stop threads [ 1460.706795][T12477] vhci_hcd: release socket [ 1460.714103][T12477] vhci_hcd: disconnect device [ 1460.827345][T12477] vhci_hcd: stop threads [ 1460.831716][T12477] vhci_hcd: release socket [ 1460.834673][T16848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1460.843723][T12477] vhci_hcd: disconnect device [ 1460.961391][T12477] vhci_hcd: stop threads [ 1460.966331][T12477] vhci_hcd: release socket [ 1460.970960][T12477] vhci_hcd: disconnect device [ 1460.976484][T12477] vhci_hcd: stop threads [ 1460.980827][T12477] vhci_hcd: release socket [ 1461.051317][T12477] vhci_hcd: disconnect device [ 1462.870794][T16893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1463.089591][T16893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1463.119524][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.126806][ T8907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1463.181769][T12947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.189112][T12947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1463.646092][ T9696] vhci_hcd: vhci_device speed not set [ 1464.059383][T16848] veth0_vlan: entered promiscuous mode [ 1464.101884][T16848] veth1_vlan: entered promiscuous mode [ 1465.693048][T16848] veth0_macvtap: entered promiscuous mode [ 1465.728242][T16848] veth1_macvtap: entered promiscuous mode [ 1466.096518][T17231] netlink: 'syz.8.2148': attribute type 6 has an invalid length. [ 1466.251117][T16848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.283975][T16893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.320112][T16848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.493089][T17230] syz.8.2148 (17230): attempted to duplicate a private mapping with mremap. This is not supported. [ 1467.003123][T16848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.027650][T16848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.046930][T16848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.058383][T16848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1467.385949][ T8907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1467.405663][ T8907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.234794][T12947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.404701][T12947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1469.568439][T17262] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2152'. [ 1470.993505][T16893] veth0_vlan: entered promiscuous mode [ 1471.009139][T16893] veth1_vlan: entered promiscuous mode [ 1471.174288][T16893] veth0_macvtap: entered promiscuous mode [ 1471.571950][T17282] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1471.597258][ T30] audit: type=1326 audit(1751487399.710:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17276 comm="syz.2.2156" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4afd8e929 code=0x0 [ 1471.642074][T16893] veth1_macvtap: entered promiscuous mode [ 1472.380531][T17287] vivid-000: disconnect [ 1472.392556][T17287] vivid-000: reconnect [ 1473.637426][T16893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1473.775299][T16893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1473.799231][T16893] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.047512][T16893] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.056924][T16893] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1474.466219][T16893] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.567132][T17314] program syz.1.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1477.512329][T12947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.534551][T12947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.196556][T17317] loop2: detected capacity change from 0 to 7 [ 1478.604162][T12496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1478.613702][T12496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1478.665864][T17317] Dev loop2: unable to read RDB block 7 [ 1478.671595][T17317] loop2: AHDI p1 p2 p3 [ 1478.676542][T17317] loop2: partition table partially beyond EOD, truncated [ 1478.683872][T17317] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1478.690886][T17317] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1478.758592][T17317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.145821][T17328] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2174'. [ 1483.024665][ T5982] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.331145][ T5982] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.538064][T17359] vivid-000: disconnect [ 1484.544093][T17359] vivid-000: reconnect [ 1484.611680][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.620758][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.027692][T17388] warn_alloc: 1 callbacks suppressed [ 1486.027732][T17388] syz.8.2173: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1486.048637][T17388] CPU: 0 UID: 0 PID: 17388 Comm: syz.8.2173 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1486.048665][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1486.048676][T17388] Call Trace: [ 1486.048684][T17388] [ 1486.048692][T17388] dump_stack_lvl+0x189/0x250 [ 1486.048723][T17388] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1486.048744][T17388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1486.048768][T17388] ? __pfx__printk+0x10/0x10 [ 1486.048787][T17388] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1486.048816][T17388] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1486.048851][T17388] warn_alloc+0x214/0x310 [ 1486.048882][T17388] ? stack_depot_save_flags+0x40/0x900 [ 1486.048903][T17388] ? rcu_needs_cpu+0x71/0xb0 [ 1486.048930][T17388] ? __pfx_warn_alloc+0x10/0x10 [ 1486.048956][T17388] ? kasan_save_track+0x4f/0x80 [ 1486.048977][T17388] ? xskq_create+0x56/0x170 [ 1486.048999][T17388] ? xsk_init_queue+0xb0/0x110 [ 1486.049017][T17388] ? xsk_setsockopt+0x43f/0x710 [ 1486.049036][T17388] ? do_sock_setsockopt+0x257/0x3e0 [ 1486.049059][T17388] ? __x64_sys_setsockopt+0x18b/0x220 [ 1486.049076][T17388] ? do_syscall_64+0xfa/0x3b0 [ 1486.049098][T17388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.049125][T17388] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1486.049178][T17388] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1486.049207][T17388] ? __kasan_kmalloc+0x93/0xb0 [ 1486.049231][T17388] vmalloc_user_noprof+0xad/0xf0 [ 1486.049253][T17388] ? xskq_create+0xbf/0x170 [ 1486.049275][T17388] xskq_create+0xbf/0x170 [ 1486.049300][T17388] xsk_init_queue+0xb0/0x110 [ 1486.049325][T17388] xsk_setsockopt+0x43f/0x710 [ 1486.049344][T17388] ? rcu_is_watching+0x15/0xb0 [ 1486.049369][T17388] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1486.049388][T17388] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1486.049406][T17388] ? __lock_acquire+0xab9/0xd20 [ 1486.049439][T17388] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1486.049458][T17388] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1486.049482][T17388] do_sock_setsockopt+0x257/0x3e0 [ 1486.049504][T17388] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1486.049529][T17388] ? __fget_files+0x2a/0x420 [ 1486.049560][T17388] __x64_sys_setsockopt+0x18b/0x220 [ 1486.049586][T17388] do_syscall_64+0xfa/0x3b0 [ 1486.049611][T17388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.049626][T17388] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1486.049643][T17388] ? clear_bhb_loop+0x60/0xb0 [ 1486.049665][T17388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1486.049682][T17388] RIP: 0033:0x7f951018e929 [ 1486.049700][T17388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1486.049715][T17388] RSP: 002b:00007f951101a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1486.049735][T17388] RAX: ffffffffffffffda RBX: 00007f95103b6320 RCX: 00007f951018e929 [ 1486.049749][T17388] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1486.049760][T17388] RBP: 00007f9510210b39 R08: 0000000000000052 R09: 0000000000000000 [ 1486.049772][T17388] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1486.049784][T17388] R13: 0000000000000000 R14: 00007f95103b6320 R15: 00007fff4abeb008 [ 1486.049815][T17388] [ 1486.050041][T17388] Mem-Info: [ 1486.375900][T17388] active_anon:3436 inactive_anon:12843 isolated_anon:0 [ 1486.375900][T17388] active_file:19365 inactive_file:42173 isolated_file:0 [ 1486.375900][T17388] unevictable:768 dirty:376 writeback:0 [ 1486.375900][T17388] slab_reclaimable:6652 slab_unreclaimable:117588 [ 1486.375900][T17388] mapped:37283 shmem:10277 pagetables:1747 [ 1486.375900][T17388] sec_pagetables:0 bounce:0 [ 1486.375900][T17388] kernel_misc_reclaimable:0 [ 1486.375900][T17388] free:1277356 free_pcp:11966 free_cma:0 [ 1486.422173][T17388] Node 0 active_anon:13544kB inactive_anon:51372kB active_file:77092kB inactive_file:168692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149048kB dirty:1504kB writeback:0kB shmem:39272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13120kB pagetables:6824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1486.456484][T17388] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1486.489555][T17388] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1486.518671][T17388] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1486.524529][T17388] Node 0 DMA32 free:1191236kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13520kB inactive_anon:51392kB active_file:75312kB inactive_file:168632kB unevictable:1536kB writepending:1532kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:34792kB local_pcp:19636kB free_cma:0kB [ 1486.558568][T17388] lowmem_reserve[]: 0 0 1 1 1 [ 1486.563753][T17388] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1486.593138][T17388] lowmem_reserve[]: 0 0 0 0 0 [ 1486.598380][T17388] Node 1 Normal free:3902764kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13312kB local_pcp:9568kB free_cma:0kB [ 1486.630533][T17388] lowmem_reserve[]: 0 0 0 0 0 [ 1486.635373][T17388] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1486.648214][T17388] Node 0 DMA32: 15*4kB (UE) 555*8kB (ME) 183*16kB (ME) 162*32kB (UME) 734*64kB (UME) 205*128kB (UME) 122*256kB (UME) 54*512kB (UME) 28*1024kB (UM) 21*2048kB (UM) 238*4096kB (UM) = 1191236kB [ 1486.667653][T17388] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1486.679796][T17388] Node 1 Normal: 225*4kB (UME) 59*8kB (UME) 45*16kB (UME) 198*32kB (UME) 53*64kB (UME) 16*128kB (UME) 1*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3902764kB [ 1486.713196][T17388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.723390][T17388] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1486.777304][T17388] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1486.787197][T17388] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1486.796695][T17388] 68719 total pagecache pages [ 1486.801424][T17388] 0 pages in swap cache [ 1486.805679][T17388] Free swap = 124996kB [ 1486.809857][T17388] Total swap = 124996kB [ 1486.814028][T17388] 2097051 pages RAM [ 1486.818013][T17388] 0 pages HighMem/MovableOnly [ 1486.822726][T17388] 424582 pages reserved [ 1486.826993][T17388] 0 pages cma reserved [ 1486.924052][ T5982] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1486.966300][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1486.997841][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1487.008597][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1487.018589][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1487.026838][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1488.336003][T17390] lo speed is unknown, defaulting to 1000 [ 1488.343617][T17390] lo speed is unknown, defaulting to 1000 [ 1488.547504][T17402] tipc: Resetting bearer [ 1488.684717][ T5982] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.780284][ T5908] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1489.185364][ T5833] Bluetooth: hci4: command tx timeout [ 1489.385081][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 1489.401430][ T5908] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.442457][ T5908] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1489.492825][ T5908] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1489.515477][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.523639][ T5908] usb 2-1: Product: syz [ 1489.569929][ T5908] usb 2-1: Manufacturer: syz [ 1489.588731][ T5908] usb 2-1: SerialNumber: syz [ 1490.053725][ T5982] bridge_slave_1: left allmulticast mode [ 1490.433554][ T5982] bridge_slave_1: left promiscuous mode [ 1490.550699][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.668133][T13328] usb 2-1: USB disconnect, device number 16 [ 1491.050123][ T5982] bridge_slave_0: left allmulticast mode [ 1491.164568][ T5982] bridge_slave_0: left promiscuous mode [ 1491.245232][ T5833] Bluetooth: hci4: command tx timeout [ 1491.282948][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.057226][T17435] vivid-000: disconnect [ 1493.062284][T17435] vivid-000: reconnect [ 1493.335327][ T5833] Bluetooth: hci4: command tx timeout [ 1495.465679][ T5833] Bluetooth: hci4: command tx timeout [ 1497.432319][T17466] vivid-000: disconnect [ 1497.443591][T17466] vivid-000: reconnect [ 1498.936594][T17476] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input26 [ 1499.031079][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 1499.040160][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 1508.023071][T17501] vivid-000: disconnect [ 1508.028208][T17501] vivid-000: reconnect [ 1508.248783][T17505] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2196'. [ 1510.352654][T17513] syz.2.2198: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1510.368302][T17513] CPU: 0 UID: 0 PID: 17513 Comm: syz.2.2198 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1510.368330][T17513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1510.368342][T17513] Call Trace: [ 1510.368351][T17513] [ 1510.368359][T17513] dump_stack_lvl+0x189/0x250 [ 1510.368389][T17513] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1510.368413][T17513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1510.368437][T17513] ? __pfx__printk+0x10/0x10 [ 1510.368456][T17513] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1510.368483][T17513] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1510.368520][T17513] warn_alloc+0x214/0x310 [ 1510.368549][T17513] ? __pfx_warn_alloc+0x10/0x10 [ 1510.368573][T17513] ? preempt_schedule_irq+0xb5/0x150 [ 1510.368593][T17513] ? kasan_save_track+0x4f/0x80 [ 1510.368617][T17513] ? __pfx___schedule+0x10/0x10 [ 1510.368644][T17513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.368672][T17513] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1510.368703][T17513] ? rcu_is_watching+0x15/0xb0 [ 1510.368730][T17513] ? preempt_schedule_irq+0xde/0x150 [ 1510.368752][T17513] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1510.368781][T17513] ? irqentry_exit+0x74/0x90 [ 1510.368804][T17513] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1510.368833][T17513] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1510.368856][T17513] vmalloc_user_noprof+0xad/0xf0 [ 1510.368877][T17513] ? xskq_create+0xbf/0x170 [ 1510.368901][T17513] xskq_create+0xbf/0x170 [ 1510.368927][T17513] xsk_init_queue+0xb0/0x110 [ 1510.368950][T17513] xsk_setsockopt+0x43f/0x710 [ 1510.368970][T17513] ? rcu_is_watching+0x15/0xb0 [ 1510.368996][T17513] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1510.369015][T17513] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1510.369040][T17513] ? irqentry_exit+0x74/0x90 [ 1510.369070][T17513] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1510.369089][T17513] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1510.369112][T17513] do_sock_setsockopt+0x257/0x3e0 [ 1510.369135][T17513] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1510.369160][T17513] ? __fget_files+0x2a/0x420 [ 1510.369191][T17513] __x64_sys_setsockopt+0x18b/0x220 [ 1510.369218][T17513] do_syscall_64+0xfa/0x3b0 [ 1510.369240][T17513] ? lockdep_hardirqs_on+0x9c/0x150 [ 1510.369262][T17513] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.369279][T17513] ? clear_bhb_loop+0x60/0xb0 [ 1510.369301][T17513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.369319][T17513] RIP: 0033:0x7fb4afd8e929 [ 1510.369336][T17513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1510.369351][T17513] RSP: 002b:00007fb4b0b7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1510.369371][T17513] RAX: ffffffffffffffda RBX: 00007fb4affb6240 RCX: 00007fb4afd8e929 [ 1510.369385][T17513] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1510.369396][T17513] RBP: 00007fb4afe10b39 R08: 0000000000000052 R09: 0000000000000000 [ 1510.369408][T17513] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1510.369419][T17513] R13: 0000000000000000 R14: 00007fb4affb6240 R15: 00007fffa9b77758 [ 1510.369450][T17513] [ 1510.369933][T17513] Mem-Info: [ 1510.687660][T17513] active_anon:3183 inactive_anon:13001 isolated_anon:0 [ 1510.687660][T17513] active_file:19375 inactive_file:42173 isolated_file:0 [ 1510.687660][T17513] unevictable:768 dirty:274 writeback:0 [ 1510.687660][T17513] slab_reclaimable:6660 slab_unreclaimable:118992 [ 1510.687660][T17513] mapped:40035 shmem:10030 pagetables:1791 [ 1510.687660][T17513] sec_pagetables:0 bounce:0 [ 1510.687660][T17513] kernel_misc_reclaimable:0 [ 1510.687660][T17513] free:1274842 free_pcp:12806 free_cma:0 [ 1510.734175][T17513] Node 0 active_anon:12732kB inactive_anon:52004kB active_file:77132kB inactive_file:168692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160048kB dirty:1096kB writeback:0kB shmem:38584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13160kB pagetables:7000kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1510.768252][T17513] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1510.800233][T17513] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1510.829469][T17513] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1510.835307][T17513] Node 0 DMA32 free:1181236kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12728kB inactive_anon:51960kB active_file:75352kB inactive_file:168632kB unevictable:1536kB writepending:1100kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:37904kB local_pcp:18844kB free_cma:0kB [ 1510.868406][T17513] lowmem_reserve[]: 0 0 1 1 1 [ 1510.873663][T17513] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1510.903035][T17513] lowmem_reserve[]: 0 0 0 0 0 [ 1510.907920][T17513] Node 1 Normal free:3902764kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13312kB local_pcp:9568kB free_cma:0kB [ 1510.939417][T17513] lowmem_reserve[]: 0 0 0 0 0 [ 1510.944155][T17513] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1510.956844][T17513] Node 0 DMA32: 69*4kB (UME) 128*8kB (UME) 224*16kB (UE) 97*32kB (UME) 752*64kB (UME) 210*128kB (UME) 128*256kB (UME) 57*512kB (UME) 28*1024kB (UM) 16*2048kB (UM) 238*4096kB (UM) = 1181236kB [ 1510.975872][T17513] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1510.987795][T17513] Node 1 Normal: 225*4kB (UME) 59*8kB (UME) 45*16kB (UME) 198*32kB (UME) 53*64kB (UME) 16*128kB (UME) 1*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3902764kB [ 1511.005980][T17513] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.015675][T17513] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 1511.024995][T17513] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1511.034823][T17513] Node 1 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1511.044196][T17513] 71574 total pagecache pages [ 1511.048919][T17513] 0 pages in swap cache [ 1511.053101][T17513] Free swap = 124996kB [ 1511.057294][T17513] Total swap = 124996kB [ 1511.061458][T17513] 2097051 pages RAM [ 1511.065284][T17513] 0 pages HighMem/MovableOnly [ 1511.069973][T17513] 424582 pages reserved [ 1511.074164][T17513] 0 pages cma reserved [ 1511.384223][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.885921][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.918705][ T5982] bond0 (unregistering): Released all slaves [ 1512.567080][T17533] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2202'. [ 1512.950274][ T30] audit: type=1326 audit(1751487441.000:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1513.426876][T17390] chnl_net:caif_netlink_parms(): no params data found [ 1513.445675][ T30] audit: type=1326 audit(1751487441.000:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1513.471002][ T30] audit: type=1326 audit(1751487441.000:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1513.671880][ T30] audit: type=1326 audit(1751487441.000:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1514.019585][ T30] audit: type=1326 audit(1751487441.000:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1514.447656][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 1514.456776][T17544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2205'. [ 1514.487604][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2205'. [ 1514.794124][ T30] audit: type=1326 audit(1751487441.010:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1515.534636][ T30] audit: type=1326 audit(1751487441.020:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1515.762517][ T30] audit: type=1326 audit(1751487441.020:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1515.794133][ T30] audit: type=1326 audit(1751487441.020:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1515.822807][ T30] audit: type=1326 audit(1751487441.020:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17528 comm="syz.8.2201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f951018e929 code=0x7ffc0000 [ 1517.968658][T17560] overlay: ./file0 is not a directory [ 1519.235963][T17574] ptrace attach of ""[17580] was attempted by "./syz-executor exec"[17574] [ 1519.289559][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.665926][T17390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.673327][T17390] bridge_slave_0: entered allmulticast mode [ 1519.924666][T17390] bridge_slave_0: entered promiscuous mode [ 1519.952875][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.020500][T17584] vivid-000: disconnect [ 1520.030831][T17584] vivid-000: reconnect [ 1520.389235][T17390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.425971][T17581] Process accounting resumed [ 1520.432597][T17390] bridge_slave_1: entered allmulticast mode [ 1520.470787][T17390] bridge_slave_1: entered promiscuous mode [ 1520.506869][ T5833] Bluetooth: hci2: connection err: -111 [ 1523.553883][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1523.553903][ T30] audit: type=1326 audit(1751487450.050:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17585 comm="syz.4.2213" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f951fd8e929 code=0x0 [ 1523.639249][T17600] netlink: 'syz.4.2213': attribute type 8 has an invalid length. [ 1524.207012][ T30] audit: type=1326 audit(1751487452.290:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17589 comm="syz.2.2214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x0 [ 1524.752058][ T5982] hsr_slave_0: left promiscuous mode [ 1525.766008][ T5982] hsr_slave_1: left promiscuous mode [ 1525.781959][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1526.185335][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.223113][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1526.245314][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1526.364179][ T5982] veth1_macvtap: left promiscuous mode [ 1526.385427][ T5982] veth0_macvtap: left promiscuous mode [ 1526.397486][ T5982] veth1_vlan: left promiscuous mode [ 1526.413307][ T5982] veth0_vlan: left promiscuous mode [ 1529.279328][T17646] syz.2.2221 (17646): drop_caches: 2 [ 1529.322548][T17646] syz.2.2221 (17646): drop_caches: 2 [ 1531.978722][T17664] syz.1.2223: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1531.993948][T17664] CPU: 0 UID: 0 PID: 17664 Comm: syz.1.2223 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1531.993975][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1531.993987][T17664] Call Trace: [ 1531.993994][T17664] [ 1531.994003][T17664] dump_stack_lvl+0x189/0x250 [ 1531.994040][T17664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1531.994065][T17664] ? __pfx__printk+0x10/0x10 [ 1531.994084][T17664] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1531.994113][T17664] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1531.994147][T17664] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1531.994176][T17664] warn_alloc+0x214/0x310 [ 1531.994200][T17664] ? stack_depot_save_flags+0x40/0x900 [ 1531.994225][T17664] ? __pfx_warn_alloc+0x10/0x10 [ 1531.994251][T17664] ? kasan_save_track+0x4f/0x80 [ 1531.994271][T17664] ? xskq_create+0x56/0x170 [ 1531.994292][T17664] ? xsk_init_queue+0xb0/0x110 [ 1531.994310][T17664] ? xsk_setsockopt+0x43f/0x710 [ 1531.994329][T17664] ? do_sock_setsockopt+0x257/0x3e0 [ 1531.994346][T17664] ? __x64_sys_setsockopt+0x18b/0x220 [ 1531.994363][T17664] ? do_syscall_64+0xfa/0x3b0 [ 1531.994385][T17664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.994411][T17664] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1531.994464][T17664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1531.994493][T17664] ? __kasan_kmalloc+0x93/0xb0 [ 1531.994516][T17664] vmalloc_user_noprof+0xad/0xf0 [ 1531.994539][T17664] ? xskq_create+0xbf/0x170 [ 1531.994561][T17664] xskq_create+0xbf/0x170 [ 1531.994586][T17664] xsk_init_queue+0xb0/0x110 [ 1531.994611][T17664] xsk_setsockopt+0x43f/0x710 [ 1531.994634][T17664] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1531.994653][T17664] ? __lock_acquire+0xab9/0xd20 [ 1531.994686][T17664] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1531.994705][T17664] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1531.994728][T17664] do_sock_setsockopt+0x257/0x3e0 [ 1531.994751][T17664] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1531.994776][T17664] ? __fget_files+0x2a/0x420 [ 1531.994806][T17664] __x64_sys_setsockopt+0x18b/0x220 [ 1531.994832][T17664] do_syscall_64+0xfa/0x3b0 [ 1531.994854][T17664] ? lockdep_hardirqs_on+0x9c/0x150 [ 1531.994876][T17664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.994893][T17664] ? clear_bhb_loop+0x60/0xb0 [ 1531.994921][T17664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.994938][T17664] RIP: 0033:0x7fe4b598e929 [ 1531.994955][T17664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.994970][T17664] RSP: 002b:00007fe4b684e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1531.994990][T17664] RAX: ffffffffffffffda RBX: 00007fe4b5bb6160 RCX: 00007fe4b598e929 [ 1531.995004][T17664] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1531.995014][T17664] RBP: 00007fe4b5a10b39 R08: 0000000000000052 R09: 0000000000000000 [ 1531.995026][T17664] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1531.995038][T17664] R13: 0000000000000000 R14: 00007fe4b5bb6160 R15: 00007ffde9214598 [ 1531.995069][T17664] [ 1532.299491][T17664] Mem-Info: [ 1532.302707][T17664] active_anon:3185 inactive_anon:18311 isolated_anon:0 [ 1532.302707][T17664] active_file:19383 inactive_file:42173 isolated_file:0 [ 1532.302707][T17664] unevictable:768 dirty:242 writeback:0 [ 1532.302707][T17664] slab_reclaimable:6620 slab_unreclaimable:117260 [ 1532.302707][T17664] mapped:46108 shmem:15751 pagetables:1714 [ 1532.302707][T17664] sec_pagetables:0 bounce:0 [ 1532.302707][T17664] kernel_misc_reclaimable:0 [ 1532.302707][T17664] free:1276213 free_pcp:9544 free_cma:0 [ 1532.349198][T17664] Node 0 active_anon:12740kB inactive_anon:67504kB active_file:77164kB inactive_file:168692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:178528kB dirty:968kB writeback:0kB shmem:55728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13016kB pagetables:6680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1532.383304][T17664] Node 1 active_anon:0kB inactive_anon:5740kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:5904kB dirty:0kB writeback:0kB shmem:7276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1532.415691][T17664] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1532.445672][T17664] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1532.451882][T17664] Node 0 DMA32 free:1194028kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12736kB inactive_anon:67460kB active_file:75384kB inactive_file:168632kB unevictable:1536kB writepending:868kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:23320kB local_pcp:17416kB free_cma:0kB [ 1532.484884][T17664] lowmem_reserve[]: 0 0 1 1 1 [ 1532.489719][T17664] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1532.519019][T17664] lowmem_reserve[]: 0 0 0 0 0 [ 1532.523858][T17664] Node 1 Normal free:3895456kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:5740kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14872kB local_pcp:11124kB free_cma:0kB [ 1532.556140][T17664] lowmem_reserve[]: 0 0 0 0 0 [ 1532.560957][T17664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1532.573840][T17664] Node 0 DMA32: 16*4kB (UME) 104*8kB (E) 167*16kB (UE) 267*32kB (UME) 744*64kB (UME) 211*128kB (UME) 133*256kB (UME) 60*512kB (UME) 30*1024kB (UM) 18*2048kB (UM) 238*4096kB (UM) = 1193936kB [ 1532.592969][T17664] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1532.605053][T17664] Node 1 Normal: 222*4kB (UME) 57*8kB (UE) 44*16kB (UME) 195*32kB (UE) 51*64kB (UE) 15*128kB (UE) 0*256kB 2*512kB (UM) 2*1024kB (ME) 2*2048kB (ME) 946*4096kB (UM) = 3895456kB [ 1532.624458][T17664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1532.634157][T17664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1532.643963][T17664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1532.653697][T17664] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1532.663133][T17664] 77303 total pagecache pages [ 1532.667927][T17664] 0 pages in swap cache [ 1532.672144][T17664] Free swap = 124996kB [ 1532.676374][T17664] Total swap = 124996kB [ 1532.680578][T17664] 2097051 pages RAM [ 1532.684437][T17664] 0 pages HighMem/MovableOnly [ 1532.689197][T17664] 424582 pages reserved [ 1532.693420][T17664] 0 pages cma reserved [ 1532.942515][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 1533.133264][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 1533.385015][T17675] vivid-000: disconnect [ 1533.392613][T17675] vivid-000: reconnect [ 1535.280741][T17686] loop6: detected capacity change from 0 to 524287999 [ 1537.290487][T17700] 9pnet_fd: Insufficient options for proto=fd [ 1537.505896][T11349] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1537.552582][T11349] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1537.562429][T11349] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1537.571694][T11349] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1537.607176][T11349] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1537.763173][T17706] sctp: [Deprecated]: syz.1.2232 (pid 17706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1537.763173][T17706] Use struct sctp_sack_info instead [ 1538.105370][T17709] binder: 17707:17709 ioctl c0306201 2000000003c0 returned -14 [ 1538.523287][T17390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1538.647220][T17390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.582467][T17696] lo speed is unknown, defaulting to 1000 [ 1539.604386][T17390] team0: Port device team_slave_0 added [ 1539.744060][ T5833] Bluetooth: hci5: command tx timeout [ 1539.846973][T17390] team0: Port device team_slave_1 added [ 1539.853434][T17696] lo speed is unknown, defaulting to 1000 [ 1540.238564][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2236'. [ 1541.827007][ T5833] Bluetooth: hci5: command tx timeout [ 1543.526324][T17390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.533368][T17390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.639280][T17390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.902315][ T5833] Bluetooth: hci5: command tx timeout [ 1544.243803][ T5982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.380215][T17696] chnl_net:caif_netlink_parms(): no params data found [ 1544.441550][ T5982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.550531][ T5982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.630781][ T5982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.742008][T17696] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.750931][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.763584][T17696] bridge_slave_0: entered allmulticast mode [ 1544.772810][T17696] bridge_slave_0: entered promiscuous mode [ 1544.786777][T17696] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.794100][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.805828][T17696] bridge_slave_1: entered allmulticast mode [ 1544.813864][T17696] bridge_slave_1: entered promiscuous mode [ 1544.880153][T17696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.894450][T17696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1545.080668][T17696] team0: Port device team_slave_0 added [ 1545.102354][T17696] team0: Port device team_slave_1 added [ 1545.512864][T17795] sctp: [Deprecated]: syz.8.2241 (pid 17795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1545.512864][T17795] Use struct sctp_sack_info instead [ 1546.344893][ T5833] Bluetooth: hci5: command tx timeout [ 1546.350871][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.357302][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.559799][T17696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1546.594357][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1546.797812][T17696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.416583][T17696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.423775][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.567147][T17696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1547.647226][T11349] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1547.659266][T11349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1547.670936][T11349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1547.695389][T11349] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1547.713747][T11349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1547.775343][ T5982] bridge_slave_1: left allmulticast mode [ 1547.781064][ T5982] bridge_slave_1: left promiscuous mode [ 1547.825399][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.985360][ T5982] bridge_slave_0: left allmulticast mode [ 1548.193425][T17822] syz.1.2245 (17822): drop_caches: 2 [ 1548.202476][T17822] syz.1.2245 (17822): drop_caches: 2 [ 1548.938222][ T5982] bridge_slave_0: left promiscuous mode [ 1549.027815][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.132217][T11349] Bluetooth: hci2: command tx timeout [ 1552.149706][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2249'. [ 1552.210090][T11349] Bluetooth: hci2: command tx timeout [ 1552.218930][T17845] binder: 17842:17845 ioctl c0306201 200000000140 returned -11 [ 1554.295381][T11349] Bluetooth: hci2: command tx timeout [ 1554.526304][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.493898][T17875] xt_SECMARK: invalid mode: 2 [ 1556.046814][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.064395][ T5982] bond0 (unregistering): Released all slaves [ 1556.122576][T17696] hsr_slave_0: entered promiscuous mode [ 1556.261183][T17696] hsr_slave_1: entered promiscuous mode [ 1556.270720][T17696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1556.282158][T17696] Cannot create hsr debugfs directory [ 1556.416059][T11349] Bluetooth: hci2: command tx timeout [ 1557.147123][T17819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1559.112411][ T5931] lo speed is unknown, defaulting to 1000 [ 1560.149421][T17810] lo speed is unknown, defaulting to 1000 [ 1560.873453][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 1563.298160][T17810] lo speed is unknown, defaulting to 1000 [ 1563.426599][T17948] No buffer was provided with the request [ 1567.227241][T17951] Process accounting resumed [ 1568.332054][ T5982] hsr_slave_0: left promiscuous mode [ 1568.355644][ T5982] hsr_slave_1: left promiscuous mode [ 1568.366706][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1568.374276][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1568.383339][ T5982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1568.495391][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.529651][ T5982] veth1_macvtap: left promiscuous mode [ 1568.535665][ T5982] veth0_macvtap: left promiscuous mode [ 1568.541460][ T5982] veth1_vlan: left promiscuous mode [ 1568.547464][ T5982] veth0_vlan: left promiscuous mode [ 1569.507856][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 1569.588872][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 1571.074952][T17810] chnl_net:caif_netlink_parms(): no params data found [ 1571.351247][T17810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.363188][T17810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.371069][T17810] bridge_slave_0: entered allmulticast mode [ 1571.382981][T17810] bridge_slave_0: entered promiscuous mode [ 1571.403970][ T5982] bridge_slave_1: left allmulticast mode [ 1571.420551][ T5982] bridge_slave_1: left promiscuous mode [ 1571.426996][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.442338][ T5982] bridge_slave_0: left allmulticast mode [ 1571.448332][ T5982] bridge_slave_0: left promiscuous mode [ 1571.454342][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.602717][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1571.628689][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1571.658698][ T5982] bond0 (unregistering): Released all slaves [ 1571.689769][T17810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.701533][T17810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.712076][T17810] bridge_slave_1: entered allmulticast mode [ 1571.724250][T17810] bridge_slave_1: entered promiscuous mode [ 1571.827723][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.917904][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 1571.980854][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 1572.245800][T17696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1572.266964][T17696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1572.285000][T17810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.312734][T17696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1572.338044][T17696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1572.383627][T17810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.486101][T17810] team0: Port device team_slave_0 added [ 1572.525901][T17810] team0: Port device team_slave_1 added [ 1572.628225][T17810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.642331][T17810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1572.668490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.675710][T17810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.699918][T17810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.711051][T17810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1572.737046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1572.745498][T17810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.863536][T17810] hsr_slave_0: entered promiscuous mode [ 1572.876390][T17810] hsr_slave_1: entered promiscuous mode [ 1572.882848][T17810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1572.891029][T17810] Cannot create hsr debugfs directory [ 1572.997683][T17696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.126314][T17696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.179883][ T8907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.187107][ T8907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.209513][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.216754][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1573.682556][T17696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1573.728783][T17810] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1573.747688][T17810] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1573.768554][T17810] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1573.812569][T17810] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1573.889309][T17696] veth0_vlan: entered promiscuous mode [ 1573.929172][T17696] veth1_vlan: entered promiscuous mode [ 1574.023146][T17810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1574.039514][T17696] veth0_macvtap: entered promiscuous mode [ 1574.073402][T17696] veth1_macvtap: entered promiscuous mode [ 1574.089505][T17810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1574.118257][T12950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.125568][T12950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1574.142783][T12950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.150110][T12950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1574.201541][T17696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1574.260951][T17696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1574.300065][T17696] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.312243][T17696] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.325196][T17696] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.334068][T17696] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.537598][ T8907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.566810][ T8907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.614192][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.643776][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.830576][T17810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1578.268752][T18120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1578.393279][T18120] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1578.680459][T18133] syz.3.2268 (18133): drop_caches: 2 [ 1578.697751][T18133] syz.3.2268 (18133): drop_caches: 2 [ 1580.540754][T18153] netlink: 'syz.1.2271': attribute type 1 has an invalid length. [ 1580.549259][T18153] NCSI netlink: No device for ifindex 0 [ 1581.432325][T18147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1581.439836][T18147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.765972][T18147] bridge0: entered allmulticast mode [ 1581.890695][T18166] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1584.008727][T17810] veth0_vlan: entered promiscuous mode [ 1584.042654][T17810] veth1_vlan: entered promiscuous mode [ 1585.198037][T17810] veth0_macvtap: entered promiscuous mode [ 1585.314806][T18191] sctp: [Deprecated]: syz.8.2282 (pid 18191) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1585.314806][T18191] Use struct sctp_sack_info instead [ 1585.340377][T17810] veth1_macvtap: entered promiscuous mode [ 1585.833626][T17810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1585.940773][T17810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1585.952555][T17810] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.961466][T17810] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.975220][T17810] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1585.984458][T17810] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.306629][T12950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.405154][T12950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1591.807701][T12947] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1591.896536][T12947] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.341296][T18238] kthread_run failed with err -4 [ 1593.499920][T18244] __vm_enough_memory: pid: 18244, comm: syz.1.2287, bytes: 21200225406976 not enough memory for the allocation [ 1594.866275][T18261] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2293'. [ 1598.501663][T18278] netlink: 'syz.3.2297': attribute type 1 has an invalid length. [ 1598.533491][T18278] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1602.869435][T18310] batadv0: entered promiscuous mode [ 1603.456547][T14329] libceph: connect (1)[c::]:6789 error -101 [ 1603.518292][T14329] libceph: mon0 (1)[c::]:6789 connect error [ 1603.659384][ T8907] batman_adv: batadv0: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1603.762141][T18312] ceph: No mds server is up or the cluster is laggy [ 1605.216873][T18332] xt_nat: multiple ranges no longer supported [ 1606.959085][T18334] XFS (nullb0): Invalid superblock magic number [ 1607.496692][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.503139][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.819605][T18362] program syz.2.2315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1607.854432][T18362] program syz.2.2315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1607.868326][T18362] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1608.733784][T18372] siw: device registration error -23 [ 1612.952389][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880577bdc00: rx timeout, send abort [ 1613.389731][T18408] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 1613.398746][T18408] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 1613.460805][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880577bdc00: abort rx timeout. Force session deactivation [ 1615.394337][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 1615.450491][T18425] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.459734][T18425] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.468504][T18425] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.477241][T18425] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1615.945432][T18425] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.954381][T18425] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.963516][T18425] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.972510][T18425] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1617.239024][T18444] warn_alloc: 1 callbacks suppressed [ 1617.239063][T18444] syz.8.2329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 1617.259743][T18444] CPU: 1 UID: 0 PID: 18444 Comm: syz.8.2329 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1617.259768][T18444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1617.259781][T18444] Call Trace: [ 1617.259790][T18444] [ 1617.259800][T18444] dump_stack_lvl+0x189/0x250 [ 1617.259833][T18444] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1617.259856][T18444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1617.259879][T18444] ? __pfx__printk+0x10/0x10 [ 1617.259898][T18444] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1617.259924][T18444] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1617.259958][T18444] warn_alloc+0x214/0x310 [ 1617.259980][T18444] ? stack_depot_save_flags+0x40/0x900 [ 1617.260004][T18444] ? __pfx_warn_alloc+0x10/0x10 [ 1617.260028][T18444] ? kasan_save_track+0x4f/0x80 [ 1617.260048][T18444] ? xskq_create+0x56/0x170 [ 1617.260069][T18444] ? xsk_init_queue+0xb0/0x110 [ 1617.260088][T18444] ? xsk_setsockopt+0x43f/0x710 [ 1617.260107][T18444] ? do_sock_setsockopt+0x257/0x3e0 [ 1617.260133][T18444] ? __x64_sys_setsockopt+0x18b/0x220 [ 1617.260151][T18444] ? do_syscall_64+0xfa/0x3b0 [ 1617.260174][T18444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.260201][T18444] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1617.260256][T18444] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1617.260285][T18444] ? __kasan_kmalloc+0x93/0xb0 [ 1617.260309][T18444] vmalloc_user_noprof+0xad/0xf0 [ 1617.260331][T18444] ? xskq_create+0xbf/0x170 [ 1617.260353][T18444] xskq_create+0xbf/0x170 [ 1617.260379][T18444] xsk_init_queue+0xb0/0x110 [ 1617.260404][T18444] xsk_setsockopt+0x43f/0x710 [ 1617.260428][T18444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1617.260453][T18444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1617.260471][T18444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1617.260492][T18444] ? do_sock_setsockopt+0x236/0x3e0 [ 1617.260513][T18444] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1617.260535][T18444] do_sock_setsockopt+0x257/0x3e0 [ 1617.260558][T18444] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1617.260583][T18444] ? __fget_files+0x2a/0x420 [ 1617.260614][T18444] __x64_sys_setsockopt+0x18b/0x220 [ 1617.260640][T18444] do_syscall_64+0xfa/0x3b0 [ 1617.260665][T18444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.260682][T18444] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1617.260698][T18444] ? clear_bhb_loop+0x60/0xb0 [ 1617.260720][T18444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.260737][T18444] RIP: 0033:0x7f951018e929 [ 1617.260755][T18444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1617.260770][T18444] RSP: 002b:00007f951101a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1617.260790][T18444] RAX: ffffffffffffffda RBX: 00007f95103b6320 RCX: 00007f951018e929 [ 1617.260803][T18444] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 1617.260815][T18444] RBP: 00007f9510210b39 R08: 0000000000000052 R09: 0000000000000000 [ 1617.260826][T18444] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1617.260838][T18444] R13: 0000000000000000 R14: 00007f95103b6320 R15: 00007fff4abeb008 [ 1617.260867][T18444] [ 1617.260906][T18444] Mem-Info: [ 1617.574439][T18444] active_anon:3176 inactive_anon:13497 isolated_anon:0 [ 1617.574439][T18444] active_file:19421 inactive_file:42173 isolated_file:0 [ 1617.574439][T18444] unevictable:768 dirty:385 writeback:0 [ 1617.574439][T18444] slab_reclaimable:6508 slab_unreclaimable:118402 [ 1617.574439][T18444] mapped:41143 shmem:10796 pagetables:1693 [ 1617.574439][T18444] sec_pagetables:0 bounce:0 [ 1617.574439][T18444] kernel_misc_reclaimable:0 [ 1617.574439][T18444] free:1275271 free_pcp:12091 free_cma:0 [ 1617.620358][T18444] Node 0 active_anon:12704kB inactive_anon:53988kB active_file:77316kB inactive_file:168692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:164480kB dirty:1540kB writeback:0kB shmem:41648kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12936kB pagetables:6608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1617.625414][ T5833] Bluetooth: hci2: command 0x0405 tx timeout [ 1617.654533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1617.655028][T18444] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1617.699706][T18444] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1617.728709][T18444] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1617.735184][T18444] Node 0 DMA32 free:1184504kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12700kB inactive_anon:53944kB active_file:75536kB inactive_file:168632kB unevictable:1536kB writepending:1540kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:33504kB local_pcp:22544kB free_cma:0kB [ 1617.767923][T18444] lowmem_reserve[]: 0 0 1 1 1 [ 1617.772621][T18444] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1617.801619][T18444] lowmem_reserve[]: 0 0 0 0 0 [ 1617.806469][T18444] Node 1 Normal free:3901212kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14852kB local_pcp:3268kB free_cma:0kB [ 1617.838269][T18444] lowmem_reserve[]: 0 0 0 0 0 [ 1617.842984][T18444] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1617.855652][T18444] Node 0 DMA32: 1494*4kB (UME) 1030*8kB (UME) 631*16kB (UME) 854*32kB (UME) 385*64kB (UME) 128*128kB (UME) 107*256kB (UME) 57*512kB (UME) 29*1024kB (UM) 15*2048kB (UM) 238*4096kB (UM) = 1184504kB [ 1617.874938][T18444] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1617.886796][T18444] Node 1 Normal: 226*4kB (UME) 61*8kB (UME) 46*16kB (UME) 208*32kB (UME) 56*64kB (UME) 18*128kB (UME) 2*256kB (M) 4*512kB (UM) 3*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3901264kB [ 1617.904877][T18444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1617.914457][T18444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1617.923753][T18444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1617.933318][T18444] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1617.943396][T18444] 72386 total pagecache pages [ 1617.948120][T18444] 0 pages in swap cache [ 1617.952261][T18444] Free swap = 124996kB [ 1617.956437][T18444] Total swap = 124996kB [ 1617.960577][T18444] 2097051 pages RAM [ 1617.964369][T18444] 0 pages HighMem/MovableOnly [ 1617.969179][T18444] 424582 pages reserved [ 1617.973324][T18444] 0 pages cma reserved [ 1618.722499][T18454] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1619.598680][T11349] Bluetooth: hci2: unexpected event for opcode 0x200d [ 1620.411797][T18467] vivid-000: disconnect [ 1620.436981][T18467] vivid-000: reconnect [ 1620.609163][T18471] No such timeout policy "syz0" [ 1622.181669][T18482] syz.9.2337: attempt to access beyond end of device [ 1622.181669][T18482] nbd9: rw=0, sector=6, nr_sectors = 2 limit=0 [ 1622.194660][T18482] ADFS-fs (nbd9): error: unable to read block 3, try 0 [ 1623.267599][T18499] Bluetooth: (null): Invalid header checksum [ 1623.367752][T12476] Bluetooth: (null): Invalid header checksum [ 1627.962763][T18553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1628.889273][T18558] netlink: 'syz.3.2345': attribute type 11 has an invalid length. [ 1633.340734][T18588] warn_alloc: 1 callbacks suppressed [ 1633.340754][T18588] syz.3.2355: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 1633.361340][T18588] CPU: 0 UID: 0 PID: 18588 Comm: syz.3.2355 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1633.361365][T18588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1633.361377][T18588] Call Trace: [ 1633.361387][T18588] [ 1633.361397][T18588] dump_stack_lvl+0x189/0x250 [ 1633.361431][T18588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1633.361457][T18588] ? __pfx__printk+0x10/0x10 [ 1633.361475][T18588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1633.361501][T18588] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1633.361529][T18588] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1633.361557][T18588] warn_alloc+0x214/0x310 [ 1633.361579][T18588] ? stack_depot_save_flags+0x40/0x900 [ 1633.361611][T18588] ? __pfx_warn_alloc+0x10/0x10 [ 1633.361636][T18588] ? kasan_save_track+0x4f/0x80 [ 1633.361656][T18588] ? xskq_create+0x56/0x170 [ 1633.361677][T18588] ? xsk_init_queue+0xb0/0x110 [ 1633.361696][T18588] ? xsk_setsockopt+0x43f/0x710 [ 1633.361714][T18588] ? do_sock_setsockopt+0x257/0x3e0 [ 1633.361732][T18588] ? __x64_sys_setsockopt+0x18b/0x220 [ 1633.361748][T18588] ? do_syscall_64+0xfa/0x3b0 [ 1633.361770][T18588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.361795][T18588] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1633.361848][T18588] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1633.361877][T18588] ? __kasan_kmalloc+0x93/0xb0 [ 1633.361900][T18588] vmalloc_user_noprof+0xad/0xf0 [ 1633.361922][T18588] ? xskq_create+0xbf/0x170 [ 1633.361944][T18588] xskq_create+0xbf/0x170 [ 1633.361969][T18588] xsk_init_queue+0xb0/0x110 [ 1633.361998][T18588] xsk_setsockopt+0x43f/0x710 [ 1633.362022][T18588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1633.362042][T18588] ? __lock_acquire+0xab9/0xd20 [ 1633.362074][T18588] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1633.362093][T18588] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1633.362115][T18588] do_sock_setsockopt+0x257/0x3e0 [ 1633.362137][T18588] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1633.362161][T18588] ? __fget_files+0x2a/0x420 [ 1633.362192][T18588] __x64_sys_setsockopt+0x18b/0x220 [ 1633.362218][T18588] do_syscall_64+0xfa/0x3b0 [ 1633.362242][T18588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.362258][T18588] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1633.362275][T18588] ? clear_bhb_loop+0x60/0xb0 [ 1633.362297][T18588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.362315][T18588] RIP: 0033:0x7ff165d8e929 [ 1633.362333][T18588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1633.362347][T18588] RSP: 002b:00007ff166c62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1633.362366][T18588] RAX: ffffffffffffffda RBX: 00007ff165fb6080 RCX: 00007ff165d8e929 [ 1633.362379][T18588] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1633.362390][T18588] RBP: 00007ff165e10b39 R08: 0000000000000052 R09: 0000000000000000 [ 1633.362401][T18588] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1633.362412][T18588] R13: 0000000000000000 R14: 00007ff165fb6080 R15: 00007ffd2995ae98 [ 1633.362443][T18588] [ 1633.362471][T18588] Mem-Info: [ 1633.696780][T18588] active_anon:3326 inactive_anon:19619 isolated_anon:0 [ 1633.696780][T18588] active_file:19427 inactive_file:42173 isolated_file:0 [ 1633.696780][T18588] unevictable:771 dirty:281 writeback:67 [ 1633.696780][T18588] slab_reclaimable:6521 slab_unreclaimable:117632 [ 1633.696780][T18588] mapped:46063 shmem:16958 pagetables:1784 [ 1633.696780][T18588] sec_pagetables:0 bounce:0 [ 1633.696780][T18588] kernel_misc_reclaimable:0 [ 1633.696780][T18588] free:1271970 free_pcp:11882 free_cma:0 [ 1633.742660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.762182][T18588] Node 0 active_anon:17204kB inactive_anon:74676kB active_file:77340kB inactive_file:168692kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:180260kB dirty:1124kB writeback:268kB shmem:66296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13228kB pagetables:6972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1633.796289][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.802907][T18588] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1633.834616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.976445][T18588] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1634.005543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.012330][T18588] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1634.021401][T18588] Node 0 DMA32 free:1170292kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17200kB inactive_anon:74632kB active_file:75560kB inactive_file:168632kB unevictable:1548kB writepending:1396kB present:3129332kB managed:2561448kB mlocked:12kB bounce:0kB free_pcp:33640kB local_pcp:10536kB free_cma:0kB [ 1634.054390][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.064131][T18588] lowmem_reserve[]: 0 0 1 1 1 [ 1634.069198][T18588] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1634.098370][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.104905][T18588] lowmem_reserve[]: 0 0 0 0 0 [ 1634.110044][T18588] Node 1 Normal free:3902220kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13844kB local_pcp:10576kB free_cma:0kB [ 1634.141443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1634.150415][T18588] lowmem_reserve[]: 0 0 0 0 0 [ 1634.170552][T18588] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1634.183789][T18588] Node 0 DMA32: 575*4kB (UE) 157*8kB (UE) 501*16kB (UE) 592*32kB (UE) 427*64kB (UME) 129*128kB (UME) 107*256kB (UME) 57*512kB (UME) 29*1024kB (UM) 17*2048kB (UM) 238*4096kB (UM) = 1170292kB [ 1634.203443][T18588] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1634.215842][T18588] Node 1 Normal: 226*4kB (UME) 61*8kB (UME) 45*16kB (UME) 208*32kB (UME) 56*64kB (UME) 18*128kB (UME) 2*256kB (M) 4*512kB (UM) 4*1024kB (ME) 1*2048kB (E) 947*4096kB (UM) = 3902272kB [ 1634.236598][T18588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1634.246411][T18588] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1634.256021][T18588] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1634.265978][T18588] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1634.275592][T18588] 78554 total pagecache pages [ 1634.280563][T18588] 0 pages in swap cache [ 1634.284935][T18588] Free swap = 124996kB [ 1634.290549][T18588] Total swap = 124996kB [ 1634.294880][T18588] 2097051 pages RAM [ 1634.298944][T18588] 0 pages HighMem/MovableOnly [ 1634.303817][T18588] 424582 pages reserved [ 1634.308147][T18588] 0 pages cma reserved [ 1636.128823][T18610] tty tty27: ldisc open failed (-12), clearing slot 26 [ 1637.914433][T18629] kAFS: No cell specified [ 1639.445837][T18651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 1642.005277][T18678] sctp: [Deprecated]: syz.9.2371 (pid 18678) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1642.005277][T18678] Use struct sctp_sack_info instead [ 1642.827245][T18685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1643.152852][T18687] xt_TCPMSS: Only works on TCP SYN packets [ 1644.051680][T18696] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 1644.059636][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2375'. [ 1645.954202][T18711] input: syz1 as /devices/virtual/input/input27 [ 1647.126800][T18702] libceph: resolve '½@½Ée2²âOAq§¨­cz' (ret=-3): failed [ 1650.425976][T18738] warn_alloc: 2 callbacks suppressed [ 1650.425997][T18738] syz.9.2383: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0-1 [ 1650.446469][T18738] CPU: 1 UID: 0 PID: 18738 Comm: syz.9.2383 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1650.446495][T18738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1650.446506][T18738] Call Trace: [ 1650.446514][T18738] [ 1650.446521][T18738] dump_stack_lvl+0x189/0x250 [ 1650.446553][T18738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1650.446577][T18738] ? __pfx__printk+0x10/0x10 [ 1650.446593][T18738] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1650.446620][T18738] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1650.446648][T18738] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1650.446673][T18738] warn_alloc+0x214/0x310 [ 1650.446691][T18738] ? stack_depot_save_flags+0x40/0x900 [ 1650.446712][T18738] ? __pfx_warn_alloc+0x10/0x10 [ 1650.446734][T18738] ? kasan_save_track+0x4f/0x80 [ 1650.446751][T18738] ? xskq_create+0x56/0x170 [ 1650.446770][T18738] ? xsk_init_queue+0xb0/0x110 [ 1650.446786][T18738] ? xsk_setsockopt+0x43f/0x710 [ 1650.446803][T18738] ? do_sock_setsockopt+0x257/0x3e0 [ 1650.446819][T18738] ? __x64_sys_setsockopt+0x18b/0x220 [ 1650.446835][T18738] ? do_syscall_64+0xfa/0x3b0 [ 1650.446856][T18738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.446881][T18738] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1650.446930][T18738] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1650.446955][T18738] ? __kasan_kmalloc+0x93/0xb0 [ 1650.446975][T18738] vmalloc_user_noprof+0xad/0xf0 [ 1650.446993][T18738] ? xskq_create+0xbf/0x170 [ 1650.447013][T18738] xskq_create+0xbf/0x170 [ 1650.447037][T18738] xsk_init_queue+0xb0/0x110 [ 1650.447061][T18738] xsk_setsockopt+0x43f/0x710 [ 1650.447084][T18738] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1650.447103][T18738] ? __lock_acquire+0xab9/0xd20 [ 1650.447136][T18738] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1650.447155][T18738] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1650.447177][T18738] do_sock_setsockopt+0x257/0x3e0 [ 1650.447200][T18738] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1650.447220][T18738] ? __fget_files+0x2a/0x420 [ 1650.447251][T18738] __x64_sys_setsockopt+0x18b/0x220 [ 1650.447277][T18738] do_syscall_64+0xfa/0x3b0 [ 1650.447298][T18738] ? lockdep_hardirqs_on+0x9c/0x150 [ 1650.447320][T18738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.447336][T18738] ? clear_bhb_loop+0x60/0xb0 [ 1650.447357][T18738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.447371][T18738] RIP: 0033:0x7f8fdef8e929 [ 1650.447387][T18738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1650.447400][T18738] RSP: 002b:00007f8fdfe72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1650.447418][T18738] RAX: ffffffffffffffda RBX: 00007f8fdf1b6080 RCX: 00007f8fdef8e929 [ 1650.447431][T18738] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 1650.447440][T18738] RBP: 00007f8fdf010b39 R08: 0000000000000052 R09: 0000000000000000 [ 1650.447451][T18738] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1650.447469][T18738] R13: 0000000000000000 R14: 00007f8fdf1b6080 R15: 00007ffce2b2fe98 [ 1650.447495][T18738] [ 1650.447503][T18738] Mem-Info: [ 1650.820022][T18738] active_anon:3176 inactive_anon:9913 isolated_anon:0 [ 1650.820022][T18738] active_file:19425 inactive_file:42172 isolated_file:0 [ 1650.820022][T18738] unevictable:768 dirty:354 writeback:0 [ 1650.820022][T18738] slab_reclaimable:6517 slab_unreclaimable:118091 [ 1650.820022][T18738] mapped:34473 shmem:7132 pagetables:1706 [ 1650.820022][T18738] sec_pagetables:0 bounce:0 [ 1650.820022][T18738] kernel_misc_reclaimable:0 [ 1650.820022][T18738] free:1278174 free_pcp:13407 free_cma:0 [ 1650.865774][T18738] Node 0 active_anon:12704kB inactive_anon:39652kB active_file:77332kB inactive_file:168688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137832kB dirty:1416kB writeback:0kB shmem:26992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12924kB pagetables:6660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1650.899689][T18738] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1650.931904][T18738] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1650.960721][T18738] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1650.966515][T18738] Node 0 DMA32 free:1194048kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12700kB inactive_anon:39608kB active_file:75552kB inactive_file:168628kB unevictable:1536kB writepending:1416kB present:3129332kB managed:2561448kB mlocked:0kB bounce:0kB free_pcp:41256kB local_pcp:27288kB free_cma:0kB [ 1650.999232][T18738] lowmem_reserve[]: 0 0 1 1 1 [ 1651.003926][T18738] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1780kB inactive_file:60kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1651.033605][T18738] lowmem_reserve[]: 0 0 0 0 0 [ 1651.038360][T18738] Node 1 Normal free:3903536kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12580kB local_pcp:3268kB free_cma:0kB [ 1651.069557][T18738] lowmem_reserve[]: 0 0 0 0 0 [ 1651.074261][T18738] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1651.086910][T18738] Node 0 DMA32: 1052*4kB (UME) 344*8kB (UME) 794*16kB (UME) 1035*32kB (UME) 625*64kB (UME) 128*128kB (UME) 106*256kB (UME) 58*512kB (UME) 28*1024kB (UM) 12*2048kB (UM) 238*4096kB (UM) = 1194096kB [ 1651.106219][T18738] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1651.119668][T18738] Node 1 Normal: 226*4kB (UME) 59*8kB (UME) 45*16kB (UME) 210*32kB (UME) 57*64kB (UME) 17*128kB (UME) 1*256kB (M) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (UM) = 3903536kB [ 1651.137748][T18738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1651.147312][T18738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1651.156639][T18738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1651.166206][T18738] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1651.175526][T18738] 68746 total pagecache pages [ 1651.180186][T18738] 0 pages in swap cache [ 1651.184335][T18738] Free swap = 124996kB [ 1651.188524][T18738] Total swap = 124996kB [ 1651.192664][T18738] 2097051 pages RAM [ 1651.196502][T18738] 0 pages HighMem/MovableOnly [ 1651.201163][T18738] 424582 pages reserved [ 1651.205352][T18738] 0 pages cma reserved [ 1651.389192][T18742] hfs: can't find a HFS filesystem on dev nullb0 [ 1652.329467][T18751] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1652.367910][ T30] audit: type=1326 audit(1751487580.470:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18743 comm="syz.2.2385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb4afd8e929 code=0x0 [ 1656.599546][T18767] ubi: mtd0 is already attached to ubi31 [ 1656.834402][T18772] netlink: 452 bytes leftover after parsing attributes in process `syz.2.2388'. [ 1657.797374][T18775] openvswitch: netlink: Message has 4 unknown bytes. [ 1660.766346][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 1663.444007][T18842] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 1666.005234][ T30] audit: type=1326 audit(1751487593.990:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1666.115776][ T30] audit: type=1326 audit(1751487593.990:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1666.198733][ T30] audit: type=1326 audit(1751487594.010:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1666.349043][ T30] audit: type=1326 audit(1751487594.010:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1666.532080][ T30] audit: type=1326 audit(1751487594.010:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1667.149836][ T30] audit: type=1326 audit(1751487594.020:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1667.172562][ T30] audit: type=1326 audit(1751487594.020:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1667.194675][ T30] audit: type=1326 audit(1751487594.020:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1667.449343][ T30] audit: type=1326 audit(1751487594.020:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1668.077280][ T30] audit: type=1326 audit(1751487594.020:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18851 comm="syz.2.2406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4afd8e929 code=0x7ffc0000 [ 1775.745046][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1775.752071][ C1] rcu: 0-...!: (1 GPs behind) idle=e44c/1/0x4000000000000000 softirq=114409/114431 fqs=1 [ 1775.763578][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13322/1:b..l [ 1775.771600][ C1] rcu: (detected by 1, t=10505 jiffies, g=82161, q=662 ncpus=2) [ 1775.779345][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1775.779385][ C0] NMI backtrace for cpu 0 [ 1775.779401][ C0] CPU: 0 UID: 0 PID: 18874 Comm: syz.1.2410 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1775.779419][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1775.779429][ C0] RIP: 0010:_raw_spin_lock_irqsave+0x22/0xf0 [ 1775.779458][ C0] Code: 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 54 53 48 83 e4 e0 48 83 ec 60 48 89 fb 65 48 8b 05 0e 4e 37 07 <48> 89 44 24 48 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 a5 8c 9e 8d [ 1775.779471][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00000086 [ 1775.779484][ C0] RAX: a3211b7d6defe700 RBX: ffffffff99cb9598 RCX: 0000000000011dd0 [ 1775.779495][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff99cb9598 [ 1775.779505][ C0] RBP: ffffc90000007c98 R08: ffffc90000007cbf R09: 0000000000000000 [ 1775.779515][ C0] R10: ffffc90000007cb0 R11: fffff52000000f98 R12: ffff88807cbf4340 [ 1775.779526][ C0] R13: dffffc0000000000 R14: 18594f078653c05c R15: ffffffff99cb9590 [ 1775.779537][ C0] FS: 00007fe4b684e6c0(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1775.779549][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1775.779559][ C0] CR2: 0000001b2f50aff8 CR3: 000000007d202000 CR4: 00000000003526f0 [ 1775.779572][ C0] Call Trace: [ 1775.779581][ C0] [ 1775.779590][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1775.779613][ C0] debug_object_deactivate+0x9a/0x250 [ 1775.779633][ C0] debug_deactivate+0x1d/0x200 [ 1775.779657][ C0] __hrtimer_run_queues+0x2b0/0xc60 [ 1775.779685][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1775.779701][ C0] ? read_tsc+0x9/0x20 [ 1775.779721][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1775.779753][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1775.779773][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1775.779790][ C0] [ 1775.779795][ C0] [ 1775.779801][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1775.779816][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 1775.779833][ C0] Code: 74 05 e8 7b 64 65 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 4d 2e f6 65 8b 05 cc 4a 37 07 85 c0 74 40 48 c7 04 24 0e 36 [ 1775.779845][ C0] RSP: 0018:ffffc90003347b60 EFLAGS: 00000206 [ 1775.779857][ C0] RAX: a3211b7d6defe700 RBX: 0000000000000a06 RCX: a3211b7d6defe700 [ 1775.779867][ C0] RDX: 0000000000000007 RSI: ffffffff8d96e815 RDI: 0000000000000001 [ 1775.779876][ C0] RBP: ffffc90003347bf0 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e [ 1775.779887][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: dffffc0000000000 [ 1775.779897][ C0] R13: ffff8880b8627ac0 R14: ffff8880b8627ac0 R15: 1ffff92000668f6c [ 1775.779917][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1775.779933][ C0] ? read_tsc+0x9/0x20 [ 1775.779952][ C0] clock_was_set+0x63b/0x7c0 [ 1775.779989][ C0] ? __pfx_clock_was_set+0x10/0x10 [ 1775.780010][ C0] ? do_settimeofday64+0x2d1/0x5e0 [ 1775.780026][ C0] ? timekeeping_update_from_shadow+0x2b1/0x350 [ 1775.780043][ C0] do_settimeofday64+0x2ec/0x5e0 [ 1775.780056][ C0] ? safesetid_security_capable+0xa9/0x1a0 [ 1775.780076][ C0] ? __pfx_do_settimeofday64+0x10/0x10 [ 1775.780089][ C0] ? amd_sfh_work_buffer+0x44/0x4d0 [ 1775.780106][ C0] ? bpf_lsm_settime+0x9/0x20 [ 1775.780117][ C0] ? security_settime64+0x76/0x290 [ 1775.780136][ C0] ? do_sys_settimeofday64+0x163/0x260 [ 1775.780153][ C0] __x64_sys_clock_settime+0x22c/0x280 [ 1775.780171][ C0] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 1775.780185][ C0] ? rcu_is_watching+0x15/0xb0 [ 1775.780206][ C0] ? do_syscall_64+0xbe/0x3b0 [ 1775.780226][ C0] do_syscall_64+0xfa/0x3b0 [ 1775.780244][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.780257][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1775.780271][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1775.780286][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.780299][ C0] RIP: 0033:0x7fe4b598e929 [ 1775.780313][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1775.780325][ C0] RSP: 002b:00007fe4b684e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 1775.780339][ C0] RAX: ffffffffffffffda RBX: 00007fe4b5bb6160 RCX: 00007fe4b598e929 [ 1775.780349][ C0] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 1775.780359][ C0] RBP: 00007fe4b5a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1775.780367][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1775.780376][ C0] R13: 0000000000000000 R14: 00007fe4b5bb6160 R15: 00007ffde9214598 [ 1775.780394][ C0] [ 1775.781372][ C1] task:kworker/1:5 state:R running task stack:24296 pid:13322 tgid:13322 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1776.251844][ C1] Workqueue: events_power_efficient gc_worker [ 1776.257933][ C1] Call Trace: [ 1776.261218][ C1] [ 1776.264160][ C1] __schedule+0x16a2/0x4cb0 [ 1776.268728][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 1776.274050][ C1] ? __pfx___schedule+0x10/0x10 [ 1776.278953][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 1776.284250][ C1] preempt_schedule_irq+0xb5/0x150 [ 1776.289382][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1776.295122][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1776.300946][ C1] irqentry_exit+0x6f/0x90 [ 1776.305372][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1776.311358][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x17e/0x1c0 [ 1776.318218][ C1] Code: f8 4d 85 e4 75 16 e8 41 fb 2f f8 eb 15 e8 3a fb 2f f8 e8 95 96 cf 01 4d 85 e4 74 ea e8 2b fb 2f f8 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00 [ 1776.337842][ C1] RSP: 0018:ffffc9000471f860 EFLAGS: 00000293 [ 1776.343925][ C1] RAX: ffffffff89905265 RBX: 0000000000000000 RCX: ffff888029dd8000 [ 1776.351904][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1776.359883][ C1] RBP: ffffc9000471f910 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e [ 1776.367896][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: 0000000000000200 [ 1776.375875][ C1] R13: 000000000005f6ca R14: 1ffff920008e3f0c R15: dffffc0000000000 [ 1776.383865][ C1] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 1776.390130][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 1776.396741][ C1] gc_worker+0x308/0x1380 [ 1776.401091][ C1] ? gc_worker+0x264/0x1380 [ 1776.405620][ C1] ? __pfx_gc_worker+0x10/0x10 [ 1776.410397][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1776.415606][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1776.421339][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1776.427072][ C1] process_scheduled_works+0xae1/0x17b0 [ 1776.432664][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1776.438672][ C1] worker_thread+0x8a0/0xda0 [ 1776.443284][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1776.449631][ C1] ? __kthread_parkme+0x7b/0x200 [ 1776.454592][ C1] kthread+0x711/0x8a0 [ 1776.458697][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1776.463819][ C1] ? __pfx_kthread+0x10/0x10 [ 1776.468418][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1776.473628][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.478834][ C1] ? __pfx_kthread+0x10/0x10 [ 1776.483436][ C1] ret_from_fork+0x3fc/0x770 [ 1776.488040][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1776.493176][ C1] ? __switch_to_asm+0x39/0x70 [ 1776.497945][ C1] ? __switch_to_asm+0x33/0x70 [ 1776.502717][ C1] ? __pfx_kthread+0x10/0x10 [ 1776.507317][ C1] ret_from_fork_asm+0x1a/0x30 [ 1776.512108][ C1] [ 1776.515136][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g82161 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1776.526337][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1776.536572][ C1] rcu: RCU grace-period kthread stack dump: [ 1776.542462][ C1] task:rcu_preempt state:R running task stack:26056 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1776.555965][ C1] Call Trace: [ 1776.559254][ C1] [ 1776.562195][ C1] __schedule+0x16a2/0x4cb0 [ 1776.566745][ C1] ? schedule+0x165/0x360 [ 1776.571088][ C1] ? __pfx___schedule+0x10/0x10 [ 1776.575962][ C1] ? schedule+0x91/0x360 [ 1776.580220][ C1] schedule+0x165/0x360 [ 1776.584395][ C1] schedule_timeout+0x12b/0x270 [ 1776.589258][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1776.594637][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1776.600540][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1776.605845][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1776.611408][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1776.616285][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1776.622191][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1776.627577][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1776.632794][ C1] ? finish_swait+0xcd/0x1f0 [ 1776.637396][ C1] rcu_gp_kthread+0x99/0x390 [ 1776.642015][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1776.647225][ C1] ? __kthread_parkme+0x7b/0x200 [ 1776.652211][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1776.657261][ C1] kthread+0x711/0x8a0 [ 1776.661345][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1776.666556][ C1] ? __pfx_kthread+0x10/0x10 [ 1776.671159][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1776.676369][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.681576][ C1] ? __pfx_kthread+0x10/0x10 [ 1776.686180][ C1] ret_from_fork+0x3fc/0x770 [ 1776.690791][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1776.695920][ C1] ? __switch_to_asm+0x39/0x70 [ 1776.700691][ C1] ? __switch_to_asm+0x33/0x70 [ 1776.705463][ C1] ? __pfx_kthread+0x10/0x10 [ 1776.710064][ C1] ret_from_fork_asm+0x1a/0x30 [ 1776.714869][ C1] [ 1776.717891][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1776.724224][ C1] CPU: 1 UID: 0 PID: 18868 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(full) [ 1776.736724][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1776.746785][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 1776.753478][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 75 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 75 0b [ 1776.773099][ C1] RSP: 0018:ffffc9000462f580 EFLAGS: 00000293 [ 1776.779185][ C1] RAX: ffffffff81b4d850 RBX: ffff8880b873b040 RCX: ffff888026003c00 [ 1776.787171][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1776.795149][ C1] RBP: ffffc9000462f6e0 R08: ffffffff8f9fdbf7 R09: 1ffffffff1f3fb7e [ 1776.803126][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fb7f R12: 1ffff110170c835d [ 1776.811108][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8641ae8 [ 1776.819087][ C1] FS: 00007f8c4a5c7c80(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 1776.828024][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1776.834616][ C1] CR2: 00007ff166ae56c0 CR3: 0000000030f4c000 CR4: 00000000003526f0 [ 1776.842597][ C1] Call Trace: [ 1776.845887][ C1] [ 1776.848836][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1776.855187][ C1] ? ldt_dup_context+0x336/0x3e0 [ 1776.860144][ C1] ? rcu_is_watching+0x15/0xb0 [ 1776.864927][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1776.870132][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1776.875263][ C1] flush_tlb_mm_range+0x6b1/0x12c0 [ 1776.880401][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1776.885958][ C1] ? up_write+0x1c4/0x420 [ 1776.890300][ C1] dup_mmap+0x15a0/0x1ac0 [ 1776.894663][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1776.899358][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1776.905262][ C1] ? mm_init+0xccc/0xf20 [ 1776.909527][ C1] copy_mm+0x13c/0x4b0 [ 1776.913611][ C1] copy_process+0x1706/0x3c00 [ 1776.918322][ C1] ? copy_process+0x97f/0x3c00 [ 1776.923110][ C1] ? __pfx_copy_process+0x10/0x10 [ 1776.928160][ C1] kernel_clone+0x224/0x7f0 [ 1776.932680][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1776.937724][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1776.943287][ C1] __x64_sys_clone+0x18b/0x1e0 [ 1776.948062][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1776.953387][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1776.958083][ C1] do_syscall_64+0xfa/0x3b0 [ 1776.962599][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.967814][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.973894][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1776.978586][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.984489][ C1] RIP: 0033:0x7f8c4a761636 [ 1776.988929][ C1] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 1777.008546][ C1] RSP: 002b:00007ffe63ecf690 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1777.016975][ C1] RAX: ffffffffffffffda RBX: 00007ffe63ecf698 RCX: 00007f8c4a761636 [ 1777.024971][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1777.032948][ C1] RBP: 00005568f75ddc30 R08: 0000000000000000 R09: 0000000000000000 [ 1777.040952][ C1] R10: 00007f8c4a5c7f50 R11: 0000000000000246 R12: 00005568f75ebce8 [ 1777.048940][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1777.056935][ C1]