last executing test programs: 14m59.915218236s ago: executing program 32 (id=981): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001c000000140001800800030001000000080001", @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 10m52.880931695s ago: executing program 33 (id=2265): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000280), 0xb, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r2 = dup(0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="16006f0a", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4) getpid() openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 9m9.001659835s ago: executing program 2 (id=2580): userfaultfd(0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x800) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r5, 0x80184153, 0x0) 9m7.233126384s ago: executing program 2 (id=2588): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x1, 0x0) syz_io_uring_setup(0x360b, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) 9m1.49505027s ago: executing program 2 (id=2600): userfaultfd(0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x800) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r5, 0x80184153, 0x0) 9m0.37179232s ago: executing program 2 (id=2604): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r6) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000020a03000000000000000000020000000900010073797a300000000008000340000000010c000640000000000000000214000000110001"], 0x98}}, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x10, 0x1200) 8m57.665258231s ago: executing program 2 (id=2612): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) 8m55.956308187s ago: executing program 2 (id=2616): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) 8m39.945465141s ago: executing program 34 (id=2616): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f041, 0x0, '\x00', @ptr}}) 5m19.940802245s ago: executing program 4 (id=3174): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket(0x1e, 0x4, 0x0) pipe2(&(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYRES32=r2], 0x90}}, 0x0) 5m17.39299655s ago: executing program 4 (id=3181): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='.\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f00000004c0)=ANY=[], 0x78) sendfile(0xffffffffffffffff, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) fallocate(r1, 0x0, 0x0, 0x3) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f00000000c0)='./file1\x00', 0xf164388e587ce7f8) 5m12.103138028s ago: executing program 4 (id=3191): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r9, 0x2000009) sendfile(r8, r9, 0x0, 0x7ffff000) 5m9.287226773s ago: executing program 4 (id=3202): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x10000802, 0x80, 0x0, 0x40000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c00000014", @ANYRES16=r0], 0x28}}, 0x0) 5m4.167903966s ago: executing program 4 (id=3211): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r0}, 0x4) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) iopl(0x6) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m0.422328961s ago: executing program 4 (id=3225): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001400), 0x0, 0x10000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x200) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) chmod(0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='net/softnet_stat\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB='$wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ftruncate(0xffffffffffffffff, 0x79ab7f0f) 4m45.207425112s ago: executing program 35 (id=3225): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000001400), 0x0, 0x10000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x200) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r4) chmod(0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='net/softnet_stat\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB='$wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) ftruncate(0xffffffffffffffff, 0x79ab7f0f) 4m15.136396249s ago: executing program 1 (id=3325): socket$inet6(0x10, 0x3, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063118b000000000040000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) socket$inet6_sctp(0xa, 0x1, 0x84) 4m10.807067167s ago: executing program 1 (id=3333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) dup(r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) 4m9.397542742s ago: executing program 1 (id=3340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r4}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r5, 0x2, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00', @ANYBLOB, @ANYRES32, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f636f756e74"], 0x58}, 0x1, 0x0, 0x0, 0x4048045}, 0x8010) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000600)={'wg1\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1f0e0000000000001c0012800c0001006d6163766c616e000c", @ANYRES32], 0x4c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000680)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="40030000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf2501000000080001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="5802028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004001d09000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000000000400070000003c00010024000100757365725f6c696e6b75705f656e6162", @ANYRES32, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004000400080006", @ANYRES32, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400090000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c000100240001006d6f646500"/23], 0x340}, 0x1, 0x0, 0x0, 0x4}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x0, 0x0}}, 0x10) 4m6.935012175s ago: executing program 1 (id=3345): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) 4m6.626248491s ago: executing program 1 (id=3346): chdir(0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m5.344707482s ago: executing program 1 (id=3347): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) msgsnd(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000080000000800392ccafffb43e40e7be3dfaea1ffab4a73e979189f8211f8dc99570a0552463ff6b024724ec13ae2e7068cba3b6e6030593819c679faddf7efe79eda33b3fce2066e93119dae2d0b2d217c717e486b06f893b9292a8b4dbec1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) 3m49.712808016s ago: executing program 36 (id=3347): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) migrate_pages(0x0, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x2) msgsnd(0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='pstore\x00', 0x1c011, 0x0) read$FUSE(r0, &(0x7f0000000900)={0x2020}, 0x2020) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000025000100000000000000000006"], 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="0000080000000800392ccafffb43e40e7be3dfaea1ffab4a73e979189f8211f8dc99570a0552463ff6b024724ec13ae2e7068cba3b6e6030593819c679faddf7efe79eda33b3fce2066e93119dae2d0b2d217c717e486b06f893b9292a8b4dbec1"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) 3m7.716588227s ago: executing program 8 (id=3470): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10f, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r1, 0x80, &(0x7f0000000540)=@generic={0x2c, "7b2e20d7e474e3c7081e15550cbe61d79d589ffcce578d2b2d4dfcf53f862ec0cb285def97e8cd7dfc722d37bb7faf1178681b3c2aa19eb63678cdea497fb0462ad84c6f6f487a5ffa5bd38c8303986febfffbce9510822960039d7ef37149b33b3d0168c5367dcbf304d5d605e01bc4de77d8d39bd82a14bde37dd8e9e2"}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0x1, r5, 0x0}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r11, 0x400455c8, 0x9) 3m3.544127002s ago: executing program 8 (id=3482): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000040)={0x0, 0x47524247, 0x2, @discrete={0x7, 0x6}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r3, 0x331, 0x0, 0xa6ff, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ptrace(0x10, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000600)={{0x5, 0x0, 0xffff, 0x5, 'syz0\x00'}, 0x6, 0x10, 0x3, 0x0, 0x0, 0x8000, 'syz1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0xe2) socket(0x40000000015, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) 3m1.903463511s ago: executing program 8 (id=3485): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b"]) 2m56.716645083s ago: executing program 8 (id=3499): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008024}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket(0x10, 0x803, 0x0) flistxattr(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getgid() r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) 2m55.489378164s ago: executing program 8 (id=3501): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x3}, 0x1) 2m54.322136903s ago: executing program 8 (id=3507): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10f, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r1, 0x80, &(0x7f0000000540)=@generic={0x2c, "7b2e20d7e474e3c7081e15550cbe61d79d589ffcce578d2b2d4dfcf53f862ec0cb285def97e8cd7dfc722d37bb7faf1178681b3c2aa19eb63678cdea497fb0462ad84c6f6f487a5ffa5bd38c8303986febfffbce9510822960039d7ef37149b33b3d0168c5367dcbf304d5d605e01bc4de77d8d39bd82a14bde37dd8e9e2"}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0x1, r5, 0x0}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r11, 0x400455c8, 0x9) 2m39.192322916s ago: executing program 37 (id=3507): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x10f, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r1, 0x80, &(0x7f0000000540)=@generic={0x2c, "7b2e20d7e474e3c7081e15550cbe61d79d589ffcce578d2b2d4dfcf53f862ec0cb285def97e8cd7dfc722d37bb7faf1178681b3c2aa19eb63678cdea497fb0462ad84c6f6f487a5ffa5bd38c8303986febfffbce9510822960039d7ef37149b33b3d0168c5367dcbf304d5d605e01bc4de77d8d39bd82a14bde37dd8e9e2"}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x53564d41, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r6, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x1802, 0x0, 0x0, 0x5, 0x1, r5, 0x0}]) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r8}, 0x10) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = fcntl$dupfd(r9, 0x0, r10) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r11, 0x400455c8, 0x9) 27.976801615s ago: executing program 6 (id=3849): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x3) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x200000400000b4e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getpid() ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0xc0109207, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004000000050000", @ANYRES32, @ANYBLOB="000000eeffffffffffff", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000240)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) 25.467293866s ago: executing program 6 (id=3855): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) timer_create(0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 23.953442844s ago: executing program 6 (id=3858): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, 0x0) 23.134704932s ago: executing program 5 (id=3859): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0)=0x56, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) utime(&(0x7f0000000080)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000b40)={0x17c04, 0xffffffffffffffff, 0x6006, 0x100000001}) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x18, 0x68000000}, 0x0) rt_sigsuspend(&(0x7f0000000300), 0x8) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x40, 0x20, 0x10, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x20, 0x4, 0x6, 0x0, 0x0, 0x4, 0x9}, [@FRA_FLOW={0x8, 0xb, 0x3}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x4}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) 22.947485438s ago: executing program 6 (id=3861): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 21.813990492s ago: executing program 6 (id=3864): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) 21.79336904s ago: executing program 7 (id=3865): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000000)=0x7, 0x0, 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 20.950260554s ago: executing program 6 (id=3867): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x3) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x200000400000b4e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getpid() ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0xc0109207, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004000000050000", @ANYRES32, @ANYBLOB="000000eeffffffffffff", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000240)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) 20.539345967s ago: executing program 7 (id=3868): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000340)}) 20.20583821s ago: executing program 5 (id=3871): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084146, &(0x7f0000000080)) 19.156080085s ago: executing program 7 (id=3872): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x74, 0x101301) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r6], &(0x7f0000000200), &(0x7f00000000c0)=[0x0], &(0x7f0000000340)}) 15.815646895s ago: executing program 5 (id=3878): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 15.523762676s ago: executing program 7 (id=3881): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x10b942, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="b64a7d63", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, 0x0, &(0x7f00000000c0)) 13.405557468s ago: executing program 9 (id=3882): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x1) shutdown(r4, 0x1) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x4, 0x0, 0x0, @void, @value}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r2, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r1}, 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.816047401s ago: executing program 9 (id=3884): openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) timer_create(0x2, 0x0, &(0x7f0000001740)) openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 11.555328001s ago: executing program 9 (id=3885): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) semget$private(0x0, 0x4000000009, 0x0) geteuid() 10.057820799s ago: executing program 0 (id=3888): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000009c0)) 9.228886944s ago: executing program 3 (id=3889): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x8, @void}, 0x10) 9.168707814s ago: executing program 0 (id=3890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() getpgid(r0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @local}, 0x0, 0x4, 0x4}}, 0x26) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x44) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) inotify_init1(0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r4, 0x2, 0x0) syz_io_uring_setup(0x4599, &(0x7f0000000240)={0x0, 0x155, 0x8, 0x0, 0x3a}, &(0x7f00000002c0), &(0x7f0000000300)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000002c000100000000000000000004000080050011802f000000060294f6e78eff84d65032b5"], 0x1c}], 0x1}, 0x4) 8.879297794s ago: executing program 3 (id=3891): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8.78475529s ago: executing program 5 (id=3892): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048"], 0xec}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 7.574861134s ago: executing program 0 (id=3893): socket$inet6(0xa, 0x3, 0x7) ptrace$pokeuser(0x6, 0x0, 0x80, 0xb) memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="020000ffffffba000040000086dd", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="6d6eb1f60783"}, 0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 7.571859239s ago: executing program 3 (id=3894): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000000)=0x7, 0x0, 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 7.435952574s ago: executing program 9 (id=3895): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000000)=0x7, 0x0, 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4010, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r0) socket$netlink(0x10, 0x3, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800}, 0x38) socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) 5.701436047s ago: executing program 0 (id=3896): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x74, 0x6c, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_PROP_LIST={0x54, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan1\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}, {0x14, 0x35, 'lo\x00'}]}]}, 0x74}}, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x5ab, 0x0, r4, 0xe800000, '\x00', r8, 0xffffffffffffffff, 0x5, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.701000386s ago: executing program 3 (id=3897): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='block_split\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) epoll_create1(0x99344c68e635bb3) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340), 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000001016c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c000140000000000000000938010000080a05000000000000000000050000072c0007403d71b32682bbe6000000d4fa66a8175e9872e4cc0d9b3832de08e08e24df369ec0a31c82067f6a310900020073797a310000000008000940000000024a0007405c890b690e2214dac90362bb4f8e989a74bdc1985458a1e6868adb9ac469290098443d437b475c9c2a18de6b34f9e8558b70644604cadd65d58ce8b25f35723200cfaabbf18500003c0005800800014000000006080001400000008808000140000000320800014000000015080001400000002b080002400000000308000140000000290900020073797a30000000000c000580080001400000890d44000740bef2077827d68611293f798db07a28cc2c1202c7e2d73fcc3d77ee08e72db9248d17c4cb04a4ef18eb8f1f24c9c36d7d09b85546d932ec0960261f57c866e38f88020000080a01020000000000000000020001800a0001006c696d69740000000c0001800700010072740000680001800e000100636f6e6e6c696d697400000054000280080001400000000108100140000001000800024000000001080001400000000908000140000000f008000140000000040800024000000000080001400000000b08000240f44e26cb0800024000000001480001800e000100696d6d65646961746500000034000280080001400000000d0800014000000004080001400000000008000140000000030800014000000010080001400000000a3c0001800b000100736f636b657400002c00028008000240000000100800030000000033080002400000001208000240000000000878746864720000240001800a00010072616e676500000014000280080002400000000008000140000000021c000180090001006d617371000000000c000280080001400000000418010480100001800b0001006e756d676e00004800018008000100667764003c0002800800024000000002080002400000000a080003400000000a0800024000000014080002400000000e080001400000000c0800024000000000600001800a00010071750c00014000000000000000000c000440000000000000000908000240000000000c00044000000000000000050c000140000000000000000808000240000000010c0004400000010080000001100001800b0001007470726f787900004c00018011000100666c6f775f6f66666c6f616400000000340002800900010073797a30000000000900010073797a32000000000900010073797a32000000000900010073797a3000000000140000001000010000000000000000000084000acfd183d0b9c8866a2ad24b49db37c91c61300d59e3f7f9cae34e9fc4c9db0b7e3e6dc8c0901c2fbe8b2294f7dfa1382348985b5adfda80c092354c36a1374f21b09db34dfd705c35ae372fab96b488b2e1f526aded068afc009a46ccb9f8a1927def9949a0655d6200c725f8427f4f3c3e5e6eaf1b337b413149ab59b63a148c55db800ed5664af9adfe9a28fd39c10e18583657bbaf13afe40e052cdb3b774273cb28e9ecd9788f2dc7c3685e61caae244474c8273f0ab746c0c838fd6f164f63487352eb55124fc8268449714c443516df03e429a3ef7176"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r9, 0xfbff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f0000000000)={r9, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000440)=0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) 5.616855251s ago: executing program 38 (id=3867): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000400)=0x3) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x200000400000b4e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffe60, &(0x7f00000002c0)=0x400001000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) getpid() ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0xc0109207, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b000000050000000200000004000000050000", @ANYRES32, @ANYBLOB="000000eeffffffffffff", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000300)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) r6 = fsopen(&(0x7f0000000240)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) 5.59945422s ago: executing program 9 (id=3899): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000800)='P', 0x1}], 0x1}}], 0x1, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000780)={0xa, @sdr={0x39565559}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f0000000880)="5cba91ff890d4027881b2e39e14c40157713f9036c5373e68c35e68bebedbddfe1db69f38db5cd3d780bd3841c9cdb1634ca8c32f434c922e86592f720d36a6615cd30bb922ce9fb64a440", 0x4b) io_uring_setup(0x4e83, &(0x7f00000002c0)={0x0, 0x20, 0x0, 0x2, 0x40000000}) ioctl$SNDCTL_DSP_STEREO(r5, 0x40045010, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5.377394101s ago: executing program 7 (id=3900): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x1) syz_open_dev$vim2m(&(0x7f00000002c0), 0x100000001, 0x2) unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8ce9, 0x40, 0x0, 0x189}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0200000200000005cd000005000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000280070673effeb09b5351f5bde05400000000018789ba916638814e57081b494e10000000000000000020008005500f8f669", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 5.044881659s ago: executing program 5 (id=3901): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x1) syz_open_dev$vim2m(&(0x7f00000002c0), 0x100000001, 0x2) unshare(0x2c060000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8ce9, 0x40, 0x0, 0x189}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0200000200000005cd000005000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b92000000280070673effeb09b5351f5bde05400000000018789ba916638814e57081b494e10000000000000000020008005500f8f669", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x20e) 2.298271981s ago: executing program 0 (id=3902): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000200000000000c1dd4717e25171b95e2a68c51b49da052642770ef13bf1126b44b0d7429a360333e8a3e5a076a2d9bd698d608b935dd785b02936255cec1c4e13c27dc2151f16e9ebde2579aafc2c8813032f6d5bf3b16b625b764e334c0749bb026df1b8c88de4a75a165adc25da29fbd411dcc278c52e", @ANYRES32, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r0], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0xe) ioctl$TIOCSTI(r4, 0x5412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='br_fdb_external_learn_add\x00', 0xffffffffffffffff, 0x0, 0x4000000000000}, 0x18) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000400)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) unshare(0x2000400) futimesat(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) 2.236094525s ago: executing program 3 (id=3903): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0x400, 0x300, 0x300, 0x960, 0xffffffff, 0x0, 0xcb1c552c0402932, 0x2000000, {}, {0x0, 0x0, 0x2}, {0xf7ffffff, 0x4}, {0x0, 0x0, 0x8}, 0x2, 0x100, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, 0x20, 0x0, 0x0, 0x3c, 0x0, 0x0, 0xc}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = semget(0x3, 0x1, 0x202) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000600)=[0x7, 0xd, 0x8, 0x9, 0x7, 0x7, 0x17b, 0x6, 0x14]) r5 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x6c}, 0x0, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x1000}]}}, @common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x558ac59, 'syz0\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="a6bea8a120e5f8", 0x7, 0x0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 2.094391413s ago: executing program 5 (id=3904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 326.514284ms ago: executing program 3 (id=3905): socket$xdp(0x2c, 0x3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x4b) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) io_uring_setup(0x3e24, &(0x7f0000000080)={0x0, 0x6de, 0x1826, 0x0, 0x149}) write$P9_RSTATu(r8, &(0x7f0000000580)=ANY=[], 0x20e) mount(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='ecryptfs\x00', 0x0, &(0x7f0000000200)='source=\xbb\xb6 f\x9c\xf2|v\xf3GW\b!)X|\xc3\xce\xdasF\xb5\xcf\xff\x1a\x9cX\xcc\x04\x10\x9e\x93\xa4\x98\xcc\xf7n\x11\xc9\xb9\xf0\x9e5l-\xcc\xc7l\a\xbb0v2|\x9c\x9a\x89y&Kk\x8a\xbf\xa2\xfe\xcb\x8c\xad\xe0\x95\x9e;\xa5q\xde\xd6\xdb\xac{\xc0y\xf0~\xee\xfe2/l\xb8\xcf\x11\xdc\x93 \xf6\x02\x966(\xd2\x8eM\xfa\xb2&\xebK/\xb7-\x96`#\x9c\xafv\x91\a\xc1\xd6\x9e\xd3]\xf0d|\x7f\xbbc\x8c\xe8\xab') 324.762624ms ago: executing program 7 (id=3906): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r4, r5, 0x3, 0x0) 1.083827ms ago: executing program 0 (id=3907): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) fsopen(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}, 0xfffffffc}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000500)={0x0, 0x18a, 0x0, 0x0, 0xc}) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0x4}, 0x8) 0s ago: executing program 9 (id=3908): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002", @ANYRES32=r3], 0x50}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000211400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r7], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x3, {0x0, 0x0, 0x74, r8, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x41}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 15366] team0: Port device team_slave_1 added [ 913.231146][T15425] ceph: No mds server is up or the cluster is laggy [ 913.361660][ T5997] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 913.603901][T13343] Bluetooth: hci4: command tx timeout [ 914.126055][ T8] libceph: connect (1)[c::]:6789 error -101 [ 914.171192][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 914.591763][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'. [ 915.310824][ T8] libceph: connect (1)[c::]:6789 error -101 [ 915.316929][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 916.279295][ T5997] usb 8-1: device descriptor read/all, error -71 [ 916.290165][T13343] Bluetooth: hci4: command tx timeout [ 917.124773][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 917.130876][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 917.198583][T15366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.239835][T13862] libceph: connect (1)[c::]:6789 error -101 [ 917.246159][T13862] libceph: mon0 (1)[c::]:6789 connect error [ 917.254074][T15366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 917.305761][T15366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.522821][T15366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.560291][T15366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 918.689582][T15366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.281016][T15472] Cannot find add_set index 0 as target [ 920.430455][T15476] infiniband syz!: set down [ 920.484983][T15366] hsr_slave_0: entered promiscuous mode [ 920.600566][T15366] hsr_slave_1: entered promiscuous mode [ 920.676347][T15366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 921.559795][T15366] Cannot create hsr debugfs directory [ 921.788106][T15489] batman_adv: batadv0: Adding interface: dummy0 [ 921.795716][T15489] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 921.836682][T15489] batman_adv: batadv0: Interface activated: dummy0 [ 921.897976][T15490] batadv0: mtu less than device minimum [ 921.915983][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.928498][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.941013][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.953514][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.965988][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.978449][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 921.990433][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.002313][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 922.014211][T15490] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 924.720618][ T5907] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 926.513532][T15366] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 926.663879][T15366] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 926.850122][ T5907] usb 1-1: device not accepting address 22, error -71 [ 926.934263][T15366] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 926.956422][T15366] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 926.995088][ T8] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 927.168145][ T8] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 927.216833][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.273868][ T8] usb 2-1: Product: syz [ 927.307194][ T8] usb 2-1: Manufacturer: syz [ 927.336666][ T8] usb 2-1: SerialNumber: syz [ 927.381233][ T8] usb 2-1: config 0 descriptor?? [ 928.340357][T15366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.356245][T15366] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.389319][T15366] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 928.399813][T15366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 928.423783][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.430886][ T5938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.439533][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.446891][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.602437][ T8] usb 2-1: Firmware version (0.0) predates our first public release. [ 928.646043][ T8] usb 2-1: Please update to version 0.2 or newer [ 929.842543][ T52] usb 2-1: USB disconnect, device number 14 [ 930.032648][T15552] loop9: detected capacity change from 0 to 6 [ 930.792007][T15366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.578924][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.233424][T15577] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 934.241521][T15577] CPU: 1 UID: 0 PID: 15577 Comm: syz.8.3326 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 934.252308][T15577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 934.262496][T15577] Call Trace: [ 934.265878][T15577] [ 934.268823][T15577] dump_stack_lvl+0x241/0x360 [ 934.273551][T15577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.278782][T15577] ? __pfx__printk+0x10/0x10 [ 934.283400][T15577] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.289160][T15577] ? __kmalloc_cache_noprof+0x243/0x390 [ 934.295181][T15577] ? sysfs_warn_dup+0x51/0xa0 [ 934.300056][T15577] sysfs_warn_dup+0x8e/0xa0 [ 934.304591][T15577] sysfs_do_create_link_sd+0xbe/0x110 [ 934.310002][T15577] device_add_class_symlinks+0x1c5/0x250 [ 934.315674][T15577] device_add+0x553/0xbf0 [ 934.320039][T15577] wiphy_register+0x1a58/0x27b0 [ 934.324931][T15577] ? __pfx_wiphy_register+0x10/0x10 [ 934.330148][T15577] ? minstrel_ht_alloc+0x72b/0x860 [ 934.335476][T15577] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 934.341762][T15577] ieee80211_register_hw+0x30fb/0x3e10 [ 934.347282][T15577] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.353084][T15577] ? ieee80211_register_hw+0x15a1/0x3e10 [ 934.358761][T15577] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 934.364694][T15577] ? __hrtimer_init+0x162/0x250 [ 934.369595][T15577] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 934.375704][T15577] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.381457][T15577] ? __hrtimer_init+0x170/0x250 [ 934.386353][T15577] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 934.392146][T15577] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 934.398251][T15577] ? kstrndup+0x5c/0xb0 [ 934.402455][T15577] ? __asan_memcpy+0x40/0x70 [ 934.407206][T15577] hwsim_new_radio_nl+0xece/0x2290 [ 934.412473][T15577] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.418152][T15577] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 934.423744][T15577] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.429413][T15577] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 934.435455][T15577] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 934.441813][T15577] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.447494][T15577] ? __nla_validate_parse+0xd31/0x3090 [ 934.452990][T15577] genl_rcv_msg+0xb16/0xec0 [ 934.457539][T15577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.462641][T15577] ? __pfx_lock_acquire+0x10/0x10 [ 934.467690][T15577] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 934.473361][T15577] ? __pfx___might_resched+0x10/0x10 [ 934.478680][T15577] netlink_rcv_skb+0x1e5/0x430 [ 934.483480][T15577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 934.488542][T15577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 934.493886][T15577] genl_rcv+0x28/0x40 [ 934.497897][T15577] netlink_unicast+0x7f8/0x990 [ 934.502697][T15577] ? irqentry_exit+0x63/0x90 [ 934.507339][T15577] ? __pfx_netlink_unicast+0x10/0x10 [ 934.512844][T15577] ? netlink_sendmsg+0x862/0xcb0 [ 934.517905][T15577] netlink_sendmsg+0x8e4/0xcb0 [ 934.522701][T15577] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.528370][T15577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.533682][T15577] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 934.540123][T15577] ? __sock_sendmsg+0x54/0x270 [ 934.544927][T15577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 934.550239][T15577] __sock_sendmsg+0x223/0x270 [ 934.554955][T15577] ____sys_sendmsg+0x52a/0x7e0 [ 934.559757][T15577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 934.565067][T15577] ? __fget_files+0x2a/0x410 [ 934.569703][T15577] ? __fget_files+0x2a/0x410 [ 934.574341][T15577] __sys_sendmsg+0x269/0x350 [ 934.579055][T15577] ? __pfx___sys_sendmsg+0x10/0x10 [ 934.584192][T15577] ? srso_alias_return_thunk+0x5/0xfbef5 [ 934.589901][T15577] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 934.596271][T15577] ? do_syscall_64+0x100/0x230 [ 934.601079][T15577] ? do_syscall_64+0xb6/0x230 [ 934.605818][T15577] do_syscall_64+0xf3/0x230 [ 934.610367][T15577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.616294][T15577] RIP: 0033:0x7f3369185d29 [ 934.620729][T15577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.640529][T15577] RSP: 002b:00007f336a032038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 934.648974][T15577] RAX: ffffffffffffffda RBX: 00007f3369376240 RCX: 00007f3369185d29 [ 934.656968][T15577] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 000000000000000c [ 934.664958][T15577] RBP: 00007f3369201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 934.672951][T15577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.680940][T15577] R13: 0000000000000000 R14: 00007f3369376240 R15: 00007ffc67e53578 [ 934.689126][T15577] [ 936.284955][T15366] veth0_vlan: entered promiscuous mode [ 936.349930][T15366] veth1_vlan: entered promiscuous mode [ 936.442546][T15597] vlan2: entered promiscuous mode [ 936.456507][T15597] vlan2: entered allmulticast mode [ 936.463430][T15597] hsr_slave_1: entered allmulticast mode [ 937.462246][T15366] veth0_macvtap: entered promiscuous mode [ 938.056780][T15366] veth1_macvtap: entered promiscuous mode [ 938.126336][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 938.126609][ T29] audit: type=1326 audit(1734641210.396:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 938.166195][ T29] audit: type=1326 audit(1734641210.396:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 938.207687][ T29] audit: type=1326 audit(1734641210.426:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 938.280826][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.297378][T15608] netlink: 'syz.8.3334': attribute type 27 has an invalid length. [ 938.330220][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.340313][ T29] audit: type=1326 audit(1734641210.426:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 938.363875][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.374461][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.384596][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.395765][ T29] audit: type=1326 audit(1734641210.426:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 938.419747][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 938.933841][ T29] audit: type=1326 audit(1734641210.426:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 938.960566][ T29] audit: type=1326 audit(1734641210.426:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 938.976090][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 938.984577][ T29] audit: type=1326 audit(1734641210.436:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 939.008190][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.019379][ T29] audit: type=1326 audit(1734641210.546:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 939.090277][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 939.123328][ T29] audit: type=1326 audit(1734641210.546:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15605 comm="syz.8.3334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 939.140235][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 939.189120][T15366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.068746][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.079597][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.089817][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.103785][T15627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3340'. [ 941.112878][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3340'. [ 941.170176][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.230056][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.249156][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.269568][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.589358][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.600174][T15366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 941.611001][T15366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 941.622560][T15366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.757653][T15366] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.795375][T15366] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.804261][T15366] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.816192][T15366] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 942.260100][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.411677][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.212900][T14789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 943.231098][T14789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 943.911564][T15657] infiniband syz!: set down [ 945.762232][T15660] xt_CT: No such helper "pptp" [ 947.070374][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 947.070396][ T29] audit: type=1326 audit(1734641219.346:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.9.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1d185d29 code=0x7fc00000 [ 947.099252][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.217836][ T29] audit: type=1326 audit(1734641220.486:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960bf85d29 code=0x7ffc0000 [ 948.271878][ T29] audit: type=1326 audit(1734641220.486:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960bf85d29 code=0x7ffc0000 [ 948.321972][ T29] audit: type=1326 audit(1734641220.516:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f960bf85d29 code=0x7ffc0000 [ 948.470307][ T29] audit: type=1326 audit(1734641220.516:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960bf85d29 code=0x7ffc0000 [ 949.360244][ T29] audit: type=1326 audit(1734641220.516:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960bf85d29 code=0x7ffc0000 [ 949.382694][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.460057][ T29] audit: type=1326 audit(1734641220.516:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960bf85d29 code=0x7ffc0000 [ 949.482812][ T29] audit: type=1326 audit(1734641220.516:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f960bf85d29 code=0x7ffc0000 [ 949.505422][ T29] audit: type=1326 audit(1734641220.516:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.0.3352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f960bf85d29 code=0x7ffc0000 [ 949.528096][ T29] audit: type=1326 audit(1734641220.646:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15664 comm="syz.9.3263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb1d185d29 code=0x7fc00000 [ 949.830535][T15685] xt_CT: No such helper "pptp" [ 951.601250][T15695] tty tty2: ldisc open failed (-12), clearing slot 1 [ 957.612444][T15743] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3370'. [ 957.621557][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3370'. [ 958.216860][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 958.216922][ T29] audit: type=1326 audit(1734641230.336:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.501979][T15738] netlink: 'syz.8.3369': attribute type 27 has an invalid length. [ 958.511297][ T29] audit: type=1326 audit(1734641230.336:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.534073][ T29] audit: type=1326 audit(1734641230.336:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.565958][ T29] audit: type=1326 audit(1734641230.336:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.590157][ T29] audit: type=1326 audit(1734641230.336:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.617487][ T29] audit: type=1326 audit(1734641230.336:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.650472][ T29] audit: type=1326 audit(1734641230.766:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.770821][ T29] audit: type=1326 audit(1734641230.766:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.803759][ T29] audit: type=1326 audit(1734641230.776:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 958.835792][ T29] audit: type=1326 audit(1734641230.786:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15735 comm="syz.8.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 959.410657][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 959.449548][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 959.457982][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 959.473811][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 959.482655][ T5852] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 959.491307][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 962.170224][ T5852] Bluetooth: hci3: command tx timeout [ 963.057665][T15787] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 963.063695][T15787] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 965.161901][T15787] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 965.167856][T15787] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 965.170232][ T5852] Bluetooth: hci3: command tx timeout [ 965.193508][T15760] lo speed is unknown, defaulting to 1000 [ 965.424323][T15799] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 965.432121][T15799] CPU: 0 UID: 0 PID: 15799 Comm: syz.6.3385 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 965.443160][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 965.453314][T15799] Call Trace: [ 965.457383][T15799] [ 965.460324][T15799] dump_stack_lvl+0x241/0x360 [ 965.465037][T15799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.470266][T15799] ? __pfx__printk+0x10/0x10 [ 965.474879][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.480530][T15799] ? __kmalloc_cache_noprof+0x243/0x390 [ 965.486099][T15799] ? sysfs_warn_dup+0x51/0xa0 [ 965.490880][T15799] sysfs_warn_dup+0x8e/0xa0 [ 965.495525][T15799] sysfs_do_create_link_sd+0xbe/0x110 [ 965.500916][T15799] device_add_class_symlinks+0x1c5/0x250 [ 965.506740][T15799] device_add+0x553/0xbf0 [ 965.511089][T15799] wiphy_register+0x1a58/0x27b0 [ 965.516052][T15799] ? __pfx_wiphy_register+0x10/0x10 [ 965.521260][T15799] ? minstrel_ht_alloc+0x72b/0x860 [ 965.526406][T15799] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 965.532518][T15799] ieee80211_register_hw+0x30fb/0x3e10 [ 965.537991][T15799] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 965.544356][T15799] ? ieee80211_register_hw+0x15a1/0x3e10 [ 965.550020][T15799] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 965.555863][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.561597][T15799] ? __asan_memset+0x23/0x50 [ 965.566200][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.572371][T15799] ? __hrtimer_init+0x170/0x250 [ 965.577440][T15799] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 965.583215][T15799] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 965.589303][T15799] ? kstrndup+0x5c/0xb0 [ 965.593490][T15799] ? __asan_memcpy+0x40/0x70 [ 965.598097][T15799] hwsim_new_radio_nl+0xece/0x2290 [ 965.603245][T15799] ? __pfx___nla_validate_parse+0x10/0x10 [ 965.609161][T15799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 965.614765][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.620410][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.626061][T15799] genl_rcv_msg+0xb16/0xec0 [ 965.630600][T15799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 965.635774][T15799] ? __pfx_lock_acquire+0x10/0x10 [ 965.640822][T15799] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 965.646397][T15799] ? __pfx___might_resched+0x10/0x10 [ 965.651794][T15799] netlink_rcv_skb+0x1e5/0x430 [ 965.656583][T15799] ? __pfx_genl_rcv_msg+0x10/0x10 [ 965.661645][T15799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 965.666984][T15799] genl_rcv+0x28/0x40 [ 965.671071][T15799] netlink_unicast+0x7f8/0x990 [ 965.675871][T15799] ? __pfx_netlink_unicast+0x10/0x10 [ 965.681268][T15799] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 965.687389][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.693038][T15799] ? __phys_addr_symbol+0x2f/0x70 [ 965.698342][T15799] ? __check_object_size+0x47a/0x730 [ 965.703652][T15799] netlink_sendmsg+0x8e4/0xcb0 [ 965.708446][T15799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.713759][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.719403][T15799] ? aa_sock_msg_perm+0x91/0x160 [ 965.724355][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.730003][T15799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.735391][T15799] __sock_sendmsg+0x223/0x270 [ 965.740100][T15799] ____sys_sendmsg+0x52a/0x7e0 [ 965.744893][T15799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 965.750195][T15799] ? __fget_files+0x2a/0x410 [ 965.754813][T15799] ? __fget_files+0x2a/0x410 [ 965.759438][T15799] __sys_sendmsg+0x269/0x350 [ 965.764059][T15799] ? __pfx___sys_sendmsg+0x10/0x10 [ 965.769188][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.774886][T15799] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 965.781413][T15799] ? do_syscall_64+0x100/0x230 [ 965.786209][T15799] ? do_syscall_64+0xb6/0x230 [ 965.790919][T15799] do_syscall_64+0xf3/0x230 [ 965.795454][T15799] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.801112][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.807030][T15799] RIP: 0033:0x7f1dec985d29 [ 965.811457][T15799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 965.831082][T15799] RSP: 002b:00007f1dea391038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.839522][T15799] RAX: ffffffffffffffda RBX: 00007f1decb76240 RCX: 00007f1dec985d29 [ 965.847694][T15799] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 000000000000000c [ 965.855695][T15799] RBP: 00007f1deca01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 965.863772][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 965.871761][T15799] R13: 0000000000000000 R14: 00007f1decb76240 R15: 00007ffca9353f88 [ 965.879773][T15799] [ 965.902412][T15787] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 965.908382][T15787] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 966.441394][T15808] fuse: Unknown parameter '0x0000000000000007' [ 966.738499][T15809] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3388'. [ 967.257162][T13343] Bluetooth: hci3: command tx timeout [ 968.053197][T15803] loop7: detected capacity change from 0 to 128 [ 968.249840][T15787] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 968.255942][T15787] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 968.288754][T15803] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 968.490176][T15803] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 968.827080][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 968.827097][ T29] audit: type=1326 audit(1734641241.096:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 969.006095][T12192] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 969.034118][T15760] chnl_net:caif_netlink_parms(): no params data found [ 970.320582][ T29] audit: type=1800 audit(1734641242.376:1946): pid=15846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3396" name="file2" dev="overlay" ino=1016 res=0 errno=0 [ 970.870600][ T29] audit: type=1326 audit(1734641243.016:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 970.935919][ T29] audit: type=1326 audit(1734641243.016:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 971.009401][T15760] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.165641][T15760] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.191007][T15760] bridge_slave_0: entered allmulticast mode [ 971.200581][ T29] audit: type=1326 audit(1734641243.016:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 971.241309][T15760] bridge_slave_0: entered promiscuous mode [ 971.274632][T15760] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.511761][ T29] audit: type=1326 audit(1734641243.016:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 971.577273][ T29] audit: type=1326 audit(1734641243.016:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 971.600207][T15760] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.607402][T15760] bridge_slave_1: entered allmulticast mode [ 971.640915][T15760] bridge_slave_1: entered promiscuous mode [ 972.090404][ T29] audit: type=1326 audit(1734641243.016:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 972.769452][ T29] audit: type=1326 audit(1734641243.016:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 972.900540][ T29] audit: type=1326 audit(1734641243.016:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15817 comm="syz.8.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7fc00000 [ 975.413436][T15760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.442829][T15760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.873576][T15760] team0: Port device team_slave_0 added [ 975.891161][T15760] team0: Port device team_slave_1 added [ 976.853232][T15884] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 976.861686][T15884] CPU: 1 UID: 0 PID: 15884 Comm: syz.9.3409 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 976.872485][T15884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 976.882564][T15884] Call Trace: [ 976.885856][T15884] [ 976.888802][T15884] dump_stack_lvl+0x241/0x360 [ 976.893539][T15884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 976.898778][T15884] ? __pfx__printk+0x10/0x10 [ 976.903409][T15884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.909242][T15884] ? __kmalloc_cache_noprof+0x243/0x390 [ 976.914823][T15884] ? sysfs_warn_dup+0x51/0xa0 [ 976.919530][T15884] sysfs_warn_dup+0x8e/0xa0 [ 976.924054][T15884] sysfs_do_create_link_sd+0xbe/0x110 [ 976.929442][T15884] device_add_class_symlinks+0x1c5/0x250 [ 976.935092][T15884] device_add+0x553/0xbf0 [ 976.939439][T15884] wiphy_register+0x1a58/0x27b0 [ 976.944316][T15884] ? __pfx_wiphy_register+0x10/0x10 [ 976.949554][T15884] ? minstrel_ht_alloc+0x72b/0x860 [ 976.954713][T15884] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 976.960909][T15884] ieee80211_register_hw+0x30fb/0x3e10 [ 976.966382][T15884] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 976.972747][T15884] ? ieee80211_register_hw+0x15a1/0x3e10 [ 976.978399][T15884] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 976.984226][T15884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 976.989868][T15884] ? __asan_memset+0x23/0x50 [ 976.994469][T15884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.000113][T15884] ? __hrtimer_init+0x170/0x250 [ 977.005077][T15884] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 977.011021][T15884] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 977.017103][T15884] ? kstrndup+0x5c/0xb0 [ 977.021283][T15884] ? __asan_memcpy+0x40/0x70 [ 977.025886][T15884] hwsim_new_radio_nl+0xece/0x2290 [ 977.031028][T15884] ? __pfx___nla_validate_parse+0x10/0x10 [ 977.036766][T15884] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 977.042361][T15884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.048002][T15884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.053654][T15884] genl_rcv_msg+0xb16/0xec0 [ 977.058186][T15884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 977.063256][T15884] ? __pfx_lock_acquire+0x10/0x10 [ 977.068292][T15884] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 977.073860][T15884] ? __pfx___might_resched+0x10/0x10 [ 977.079164][T15884] netlink_rcv_skb+0x1e5/0x430 [ 977.083943][T15884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 977.088985][T15884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 977.094298][T15884] ? __rcu_read_unlock+0xa1/0x110 [ 977.099346][T15884] genl_rcv+0x28/0x40 [ 977.103348][T15884] netlink_unicast+0x7f8/0x990 [ 977.108146][T15884] ? __pfx_netlink_unicast+0x10/0x10 [ 977.113454][T15884] ? __virt_addr_valid+0x45f/0x530 [ 977.118583][T15884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.124239][T15884] ? __phys_addr_symbol+0x2f/0x70 [ 977.129279][T15884] ? __check_object_size+0x47a/0x730 [ 977.134597][T15884] netlink_sendmsg+0x8e4/0xcb0 [ 977.139388][T15884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.144690][T15884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.150334][T15884] ? aa_sock_msg_perm+0x91/0x160 [ 977.155283][T15884] ? srso_alias_return_thunk+0x5/0xfbef5 [ 977.160932][T15884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 977.166228][T15884] __sock_sendmsg+0x223/0x270 [ 977.170931][T15884] ____sys_sendmsg+0x52a/0x7e0 [ 977.175721][T15884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 977.181017][T15884] ? __fget_files+0x2a/0x410 [ 977.185891][T15884] ? __fget_files+0x2a/0x410 [ 977.190511][T15884] __sys_sendmsg+0x269/0x350 [ 977.195121][T15884] ? __pfx___sys_sendmsg+0x10/0x10 [ 977.200243][T15884] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 977.206281][T15884] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 977.212636][T15884] ? do_syscall_64+0x100/0x230 [ 977.217430][T15884] ? do_syscall_64+0xb6/0x230 [ 977.222224][T15884] do_syscall_64+0xf3/0x230 [ 977.226756][T15884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.232677][T15884] RIP: 0033:0x7ffb1d185d29 [ 977.237098][T15884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.257061][T15884] RSP: 002b:00007ffb1abb2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 977.266185][T15884] RAX: ffffffffffffffda RBX: 00007ffb1d376240 RCX: 00007ffb1d185d29 [ 977.274164][T15884] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 000000000000000c [ 977.282143][T15884] RBP: 00007ffb1d201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 977.290121][T15884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 977.298094][T15884] R13: 0000000000000000 R14: 00007ffb1d376240 R15: 00007ffca57db1b8 [ 977.306176][T15884] [ 977.891596][T15897] netlink: 'syz.9.3414': attribute type 1 has an invalid length. [ 977.899381][T15897] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3414'. [ 978.400911][T15896] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 978.429554][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 978.429575][ T29] audit: type=1800 audit(1734641250.666:2002): pid=15896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3412" name="file2" dev="overlay" ino=686 res=0 errno=0 [ 980.192545][T15760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.199624][T15760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 980.880123][T15760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.441230][T15918] Bluetooth: MGMT ver 1.23 [ 981.866998][T15760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.874614][T15760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.901688][T15760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.436107][ T29] audit: type=1800 audit(1734641254.686:2003): pid=15924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3419" name="file2" dev="overlay" ino=2342 res=0 errno=0 [ 983.994891][T15760] hsr_slave_0: entered promiscuous mode [ 984.017903][T15760] hsr_slave_1: entered promiscuous mode [ 984.035580][T15760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.049027][T15760] Cannot create hsr debugfs directory [ 986.535836][T15961] overlayfs: failed to resolve './file1': -2 [ 986.599526][T15643] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 987.545570][T15965] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 987.630527][ T29] audit: type=1800 audit(1734641259.786:2004): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3434" name="file2" dev="overlay" ino=2367 res=0 errno=0 [ 988.243061][T15643] usb 9-1: device descriptor read/all, error -71 [ 988.746642][T15971] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 989.490211][ T29] audit: type=1800 audit(1734641261.016:2005): pid=15971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3433" name="file2" dev="overlay" ino=3055 res=0 errno=0 [ 991.864543][T15994] infiniband syz!: set down [ 992.676677][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.934426][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3443'. [ 993.019463][ T29] audit: type=1326 audit(1734641265.286:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 993.048986][ T29] audit: type=1326 audit(1734641265.286:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 994.002179][ T29] audit: type=1326 audit(1734641265.296:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 994.024926][ T29] audit: type=1326 audit(1734641265.296:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 994.064989][ T29] audit: type=1326 audit(1734641265.296:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 994.129310][ T29] audit: type=1326 audit(1734641265.296:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 994.156808][T16021] netlink: 'syz.6.3448': attribute type 27 has an invalid length. [ 994.221717][ T29] audit: type=1326 audit(1734641265.296:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.6.3448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 994.276553][T16024] 9pnet_fd: Insufficient options for proto=fd [ 994.588305][T16001] hsr_slave_1 (unregistering): left promiscuous mode [ 994.898566][T16035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3454'. [ 995.233729][T16038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3455'. [ 995.250334][T16038] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3455'. [ 995.279181][T15760] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 995.319557][T15760] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 995.352030][T15760] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 995.408349][T15760] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 995.614672][T15760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.489455][T15760] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.508277][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.515444][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.273865][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.281023][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.328771][T15760] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 997.340212][T15760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 998.014898][ T5997] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 998.640287][ T5997] usb 1-1: Using ep0 maxpacket: 32 [ 998.948127][ T5997] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 998.968524][ T5997] usb 1-1: config 0 has no interface number 0 [ 998.999388][ T5997] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 999.018766][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.030115][ T5997] usb 1-1: Product: syz [ 999.034393][ T5997] usb 1-1: Manufacturer: syz [ 999.048148][ T5997] usb 1-1: SerialNumber: syz [ 999.059811][T15760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.227381][ T5997] usb 1-1: config 0 descriptor?? [ 999.235752][ T5997] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1000.311683][ T5997] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1000.324315][ T5997] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1000.340164][ T29] audit: type=1326 audit(1734641272.606:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1000.457295][ T29] audit: type=1326 audit(1734641272.606:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1000.568436][T16086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.694708][T16086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.766397][T16087] netlink: 'syz.8.3466': attribute type 27 has an invalid length. [ 1000.834578][ T29] audit: type=1326 audit(1734641272.606:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1000.900424][ T29] audit: type=1326 audit(1734641272.606:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1000.998958][ T29] audit: type=1326 audit(1734641272.606:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1001.064284][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1001.065185][ T52] usb 1-1: USB disconnect, device number 24 [ 1001.081680][ T52] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1001.103807][ T29] audit: type=1326 audit(1734641272.606:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1001.144537][ T29] audit: type=1326 audit(1734641272.616:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1001.167391][ C0] vkms_vblank_simulate: vblank timer overrun [ 1001.185077][ T52] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1001.199664][ T52] quatech2 1-1:0.51: device disconnected [ 1001.251005][ T29] audit: type=1326 audit(1734641272.646:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1001.849494][ T29] audit: type=1326 audit(1734641272.736:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1002.277906][T16104] evm: overlay not supported [ 1002.345897][ T62] Bluetooth: hci2: Frame reassembly failed (-84) [ 1002.430224][ T29] audit: type=1326 audit(1734641273.136:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.8.3466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1002.793373][T16114] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3473'. [ 1003.320136][ T5997] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1003.342255][T15760] veth0_vlan: entered promiscuous mode [ 1003.376356][T15760] veth1_vlan: entered promiscuous mode [ 1003.403876][T15760] veth0_macvtap: entered promiscuous mode [ 1003.412852][T15760] veth1_macvtap: entered promiscuous mode [ 1003.427795][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.438321][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.448652][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.459561][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.489867][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.500545][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.510878][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.521604][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.527003][ T5997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.531459][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.531483][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.531506][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.573790][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.584997][T15760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1003.595035][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.605560][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.615603][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.634083][ T5997] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.677352][ T5997] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1003.690159][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.700463][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.732521][ T5997] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.761278][ T5997] usb 8-1: config 0 descriptor?? [ 1003.800358][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.821159][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.867066][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.893932][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.936231][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.966973][T15760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.010136][T15760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.036272][T15760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.080722][T13343] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1004.138264][T15760] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.196082][T15760] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.268796][T15760] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.806980][T15760] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.207078][T12592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.294787][T12592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.295590][ T5997] usbhid 8-1:0.0: can't add hid device: -71 [ 1005.310871][ T5997] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1005.320599][ T5997] usb 8-1: USB disconnect, device number 12 [ 1005.353009][T16133] netlink: 'syz.6.3481': attribute type 27 has an invalid length. [ 1005.361513][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1005.361532][ T29] audit: type=1326 audit(1734641277.616:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16132 comm="syz.6.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 1005.370930][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.417253][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.452116][ T29] audit: type=1326 audit(1734641277.616:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16132 comm="syz.6.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 1005.598548][ T29] audit: type=1326 audit(1734641277.626:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16132 comm="syz.6.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 1006.201046][ T29] audit: type=1326 audit(1734641277.626:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16132 comm="syz.6.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 1006.322526][ T29] audit: type=1326 audit(1734641277.626:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16132 comm="syz.6.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 1006.743523][ T29] audit: type=1326 audit(1734641277.626:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16132 comm="syz.6.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 1006.766653][ T29] audit: type=1326 audit(1734641277.676:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16132 comm="syz.6.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 1006.790231][ T29] audit: type=1326 audit(1734641277.676:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16132 comm="syz.6.3481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dec985d29 code=0x7ffc0000 [ 1008.174490][ T29] audit: type=1800 audit(1734641280.446:2038): pid=16142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3486" name="/" dev="9p" ino=2 res=0 errno=0 [ 1008.360506][T13862] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1008.600432][T13862] usb 9-1: Using ep0 maxpacket: 32 [ 1008.634118][T13862] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1008.693772][T13862] usb 9-1: config 0 has no interface number 0 [ 1009.297323][T16165] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1009.799002][ T29] audit: type=1800 audit(1734641281.526:2039): pid=16165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3491" name="file2" dev="overlay" ino=35 res=0 errno=0 [ 1009.907473][T13862] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1009.916853][T13862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.925535][T13862] usb 9-1: Product: syz [ 1009.935183][T13862] usb 9-1: Manufacturer: syz [ 1009.941319][T13862] usb 9-1: SerialNumber: syz [ 1009.948165][T13862] usb 9-1: config 0 descriptor?? [ 1009.955601][T13862] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1010.030123][ T5909] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1011.094318][ T5909] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1011.118856][ T5909] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.130190][ T5909] usb 10-1: Product: syz [ 1011.183472][ T5909] usb 10-1: Manufacturer: syz [ 1011.237720][ T5909] usb 10-1: SerialNumber: syz [ 1011.412582][ T5909] usb 10-1: config 0 descriptor?? [ 1011.477211][ T5909] usb 10-1: can't set config #0, error -71 [ 1011.626530][ T5909] usb 10-1: USB disconnect, device number 2 [ 1011.934044][T13862] usb 9-1: qt2_attach - failed to power on unit: -71 [ 1011.941771][T13862] quatech2 9-1:0.51: probe with driver quatech2 failed with error -71 [ 1011.971131][T13862] usb 9-1: USB disconnect, device number 8 [ 1012.034425][ T29] audit: type=1326 audit(1734641284.276:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.068299][ T29] audit: type=1326 audit(1734641284.276:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.091137][ T29] audit: type=1326 audit(1734641284.276:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.113589][ T29] audit: type=1326 audit(1734641284.276:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.136534][ T29] audit: type=1326 audit(1734641284.276:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.159612][ T29] audit: type=1326 audit(1734641284.276:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.182360][ T29] audit: type=1326 audit(1734641284.276:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.207957][T16185] netlink: 'syz.8.3499': attribute type 27 has an invalid length. [ 1012.217065][ T29] audit: type=1326 audit(1734641284.276:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.241246][ T29] audit: type=1326 audit(1734641284.276:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1012.289291][ T29] audit: type=1326 audit(1734641284.276:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.8.3499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3369185d29 code=0x7ffc0000 [ 1014.058397][T16207] loop9: detected capacity change from 0 to 6 [ 1016.622953][ T53] Bluetooth: hci2: Frame reassembly failed (-84) [ 1017.405558][T16225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3511'. [ 1017.796210][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1017.796233][ T29] audit: type=1326 audit(1734641290.066:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1017.846640][T16237] netlink: 'syz.5.3514': attribute type 27 has an invalid length. [ 1017.860296][ T29] audit: type=1326 audit(1734641290.066:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1017.890180][ T29] audit: type=1326 audit(1734641290.066:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1017.913595][ T29] audit: type=1326 audit(1734641290.066:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1017.945951][ T29] audit: type=1326 audit(1734641290.066:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1018.037977][ T29] audit: type=1326 audit(1734641290.066:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1018.070515][ T29] audit: type=1326 audit(1734641290.066:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1018.096179][ T29] audit: type=1326 audit(1734641290.066:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1018.129800][T16225] hsr_slave_1 (unregistering): left allmulticast mode [ 1018.158749][ T29] audit: type=1326 audit(1734641290.066:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1018.202558][ T29] audit: type=1326 audit(1734641290.066:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16235 comm="syz.5.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2ef85d29 code=0x7ffc0000 [ 1018.230340][ T5907] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1018.283920][T16225] hsr_slave_1 (unregistering): left promiscuous mode [ 1018.361009][T16237] bond0: (slave bond_slave_0): Releasing backup interface [ 1018.425437][ T5907] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1018.434803][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.460194][ T5907] usb 8-1: Product: syz [ 1018.483829][ T5907] usb 8-1: Manufacturer: syz [ 1018.496060][ T5907] usb 8-1: SerialNumber: syz [ 1018.520751][ T5907] usb 8-1: config 0 descriptor?? [ 1018.683822][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3515'. [ 1018.703669][ T5852] Bluetooth: hci2: command 0xfc11 tx timeout [ 1019.416459][T13343] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 1020.413080][ T5907] usb 8-1: Firmware: major: 0, minor: 0, hardware type: RZUSB (3) [ 1020.460857][ T5907] usb 8-1: Firmware version (0.0) predates our first public release. [ 1021.019641][ T5907] usb 8-1: Please update to version 0.2 or newer [ 1021.292044][ T5907] usb 8-1: USB disconnect, device number 13 [ 1023.578311][T16269] No control pipe specified [ 1025.210394][T16277] netlink: 252 bytes leftover after parsing attributes in process `syz.7.3525'. [ 1025.219473][T16277] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3525'. [ 1028.420231][T16287] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1029.126006][T16294] netlink: 'syz.9.3532': attribute type 1 has an invalid length. [ 1029.133963][T16294] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3532'. [ 1031.630723][T16317] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3537'. [ 1031.641747][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1031.700773][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1031.713807][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1031.746171][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1031.772732][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1031.813459][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1032.236089][T16327] No control pipe specified [ 1033.537483][T16315] lo speed is unknown, defaulting to 1000 [ 1033.678166][T16342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3546'. [ 1034.023206][T16315] chnl_net:caif_netlink_parms(): no params data found [ 1034.242445][T13343] Bluetooth: hci2: command tx timeout [ 1034.431781][T16315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.438934][T16315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.446842][T16315] bridge_slave_0: entered allmulticast mode [ 1034.462452][T16315] bridge_slave_0: entered promiscuous mode [ 1034.469307][T16359] netlink: 'syz.9.3548': attribute type 1 has an invalid length. [ 1034.488066][T16359] netlink: 224 bytes leftover after parsing attributes in process `syz.9.3548'. [ 1034.504240][T16315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.524645][T16315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.567380][T16315] bridge_slave_1: entered allmulticast mode [ 1034.591761][T16315] bridge_slave_1: entered promiscuous mode [ 1034.753211][T16315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.074729][T16315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.303415][T16373] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1035.318953][T16373] Error validating options; rc = [-22] [ 1037.088295][T13343] Bluetooth: hci2: command tx timeout [ 1037.265198][T16315] team0: Port device team_slave_0 added [ 1037.390583][T16315] team0: Port device team_slave_1 added [ 1037.799090][ T53] Bluetooth: hci7: Frame reassembly failed (-84) [ 1038.372342][T16388] No control pipe specified [ 1038.501911][T16315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.509142][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.549991][T16315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.586004][T16315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.594446][T16315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.621891][T16315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.817975][T16315] hsr_slave_0: entered promiscuous mode [ 1038.860353][T16315] hsr_slave_1: entered promiscuous mode [ 1038.886999][T16315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1038.926941][T16315] Cannot create hsr debugfs directory [ 1039.120466][ T5852] Bluetooth: hci2: command tx timeout [ 1039.292293][T16397] netlink: 'syz.6.3557': attribute type 1 has an invalid length. [ 1039.320479][T16397] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3557'. [ 1039.960105][T13343] Bluetooth: hci7: Entering manufacturer mode failed (-110) [ 1040.774592][T16415] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1041.229360][T13343] Bluetooth: hci2: command tx timeout [ 1043.140870][T16430] loop9: detected capacity change from 0 to 6 [ 1048.125439][ T5852] Bluetooth: hci1: command 0xfc11 tx timeout [ 1048.158417][T13343] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 1048.403891][T16469] veth0_to_team: entered promiscuous mode [ 1048.441847][T16469] veth0_to_team: entered allmulticast mode [ 1049.964836][T16315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1050.112721][T16315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1050.139204][T16315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1050.342811][T16315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1050.432458][T16486] loop6: detected capacity change from 0 to 512 [ 1051.042378][T16315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.057370][T16497] netlink: 'syz.0.3587': attribute type 1 has an invalid length. [ 1051.060221][T16315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.098110][T16486] EXT4-fs error (device loop6): ext4_orphan_get:1389: inode #15: comm syz.6.3583: casefold flag without casefold feature [ 1051.129581][T16497] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3587'. [ 1051.130514][T16486] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.3583: couldn't read orphan inode 15 (err -117) [ 1051.149418][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.158252][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.184347][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.191858][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.288379][T16486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1051.365253][T16315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1051.376592][T16315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1052.671389][T16524] netlink: 252 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1052.680532][T16524] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3592'. [ 1053.578999][T16315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.635540][T16315] veth0_vlan: entered promiscuous mode [ 1053.646498][T16315] veth1_vlan: entered promiscuous mode [ 1053.668567][T16315] veth0_macvtap: entered promiscuous mode [ 1053.681083][T16315] veth1_macvtap: entered promiscuous mode [ 1053.698580][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.709204][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.719166][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.729880][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.740029][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.750648][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.760766][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.771377][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.781323][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.791944][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.802485][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.813106][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.826251][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.841885][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.853244][T16315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.906765][ T8512] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.949114][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.960622][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.985894][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.150044][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.171454][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.191905][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.202644][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.213282][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.223899][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.233924][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.245731][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.256112][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.266959][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.277013][T16315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.289194][T16315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.306443][T16315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.317852][T16315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.326950][T16315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.335972][T16315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.330099][T16315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.769354][T16545] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3599'. [ 1056.491001][ T5915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.498872][ T5915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.579344][T16553] xt_socket: unknown flags 0x50 [ 1058.418595][T14789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.438181][T14789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.212504][T16586] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1062.226244][T16586] Error validating options; rc = [-22] [ 1064.006841][T13343] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1064.016157][T13343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1064.032371][T13343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1064.043604][T13343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1064.052957][T13343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1064.060623][T13343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1064.294579][T16593] lo speed is unknown, defaulting to 1000 [ 1064.922655][ T5939] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1065.711290][T16613] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1065.723483][T16613] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3617'. [ 1065.740052][ T5907] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1065.960825][ T5907] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1065.981826][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.024269][ T5907] usb 6-1: Product: syz [ 1066.044638][ T5907] usb 6-1: Manufacturer: syz [ 1066.049291][T16593] chnl_net:caif_netlink_parms(): no params data found [ 1066.060106][ T5939] usb 10-1: Using ep0 maxpacket: 16 [ 1066.073123][ T5939] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1066.090991][ T5939] usb 10-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1066.110282][ T5907] usb 6-1: SerialNumber: syz [ 1066.119031][ T5939] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1066.132308][ T5907] usb 6-1: config 0 descriptor?? [ 1066.293426][T13343] Bluetooth: hci0: command tx timeout [ 1067.075051][ T5939] usb 10-1: string descriptor 0 read error: -22 [ 1067.084521][ T5939] usb 10-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1067.563096][T16631] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1067.576728][T16631] Error validating options; rc = [-22] [ 1068.045236][ T5907] usb 6-1: Firmware version (0.0) predates our first public release. [ 1068.053835][ T5907] usb 6-1: Please update to version 0.2 or newer [ 1068.077079][ T5939] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.325797][T13343] Bluetooth: hci0: command tx timeout [ 1068.374057][ T5939] usb 10-1: can't set config #1, error -71 [ 1068.607632][ T5939] usb 10-1: USB disconnect, device number 3 [ 1069.410392][T16639] xt_socket: unknown flags 0x50 [ 1070.415741][T13343] Bluetooth: hci0: command tx timeout [ 1071.957037][ T5907] usb 6-1: USB disconnect, device number 2 [ 1072.020327][T16593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.118040][T16593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.220322][T16593] bridge_slave_0: entered allmulticast mode [ 1072.227499][T16593] bridge_slave_0: entered promiscuous mode [ 1072.668119][T13343] Bluetooth: hci0: command tx timeout [ 1074.112707][T16593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.147410][T16593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.154716][T16593] bridge_slave_1: entered allmulticast mode [ 1074.329853][T16671] loop9: detected capacity change from 0 to 6 [ 1074.420813][T16593] bridge_slave_1: entered promiscuous mode [ 1075.193158][T16676] xt_socket: unknown flags 0x50 [ 1077.361542][T16593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.593163][T16593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1079.136715][T16593] team0: Port device team_slave_0 added [ 1079.171501][T16593] team0: Port device team_slave_1 added [ 1081.626626][T16593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.659438][T16593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1081.739338][T16593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.955745][T16593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.981443][T16593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.007992][T16593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.263357][T16730] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1082.277406][T16730] Error validating options; rc = [-22] [ 1083.636328][T16593] hsr_slave_0: entered promiscuous mode [ 1083.680858][T16593] hsr_slave_1: entered promiscuous mode [ 1083.783907][T16747] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1083.797344][T16747] Error validating options; rc = [-22] [ 1083.826306][T16593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1083.939567][T16593] Cannot create hsr debugfs directory [ 1085.726651][T16593] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.114459][T16593] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.101636][T16593] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.782075][T16593] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.813821][T16790] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1089.073489][T16802] xt_socket: unknown flags 0x50 [ 1091.063220][T16807] can0: slcan on ttyS3. [ 1091.175440][T16811] loop9: detected capacity change from 0 to 6 [ 1091.683677][T16593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1091.781666][T16593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1091.903837][T16593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1091.920819][T16807] can0 (unregistered): slcan off ttyS3. [ 1092.130035][T16593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1092.325432][T16593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.383288][T16593] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.418136][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.425287][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.496849][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.504217][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.827851][T16829] netlink: 252 bytes leftover after parsing attributes in process `syz.7.3677'. [ 1092.837254][T16829] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3677'. [ 1095.038312][T16593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.809771][T16593] veth0_vlan: entered promiscuous mode [ 1095.822159][T16593] veth1_vlan: entered promiscuous mode [ 1096.612002][T16593] veth0_macvtap: entered promiscuous mode [ 1096.694712][T16864] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3688'. [ 1096.725097][T16864] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3688'. [ 1096.733671][T16869] net_ratelimit: 10 callbacks suppressed [ 1096.733689][T16869] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 1096.782543][T16593] veth1_macvtap: entered promiscuous mode [ 1097.119305][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.186178][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.255740][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.364734][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.399744][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.419942][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.433602][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.451267][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.470762][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.505784][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.528696][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.550620][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.569125][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.588750][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.608920][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1097.634163][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.663197][T16593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1097.712746][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.747028][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.790014][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1097.821525][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1097.916283][T16879] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1098.750277][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.760844][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.770823][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.784569][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.794492][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.806978][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.816874][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.827383][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.837386][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.847987][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.857851][T16593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1098.868509][T16593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1098.879553][T16593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.897635][T16873] batman_adv: batadv0: Interface deactivated: dummy0 [ 1098.904478][T16873] batman_adv: batadv0: Removing interface: dummy0 [ 1099.117397][T16593] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.126487][T16593] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.425239][T16593] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.654856][T16593] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.924578][T16895] loop3: detected capacity change from 0 to 512 [ 1099.956542][T16895] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.3695: casefold flag without casefold feature [ 1100.004458][T16895] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3695: couldn't read orphan inode 15 (err -117) [ 1100.045933][T16895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1100.068176][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.097659][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1100.239384][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1100.303616][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.477125][T16315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.505262][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1101.505284][ T29] audit: type=1326 audit(1734641373.776:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7fc00000 [ 1101.991397][T16921] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1102.005017][T16921] Error validating options; rc = [-22] [ 1102.775151][ T29] audit: type=1326 audit(1734641375.016:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16907 comm="syz.0.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5558f85d29 code=0x7fc00000 [ 1107.848086][T16960] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3714'. [ 1108.453579][T16965] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3715'. [ 1109.065504][T16964] 9pnet_fd: Insufficient options for proto=fd [ 1109.104879][T16968] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3718'. [ 1110.186151][T16978] Cannot find add_set index 0 as target [ 1111.291000][T16990] batman_adv: batadv0: Adding interface: dummy0 [ 1111.315498][T16990] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1111.420075][T16990] batman_adv: batadv0: Interface activated: dummy0 [ 1111.474147][T16994] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3722'. [ 1112.172954][T17000] loop9: detected capacity change from 0 to 6 [ 1112.680846][T16995] batadv0: mtu less than device minimum [ 1112.688891][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.701406][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.713894][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.726332][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.738242][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.750449][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.762356][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.774243][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1112.786122][T16995] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1114.196849][T17007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1114.203058][T17007] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1114.269219][T17013] netlink: 252 bytes leftover after parsing attributes in process `syz.9.3729'. [ 1114.278384][T17013] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3729'. [ 1115.377568][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.084003][T17030] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1117.115418][T17037] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1117.129370][T17037] Error validating options; rc = [-22] [ 1117.667249][T17007] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1117.673296][T17007] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1118.060028][ T29] audit: type=1326 audit(1734641390.316:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17035 comm="syz.9.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb1d185d29 code=0x7fc00000 [ 1119.427251][T17054] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1119.435816][T17054] CPU: 0 UID: 0 PID: 17054 Comm: syz.7.3739 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1119.446609][T17054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1119.456682][T17054] Call Trace: [ 1119.460155][T17054] [ 1119.463099][T17054] dump_stack_lvl+0x241/0x360 [ 1119.467904][T17054] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1119.473139][T17054] ? __pfx__printk+0x10/0x10 [ 1119.477766][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1119.483431][T17054] ? __kmalloc_cache_noprof+0x243/0x390 [ 1119.489009][T17054] ? sysfs_warn_dup+0x51/0xa0 [ 1119.493713][T17054] sysfs_warn_dup+0x8e/0xa0 [ 1119.498241][T17054] sysfs_do_create_link_sd+0xbe/0x110 [ 1119.503641][T17054] device_add_class_symlinks+0x1c5/0x250 [ 1119.509301][T17054] device_add+0x553/0xbf0 [ 1119.513666][T17054] wiphy_register+0x1a58/0x27b0 [ 1119.518643][T17054] ? __pfx_wiphy_register+0x10/0x10 [ 1119.523947][T17054] ? minstrel_ht_alloc+0x72b/0x860 [ 1119.529184][T17054] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1119.535390][T17054] ieee80211_register_hw+0x30fb/0x3e10 [ 1119.540883][T17054] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1119.547268][T17054] ? ieee80211_register_hw+0x15a1/0x3e10 [ 1119.552941][T17054] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1119.558786][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1119.564611][T17054] ? __asan_memset+0x23/0x50 [ 1119.569211][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1119.574860][T17054] ? __hrtimer_init+0x170/0x250 [ 1119.579739][T17054] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 1119.585512][T17054] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1119.591602][T17054] ? kstrndup+0x5c/0xb0 [ 1119.595788][T17054] ? __asan_memcpy+0x40/0x70 [ 1119.600392][T17054] hwsim_new_radio_nl+0xece/0x2290 [ 1119.605537][T17054] ? __pfx___nla_validate_parse+0x10/0x10 [ 1119.611304][T17054] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1119.616911][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1119.622558][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1119.628207][T17054] genl_rcv_msg+0xb16/0xec0 [ 1119.632743][T17054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1119.637821][T17054] ? __pfx_lock_acquire+0x10/0x10 [ 1119.642862][T17054] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1119.648429][T17054] ? __pfx___might_resched+0x10/0x10 [ 1119.653735][T17054] netlink_rcv_skb+0x1e5/0x430 [ 1119.658601][T17054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1119.663646][T17054] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1119.668977][T17054] genl_rcv+0x28/0x40 [ 1119.672982][T17054] netlink_unicast+0x7f8/0x990 [ 1119.677780][T17054] ? __pfx_netlink_unicast+0x10/0x10 [ 1119.683094][T17054] ? __virt_addr_valid+0x45f/0x530 [ 1119.688222][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1119.693868][T17054] ? __phys_addr_symbol+0x2f/0x70 [ 1119.698912][T17054] ? __check_object_size+0x47a/0x730 [ 1119.704224][T17054] netlink_sendmsg+0x8e4/0xcb0 [ 1119.709012][T17054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1119.714314][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1119.720043][T17054] ? aa_sock_msg_perm+0x91/0x160 [ 1119.724991][T17054] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1119.730728][T17054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1119.736035][T17054] __sock_sendmsg+0x223/0x270 [ 1119.740828][T17054] ____sys_sendmsg+0x52a/0x7e0 [ 1119.745622][T17054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1119.750920][T17054] ? __fget_files+0x2a/0x410 [ 1119.755532][T17054] ? __fget_files+0x2a/0x410 [ 1119.760154][T17054] __sys_sendmsg+0x269/0x350 [ 1119.764763][T17054] ? __pfx___sys_sendmsg+0x10/0x10 [ 1119.769938][T17054] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1119.776288][T17054] ? do_syscall_64+0x100/0x230 [ 1119.781079][T17054] ? do_syscall_64+0xb6/0x230 [ 1119.785782][T17054] do_syscall_64+0xf3/0x230 [ 1119.790315][T17054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.796233][T17054] RIP: 0033:0x7f1c8ad85d29 [ 1119.800665][T17054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.820279][T17054] RSP: 002b:00007f1c8bba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1119.828706][T17054] RAX: ffffffffffffffda RBX: 00007f1c8af76240 RCX: 00007f1c8ad85d29 [ 1119.836775][T17054] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 000000000000000b [ 1119.844754][T17054] RBP: 00007f1c8ae01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1119.852731][T17054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1119.860707][T17054] R13: 0000000000000000 R14: 00007f1c8af76240 R15: 00007fff4bb6fc38 [ 1119.868875][T17054] [ 1120.942869][T17063] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1120.956577][T17063] Error validating options; rc = [-22] [ 1121.760826][T15643] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1122.021649][ T29] audit: type=1326 audit(1734641394.276:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1122.059158][T17077] netlink: 'syz.0.3748': attribute type 27 has an invalid length. [ 1122.123972][ T29] audit: type=1326 audit(1734641394.276:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1122.147590][T15643] usb 6-1: Using ep0 maxpacket: 8 [ 1122.152928][ T29] audit: type=1326 audit(1734641394.276:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1122.599098][ T29] audit: type=1326 audit(1734641394.276:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1122.980421][T17077] bond0: (slave bond_slave_0): Releasing backup interface [ 1123.063135][ T29] audit: type=1326 audit(1734641394.276:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1123.119997][T15643] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1123.129449][T15643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.140623][T15643] usb 6-1: Product: syz [ 1123.144804][T15643] usb 6-1: Manufacturer: syz [ 1123.149411][T15643] usb 6-1: SerialNumber: syz [ 1123.181341][T15643] usb 6-1: config 0 descriptor?? [ 1123.194738][ T29] audit: type=1326 audit(1734641394.296:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1123.248725][ T29] audit: type=1326 audit(1734641394.296:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1123.287985][ T29] audit: type=1326 audit(1734641394.296:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1123.329570][ T29] audit: type=1326 audit(1734641394.296:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1123.373338][ T29] audit: type=1326 audit(1734641394.296:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1123.803273][ T29] audit: type=1326 audit(1734641394.296:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1124.150523][ T29] audit: type=1326 audit(1734641394.296:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1124.264484][ T29] audit: type=1326 audit(1734641394.296:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1124.298357][T15643] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 1124.320726][T15643] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1124.332383][ T29] audit: type=1326 audit(1734641394.326:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1124.370376][T15643] usb 6-1: USB disconnect, device number 3 [ 1124.420114][ T29] audit: type=1326 audit(1734641394.326:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17075 comm="syz.0.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5558f85d29 code=0x7ffc0000 [ 1126.955540][T16130] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1127.889991][T16130] usb 8-1: Using ep0 maxpacket: 16 [ 1128.094556][T16130] usb 8-1: device descriptor read/all, error -71 [ 1128.506128][T17128] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1129.240814][T17136] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1129.254620][T17136] Error validating options; rc = [-22] [ 1130.282188][T17140] xt_CT: No such helper "pptp" [ 1130.502923][ T52] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1131.027240][ T52] usb 10-1: Using ep0 maxpacket: 16 [ 1131.057475][ T52] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1131.072691][ T52] usb 10-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.650064][T16130] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1131.691935][ T52] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1131.706673][ T52] usb 10-1: string descriptor 0 read error: -22 [ 1131.713199][ T52] usb 10-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 1131.722409][ T52] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.951215][T16130] usb 8-1: Using ep0 maxpacket: 8 [ 1131.960471][T16130] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1131.983649][T16130] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.225733][T16130] usb 8-1: Product: syz [ 1132.227854][ T52] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input6 [ 1132.230539][T16130] usb 8-1: Manufacturer: syz [ 1132.249977][T16130] usb 8-1: SerialNumber: syz [ 1132.264460][T16130] usb 8-1: config 0 descriptor?? [ 1132.637711][T16130] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1132.688169][T17152] syz.3.3768 (17152): drop_caches: 2 [ 1133.025835][ T5182] bcm5974 10-1:1.0: could not read from device [ 1133.110553][ T5182] bcm5974 10-1:1.0: could not read from device [ 1133.193464][ T52] usb 10-1: USB disconnect, device number 4 [ 1133.498462][T17172] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3775'. [ 1133.507851][T17172] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3775'. [ 1133.977662][T17178] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1133.985553][T17178] CPU: 0 UID: 0 PID: 17178 Comm: syz.5.3774 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1133.996374][T17178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1134.006456][T17178] Call Trace: [ 1134.009755][T17178] [ 1134.012716][T17178] dump_stack_lvl+0x241/0x360 [ 1134.017448][T17178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1134.022687][T17178] ? __pfx__printk+0x10/0x10 [ 1134.027309][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1134.032973][T17178] ? __kmalloc_cache_noprof+0x243/0x390 [ 1134.039082][T17178] ? sysfs_warn_dup+0x51/0xa0 [ 1134.043791][T17178] sysfs_warn_dup+0x8e/0xa0 [ 1134.048407][T17178] sysfs_do_create_link_sd+0xbe/0x110 [ 1134.053817][T17178] device_add_class_symlinks+0x1c5/0x250 [ 1134.059655][T17178] device_add+0x553/0xbf0 [ 1134.064109][T17178] wiphy_register+0x1a58/0x27b0 [ 1134.068999][T17178] ? __pfx_wiphy_register+0x10/0x10 [ 1134.074480][T17178] ? minstrel_ht_alloc+0x72b/0x860 [ 1134.079806][T17178] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1134.085920][T17178] ieee80211_register_hw+0x30fb/0x3e10 [ 1134.091414][T17178] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1134.097795][T17178] ? ieee80211_register_hw+0x15a1/0x3e10 [ 1134.103641][T17178] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1134.109479][T17178] ? trace_hrtimer_init+0x3c/0x230 [ 1134.114642][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1134.120304][T17178] ? __asan_memset+0x23/0x50 [ 1134.124920][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1134.130668][T17178] ? __hrtimer_init+0x170/0x250 [ 1134.135563][T17178] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 1134.141366][T17178] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1134.147469][T17178] ? kstrndup+0x5c/0xb0 [ 1134.151668][T17178] ? __asan_memcpy+0x40/0x70 [ 1134.156290][T17178] hwsim_new_radio_nl+0xece/0x2290 [ 1134.161454][T17178] ? __pfx___nla_validate_parse+0x10/0x10 [ 1134.167386][T17178] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1134.173096][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1134.178753][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1134.184419][T17178] genl_rcv_msg+0xb16/0xec0 [ 1134.188969][T17178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1134.194064][T17178] ? __pfx_lock_acquire+0x10/0x10 [ 1134.199120][T17178] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1134.204737][T17178] ? __pfx___might_resched+0x10/0x10 [ 1134.210092][T17178] netlink_rcv_skb+0x1e5/0x430 [ 1134.214902][T17178] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1134.219973][T17178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1134.225326][T17178] genl_rcv+0x28/0x40 [ 1134.229776][T17178] netlink_unicast+0x7f8/0x990 [ 1134.234603][T17178] ? __pfx_netlink_unicast+0x10/0x10 [ 1134.239930][T17178] ? __virt_addr_valid+0x45f/0x530 [ 1134.245077][T17178] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1134.250745][T17178] ? __phys_addr_symbol+0x2f/0x70 [ 1134.255808][T17178] ? __check_object_size+0x47a/0x730 [ 1134.261136][T17178] netlink_sendmsg+0x8e4/0xcb0 [ 1134.265944][T17178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.271439][T17178] ? tomoyo_socket_sendmsg_permission+0x12e/0x420 [ 1134.277891][T17178] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1134.283052][T17178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1134.288365][T17178] __sock_sendmsg+0x223/0x270 [ 1134.293092][T17178] ____sys_sendmsg+0x52a/0x7e0 [ 1134.297907][T17178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1134.303227][T17178] ? __fget_files+0x2a/0x410 [ 1134.307862][T17178] ? __fget_files+0x2a/0x410 [ 1134.312521][T17178] __sys_sendmsg+0x269/0x350 [ 1134.317166][T17178] ? __pfx___sys_sendmsg+0x10/0x10 [ 1134.322376][T17178] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1134.329009][T17178] ? do_syscall_64+0x100/0x230 [ 1134.333835][T17178] ? do_syscall_64+0xb6/0x230 [ 1134.338573][T17178] do_syscall_64+0xf3/0x230 [ 1134.343115][T17178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.349042][T17178] RIP: 0033:0x7f8b2ef85d29 [ 1134.353476][T17178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.373118][T17178] RSP: 002b:00007f8b2fddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1134.381564][T17178] RAX: ffffffffffffffda RBX: 00007f8b2f176240 RCX: 00007f8b2ef85d29 [ 1134.389555][T17178] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 000000000000000b [ 1134.397552][T17178] RBP: 00007f8b2f001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1134.405544][T17178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1134.413536][T17178] R13: 0000000000000000 R14: 00007f8b2f176240 R15: 00007ffeeb19ccb8 [ 1134.421548][T17178] [ 1135.792271][T16130] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1135.804623][T16130] usb 8-1: USB disconnect, device number 16 [ 1136.607974][T17192] bridge1: entered promiscuous mode [ 1136.675998][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3781'. [ 1137.826655][T17212] loop9: detected capacity change from 0 to 512 [ 1138.205471][T17219] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3787'. [ 1138.672005][T17221] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1138.681782][T17221] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3789'. [ 1138.770207][T17212] EXT4-fs error (device loop9): ext4_orphan_get:1389: inode #15: comm syz.9.3786: casefold flag without casefold feature [ 1138.824091][T17212] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.3786: couldn't read orphan inode 15 (err -117) [ 1138.872270][T17225] loop6: detected capacity change from 0 to 128 [ 1138.878882][T17212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.932554][T17225] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1138.983914][T17227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3778'. [ 1139.055775][T17225] ext4 filesystem being mounted at /511/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.472438][T17233] xt_CT: No such helper "pptp" [ 1140.781610][T17242] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1140.789283][T17242] CPU: 0 UID: 0 PID: 17242 Comm: syz.7.3793 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1140.800249][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1140.810500][T17242] Call Trace: [ 1140.813812][T17242] [ 1140.816762][T17242] dump_stack_lvl+0x241/0x360 [ 1140.821494][T17242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1140.826727][T17242] ? __pfx__printk+0x10/0x10 [ 1140.831353][T17242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.837014][T17242] ? __kmalloc_cache_noprof+0x243/0x390 [ 1140.842599][T17242] ? sysfs_warn_dup+0x51/0xa0 [ 1140.847304][T17242] sysfs_warn_dup+0x8e/0xa0 [ 1140.851837][T17242] sysfs_do_create_link_sd+0xbe/0x110 [ 1140.857239][T17242] device_add_class_symlinks+0x1c5/0x250 [ 1140.862900][T17242] device_add+0x553/0xbf0 [ 1140.867260][T17242] wiphy_register+0x1a58/0x27b0 [ 1140.872149][T17242] ? __pfx_wiphy_register+0x10/0x10 [ 1140.877369][T17242] ? minstrel_ht_alloc+0x72b/0x860 [ 1140.882520][T17242] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1140.888633][T17242] ieee80211_register_hw+0x30fb/0x3e10 [ 1140.894119][T17242] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1140.900495][T17242] ? ieee80211_register_hw+0x15a1/0x3e10 [ 1140.906157][T17242] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1140.911994][T17242] ? trace_hrtimer_init+0x32/0x230 [ 1140.917144][T17242] ? trace_hrtimer_init+0x3c/0x230 [ 1140.922298][T17242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.927957][T17242] ? __asan_memset+0x23/0x50 [ 1140.932571][T17242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.938230][T17242] ? __hrtimer_init+0x170/0x250 [ 1140.943124][T17242] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 1140.948916][T17242] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1140.955020][T17242] ? kstrndup+0x5c/0xb0 [ 1140.959218][T17242] ? __asan_memcpy+0x40/0x70 [ 1140.963930][T17242] hwsim_new_radio_nl+0xece/0x2290 [ 1140.969091][T17242] ? __pfx___nla_validate_parse+0x10/0x10 [ 1140.974852][T17242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1140.980470][T17242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.986132][T17242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1140.991813][T17242] genl_rcv_msg+0xb16/0xec0 [ 1140.996368][T17242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1141.001463][T17242] ? __pfx_lock_acquire+0x10/0x10 [ 1141.006521][T17242] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1141.012101][T17242] ? __pfx___might_resched+0x10/0x10 [ 1141.017423][T17242] netlink_rcv_skb+0x1e5/0x430 [ 1141.022218][T17242] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1141.027280][T17242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1141.032613][T17242] ? __rcu_read_unlock+0xa1/0x110 [ 1141.037681][T17242] genl_rcv+0x28/0x40 [ 1141.041700][T17242] netlink_unicast+0x7f8/0x990 [ 1141.046526][T17242] ? __pfx_netlink_unicast+0x10/0x10 [ 1141.051866][T17242] ? __virt_addr_valid+0x45f/0x530 [ 1141.057017][T17242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1141.062851][T17242] ? __phys_addr_symbol+0x2f/0x70 [ 1141.067905][T17242] ? __check_object_size+0x47a/0x730 [ 1141.073230][T17242] netlink_sendmsg+0x8e4/0xcb0 [ 1141.078038][T17242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.083360][T17242] ? security_socket_sendmsg+0xe4/0x2a0 [ 1141.088943][T17242] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1141.094606][T17242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1141.099931][T17242] __sock_sendmsg+0x223/0x270 [ 1141.104625][T17242] ____sys_sendmsg+0x52a/0x7e0 [ 1141.109401][T17242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1141.114692][T17242] ? __fget_files+0x2a/0x410 [ 1141.119294][T17242] ? __fget_files+0x2a/0x410 [ 1141.123900][T17242] __sys_sendmsg+0x269/0x350 [ 1141.128500][T17242] ? __pfx___sys_sendmsg+0x10/0x10 [ 1141.133657][T17242] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1141.140005][T17242] ? do_syscall_64+0x100/0x230 [ 1141.144830][T17242] ? do_syscall_64+0xb6/0x230 [ 1141.149566][T17242] do_syscall_64+0xf3/0x230 [ 1141.154130][T17242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.160075][T17242] RIP: 0033:0x7f1c8ad85d29 [ 1141.164517][T17242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.184243][T17242] RSP: 002b:00007f1c8bba9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1141.192982][T17242] RAX: ffffffffffffffda RBX: 00007f1c8af76240 RCX: 00007f1c8ad85d29 [ 1141.200976][T17242] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 000000000000000b [ 1141.208963][T17242] RBP: 00007f1c8ae01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1141.216956][T17242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.224945][T17242] R13: 0000000000000000 R14: 00007f1c8af76240 R15: 00007fff4bb6fc38 [ 1141.232954][T17242] [ 1141.332223][T15366] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1141.456155][ T8512] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1141.850895][T17251] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1141.860249][T17251] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3794'. [ 1144.967708][T17277] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3803'. [ 1145.066170][T17273] xt_CT: No such helper "pptp" [ 1145.120326][T17270] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3804'. [ 1145.149001][T17270] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3804'. [ 1147.000124][T17281] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1147.731948][T17295] loop9: detected capacity change from 0 to 128 [ 1147.892619][T17299] loop3: detected capacity change from 0 to 512 [ 1147.921068][T17295] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1147.950226][T17295] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1147.962045][T17299] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.3807: casefold flag without casefold feature [ 1148.020096][T17299] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.3807: couldn't read orphan inode 15 (err -117) [ 1148.940962][T17299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1149.026191][T15366] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1150.243419][T16315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.850895][T17336] Bluetooth: MGMT ver 1.23 [ 1152.393046][T17290] syz.5.3806 (17290): drop_caches: 2 [ 1152.846622][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3823'. [ 1154.035268][T17350] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1154.048695][T17350] Error validating options; rc = [-22] [ 1154.574610][T17356] loop3: detected capacity change from 0 to 128 [ 1154.669637][T17356] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1154.768142][T17356] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1154.909648][T17365] loop5: detected capacity change from 0 to 512 [ 1155.965361][T16315] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1156.706537][T17375] tty tty35: ldisc open failed (-12), clearing slot 34 [ 1156.720060][T17365] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.3828: casefold flag without casefold feature [ 1156.995272][T17365] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3828: couldn't read orphan inode 15 (err -117) [ 1157.141393][T17365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1157.643882][T17391] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1157.657761][T17391] Error validating options; rc = [-22] [ 1158.745822][T17401] 9pnet_fd: Insufficient options for proto=fd [ 1159.541010][T15760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1159.569519][T17407] loop6: detected capacity change from 0 to 128 [ 1159.879264][T17407] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1160.005107][T17407] ext4 filesystem being mounted at /522/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1160.859503][T17426] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1161.098615][ T8512] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1161.418879][T17432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3850'. [ 1165.452883][T17465] QAT: Invalid ioctl 1074554389 [ 1166.007970][T17470] loop5: detected capacity change from 0 to 512 [ 1166.564393][T17470] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.3859: casefold flag without casefold feature [ 1166.952637][T17470] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.3859: couldn't read orphan inode 15 (err -117) [ 1167.041621][T17470] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1168.573358][T15760] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1175.510085][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3877'. [ 1177.174832][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1179.275505][T17566] xt_CT: No such helper "pptp" [ 1180.165182][T17579] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 1180.172914][T17579] CPU: 1 UID: 0 PID: 17579 Comm: syz.0.3890 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1180.183699][T17579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1180.193773][T17579] Call Trace: [ 1180.197064][T17579] [ 1180.200009][T17579] dump_stack_lvl+0x241/0x360 [ 1180.204728][T17579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.209969][T17579] ? __pfx__printk+0x10/0x10 [ 1180.214676][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.220426][T17579] ? __kmalloc_cache_noprof+0x243/0x390 [ 1180.226004][T17579] ? sysfs_warn_dup+0x51/0xa0 [ 1180.230706][T17579] sysfs_warn_dup+0x8e/0xa0 [ 1180.235230][T17579] sysfs_do_create_link_sd+0xbe/0x110 [ 1180.240626][T17579] device_add_class_symlinks+0x1c5/0x250 [ 1180.246283][T17579] device_add+0x553/0xbf0 [ 1180.250643][T17579] wiphy_register+0x1a58/0x27b0 [ 1180.255532][T17579] ? __pfx_wiphy_register+0x10/0x10 [ 1180.260751][T17579] ? minstrel_ht_alloc+0x72b/0x860 [ 1180.265908][T17579] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 1180.272021][T17579] ieee80211_register_hw+0x30fb/0x3e10 [ 1180.277504][T17579] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1180.283878][T17579] ? ieee80211_register_hw+0x15a1/0x3e10 [ 1180.289541][T17579] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1180.295383][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.301210][T17579] ? __asan_memset+0x23/0x50 [ 1180.305818][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.311471][T17579] ? __hrtimer_init+0x170/0x250 [ 1180.316360][T17579] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 1180.322146][T17579] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1180.328242][T17579] ? kstrndup+0x5c/0xb0 [ 1180.332437][T17579] ? __asan_memcpy+0x40/0x70 [ 1180.337313][T17579] hwsim_new_radio_nl+0xece/0x2290 [ 1180.342467][T17579] ? __pfx___nla_validate_parse+0x10/0x10 [ 1180.348219][T17579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1180.354576][T17579] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1180.360161][T17579] ? irqentry_exit+0x63/0x90 [ 1180.364785][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.370439][T17579] ? lockdep_hardirqs_on+0x99/0x150 [ 1180.375671][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.381513][T17579] ? __nla_parse+0x24/0x60 [ 1180.385972][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.391628][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.397297][T17579] genl_rcv_msg+0xb16/0xec0 [ 1180.401849][T17579] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1180.406910][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.412572][T17579] ? mark_lock+0x9a/0x360 [ 1180.416943][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.422605][T17579] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1180.428723][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.434379][T17579] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1180.439975][T17579] netlink_rcv_skb+0x1e5/0x430 [ 1180.444768][T17579] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1180.449824][T17579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1180.455153][T17579] ? __rcu_read_unlock+0xa1/0x110 [ 1180.460217][T17579] genl_rcv+0x28/0x40 [ 1180.464226][T17579] netlink_unicast+0x7f8/0x990 [ 1180.469039][T17579] ? __pfx_netlink_unicast+0x10/0x10 [ 1180.474361][T17579] ? __virt_addr_valid+0x45f/0x530 [ 1180.479504][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.485163][T17579] ? __phys_addr_symbol+0x2f/0x70 [ 1180.490217][T17579] ? __check_object_size+0x47a/0x730 [ 1180.495536][T17579] netlink_sendmsg+0x8e4/0xcb0 [ 1180.500520][T17579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.505839][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.511494][T17579] ? aa_sock_msg_perm+0x91/0x160 [ 1180.516458][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.522126][T17579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.527440][T17579] __sock_sendmsg+0x223/0x270 [ 1180.532165][T17579] ____sys_sendmsg+0x52a/0x7e0 [ 1180.536945][T17579] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1180.542601][T17579] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1180.547906][T17579] ? __sys_sendmsg+0x24e/0x350 [ 1180.552693][T17579] __sys_sendmsg+0x269/0x350 [ 1180.557303][T17579] ? __pfx___sys_sendmsg+0x10/0x10 [ 1180.562471][T17579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1180.568816][T17579] ? do_syscall_64+0x100/0x230 [ 1180.573613][T17579] ? do_syscall_64+0xb6/0x230 [ 1180.578311][T17579] do_syscall_64+0xf3/0x230 [ 1180.582843][T17579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.589106][T17579] RIP: 0033:0x7f5558f85d29 [ 1180.593528][T17579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.613148][T17579] RSP: 002b:00007f5559e28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.621586][T17579] RAX: ffffffffffffffda RBX: 00007f5559176240 RCX: 00007f5558f85d29 [ 1180.629565][T17579] RDX: 0000000000000004 RSI: 0000000020000040 RDI: 000000000000000c [ 1180.637547][T17579] RBP: 00007f5559001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1180.645529][T17579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.653507][T17579] R13: 0000000000000000 R14: 00007f5559176240 R15: 00007ffe0b0c97e8 [ 1180.661597][T17579] [ 1185.110428][T17605] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3897'. [ 1185.119601][T17605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3897'. [ 1188.104559][T17622] xt_CT: No such helper "pptp" [ 1188.595220][T17626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1188.607982][T17626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1188.616453][T17626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1188.632617][T17626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1188.700454][T17626] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1188.709494][T17626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1188.724454][T13343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1188.732182][T13343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1188.739511][T13343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1188.749771][T13343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1188.752977][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3908'. [ 1188.757686][T13343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1188.773643][T13343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1190.013147][T17645] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1190.013337][T17645] Error validating options; rc = [-22] [ 1190.437805][T17643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1190.443876][T17643] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1190.799963][ C1] ------------[ cut here ]------------ [ 1190.805979][ C1] WARNING: CPU: 1 PID: 17494 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50 [ 1190.815130][ C1] Modules linked in: [ 1190.819034][ C1] CPU: 1 UID: 0 PID: 17494 Comm: syz.6.3867 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1190.829799][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1190.839868][ C1] RIP: 0010:__queue_work+0xcd3/0xf50 [ 1190.845171][ C1] Code: ff e8 21 ee 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 13 ee 37 00 eb 13 e8 0c ee 37 00 eb 0c e8 05 ee 37 00 eb 05 e8 fe ed 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d e9 02 bb 88 0a [ 1190.864788][ C1] RSP: 0018:ffffc90000a18b08 EFLAGS: 00010046 [ 1190.870874][ C1] RAX: ffffffff816785dd RBX: 0000000000000100 RCX: ffff888030b03c00 [ 1190.878858][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1190.886836][ C1] RBP: 0000000000010000 R08: ffffffff81677a08 R09: 1ffffffff2032f76 [ 1190.894826][ C1] R10: dffffc0000000000 R11: ffffffff81678e10 R12: ffff8880121bd800 [ 1190.902810][ C1] R13: ffff8880121bd9c0 R14: dffffc0000000000 R15: 0000000000000008 [ 1190.910799][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1190.919738][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1190.926411][ C1] CR2: 0000001b2c71bff8 CR3: 000000006105c000 CR4: 0000000000350ef0 [ 1190.934394][ C1] Call Trace: [ 1190.937675][ C1] [ 1190.940522][ C1] ? __warn+0x165/0x4d0 [ 1190.944696][ C1] ? __queue_work+0xcd3/0xf50 [ 1190.949383][ C1] ? report_bug+0x2b3/0x500 [ 1190.953907][ C1] ? __queue_work+0xcd3/0xf50 [ 1190.958598][ C1] ? handle_bug+0x60/0x90 [ 1190.962933][ C1] ? exc_invalid_op+0x1a/0x50 [ 1190.967614][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 1190.972678][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1190.978582][ C1] ? __queue_work+0xe8/0xf50 [ 1190.983178][ C1] ? __queue_work+0xcbd/0xf50 [ 1190.987864][ C1] ? __queue_work+0xcd3/0xf50 [ 1190.992563][ C1] ? __queue_work+0xcbd/0xf50 [ 1190.997252][ C1] ? call_timer_fn+0xa8/0x650 [ 1191.001949][ C1] call_timer_fn+0x189/0x650 [ 1191.006555][ C1] ? call_timer_fn+0xc0/0x650 [ 1191.011247][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.017065][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1191.022193][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.028009][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.033649][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1191.038857][ C1] ? rcu_is_watching+0x15/0xb0 [ 1191.043637][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.049276][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.055092][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.060911][ C1] __run_timer_base+0x695/0x8e0 [ 1191.065784][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1191.071174][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1191.077598][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1191.082807][ C1] run_timer_softirq+0xb7/0x170 [ 1191.087672][ C1] handle_softirqs+0x2d6/0x9b0 [ 1191.092458][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.098104][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 1191.102891][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1191.108205][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.113854][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1191.119068][ C1] __irq_exit_rcu+0xf7/0x220 [ 1191.123681][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1191.128903][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.134548][ C1] irq_exit_rcu+0x9/0x30 [ 1191.138809][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1191.144462][ C1] [ 1191.147397][ C1] [ 1191.150328][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1191.156412][ C1] RIP: 0010:srso_alias_safe_ret+0x5/0x7 [ 1191.161967][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc [ 1191.181578][ C1] RSP: 0018:ffffc90004eb7448 EFLAGS: 00000297 [ 1191.187654][ C1] RAX: 0000000080000001 RBX: ffffc90004eb7530 RCX: 0000000000000001 [ 1191.195629][ C1] RDX: dffffc0000000000 RSI: ffffc90004eb0000 RDI: 0000000000000001 [ 1191.203607][ C1] RBP: ffffc90004eb7520 R08: ffffc90004eb7690 R09: ffffc90004eb7570 [ 1191.211586][ C1] R10: dffffc0000000000 R11: fffff520009d6eb0 R12: dffffc0000000000 [ 1191.219563][ C1] R13: ffffc90004eb7520 R14: ffffc90004eb0000 R15: ffffc90004eb76a0 [ 1191.227562][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.233207][ C1] unwind_next_frame+0x18e6/0x22d0 [ 1191.238338][ C1] ? stack_trace_save+0x118/0x1d0 [ 1191.243371][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1191.249531][ C1] arch_stack_walk+0x11c/0x150 [ 1191.254313][ C1] ? save_stack+0xfb/0x1f0 [ 1191.258741][ C1] stack_trace_save+0x118/0x1d0 [ 1191.263688][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1191.269068][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.274718][ C1] save_stack+0xfb/0x1f0 [ 1191.278968][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.284610][ C1] ? __pfx_save_stack+0x10/0x10 [ 1191.289479][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.295126][ C1] ? page_ext_get+0x20/0x2a0 [ 1191.299726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.305371][ C1] __reset_page_owner+0x76/0x430 [ 1191.310318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.316135][ C1] ? mod_memcg_page_state+0x531/0x800 [ 1191.321528][ C1] ? mod_memcg_page_state+0x97/0x800 [ 1191.326843][ C1] free_unref_page+0xd3f/0x1010 [ 1191.331729][ C1] vfree+0x186/0x2e0 [ 1191.335645][ C1] kcov_close+0x28/0x50 [ 1191.339811][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1191.344680][ C1] __fput+0x23e/0xa50 [ 1191.348693][ C1] task_work_run+0x251/0x310 [ 1191.353318][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1191.358443][ C1] ? do_exit+0xa2a/0x28e0 [ 1191.362787][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.368518][ C1] ? do_exit+0xa2a/0x28e0 [ 1191.372866][ C1] do_exit+0xa2f/0x28e0 [ 1191.377040][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.382680][ C1] ? __pfx_do_exit+0x10/0x10 [ 1191.387280][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1191.392662][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.398303][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1191.404383][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1191.410722][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1191.415857][ C1] do_group_exit+0x207/0x2c0 [ 1191.420546][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1191.425758][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.431394][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1191.436611][ C1] get_signal+0x16b2/0x1750 [ 1191.441144][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.446958][ C1] ? __pfx_get_signal+0x10/0x10 [ 1191.451844][ C1] arch_do_signal_or_restart+0x96/0x860 [ 1191.457412][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1191.463585][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1191.469590][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1191.475329][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 1191.480897][ C1] do_syscall_64+0x100/0x230 [ 1191.485509][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.491419][ C1] RIP: 0033:0x7f1dec985d29 [ 1191.495839][ C1] Code: Unable to access opcode bytes at 0x7f1dec985cff. [ 1191.502855][ C1] RSP: 002b:00007f1dea7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1191.511278][ C1] RAX: 0000000000018ff8 RBX: 00007f1decb75fa0 RCX: 00007f1dec985d29 [ 1191.519250][ C1] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 1191.527223][ C1] RBP: 00007f1deca01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1191.535198][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.543257][ C1] R13: 0000000000000000 R14: 00007f1decb75fa0 R15: 00007ffca9353f88 [ 1191.551247][ C1] [ 1191.554267][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1191.561543][ C1] CPU: 1 UID: 0 PID: 17494 Comm: syz.6.3867 Not tainted 6.13.0-rc3-syzkaller-00073-geabcdba3ad40 #0 [ 1191.572307][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1191.582362][ C1] Call Trace: [ 1191.585641][ C1] [ 1191.588491][ C1] dump_stack_lvl+0x241/0x360 [ 1191.593196][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1191.598415][ C1] ? __pfx__printk+0x10/0x10 [ 1191.603016][ C1] ? _printk+0xd5/0x120 [ 1191.607272][ C1] ? __init_begin+0x41000/0x41000 [ 1191.612314][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.617951][ C1] ? vscnprintf+0x5d/0x90 [ 1191.622294][ C1] panic+0x349/0x880 [ 1191.626207][ C1] ? __warn+0x174/0x4d0 [ 1191.630385][ C1] ? __pfx_panic+0x10/0x10 [ 1191.634835][ C1] __warn+0x344/0x4d0 [ 1191.638828][ C1] ? __queue_work+0xcd3/0xf50 [ 1191.643520][ C1] report_bug+0x2b3/0x500 [ 1191.647865][ C1] ? __queue_work+0xcd3/0xf50 [ 1191.652565][ C1] handle_bug+0x60/0x90 [ 1191.656723][ C1] exc_invalid_op+0x1a/0x50 [ 1191.661231][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1191.666097][ C1] RIP: 0010:__queue_work+0xcd3/0xf50 [ 1191.671390][ C1] Code: ff e8 21 ee 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 13 ee 37 00 eb 13 e8 0c ee 37 00 eb 0c e8 05 ee 37 00 eb 05 e8 fe ed 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d e9 02 bb 88 0a [ 1191.690998][ C1] RSP: 0018:ffffc90000a18b08 EFLAGS: 00010046 [ 1191.697074][ C1] RAX: ffffffff816785dd RBX: 0000000000000100 RCX: ffff888030b03c00 [ 1191.705058][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 1191.713119][ C1] RBP: 0000000000010000 R08: ffffffff81677a08 R09: 1ffffffff2032f76 [ 1191.721094][ C1] R10: dffffc0000000000 R11: ffffffff81678e10 R12: ffff8880121bd800 [ 1191.729069][ C1] R13: ffff8880121bd9c0 R14: dffffc0000000000 R15: 0000000000000008 [ 1191.737050][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.742867][ C1] ? __queue_work+0xe8/0xf50 [ 1191.747462][ C1] ? __queue_work+0xcbd/0xf50 [ 1191.752154][ C1] ? __queue_work+0xcbd/0xf50 [ 1191.756849][ C1] ? call_timer_fn+0xa8/0x650 [ 1191.761545][ C1] call_timer_fn+0x189/0x650 [ 1191.766147][ C1] ? call_timer_fn+0xc0/0x650 [ 1191.770841][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.776654][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1191.781780][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.787594][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.793233][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1191.798437][ C1] ? rcu_is_watching+0x15/0xb0 [ 1191.803218][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.808860][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.814674][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 1191.820491][ C1] __run_timer_base+0x695/0x8e0 [ 1191.825364][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1191.830750][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1191.837086][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1191.842296][ C1] run_timer_softirq+0xb7/0x170 [ 1191.847157][ C1] handle_softirqs+0x2d6/0x9b0 [ 1191.851944][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.857592][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 1191.862379][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1191.867686][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.873323][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 1191.878535][ C1] __irq_exit_rcu+0xf7/0x220 [ 1191.883145][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1191.888366][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.894011][ C1] irq_exit_rcu+0x9/0x30 [ 1191.898269][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1191.904175][ C1] [ 1191.907105][ C1] [ 1191.910036][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1191.916032][ C1] RIP: 0010:srso_alias_safe_ret+0x5/0x7 [ 1191.921671][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 48 8d 64 24 08 cc e8 f4 ff ff ff 0f 0b cc cc cc cc cc cc cc cc cc cc cc cc cc [ 1191.941281][ C1] RSP: 0018:ffffc90004eb7448 EFLAGS: 00000297 [ 1191.947367][ C1] RAX: 0000000080000001 RBX: ffffc90004eb7530 RCX: 0000000000000001 [ 1191.955516][ C1] RDX: dffffc0000000000 RSI: ffffc90004eb0000 RDI: 0000000000000001 [ 1191.963491][ C1] RBP: ffffc90004eb7520 R08: ffffc90004eb7690 R09: ffffc90004eb7570 [ 1191.971556][ C1] R10: dffffc0000000000 R11: fffff520009d6eb0 R12: dffffc0000000000 [ 1191.979617][ C1] R13: ffffc90004eb7520 R14: ffffc90004eb0000 R15: ffffc90004eb76a0 [ 1191.987608][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1191.993246][ C1] unwind_next_frame+0x18e6/0x22d0 [ 1191.998407][ C1] ? stack_trace_save+0x118/0x1d0 [ 1192.003526][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1192.009686][ C1] arch_stack_walk+0x11c/0x150 [ 1192.014468][ C1] ? save_stack+0xfb/0x1f0 [ 1192.018896][ C1] stack_trace_save+0x118/0x1d0 [ 1192.023767][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1192.029231][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.034884][ C1] save_stack+0xfb/0x1f0 [ 1192.039130][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.044788][ C1] ? __pfx_save_stack+0x10/0x10 [ 1192.049658][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.055298][ C1] ? page_ext_get+0x20/0x2a0 [ 1192.059901][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.065636][ C1] __reset_page_owner+0x76/0x430 [ 1192.070580][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.076218][ C1] ? mod_memcg_page_state+0x531/0x800 [ 1192.081613][ C1] ? mod_memcg_page_state+0x97/0x800 [ 1192.086919][ C1] free_unref_page+0xd3f/0x1010 [ 1192.091885][ C1] vfree+0x186/0x2e0 [ 1192.095799][ C1] kcov_close+0x28/0x50 [ 1192.099966][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1192.104823][ C1] __fput+0x23e/0xa50 [ 1192.108844][ C1] task_work_run+0x251/0x310 [ 1192.113454][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1192.118574][ C1] ? do_exit+0xa2a/0x28e0 [ 1192.122915][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.128551][ C1] ? do_exit+0xa2a/0x28e0 [ 1192.132894][ C1] do_exit+0xa2f/0x28e0 [ 1192.137072][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.142710][ C1] ? __pfx_do_exit+0x10/0x10 [ 1192.147307][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1192.152695][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.158328][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1192.164322][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1192.170660][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1192.175789][ C1] do_group_exit+0x207/0x2c0 [ 1192.180390][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1192.185597][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.191231][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1192.196447][ C1] get_signal+0x16b2/0x1750 [ 1192.200977][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1192.206616][ C1] ? __pfx_get_signal+0x10/0x10 [ 1192.211490][ C1] arch_do_signal_or_restart+0x96/0x860 [ 1192.217057][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1192.223485][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1192.229481][ C1] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1192.235218][ C1] syscall_exit_to_user_mode+0xce/0x340 [ 1192.240785][ C1] do_syscall_64+0x100/0x230 [ 1192.245400][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.251311][ C1] RIP: 0033:0x7f1dec985d29 [ 1192.255737][ C1] Code: Unable to access opcode bytes at 0x7f1dec985cff. [ 1192.262928][ C1] RSP: 002b:00007f1dea7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1192.271352][ C1] RAX: 0000000000018ff8 RBX: 00007f1decb75fa0 RCX: 00007f1dec985d29 [ 1192.279324][ C1] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 1192.287381][ C1] RBP: 00007f1deca01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 1192.295356][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.303327][ C1] R13: 0000000000000000 R14: 00007f1decb75fa0 R15: 00007ffca9353f88 [ 1192.311318][ C1] [ 1192.314546][ C1] Kernel Offset: disabled [ 1192.318953][ C1] Rebooting in 86400 seconds..