last executing test programs: 2m42.181340722s ago: executing program 2 (id=654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, 0x0, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48}) 2m41.799585869s ago: executing program 2 (id=656): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, &(0x7f0000000540)="12", 0x0, 0x2}, 0x50) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000040000000040100"}) connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xb423, 0x400, 0x5, 0x199}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001d000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 2m39.027742883s ago: executing program 2 (id=662): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x99a1cfb1edd42446, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lstat(0x0, 0x0) stat(&(0x7f0000000580)='./cgroup\x00', 0x0) lstat(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, 0x0, 0x0, 0x0, r2, 0x13, 0x6}, 0x0, 0x0, 0x4, 0x9, 0x0, 0x1, 0xeb4f, 0xff, 0x4, 0x8, r1, r1}) capset(&(0x7f0000000040)={0x20071026}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x3131354f, [0x400, 0x8000000], [0x8200, 0x1]}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x2, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0xfffffffd}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r3, 0x0, 0x0) 2m37.833675956s ago: executing program 2 (id=665): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, 0x0, 0x2}, 0x94) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 2m36.948995184s ago: executing program 2 (id=668): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) 2m35.283905856s ago: executing program 2 (id=672): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86, 0xfffffffc}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x4}, 0x0, 0x0, 0x7, 0x1, 0x8e, 0x200, 0x0, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x8000000000000000, 0x2, 0x8, 0x8}}], 0xb0}, 0x0) sendmmsg$sock(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000015c0)}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001600)="6849d0cd42d2c7df6fdfd47e50cc5585118e0c43fa452077461178d484a38b768e9a54af3ba9a1dab62b20d958d6b3346f98afe4095649ffd02a0336459114199d6b4fe3057995a6ccc1c8ad70914284bbd5c9104fbc63a3c70f", 0x5a}], 0x1}}, {{&(0x7f00000016c0)=@nl=@unspec, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001740)="494afdfea452406c219def7b424973037a15092cd908605a6a5b29db57af5ae7a3de5ecd3de60365fc628dc5eb03e9ac1296ae1a4eb891e241197350f9498dc57ce2dd8488032c9129b6629ad1af1b04fc85a78b848bc2ca097835d26d", 0x5d}, {&(0x7f0000001800)="1112e6954212d928944b960887220fd29179dca525b9cecc09b63a7c05479151b6bab7e42f89495f491bb3ae6344e63f3a0653f8cb48bb939fc999f25f0f49c4e94a5d678b4cdd7d67b5dded3b303775854ddb7abae926af41d9f503b6ebb0938fad6fcad15f8dcefaa06e1b5e7fc594fe0b0519b1ae68cb7ce11a110e7fc3c3c96acae9bc56f03ac3", 0x89}, {&(0x7f0000001900)="950d8a5456516606d8f3720110880a450483df06c7195549d6b4d80c6ab3d9dda8b614fc2aadfac561a48f42788fb161607f168223ecfd846eaae282855622575f47724602263c409d27c7d9657ad92bdb4d189cde82ca04fbfff8b0f7c1130acc8db70c7dd91bd73b289012f096ef78719e5608e38f7dded25e5552ec586964c9cb8b25c0f77c557015468999b0a937268360789904b9caa28a900440318335fcea157703849bbf7d703078ec735c96c9558cd318262e8d84669719b61077226ef780d221650885e06e74f9edbcdd3a081a9d656a9504890022f08f91ec86075704f08987b336d9cc43e76e0d03924449798c923563", 0xf6}, {0x0}, {&(0x7f0000001ac0)}, {&(0x7f0000001bc0)="b2904fbb3b58102155ac83ce316a46dcbc3d0e10b57f55cdd255ecfd403a9b7e78f70b4c3fd2e6e25f2b3ea6ba5eeb1684789c42903ee214189dfa822f410cb1cb6ecbf96255d349a2f5", 0x4a}, {&(0x7f0000001d40)="ea7db1d0ea0ba4e36116cd25eedc60b489f211876644c082d1140bc253894c5848fe8415ff2d02cf0ddaf3656c218b0e51966aa56912dbcf0616a6e64c19e17fdbf03b72e68779a52c6eb753b9be7c01863be01b01b6c66e2e851f8485c2d141a6434bc2076c2bd5c54fa06db48da549263975cb", 0x74}, {&(0x7f0000001e00)}], 0x8, &(0x7f0000001fc0)}}, {{&(0x7f0000002040)=@in6={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)="8489886815f022ce04429a709c9c82cea87c962e6ce0e30f87a073e6b9d2558256e6f808d6d2a0e508ba1fdfcd0aadef129e6f2396997ea2b6f1a410a242b547d693d602a6ecb5a6607d50640134f6437d79a8377ff1262b718af2f89ff9689c609dc375dfcfd8941d527a70a36fc5c20d7564568955d23718f5c2fefbcf6a18b469c8a11edb449c0ae537c4c23c411da4a164bbc06180699e9713e42379e0156b8562070151d5ab39384f7664", 0xad}, {&(0x7f0000002180)="8104584facfe6cdf98ad5bed3a1fd316da83df80", 0x14}, {&(0x7f00000021c0)}, {0x0}, {0x0}, {&(0x7f00000023c0)="48a77bbff0500e035fed757bf4b0f46e2e9dbe1bafd838c83cc2c427e85dd1f9ccc1639c5a76d1d903a40c678cc6cbe940c6d965d5d6cb571021266a0325ba01e4d84fb42c24f4000c9bddc6b420711cbf203dc493983ec9c60625a40692b19d46297ec8d5b0043127e959fa11190231342a155c0e2c8f76afeedcac25946b82f4110f90c38e107aebad42f41e7e6ca7ca032678918b031ba50c11a4b61543497ab64317962ca5bfcc56135072c7369956dad377f67c3ea17d0bac32d52e9a11b0693eee70e241b3c4e460a670119efc285a46b46ceb45cc70fd2249396c32d653b45ef244f71440", 0xe8}], 0x6, &(0x7f0000002540)}}], 0x4, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0x40101287, 0x200000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) getpriority(0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x20202, 0xac) sendfile(r4, r4, 0x0, 0x68) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000012c0)=0x0) syz_clone3(&(0x7f00000011c0)={0x20000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x6}, &(0x7f0000000100)=""/117, 0x75, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r4}}, 0x58) socket$inet_smc(0x2b, 0x1, 0x0) r7 = fcntl$getown(r4, 0x9) r8 = open(0x0, 0x0, 0x120) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f0000001280)={r8, r4, 0x2}) 2m19.691078939s ago: executing program 32 (id=672): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86, 0xfffffffc}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x4}, 0x0, 0x0, 0x7, 0x1, 0x8e, 0x200, 0x0, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x8000000000000000, 0x2, 0x8, 0x8}}], 0xb0}, 0x0) sendmmsg$sock(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000015c0)}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001600)="6849d0cd42d2c7df6fdfd47e50cc5585118e0c43fa452077461178d484a38b768e9a54af3ba9a1dab62b20d958d6b3346f98afe4095649ffd02a0336459114199d6b4fe3057995a6ccc1c8ad70914284bbd5c9104fbc63a3c70f", 0x5a}], 0x1}}, {{&(0x7f00000016c0)=@nl=@unspec, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001740)="494afdfea452406c219def7b424973037a15092cd908605a6a5b29db57af5ae7a3de5ecd3de60365fc628dc5eb03e9ac1296ae1a4eb891e241197350f9498dc57ce2dd8488032c9129b6629ad1af1b04fc85a78b848bc2ca097835d26d", 0x5d}, {&(0x7f0000001800)="1112e6954212d928944b960887220fd29179dca525b9cecc09b63a7c05479151b6bab7e42f89495f491bb3ae6344e63f3a0653f8cb48bb939fc999f25f0f49c4e94a5d678b4cdd7d67b5dded3b303775854ddb7abae926af41d9f503b6ebb0938fad6fcad15f8dcefaa06e1b5e7fc594fe0b0519b1ae68cb7ce11a110e7fc3c3c96acae9bc56f03ac3", 0x89}, {&(0x7f0000001900)="950d8a5456516606d8f3720110880a450483df06c7195549d6b4d80c6ab3d9dda8b614fc2aadfac561a48f42788fb161607f168223ecfd846eaae282855622575f47724602263c409d27c7d9657ad92bdb4d189cde82ca04fbfff8b0f7c1130acc8db70c7dd91bd73b289012f096ef78719e5608e38f7dded25e5552ec586964c9cb8b25c0f77c557015468999b0a937268360789904b9caa28a900440318335fcea157703849bbf7d703078ec735c96c9558cd318262e8d84669719b61077226ef780d221650885e06e74f9edbcdd3a081a9d656a9504890022f08f91ec86075704f08987b336d9cc43e76e0d03924449798c923563", 0xf6}, {0x0}, {&(0x7f0000001ac0)}, {&(0x7f0000001bc0)="b2904fbb3b58102155ac83ce316a46dcbc3d0e10b57f55cdd255ecfd403a9b7e78f70b4c3fd2e6e25f2b3ea6ba5eeb1684789c42903ee214189dfa822f410cb1cb6ecbf96255d349a2f5", 0x4a}, {&(0x7f0000001d40)="ea7db1d0ea0ba4e36116cd25eedc60b489f211876644c082d1140bc253894c5848fe8415ff2d02cf0ddaf3656c218b0e51966aa56912dbcf0616a6e64c19e17fdbf03b72e68779a52c6eb753b9be7c01863be01b01b6c66e2e851f8485c2d141a6434bc2076c2bd5c54fa06db48da549263975cb", 0x74}, {&(0x7f0000001e00)}], 0x8, &(0x7f0000001fc0)}}, {{&(0x7f0000002040)=@in6={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)="8489886815f022ce04429a709c9c82cea87c962e6ce0e30f87a073e6b9d2558256e6f808d6d2a0e508ba1fdfcd0aadef129e6f2396997ea2b6f1a410a242b547d693d602a6ecb5a6607d50640134f6437d79a8377ff1262b718af2f89ff9689c609dc375dfcfd8941d527a70a36fc5c20d7564568955d23718f5c2fefbcf6a18b469c8a11edb449c0ae537c4c23c411da4a164bbc06180699e9713e42379e0156b8562070151d5ab39384f7664", 0xad}, {&(0x7f0000002180)="8104584facfe6cdf98ad5bed3a1fd316da83df80", 0x14}, {&(0x7f00000021c0)}, {0x0}, {0x0}, {&(0x7f00000023c0)="48a77bbff0500e035fed757bf4b0f46e2e9dbe1bafd838c83cc2c427e85dd1f9ccc1639c5a76d1d903a40c678cc6cbe940c6d965d5d6cb571021266a0325ba01e4d84fb42c24f4000c9bddc6b420711cbf203dc493983ec9c60625a40692b19d46297ec8d5b0043127e959fa11190231342a155c0e2c8f76afeedcac25946b82f4110f90c38e107aebad42f41e7e6ca7ca032678918b031ba50c11a4b61543497ab64317962ca5bfcc56135072c7369956dad377f67c3ea17d0bac32d52e9a11b0693eee70e241b3c4e460a670119efc285a46b46ceb45cc70fd2249396c32d653b45ef244f71440", 0xe8}], 0x6, &(0x7f0000002540)}}], 0x4, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0x40101287, 0x200000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) getpriority(0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x20202, 0xac) sendfile(r4, r4, 0x0, 0x68) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000012c0)=0x0) syz_clone3(&(0x7f00000011c0)={0x20000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x6}, &(0x7f0000000100)=""/117, 0x75, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r4}}, 0x58) socket$inet_smc(0x2b, 0x1, 0x0) r7 = fcntl$getown(r4, 0x9) r8 = open(0x0, 0x0, 0x120) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f0000001280)={r8, r4, 0x2}) 1m34.839717109s ago: executing program 3 (id=766): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r7, r6, 0x2) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = getpid() syz_pidfd_open(r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x602e, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1m31.458179465s ago: executing program 3 (id=770): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 1m28.865951665s ago: executing program 3 (id=774): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r6, r5, 0x2) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = getpid() syz_pidfd_open(r10, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x602e, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 1m24.554415699s ago: executing program 3 (id=779): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00'}, 0x18) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) 1m24.349214613s ago: executing program 3 (id=781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18240000", @ANYRES32, @ANYBLOB], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xb9, &(0x7f0000000440)=""/185, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000740)=[{0x2, 0x5, 0xe, 0x1}, {0x5, 0x3}, {0x5, 0x3, 0x0, 0xa}, {0x3, 0x2, 0x10, 0x3d0fad6d7b6fcb7a}, {0x4, 0x2, 0x1}, {0x3, 0x2, 0x0, 0xa}, {0x3, 0x4, 0x4, 0x6}, {0x1, 0x3, 0xc, 0x7}, {0x2, 0x5, 0x7, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000600)='f2fs_filemap_fault\x00', r0, 0x0, 0x3e3f}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000000200000002"], 0x0, 0x1a, 0x0, 0x6, 0x5}, 0x28) r4 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents(r4, &(0x7f0000000000)=""/42, 0x2a) getdents64(r4, &(0x7f0000000080)=""/147, 0x93) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') renameat2(r6, &(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r6, &(0x7f0000000040)='./file1\x00', 0x5) lseek(r6, 0x2004, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a24000000020a01080000000000000000050000060800024000000003080002400000000014000000"], 0x4c}}, 0xc050) remap_file_pages(&(0x7f00009ad000/0x3000)=nil, 0x3000, 0x2000001, 0x0, 0x8000) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7}) 1m22.539874618s ago: executing program 3 (id=782): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86, 0xfffffffc}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x4}, 0x0, 0x0, 0x7, 0x1, 0x8e, 0x200, 0x0, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x8000000000000000, 0x2, 0x8, 0x8}}], 0xb0}, 0x0) sendmmsg$sock(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000015c0)}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001600)="6849d0cd42d2c7df6fdfd47e50cc5585118e0c43fa452077461178d484a38b768e9a54af3ba9a1dab62b20d958d6b3346f98afe4095649ffd02a0336459114199d6b4fe3057995a6ccc1c8ad70914284bbd5c9104fbc63a3c70f", 0x5a}], 0x1}}, {{&(0x7f00000016c0)=@nl=@unspec, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001740)="494afdfea452406c219def7b424973037a15092cd908605a6a5b29db57af5ae7a3de5ecd3de60365fc628dc5eb03e9ac1296ae1a4eb891e241197350f9498dc57ce2dd8488032c9129b6629ad1af1b04fc85a78b848bc2ca097835d26d", 0x5d}, {&(0x7f0000001800)="1112e6954212d928944b960887220fd29179dca525b9cecc09b63a7c05479151b6bab7e42f89495f491bb3ae6344e63f3a0653f8cb48bb939fc999f25f0f49c4e94a5d678b4cdd7d67b5dded3b303775854ddb7abae926af41d9f503b6ebb0938fad6fcad15f8dcefaa06e1b5e7fc594fe0b0519b1ae68cb7ce11a110e7fc3c3c96acae9bc56f03ac3", 0x89}, {&(0x7f0000001900)="950d8a5456516606d8f3720110880a450483df06c7195549d6b4d80c6ab3d9dda8b614fc2aadfac561a48f42788fb161607f168223ecfd846eaae282855622575f47724602263c409d27c7d9657ad92bdb4d189cde82ca04fbfff8b0f7c1130acc8db70c7dd91bd73b289012f096ef78719e5608e38f7dded25e5552ec586964c9cb8b25c0f77c557015468999b0a937268360789904b9caa28a900440318335fcea157703849bbf7d703078ec735c96c9558cd318262e8d84669719b61077226ef780d221650885e06e74f9edbcdd3a081a9d656a9504890022f08f91ec86075704f08987b336d9cc43e76e0d03924449798c923563", 0xf6}, {0x0}, {&(0x7f0000001ac0)}, {&(0x7f0000001bc0)="b2904fbb3b58102155ac83ce316a46dcbc3d0e10b57f55cdd255ecfd403a9b7e78f70b4c3fd2e6e25f2b3ea6ba5eeb1684789c42903ee214189dfa822f410cb1cb6ecbf96255d349a2f5", 0x4a}, {&(0x7f0000001d40)="ea7db1d0ea0ba4e36116cd25eedc60b489f211876644c082d1140bc253894c5848fe8415ff2d02cf0ddaf3656c218b0e51966aa56912dbcf0616a6e64c19e17fdbf03b72e68779a52c6eb753b9be7c01863be01b01b6c66e2e851f8485c2d141a6434bc2076c2bd5c54fa06db48da549263975cb", 0x74}, {&(0x7f0000001e00)}], 0x8, &(0x7f0000001fc0)}}, {{&(0x7f0000002040)=@in6={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)="8489886815f022ce04429a709c9c82cea87c962e6ce0e30f87a073e6b9d2558256e6f808d6d2a0e508ba1fdfcd0aadef129e6f2396997ea2b6f1a410a242b547d693d602a6ecb5a6607d50640134f6437d79a8377ff1262b718af2f89ff9689c609dc375dfcfd8941d527a70a36fc5c20d7564568955d23718f5c2fefbcf6a18b469c8a11edb449c0ae537c4c23c411da4a164bbc06180699e9713e42379e0156b8562070151d5ab39384f7664", 0xad}, {&(0x7f0000002180)="8104584facfe6cdf98ad5bed3a1fd316da83df80", 0x14}, {&(0x7f00000021c0)}, {0x0}, {0x0}, {&(0x7f00000023c0)="48a77bbff0500e035fed757bf4b0f46e2e9dbe1bafd838c83cc2c427e85dd1f9ccc1639c5a76d1d903a40c678cc6cbe940c6d965d5d6cb571021266a0325ba01e4d84fb42c24f4000c9bddc6b420711cbf203dc493983ec9c60625a40692b19d46297ec8d5b0043127e959fa11190231342a155c0e2c8f76afeedcac25946b82f4110f90c38e107aebad42f41e7e6ca7ca032678918b031ba50c11a4b61543497ab64317962ca5bfcc56135072c7369956dad377f67c3ea17d0bac32d52e9a11b0693eee70e241b3c4e460a670119efc285a46b46ceb45cc70fd2249396c32d653b45ef244f71440", 0xe8}], 0x6, &(0x7f0000002540)}}], 0x4, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0x40101287, 0x200000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) getpriority(0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x20202, 0xac) sendfile(r4, r4, 0x0, 0x68) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000012c0)=0x0) syz_clone3(&(0x7f00000011c0)={0x20000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x6}, &(0x7f0000000100)=""/117, 0x75, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r4}}, 0x58) socket$inet_smc(0x2b, 0x1, 0x0) r7 = fcntl$getown(r4, 0x9) r8 = open(0x0, 0x0, 0x120) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f0000001280)={r8, r4, 0x2}) 1m6.844842193s ago: executing program 33 (id=782): sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86, 0xfffffffc}, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@cswp={0x58, 0x114, 0x7, {{0x5, 0x4}, 0x0, 0x0, 0x7, 0x1, 0x8e, 0x200, 0x0, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x1}, 0x0, 0x0, 0x4, 0x6, 0x8000000000000000, 0x2, 0x8, 0x8}}], 0xb0}, 0x0) sendmmsg$sock(r2, &(0x7f00000025c0)=[{{0x0, 0x0, &(0x7f00000015c0)}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001600)="6849d0cd42d2c7df6fdfd47e50cc5585118e0c43fa452077461178d484a38b768e9a54af3ba9a1dab62b20d958d6b3346f98afe4095649ffd02a0336459114199d6b4fe3057995a6ccc1c8ad70914284bbd5c9104fbc63a3c70f", 0x5a}], 0x1}}, {{&(0x7f00000016c0)=@nl=@unspec, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001740)="494afdfea452406c219def7b424973037a15092cd908605a6a5b29db57af5ae7a3de5ecd3de60365fc628dc5eb03e9ac1296ae1a4eb891e241197350f9498dc57ce2dd8488032c9129b6629ad1af1b04fc85a78b848bc2ca097835d26d", 0x5d}, {&(0x7f0000001800)="1112e6954212d928944b960887220fd29179dca525b9cecc09b63a7c05479151b6bab7e42f89495f491bb3ae6344e63f3a0653f8cb48bb939fc999f25f0f49c4e94a5d678b4cdd7d67b5dded3b303775854ddb7abae926af41d9f503b6ebb0938fad6fcad15f8dcefaa06e1b5e7fc594fe0b0519b1ae68cb7ce11a110e7fc3c3c96acae9bc56f03ac3", 0x89}, {&(0x7f0000001900)="950d8a5456516606d8f3720110880a450483df06c7195549d6b4d80c6ab3d9dda8b614fc2aadfac561a48f42788fb161607f168223ecfd846eaae282855622575f47724602263c409d27c7d9657ad92bdb4d189cde82ca04fbfff8b0f7c1130acc8db70c7dd91bd73b289012f096ef78719e5608e38f7dded25e5552ec586964c9cb8b25c0f77c557015468999b0a937268360789904b9caa28a900440318335fcea157703849bbf7d703078ec735c96c9558cd318262e8d84669719b61077226ef780d221650885e06e74f9edbcdd3a081a9d656a9504890022f08f91ec86075704f08987b336d9cc43e76e0d03924449798c923563", 0xf6}, {0x0}, {&(0x7f0000001ac0)}, {&(0x7f0000001bc0)="b2904fbb3b58102155ac83ce316a46dcbc3d0e10b57f55cdd255ecfd403a9b7e78f70b4c3fd2e6e25f2b3ea6ba5eeb1684789c42903ee214189dfa822f410cb1cb6ecbf96255d349a2f5", 0x4a}, {&(0x7f0000001d40)="ea7db1d0ea0ba4e36116cd25eedc60b489f211876644c082d1140bc253894c5848fe8415ff2d02cf0ddaf3656c218b0e51966aa56912dbcf0616a6e64c19e17fdbf03b72e68779a52c6eb753b9be7c01863be01b01b6c66e2e851f8485c2d141a6434bc2076c2bd5c54fa06db48da549263975cb", 0x74}, {&(0x7f0000001e00)}], 0x8, &(0x7f0000001fc0)}}, {{&(0x7f0000002040)=@in6={0xa, 0x4e24, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4000000}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000020c0)="8489886815f022ce04429a709c9c82cea87c962e6ce0e30f87a073e6b9d2558256e6f808d6d2a0e508ba1fdfcd0aadef129e6f2396997ea2b6f1a410a242b547d693d602a6ecb5a6607d50640134f6437d79a8377ff1262b718af2f89ff9689c609dc375dfcfd8941d527a70a36fc5c20d7564568955d23718f5c2fefbcf6a18b469c8a11edb449c0ae537c4c23c411da4a164bbc06180699e9713e42379e0156b8562070151d5ab39384f7664", 0xad}, {&(0x7f0000002180)="8104584facfe6cdf98ad5bed3a1fd316da83df80", 0x14}, {&(0x7f00000021c0)}, {0x0}, {0x0}, {&(0x7f00000023c0)="48a77bbff0500e035fed757bf4b0f46e2e9dbe1bafd838c83cc2c427e85dd1f9ccc1639c5a76d1d903a40c678cc6cbe940c6d965d5d6cb571021266a0325ba01e4d84fb42c24f4000c9bddc6b420711cbf203dc493983ec9c60625a40692b19d46297ec8d5b0043127e959fa11190231342a155c0e2c8f76afeedcac25946b82f4110f90c38e107aebad42f41e7e6ca7ca032678918b031ba50c11a4b61543497ab64317962ca5bfcc56135072c7369956dad377f67c3ea17d0bac32d52e9a11b0693eee70e241b3c4e460a670119efc285a46b46ceb45cc70fd2249396c32d653b45ef244f71440", 0xe8}], 0x6, &(0x7f0000002540)}}], 0x4, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000540), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0x40101287, 0x200000) syz_usb_disconnect(0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) getpriority(0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x20202, 0xac) sendfile(r4, r4, 0x0, 0x68) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000012c0)=0x0) syz_clone3(&(0x7f00000011c0)={0x20000, &(0x7f0000000000), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x6}, &(0x7f0000000100)=""/117, 0x75, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5, {r4}}, 0x58) socket$inet_smc(0x2b, 0x1, 0x0) r7 = fcntl$getown(r4, 0x9) r8 = open(0x0, 0x0, 0x120) mlock2(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f0000001280)={r8, r4, 0x2}) 14.998373139s ago: executing program 4 (id=888): syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "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"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 13.869871161s ago: executing program 4 (id=890): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.615803535s ago: executing program 0 (id=897): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 10.480647237s ago: executing program 0 (id=898): syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "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"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 9.304895829s ago: executing program 5 (id=900): socket$kcm(0x11, 0xa, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r1}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff) 9.29932348s ago: executing program 1 (id=901): openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9e3fe3d86e17aa31070000007ea60864160af365da8fb21a38001d008fbd983247f07251ca60bc24eab556a71a251e6182949a3651f60a84c9f4d4938037e786a6d0bdd7fcf50e450998530000000080bcc7", 0x5a}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f00000001c0), 0x1003) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e21, @remote}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) read(r6, 0x0, 0x0) io_setup(0x202, &(0x7f0000000200)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 9.111820803s ago: executing program 0 (id=902): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 8.945811126s ago: executing program 0 (id=903): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) rt_sigaction(0x8, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='stat\x00') lseek(r2, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, 0x0) inotify_init1(0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x4046891) 8.945663707s ago: executing program 4 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.907113067s ago: executing program 1 (id=905): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="50f90fd1cda06cffbcf32a8d98bf9d16cdb8d1d1a2cd051846a7a42d3a46d3749d61ee16e8c0c38c199004be061c46a479db17425562bb165d2497278ffa65d660e270d5f61c3f77496fb0e0a8790f89ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x10101, 0x0) socket(0x1e, 0x4, 0x0) close(0x3) socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) prlimit64(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003800010325ca7033c1b35a00fadbdb250d000000"], 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) 8.795622169s ago: executing program 5 (id=906): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(0x0, 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 7.778644269s ago: executing program 5 (id=907): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)}, 0x20048050) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@mmap={0x1000, 0x2, 0x4, 0x4, 0x63aa09ca, {}, {0x1, 0x2, 0x8, 0x1, 0x7f, 0xfc, "232be7ca"}, 0x6, 0x1, {}, 0xef31, 0x0, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000015000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7.604632762s ago: executing program 1 (id=908): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r7, r6, 0x2) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = getpid() syz_pidfd_open(r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x602e, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 4.792513577s ago: executing program 5 (id=909): socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000012000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140035007767300000ff00"/28], 0x34}}, 0x0) setsockopt$ax25_int(r2, 0x101, 0xc, &(0x7f0000000100)=0x5, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20000, 0x0, 0x27}, &(0x7f00000000c0), 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) r5 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, &(0x7f00000000c0)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) write$UHID_CREATE2(r4, &(0x7f0000000700)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x9e, 0x4, 0x9, 0x9, 0xffffdb5e, 0xf, "f527e33e4d18985c715fc113dee7b12dabffc7e6c2e8ecf538ba3dfe21fff8655e0a0476698cf77b4104b3dd824e39f164698189b0979a14575ffc35dab52c7ed213d0820bbea732beb4a5d94ad26b6d0454d86738484b4be541a7d823c9bf7efb1df0ba050db2de20f66e81b920bfcdf976d806e0688f4510b2ab1618f3f2d5883f326540750510b84b3d0910ddf7e8867a58b92a748f223ca2980d80ca"}}, 0x1b6) r7 = syz_open_dev$video4linux(&(0x7f0000010300), 0xffff, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x101b, 0x0, 0x0, 0x6, 0x2, 0x1}}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffffff}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000004060100000000000000000002000001050001000700000005000100070000000500010007000000ba00010007000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 4.754960288s ago: executing program 4 (id=910): syz_open_dev$vbi(0x0, 0x0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000004c0)="33b6f982a62e715f3484fab4d07991a770bcae58c28945eaaeae058df5a923d651da3784c21428b02b2e1cc931d0822040fa6cda6079442f208f9488c0fa6e3a80c26b1d1b23fe4da5bf681446155a6994e346d2e844895b4eb1a6a14b6f0b6114", 0x61}, {&(0x7f0000000600)="d09ef15703efa654edd387ed90d643beaf9b3aeb05160c5aaeafc5f20047d5c3966bd83fe1ea6ddf432db90b8d8cb2696edb962654f023f00790673e077e93713677b8672664a8fa91df9768f7b14e83a0b12ae1c4fa61fb8d3bbfc736b7ab83bc21ce66d122ce768d032f6690555f4420919edb6454bd0be2d36c9851a4e4c894ef9624e4973f2b3eb4e2a356b9af3c416676be5828c5c8ceeed81a978fd9c32d877ec94961df3203f2b7bafe86580c10d29ad805053e356bd960018a", 0xbd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)="1914593fbe63c1c99bcbf2a2e1688c0ff2ee5b69", 0x14}, {&(0x7f00000006c0)="8d6500d3deb0317161b5e261a7f1e9dea247618f9703f844911f62e1d5ef48f42d25c5df86a12c2cb3d6678a34e724e3ab1620eaccf431a7b3233dd844f7f64b315280ab081a0adf7fe1e097111217fc5b32a93de5000e99be1f6930ec7f4400a24c04303d1b4a44569bfe6763fa541e3ba6f0b4ab128aca96995a3a8f1bc07e30add8ba2bdfe022", 0x88}], 0x2, &(0x7f0000000780)=ANY=[@ANYBLOB="e8000000000000001701000002000000cf00000062783c54cdc47da6cdb7f03d8cab5abe1a2c7fba3106730d09833a5f362901e8998d1bdb7b17d2231b63942a4e156500be1246b02efe051a238dc81ee8438f6b2ff7e93b1bff348844f5e5a67df0de01ec340585f874125320137c0bd3c5ea253f30729a229af1f07def7e9c5681f97cb16eb40f04477084186b7ef0e9431a107bf991abef4bbe24aa287d12171617a1748f0d13a7951392b8c8bd22c7d29d83480a7d720f738e8b2e22d5d6adb8656c6be7f8d4c74b19e9be637735447ed3b0d157c47581a13a9ca3cadaee1b605a000000000018000000000000001701000004000000070000000000000018000000000000001701000003000000000000000000000018000000000000001701000004000000070000000000000018000000000000001701000004000000800000000000000018000000000000001701000004000000e50a0000000000004000000000000000170100000200000025000000bd2dfdf3a35167789d1e86eb11eeda70196a98ded037398fd10a44e4483892f9e41494aeae000000000000000000000000000000170100000200000000000000a1525e4edb3ed20038351cbec9986b7f15cebae5344672d70bc4d90e089d8633b56f8225904f42e78f6230ee768d387680c1bf7e20c820e147bd8f79440392b7eefd4c5864e0f2a352fd4075429d9bc38be3651a9cf1c8fbc4e8483928334ef4890430eaf0a72d1e68b1d11113c773cd53225e60024023b723f721683d79a8533a6cd2b3b7eb0862c4f44eb51800000000000000170100000300000000000000000000003000000000000000170100000200000015000000e186f696fd1013a29e3da8955ad005d353361442a10000000000000062102691a65f1bd1374988f5fd34e13c5d36c18dfa5163e7764608e8c886d565079c9a649ee6e0dc8055079d40574527"], 0x200, 0x4044044}, {0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)="eeec18b7a2f22103ffd1f9150c0e463d450dc5a4615dc8d05e03e6e8a4246acfedd42008bf0732311cbca46040ac3ba8b9f3d42acd5c6f364ce65a", 0x3b}], 0x1, &(0x7f0000000d40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @iv={0x50, 0x117, 0x2, 0x38, "ad9d57ae1a34cd169d6fad8561a7ecad9a52c724a11e24510fc61cfeb3470c372d2eff433cea2fec76c92d3482c3c6692d8275cd566690ad"}, @op={0x18}, @iv={0x140, 0x117, 0x2, 0x128, "526b0e047fbc4fc252eaaa51f7070028035fd68fb6a92539435a12fdd225925548abd17a81e91752f591a67510f95fed70277e530a0b2df40e11706c22ec31fa53c1633bdd18cae8d5f81a9cdbf6cbe2071e0bc29a15a0f8da17b970b2a255f66034ee2b8d5279aebd8443314ef736cc8877f63cf74b1ea57afcffff685b654790d2808056973ed5942a0b1eff9f9a579ff973f5ea72daa97da16b68e3673a015aba3a67d562dcf23d9c0d49fad7dc7a393c5930587e7134f5223a8d448c9eea6096d5daee0474879430adc1c28c5261a66ce95d9669576bb8e4cf5ebe4b2bd49a4edd6323179758dd152f4467c2de203fa6d1221b0c0d11e37a6e3a2b484bc9c07b9f91f394da7fe4bea5dcabafc0e4add1cfb250702f606ded8df35eff331aedfd9aacc8b7656d"}, @assoc={0x18, 0x117, 0x4, 0xeed}], 0x1d8, 0x4000010}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000ac0)}], 0x1, &(0x7f0000000b40)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x65, "433075e40e764ff78e98d6e2fd28ab1e7de0926b29692837e244860a37ed45eef4be3fa9abbd4b13ca0aac110785fc948b1797d36763c6d368e52217fda90bbe4fc93ce397e33566a5f1637e9ab82231e64719d3529d653ab937022831b3a638704fe05ac9"}], 0xc8, 0x7a4e64b47bb0bd6a}], 0x4, 0x0) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 4.512866602s ago: executing program 1 (id=911): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x0, 0x0, 0x0, 0x2}, 0x94) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 3.733894488s ago: executing program 4 (id=912): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r2, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r2}) 3.60079132s ago: executing program 4 (id=913): socket$inet_tcp(0x2, 0x1, 0x0) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f00000000c0)={0x1}) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x4b, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3.452022953s ago: executing program 5 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.58946383s ago: executing program 1 (id=915): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(0x0, 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x13}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 2.019867851s ago: executing program 0 (id=916): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="50f90fd1cda06cffbcf32a8d98bf9d16cdb8d1d1a2cd051846a7a42d3a46d3749d61ee16e8c0c38c199004be061c46a479db17425562bb165d2497278ffa65d660e270d5f61c3f77496fb0e0a8790f89ce", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x10101, 0x0) socket(0x1e, 0x4, 0x0) close(0x3) socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r3, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @remote}}}}) prlimit64(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003800010325ca7033c1b35a00fadbdb250d000000"], 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) 1.134563998s ago: executing program 1 (id=917): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)}, 0x20048050) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@mmap={0x1000, 0x2, 0x4, 0x4, 0x63aa09ca, {}, {0x1, 0x2, 0x8, 0x1, 0x7f, 0xfc, "232be7ca"}, 0x6, 0x1, {}, 0xef31, 0x0, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000015000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 32.430309ms ago: executing program 5 (id=918): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)}, 0x20048050) r1 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@mmap={0x1000, 0x2, 0x4, 0x4, 0x63aa09ca, {}, {0x1, 0x2, 0x8, 0x1, 0x7f, 0xfc, "232be7ca"}, 0x6, 0x1, {}, 0xef31, 0x0, r2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 0 (id=919): socket$key(0xf, 0x3, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) close_range(r7, r6, 0x2) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r8 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = getpid() syz_pidfd_open(r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x602e, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x803e0000}, 0x3) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.67' (ED25519) to the list of known hosts. [ 73.435478][ T5775] cgroup: Unknown subsys name 'net' [ 73.570406][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.072769][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.549555][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.563844][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.582200][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.591158][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.600248][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.609355][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.633551][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.644358][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.652656][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.664808][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.674833][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.685355][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.685904][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.696746][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.704423][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.719434][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.731712][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.740497][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.758245][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.777351][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.786714][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.803072][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.812376][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.820159][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.193979][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 77.253797][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 77.316415][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 77.432071][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 77.446678][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.454145][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.462031][ T5792] bridge_slave_0: entered allmulticast mode [ 77.469613][ T5792] bridge_slave_0: entered promiscuous mode [ 77.504574][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.512349][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.520063][ T5792] bridge_slave_1: entered allmulticast mode [ 77.527865][ T5792] bridge_slave_1: entered promiscuous mode [ 77.596201][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.604304][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.612931][ T5785] bridge_slave_0: entered allmulticast mode [ 77.620149][ T5785] bridge_slave_0: entered promiscuous mode [ 77.630288][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.638472][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.647498][ T5785] bridge_slave_1: entered allmulticast mode [ 77.656153][ T5785] bridge_slave_1: entered promiscuous mode [ 77.675691][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.683604][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.691542][ T5788] bridge_slave_0: entered allmulticast mode [ 77.700116][ T5788] bridge_slave_0: entered promiscuous mode [ 77.720376][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.734428][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.764145][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.771767][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.779797][ T5788] bridge_slave_1: entered allmulticast mode [ 77.788794][ T5788] bridge_slave_1: entered promiscuous mode [ 77.821387][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.834697][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.899470][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.907231][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.914696][ T5793] bridge_slave_0: entered allmulticast mode [ 77.921702][ T5793] bridge_slave_0: entered promiscuous mode [ 77.933884][ T5792] team0: Port device team_slave_0 added [ 77.942150][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.949744][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.958025][ T5793] bridge_slave_1: entered allmulticast mode [ 77.966099][ T5793] bridge_slave_1: entered promiscuous mode [ 77.984335][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.998477][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.010838][ T5792] team0: Port device team_slave_1 added [ 78.042621][ T5785] team0: Port device team_slave_0 added [ 78.085690][ T5785] team0: Port device team_slave_1 added [ 78.116984][ T5788] team0: Port device team_slave_0 added [ 78.124920][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.133108][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.159840][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.173819][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.181024][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.208438][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.222356][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.244817][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.251919][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.279162][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.294930][ T5788] team0: Port device team_slave_1 added [ 78.330028][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.340569][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.349104][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.378916][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.441712][ T5793] team0: Port device team_slave_0 added [ 78.465707][ T5792] hsr_slave_0: entered promiscuous mode [ 78.474000][ T5792] hsr_slave_1: entered promiscuous mode [ 78.484151][ T5793] team0: Port device team_slave_1 added [ 78.491182][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.500177][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.529796][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.543396][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.550691][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.578062][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.642541][ T5785] hsr_slave_0: entered promiscuous mode [ 78.649474][ T5785] hsr_slave_1: entered promiscuous mode [ 78.652904][ T5789] Bluetooth: hci0: command tx timeout [ 78.664114][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.673245][ T5785] Cannot create hsr debugfs directory [ 78.689788][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.697993][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.725719][ T5789] Bluetooth: hci1: command tx timeout [ 78.726722][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.769820][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.777052][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.803664][ T5789] Bluetooth: hci2: command tx timeout [ 78.807788][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.860708][ T5788] hsr_slave_0: entered promiscuous mode [ 78.867803][ T5788] hsr_slave_1: entered promiscuous mode [ 78.874457][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.883509][ T5788] Cannot create hsr debugfs directory [ 78.883923][ T5789] Bluetooth: hci3: command tx timeout [ 78.978251][ T5793] hsr_slave_0: entered promiscuous mode [ 78.984725][ T5793] hsr_slave_1: entered promiscuous mode [ 78.990935][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.000904][ T5793] Cannot create hsr debugfs directory [ 79.289967][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.308176][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.320676][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.336816][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.407688][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.432988][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.445691][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.458567][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.542321][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.565371][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.587722][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.599376][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.668277][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.678537][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.697571][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.721542][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.766475][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.830241][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.843157][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.868531][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.876286][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.906885][ T3420] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.914245][ T3420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.937780][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.986461][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.994316][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.021142][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.028953][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.066192][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.117352][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.136141][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.164164][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.171810][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.212439][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.219621][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.268818][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.295132][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.302709][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.350794][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.358511][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.571102][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.686853][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.715824][ T5792] veth0_vlan: entered promiscuous mode [ 80.725269][ T5789] Bluetooth: hci0: command tx timeout [ 80.756666][ T5792] veth1_vlan: entered promiscuous mode [ 80.812678][ T5789] Bluetooth: hci1: command tx timeout [ 80.866709][ T5788] veth0_vlan: entered promiscuous mode [ 80.892147][ T5789] Bluetooth: hci2: command tx timeout [ 80.914791][ T5792] veth0_macvtap: entered promiscuous mode [ 80.931308][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.947931][ T5792] veth1_macvtap: entered promiscuous mode [ 80.962390][ T5789] Bluetooth: hci3: command tx timeout [ 80.969009][ T5788] veth1_vlan: entered promiscuous mode [ 80.997012][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.008206][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.059558][ T5788] veth0_macvtap: entered promiscuous mode [ 81.069734][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.086138][ T5792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.096121][ T5792] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.107566][ T5792] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.118382][ T5792] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.149144][ T5788] veth1_macvtap: entered promiscuous mode [ 81.216303][ T5793] veth0_vlan: entered promiscuous mode [ 81.251882][ T5793] veth1_vlan: entered promiscuous mode [ 81.260541][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.272836][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.287458][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.298212][ T5785] veth0_vlan: entered promiscuous mode [ 81.337092][ T5785] veth1_vlan: entered promiscuous mode [ 81.371453][ T3443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.380183][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.380224][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.381739][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.426856][ T3443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.456984][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.468081][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.479200][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.489699][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.556335][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.568013][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.580684][ T5793] veth0_macvtap: entered promiscuous mode [ 81.606569][ T5793] veth1_macvtap: entered promiscuous mode [ 81.626136][ T5785] veth0_macvtap: entered promiscuous mode [ 81.661130][ T5785] veth1_macvtap: entered promiscuous mode [ 81.675992][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.691452][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.703420][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.715195][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.729801][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.773557][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.785669][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.799085][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.811725][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.831216][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.851470][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.866265][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.878135][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.890253][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.901631][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.914378][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.928562][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.031292][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.048583][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.068570][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.078415][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.144153][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.157743][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.160787][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.179365][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.190237][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.204175][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.218518][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.230264][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.250536][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.268761][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.278795][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.289271][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.299631][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.521543][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.545969][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.639709][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.687646][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.802196][ T5789] Bluetooth: hci0: command tx timeout [ 82.823446][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.878173][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.892574][ T5789] Bluetooth: hci1: command tx timeout [ 82.925380][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.962810][ T5789] Bluetooth: hci2: command tx timeout [ 82.988418][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.043040][ T5789] Bluetooth: hci3: command tx timeout [ 83.083939][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.114284][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.302587][ T5878] fuse: Unknown parameter 'fd0x000000000000000a' [ 83.567152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.576494][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.669605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.679970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.772156][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 83.781073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.073693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.083489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 84.385802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.449054][ T5882] nbd2: detected capacity change from 0 to 63 [ 84.524950][ T27] audit: type=1800 audit(1757592067.185:2): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5" name="bus" dev="overlay" ino=32 res=0 errno=0 [ 84.585946][ T5887] block nbd2: NBD_DISCONNECT [ 84.742962][ T5887] block nbd2: Disconnected due to user request. [ 84.750096][ T5887] block nbd2: shutting down sockets [ 84.842476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.853735][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 84.864271][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.875835][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 84.886291][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 84.894108][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 84.901919][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 84.909803][ T5789] Bluetooth: hci0: command tx timeout [ 84.922374][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 84.957300][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 84.965498][ T5789] Bluetooth: hci1: command tx timeout [ 84.972473][ T96] Buffer I/O error on dev nbd2, logical block 1, async page read [ 84.984119][ T96] Buffer I/O error on dev nbd2, logical block 2, async page read [ 84.992054][ T96] Buffer I/O error on dev nbd2, logical block 3, async page read [ 85.001227][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 85.011236][ T96] Buffer I/O error on dev nbd2, logical block 0, async page read [ 85.019303][ T96] Buffer I/O error on dev nbd2, logical block 1, async page read [ 85.027746][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 85.037341][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 85.047106][ T5789] Bluetooth: hci2: command tx timeout [ 85.053702][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 85.063935][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 85.073625][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 85.083324][ T5778] ldm_validate_partition_table(): Disk read failed. [ 85.090558][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 85.114780][ T5778] Dev nbd2: unable to read RDB block 0 [ 85.123236][ T5789] Bluetooth: hci3: command tx timeout [ 85.124951][ T5778] nbd2: unable to read partition table [ 85.160662][ T27] audit: type=1800 audit(1757592067.695:3): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6" name="bus" dev="overlay" ino=46 res=0 errno=0 [ 85.194017][ T5778] ldm_validate_partition_table(): Disk read failed. [ 85.214265][ T5778] Dev nbd2: unable to read RDB block 0 [ 85.259536][ T5778] nbd2: unable to read partition table [ 85.688890][ T5899] mmap: syz.2.7 (5899) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.311906][ T27] audit: type=1800 audit(1757592068.415:4): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.8" name="bus" dev="overlay" ino=60 res=0 errno=0 [ 87.774239][ T788] cfg80211: failed to load regulatory.db [ 88.157580][ T27] audit: type=1800 audit(1757592070.825:5): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="bus" dev="overlay" ino=36 res=0 errno=0 [ 88.752139][ T27] audit: type=1800 audit(1757592071.425:6): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14" name="bus" dev="overlay" ino=79 res=0 errno=0 [ 89.852216][ T5924] qnx6: unable to read the first superblock [ 90.445723][ T5925] fuse: Unknown parameter 'fd0x000000000000000a' [ 90.799787][ T27] audit: type=1800 audit(1757592073.455:7): pid=5930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.18" name="bus" dev="overlay" ino=55 res=0 errno=0 [ 90.804653][ T5928] nbd1: detected capacity change from 0 to 63 [ 90.946599][ T5932] block nbd1: NBD_DISCONNECT [ 90.992842][ T5932] block nbd1: Disconnected due to user request. [ 91.005720][ T27] audit: type=1800 audit(1757592073.685:8): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19" name="bus" dev="overlay" ino=42 res=0 errno=0 [ 91.072442][ T5932] block nbd1: shutting down sockets [ 92.377328][ T27] audit: type=1800 audit(1757592074.495:9): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21" name="bus" dev="overlay" ino=41 res=0 errno=0 [ 94.887389][ T27] audit: type=1800 audit(1757592077.565:10): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.26" name="bus" dev="overlay" ino=61 res=0 errno=0 [ 95.429303][ T5980] fuse: Unknown parameter 'fd0x000000000000000a' [ 96.500101][ T27] audit: type=1800 audit(1757592079.175:11): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.29" name="bus" dev="overlay" ino=104 res=0 errno=0 [ 98.261615][ T27] audit: type=1800 audit(1757592080.845:12): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.33" name="bus" dev="overlay" ino=118 res=0 errno=0 [ 98.429420][ T5997] fuse: Unknown parameter 'fd0x000000000000000a' [ 99.383208][ T5998] netlink: 168 bytes leftover after parsing attributes in process `syz.1.34'. [ 101.250446][ T27] audit: type=1800 audit(1757592083.175:13): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.37" name="bus" dev="overlay" ino=86 res=0 errno=0 [ 102.524084][ T27] audit: type=1800 audit(1757592085.205:14): pid=6032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="bus" dev="overlay" ino=143 res=0 errno=0 [ 102.807680][ T6033] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.847881][ T6023] batman_adv: batadv0: Adding interface: gretap1 [ 102.854649][ T6023] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.881580][ T6023] batman_adv: batadv0: Interface activated: gretap1 [ 106.140310][ T27] audit: type=1800 audit(1757592088.815:15): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.46" name="bus" dev="overlay" ino=75 res=0 errno=0 [ 106.297179][ T6109] netlink: 168 bytes leftover after parsing attributes in process `syz.0.48'. [ 106.442795][ T6110] netlink: 168 bytes leftover after parsing attributes in process `syz.3.47'. [ 108.972597][ T6133] overlayfs: failed to resolve './file1': -2 [ 112.473656][ T6154] netlink: 168 bytes leftover after parsing attributes in process `syz.2.58'. [ 112.662366][ T6161] syz.1.59[6161]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 113.447094][ T6163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 113.827715][ T6178] overlayfs: failed to resolve './file1': -2 [ 115.622152][ T27] audit: type=1800 audit(1757592097.445:16): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.62" name="bus" dev="overlay" ino=188 res=0 errno=0 [ 117.821049][ T27] audit: type=1800 audit(1757592100.495:17): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.67" name="bus" dev="overlay" ino=123 res=0 errno=0 [ 118.430479][ T6198] netlink: 168 bytes leftover after parsing attributes in process `syz.2.71'. [ 118.712761][ T6211] netlink: 168 bytes leftover after parsing attributes in process `syz.3.70'. [ 118.923591][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 120.868118][ T6253] overlayfs: failed to resolve './file1': -2 [ 122.656573][ T6268] fuse: Unknown parameter 'fd0x000000000000000a' [ 123.111647][ T6271] fuse: Unknown parameter 'fd0x000000000000000a' [ 126.047675][ T27] audit: type=1800 audit(1757592108.685:18): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.82" name="bus" dev="overlay" ino=148 res=0 errno=0 [ 126.308564][ T6292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 126.380499][ T6297] fuse: Unknown parameter 'fd0x000000000000000a' [ 127.376447][ T6298] netlink: 168 bytes leftover after parsing attributes in process `syz.1.85'. [ 129.019865][ T6326] fuse: Unknown parameter 'fd0x000000000000000a' [ 129.769687][ T6330] block nbd2: NBD_DISCONNECT [ 130.984556][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.97'. [ 132.198020][ T6364] fuse: Unknown parameter 'fd0x000000000000000a' [ 134.001447][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.008261][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.269820][ T6382] netlink: 168 bytes leftover after parsing attributes in process `syz.0.104'. [ 134.417832][ T6388] fuse: Unknown parameter 'fd0x000000000000000a' [ 137.104386][ T27] audit: type=1800 audit(1757592119.785:19): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.109" name="bus" dev="overlay" ino=259 res=0 errno=0 [ 137.390822][ T6408] fuse: Unknown parameter 'fd0x000000000000000a' [ 138.552970][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'. [ 139.679790][ T6435] fuse: Unknown parameter 'fd0x000000000000000a' [ 140.977521][ T6450] netlink: 168 bytes leftover after parsing attributes in process `syz.3.117'. [ 141.820126][ T6465] overlayfs: failed to resolve './file1': -2 [ 142.607120][ T6449] batman_adv: batadv0: Adding interface: gretap1 [ 142.616334][ T6449] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.642164][ T6449] batman_adv: batadv0: Interface activated: gretap1 [ 144.405985][ T6511] fuse: Unknown parameter 'fd0x000000000000000a' [ 147.370344][ T6532] netlink: 168 bytes leftover after parsing attributes in process `syz.3.130'. [ 147.750962][ T6536] syz.0.132: attempt to access beyond end of device [ 147.750962][ T6536] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 147.786393][ T6536] F2FS-fs (loop1): Unable to read 1th superblock [ 147.879131][ T6536] syz.0.132: attempt to access beyond end of device [ 147.879131][ T6536] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 147.903324][ T6542] overlayfs: failed to resolve './file1': -2 [ 148.662394][ T6536] F2FS-fs (loop1): Unable to read 2th superblock [ 151.335716][ T6564] netlink: 168 bytes leftover after parsing attributes in process `syz.1.138'. [ 151.678683][ T6575] netlink: 168 bytes leftover after parsing attributes in process `syz.0.142'. [ 151.840547][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 155.810613][ T6612] netlink: 168 bytes leftover after parsing attributes in process `syz.0.152'. [ 156.906232][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 157.130370][ T6639] netlink: 168 bytes leftover after parsing attributes in process `syz.2.159'. [ 157.881669][ T27] audit: type=1800 audit(1757592140.525:20): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.161" name="bus" dev="overlay" ino=240 res=0 errno=0 [ 158.251489][ T27] audit: type=1800 audit(1757592140.925:21): pid=6670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.162" name="bus" dev="overlay" ino=338 res=0 errno=0 [ 159.227169][ T27] audit: type=1800 audit(1757592141.905:22): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.166" name="bus" dev="overlay" ino=259 res=0 errno=0 [ 160.512735][ T6690] netlink: 168 bytes leftover after parsing attributes in process `syz.0.167'. [ 160.643162][ T6697] netlink: 168 bytes leftover after parsing attributes in process `syz.1.172'. [ 160.699400][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.171'. [ 162.563065][ T27] audit: type=1800 audit(1757592145.235:23): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.175" name="bus" dev="overlay" ino=277 res=0 errno=0 [ 163.456766][ T27] audit: type=1800 audit(1757592146.135:24): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.176" name="bus" dev="overlay" ino=288 res=0 errno=0 [ 164.962680][ T6735] netlink: 168 bytes leftover after parsing attributes in process `syz.2.182'. [ 165.106071][ T6742] netlink: 168 bytes leftover after parsing attributes in process `syz.0.183'. [ 167.238044][ T27] audit: type=1800 audit(1757592149.915:25): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.190" name="bus" dev="overlay" ino=313 res=0 errno=0 [ 169.201213][ T27] audit: type=1800 audit(1757592151.875:26): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="bus" dev="overlay" ino=327 res=0 errno=0 [ 172.353322][ T6825] netlink: 168 bytes leftover after parsing attributes in process `syz.1.200'. [ 173.258537][ T6831] Zero length message leads to an empty skb [ 173.988849][ T6843] fuse: Unknown parameter 'fd0x000000000000000a' [ 179.972323][ T6936] netlink: 168 bytes leftover after parsing attributes in process `syz.1.218'. [ 180.395288][ T6948] netlink: 168 bytes leftover after parsing attributes in process `syz.3.219'. [ 180.543461][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.221'. [ 181.717147][ T27] audit: type=1800 audit(1757592164.395:27): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.223" name="bus" dev="overlay" ino=346 res=0 errno=0 [ 183.221193][ T6989] batman_adv: batadv0: Adding interface: gretap1 [ 183.232293][ T6989] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.372118][ T6989] batman_adv: batadv0: Interface activated: gretap1 [ 187.622883][ T7049] netlink: 168 bytes leftover after parsing attributes in process `syz.1.233'. [ 187.676693][ T27] audit: type=1800 audit(1757592170.335:28): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.235" name="bus" dev="overlay" ino=356 res=0 errno=0 [ 188.025679][ T7064] nbd: must specify at least one socket [ 190.555458][ T7089] netlink: 168 bytes leftover after parsing attributes in process `syz.2.243'. [ 193.218432][ T27] audit: type=1800 audit(1757592175.895:29): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.247" name="bus" dev="overlay" ino=464 res=0 errno=0 [ 194.027250][ T7120] netlink: 168 bytes leftover after parsing attributes in process `syz.3.248'. [ 195.012864][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.019175][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.167217][ T27] audit: type=1800 audit(1757592182.845:30): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.258" name="bus" dev="overlay" ino=494 res=0 errno=0 [ 202.058183][ T7207] netlink: 168 bytes leftover after parsing attributes in process `syz.0.261'. [ 202.089768][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 202.095939][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 202.102912][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 202.108957][ T5795] Bluetooth: hci0: command 0x0406 tx timeout [ 203.765078][ T7225] fuse: Bad value for 'fd' [ 204.694417][ T7236] overlayfs: failed to resolve './file1': -2 [ 204.974048][ T7238] netlink: 168 bytes leftover after parsing attributes in process `syz.3.269'. [ 207.812302][ T7269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.279'. [ 208.680571][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 209.599264][ T7283] netlink: 168 bytes leftover after parsing attributes in process `syz.3.280'. [ 209.801267][ T7287] netlink: 168 bytes leftover after parsing attributes in process `syz.1.283'. [ 211.216083][ T27] audit: type=1800 audit(1757592193.465:31): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.284" name="bus" dev="overlay" ino=528 res=0 errno=0 [ 213.085973][ T7317] fuse: Unknown parameter 'fd0x000000000000000a' [ 214.239983][ T7322] netlink: 20 bytes leftover after parsing attributes in process `syz.1.292'. [ 215.178880][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 215.196800][ T7331] netlink: 168 bytes leftover after parsing attributes in process `syz.3.294'. [ 216.434843][ T27] audit: type=1800 audit(1757592199.065:32): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.297" name="bus" dev="overlay" ino=563 res=0 errno=0 [ 216.561394][ T7347] netlink: 168 bytes leftover after parsing attributes in process `syz.1.298'. [ 218.097030][ T27] audit: type=1800 audit(1757592200.775:33): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.303" name="bus" dev="overlay" ino=582 res=0 errno=0 [ 220.452881][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.306'. [ 220.767763][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 221.142652][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'. [ 221.869197][ T7413] qnx6: unable to read the first superblock [ 224.742734][ T27] audit: type=1800 audit(1757592207.425:34): pid=7454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.317" name="bus" dev="overlay" ino=462 res=0 errno=0 [ 225.580801][ T7451] netlink: 168 bytes leftover after parsing attributes in process `syz.1.316'. [ 225.628578][ T7468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.318'. [ 225.873377][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 226.611207][ T27] audit: type=1800 audit(1757592209.285:35): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.328" name="bus" dev="overlay" ino=492 res=0 errno=0 [ 229.699137][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 230.040091][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 232.766011][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 233.732976][ T7531] nbd0: detected capacity change from 0 to 63 [ 233.770449][ T5103] block nbd0: Receive control failed (result -32) [ 233.779237][ T5945] block nbd0: Dead connection, failed to find a fallback [ 233.786678][ T5945] block nbd0: shutting down sockets [ 233.793390][ T5945] blk_print_req_error: 73 callbacks suppressed [ 233.793402][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.809745][ T5945] buffer_io_error: 138 callbacks suppressed [ 233.809759][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.823784][ T5945] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 233.832889][ T5945] Buffer I/O error on dev nbd0, logical block 1, async page read [ 233.840665][ T5945] Buffer I/O error on dev nbd0, logical block 2, async page read [ 233.849061][ T5945] Buffer I/O error on dev nbd0, logical block 3, async page read [ 233.859817][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.869270][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.877529][ T5945] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 233.886910][ T5945] Buffer I/O error on dev nbd0, logical block 1, async page read [ 233.896090][ T5945] Buffer I/O error on dev nbd0, logical block 2, async page read [ 233.904243][ T5945] Buffer I/O error on dev nbd0, logical block 3, async page read [ 233.912532][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.922308][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 233.930931][ T5945] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.940151][ T5945] Buffer I/O error on dev nbd0, logical block 1, async page read [ 233.950510][ T5945] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 233.962608][ T6193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 233.992171][ T6193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 234.012850][ T6193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 234.042763][ T5940] ldm_validate_partition_table(): Disk read failed. [ 234.063822][ T5940] Dev nbd0: unable to read RDB block 0 [ 234.071351][ T5940] nbd0: unable to read partition table [ 234.087596][ T5940] ldm_validate_partition_table(): Disk read failed. [ 234.096333][ T5940] Dev nbd0: unable to read RDB block 0 [ 234.103283][ T5940] nbd0: unable to read partition table [ 234.163540][ T27] audit: type=1800 audit(1757592216.845:36): pid=7534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.332" name="bus" dev="overlay" ino=626 res=0 errno=0 [ 236.434853][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.333'. [ 237.654623][ T27] audit: type=1800 audit(1757592219.545:37): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.337" name="bus" dev="overlay" ino=488 res=0 errno=0 [ 238.486736][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 238.647388][ T7567] nbd: must specify at least one socket [ 238.653733][ T7567] block nbd0: NBD_DISCONNECT [ 238.658738][ T7567] block nbd0: Send disconnect failed -32 [ 238.866420][ T27] audit: type=1800 audit(1757592221.515:38): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.342" name="bus" dev="overlay" ino=526 res=0 errno=0 [ 242.290740][ T7589] netlink: 168 bytes leftover after parsing attributes in process `syz.3.346'. [ 243.236032][ T27] audit: type=1800 audit(1757592225.155:39): pid=7593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.348" name="bus" dev="overlay" ino=516 res=0 errno=0 [ 243.476830][ T7598] syz.1.349: attempt to access beyond end of device [ 243.476830][ T7598] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 243.491801][ T7598] F2FS-fs (loop3): Unable to read 1th superblock [ 243.502137][ T7598] syz.1.349: attempt to access beyond end of device [ 243.502137][ T7598] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 243.516415][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 243.532581][ T7598] F2FS-fs (loop3): Unable to read 2th superblock [ 244.414956][ T7611] nbd: must specify at least one socket [ 249.166905][ T27] audit: type=1800 audit(1757592231.045:40): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.360" name="bus" dev="overlay" ino=561 res=0 errno=0 [ 249.332698][ T7643] netlink: 168 bytes leftover after parsing attributes in process `syz.2.359'. [ 249.497167][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 250.066317][ T7658] nbd: must specify at least one socket [ 251.291025][ T7673] netlink: 168 bytes leftover after parsing attributes in process `syz.1.365'. [ 255.211657][ T7703] netlink: 168 bytes leftover after parsing attributes in process `syz.2.371'. [ 255.652844][ T7713] block nbd2: NBD_DISCONNECT [ 255.945259][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 256.118327][ T7726] syz.1.375: attempt to access beyond end of device [ 256.118327][ T7726] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 256.137347][ T7726] F2FS-fs (loop3): Unable to read 1th superblock [ 256.299412][ T7726] syz.1.375: attempt to access beyond end of device [ 256.299412][ T7726] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 256.752810][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.762010][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.881113][ T7726] F2FS-fs (loop3): Unable to read 2th superblock [ 258.223069][ T7749] fuse: Unknown parameter 'fd0x000000000000000a' [ 260.899950][ T7775] netlink: 168 bytes leftover after parsing attributes in process `syz.1.383'. [ 261.095808][ T7781] overlayfs: failed to resolve './file1': -2 [ 261.935154][ T7783] netlink: 168 bytes leftover after parsing attributes in process `syz.0.384'. [ 262.175561][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 265.234428][ T7828] fuse: Unknown parameter 'fd0x000000000000000a' [ 266.844943][ T7846] overlayfs: failed to resolve './file1': -2 [ 267.808748][ T7850] netlink: 168 bytes leftover after parsing attributes in process `syz.3.396'. [ 267.998439][ T7854] block nbd0: NBD_DISCONNECT [ 268.455596][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.398'. [ 273.019156][ T7911] nbd0: detected capacity change from 0 to 63 [ 273.336358][ T5103] block nbd0: Receive control failed (result -32) [ 273.377885][ T6193] block nbd0: Dead connection, failed to find a fallback [ 273.385027][ T6193] block nbd0: shutting down sockets [ 273.390245][ T6193] blk_print_req_error: 118 callbacks suppressed [ 273.390252][ T6193] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.408467][ T6193] buffer_io_error: 138 callbacks suppressed [ 273.408477][ T6193] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.474123][ T6193] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.483296][ T6193] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.494232][ T6193] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.504038][ T6193] Buffer I/O error on dev nbd0, logical block 2, async page read [ 273.632009][ T5945] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.641114][ T5945] Buffer I/O error on dev nbd0, logical block 3, async page read [ 273.649332][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 273.658467][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.670460][ T5945] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.678572][ T5945] Buffer I/O error on dev nbd0, logical block 2, async page read [ 273.686478][ T5945] Buffer I/O error on dev nbd0, logical block 3, async page read [ 273.694486][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 273.703771][ T5945] Buffer I/O error on dev nbd0, logical block 0, async page read [ 273.711529][ T5945] Buffer I/O error on dev nbd0, logical block 1, async page read [ 273.719764][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 273.729796][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 273.739178][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 273.753011][ T5945] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 273.762606][ T5940] ldm_validate_partition_table(): Disk read failed. [ 273.774076][ T5940] Dev nbd0: unable to read RDB block 0 [ 273.790009][ T7924] netlink: 168 bytes leftover after parsing attributes in process `syz.3.408'. [ 273.812829][ T5940] nbd0: unable to read partition table [ 273.889711][ T5940] ldm_validate_partition_table(): Disk read failed. [ 273.912275][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.410'. [ 273.935565][ T5940] Dev nbd0: unable to read RDB block 0 [ 273.950504][ T5940] nbd0: unable to read partition table [ 274.560767][ T7946] netlink: 168 bytes leftover after parsing attributes in process `syz.2.420'. [ 275.538619][ T7970] syz.2.415: attempt to access beyond end of device [ 275.538619][ T7970] loop5: rw=0, sector=0, nr_sectors = 8 limit=0 [ 275.575598][ T7970] F2FS-fs (loop5): Unable to read 1th superblock [ 275.607181][ T7970] syz.2.415: attempt to access beyond end of device [ 275.607181][ T7970] loop5: rw=0, sector=8, nr_sectors = 8 limit=0 [ 275.624527][ T7970] F2FS-fs (loop5): Unable to read 2th superblock [ 277.112911][ T7987] nbd1: detected capacity change from 0 to 63 [ 277.127847][ T5103] block nbd1: Receive control failed (result -32) [ 277.129552][ T5945] block nbd1: Send control failed (result -32) [ 277.141279][ T5945] block nbd1: Request send failed, requeueing [ 277.150455][ T24] block nbd1: Dead connection, failed to find a fallback [ 277.157954][ T24] block nbd1: shutting down sockets [ 277.486151][ T5940] ldm_validate_partition_table(): Disk read failed. [ 277.734695][ T5940] Dev nbd1: unable to read RDB block 0 [ 277.762107][ T5940] nbd1: unable to read partition table [ 277.866377][ T5940] ldm_validate_partition_table(): Disk read failed. [ 277.901478][ T5940] Dev nbd1: unable to read RDB block 0 [ 277.923499][ T5940] nbd1: unable to read partition table [ 278.268701][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 279.061070][ T27] audit: type=1800 audit(1757592261.715:41): pid=8012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.423" name="bus" dev="overlay" ino=758 res=0 errno=0 [ 279.121114][ T8014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 279.298771][ T8023] netlink: 168 bytes leftover after parsing attributes in process `syz.1.424'. [ 281.513586][ T8043] nbd2: detected capacity change from 0 to 63 [ 281.536557][ T5103] block nbd2: Receive control failed (result -104) [ 281.712726][ T27] audit: type=1800 audit(1757592264.395:42): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.434" name="bus" dev="overlay" ino=626 res=0 errno=0 [ 281.805020][ T27] audit: type=1800 audit(1757592264.475:43): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.433" name="bus" dev="overlay" ino=631 res=0 errno=0 [ 283.513635][ T8079] nbd: nbd0 already in use [ 283.522631][ T8081] netlink: 168 bytes leftover after parsing attributes in process `syz.2.440'. [ 284.974372][ T27] audit: type=1800 audit(1757592267.655:44): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.444" name="bus" dev="overlay" ino=650 res=0 errno=0 [ 286.105933][ T8112] netlink: 168 bytes leftover after parsing attributes in process `syz.0.454'. [ 287.902246][ T8131] nbd: nbd0 already in use [ 290.551961][ T27] audit: type=1800 audit(1757592273.225:45): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.455" name="bus" dev="overlay" ino=822 res=0 errno=0 [ 290.855955][ T8176] netlink: 168 bytes leftover after parsing attributes in process `syz.2.459'. [ 290.886693][ T8178] nbd: nbd0 already in use [ 293.614174][ T8199] fuse: Unknown parameter 'fd0x000000000000000a' [ 294.460884][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 294.927364][ T8208] nbd: nbd2 already in use [ 294.986522][ T27] audit: type=1800 audit(1757592277.655:46): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.468" name="bus" dev="overlay" ino=857 res=0 errno=0 [ 297.102544][ T8219] netlink: 168 bytes leftover after parsing attributes in process `syz.0.471'. [ 298.456308][ T8242] binder: 8241:8242 ioctl 4018620d 0 returned -22 [ 298.472952][ T8240] nbd3: detected capacity change from 0 to 63 [ 298.488885][ T5103] block nbd3: Receive control failed (result -104) [ 298.588274][ T27] audit: type=1800 audit(1757592281.265:47): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.481" name="bus" dev="overlay" ino=689 res=0 errno=0 [ 299.684037][ T27] audit: type=1800 audit(1757592282.365:48): pid=8258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.482" name="bus" dev="overlay" ino=697 res=0 errno=0 [ 302.383309][ T8260] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 303.197426][ T8278] nbd: nbd3 already in use [ 304.037413][ T8286] netlink: 168 bytes leftover after parsing attributes in process `syz.2.488'. [ 305.043231][ T27] audit: type=1800 audit(1757592287.715:49): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.491" name="bus" dev="overlay" ino=713 res=0 errno=0 [ 309.969571][ T27] audit: type=1800 audit(1757592291.805:50): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.496" name="bus" dev="overlay" ino=896 res=0 errno=0 [ 310.534189][ T8330] nbd: nbd1 already in use [ 310.604959][ T8333] nbd: must specify an index to disconnect [ 310.927761][ T27] audit: type=1800 audit(1757592293.605:51): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.503" name="bus" dev="overlay" ino=731 res=0 errno=0 [ 311.643312][ T8342] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 311.734118][ T8341] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 312.152479][ T5879] block nbd2: Possible stuck request ffff888021c07e00: control (read@0,4096B). Runtime 30 seconds [ 312.172139][ T8355] binder: 8354:8355 ioctl 4018620d 0 returned -22 [ 314.204147][ T8387] nbd: nbd3 already in use [ 314.211428][ T8387] nbd: must specify an index to disconnect [ 314.697518][ T27] audit: type=1800 audit(1757592297.375:52): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.511" name="bus" dev="overlay" ino=755 res=0 errno=0 [ 316.652089][ T27] audit: type=1800 audit(1757592299.325:53): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.515" name="bus" dev="overlay" ino=755 res=0 errno=0 [ 316.769654][ T8404] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 317.812606][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.818969][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.671964][ T27] audit: type=1326 audit(1757592301.325:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62eb58eba9 code=0x7ffc0000 [ 319.253830][ T27] audit: type=1326 audit(1757592301.325:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62eb58eba9 code=0x7ffc0000 [ 319.602600][ T27] audit: type=1326 audit(1757592301.345:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f62eb58eba9 code=0x7ffc0000 [ 319.647816][ T27] audit: type=1326 audit(1757592301.345:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62eb58eba9 code=0x7ffc0000 [ 319.674782][ T8433] nbd: nbd3 already in use [ 319.682967][ T8433] nbd: must specify an index to disconnect [ 319.727082][ T27] audit: type=1326 audit(1757592301.345:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62eb58eba9 code=0x7ffc0000 [ 319.805337][ T27] audit: type=1326 audit(1757592301.345:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62eb58eba9 code=0x7ffc0000 [ 319.887532][ T27] audit: type=1326 audit(1757592301.345:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8402 comm="syz.2.516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f62eb58eba9 code=0x7ffc0000 [ 321.948761][ T8455] fuse: Unknown parameter 'fd0x000000000000000a' [ 322.811001][ T8460] netlink: 168 bytes leftover after parsing attributes in process `syz.3.527'. [ 324.251752][ T8484] netlink: 168 bytes leftover after parsing attributes in process `syz.1.537'. [ 326.448387][ T8504] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 328.828466][ T24] block nbd3: Possible stuck request ffff888021c40000: control (read@0,1024B). Runtime 30 seconds [ 328.839509][ T24] block nbd3: Possible stuck request ffff888021c40200: control (read@1024,3072B). Runtime 30 seconds [ 329.020797][ T27] audit: type=1326 audit(1757592311.685:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f118eba9 code=0x7ffc0000 [ 329.105790][ T27] audit: type=1326 audit(1757592311.695:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f05f118eba9 code=0x7ffc0000 [ 329.556106][ T27] audit: type=1326 audit(1757592311.695:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f118eba9 code=0x7ffc0000 [ 329.627619][ T8545] netlink: 168 bytes leftover after parsing attributes in process `syz.1.544'. [ 330.157271][ T27] audit: type=1326 audit(1757592311.695:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f118eba9 code=0x7ffc0000 [ 330.481006][ T27] audit: type=1326 audit(1757592311.805:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05f118eba9 code=0x7ffc0000 [ 332.013852][ T27] audit: type=1326 audit(1757592311.805:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05f118eba9 code=0x7ffc0000 [ 332.036438][ T27] audit: type=1326 audit(1757592311.815:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8533 comm="syz.0.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05f118eba9 code=0x7ffc0000 [ 332.472295][ T8569] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 335.251992][ T8597] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 337.895677][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 338.113906][ T8617] netlink: 168 bytes leftover after parsing attributes in process `syz.0.556'. [ 340.533260][ T8631] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 341.076102][ T8634] netlink: 168 bytes leftover after parsing attributes in process `syz.0.567'. [ 342.517655][ T8655] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 342.853228][ T5879] block nbd2: Possible stuck request ffff888021c07e00: control (read@0,4096B). Runtime 60 seconds [ 343.655064][ T8670] fuse: Unknown parameter 'fd0x000000000000000a' [ 347.590732][ T8687] netlink: 168 bytes leftover after parsing attributes in process `syz.0.571'. [ 347.614736][ T8690] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 351.907576][ T8737] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 351.951011][ T8739] netlink: 168 bytes leftover after parsing attributes in process `syz.2.586'. [ 351.960436][ T27] audit: type=1800 audit(1757592334.605:68): pid=8736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.587" name="bus" dev="overlay" ino=867 res=0 errno=0 [ 352.115616][ T27] audit: type=1800 audit(1757592334.755:69): pid=8744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.597" name="bus" dev="overlay" ino=881 res=0 errno=0 [ 355.843801][ T8790] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 355.951145][ T8794] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 357.587191][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'. [ 357.623503][ T8803] netlink: 168 bytes leftover after parsing attributes in process `syz.3.603'. [ 357.744680][ T8804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.602'. [ 357.954813][ T8816] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 358.775994][ T8817] netlink: 168 bytes leftover after parsing attributes in process `syz.2.613'. [ 359.380213][ T24] block nbd3: Possible stuck request ffff888021c40000: control (read@0,1024B). Runtime 60 seconds [ 359.391677][ T24] block nbd3: Possible stuck request ffff888021c40200: control (read@1024,3072B). Runtime 60 seconds [ 359.630647][ T8829] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 360.134500][ T8837] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 363.167456][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 366.905586][ T8868] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 367.040581][ T8873] netlink: 168 bytes leftover after parsing attributes in process `syz.1.619'. [ 367.057098][ T8875] netlink: 168 bytes leftover after parsing attributes in process `syz.3.618'. [ 373.032101][ T8933] capability: warning: `syz.0.631' uses deprecated v2 capabilities in a way that may be insecure [ 373.386169][ T8932] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 373.442089][ T6193] block nbd2: Possible stuck request ffff888021c07e00: control (read@0,4096B). Runtime 90 seconds [ 374.379792][ T8944] netlink: 168 bytes leftover after parsing attributes in process `syz.0.634'. [ 377.217294][ T8975] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 379.271349][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.278742][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.327335][ T8978] netlink: 168 bytes leftover after parsing attributes in process `syz.0.641'. [ 379.687722][ T8990] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 379.911361][ T788] Process accounting resumed [ 380.001570][ T27] audit: type=1800 audit(1757592362.655:70): pid=8994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.645" name="bus" dev="overlay" ino=926 res=0 errno=0 [ 380.643080][ T9006] netlink: 168 bytes leftover after parsing attributes in process `syz.0.647'. [ 383.438955][ T8987] Process accounting resumed [ 383.678763][ T9033] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 383.841991][ T27] audit: type=1800 audit(1757592366.515:71): pid=9036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.655" name="bus" dev="overlay" ino=925 res=0 errno=0 [ 385.569912][ T9050] netlink: 168 bytes leftover after parsing attributes in process `syz.2.656'. [ 386.042634][ T9065] netlink: 168 bytes leftover after parsing attributes in process `syz.3.660'. [ 388.331754][ T9094] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 388.407548][ T9098] netlink: 168 bytes leftover after parsing attributes in process `syz.0.670'. [ 388.417134][ T27] audit: type=1800 audit(1757592371.055:72): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.665" name="bus" dev="overlay" ino=970 res=0 errno=0 [ 389.527732][ T5945] block nbd3: Possible stuck request ffff888021c40000: control (read@0,1024B). Runtime 90 seconds [ 389.574368][ T5945] block nbd3: Possible stuck request ffff888021c40200: control (read@1024,3072B). Runtime 90 seconds [ 391.206502][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.674'. [ 391.558655][ T9126] netlink: 168 bytes leftover after parsing attributes in process `syz.0.673'. [ 392.234512][ T9132] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 393.996953][ T27] audit: type=1800 audit(1757592376.645:73): pid=9141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.677" name="bus" dev="overlay" ino=1025 res=0 errno=0 [ 395.248483][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.679'. [ 395.676386][ T9157] netlink: 168 bytes leftover after parsing attributes in process `syz.0.681'. [ 395.984345][ T9164] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 399.362812][ T9179] netlink: 168 bytes leftover after parsing attributes in process `syz.3.685'. [ 399.560602][ T27] audit: type=1800 audit(1757592382.235:74): pid=9186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.687" name="bus" dev="overlay" ino=1112 res=0 errno=0 [ 402.943400][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.692'. [ 403.522604][ T6193] block nbd2: Possible stuck request ffff888021c07e00: control (read@0,4096B). Runtime 120 seconds [ 404.970453][ T9225] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 407.056485][ T9239] netlink: 168 bytes leftover after parsing attributes in process `syz.0.697'. [ 407.515123][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.698'. [ 407.821794][ T9251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.699'. [ 407.828635][ T5103] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.856682][ T5103] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.877225][ T5103] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.917987][ T5103] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.955041][ T5103] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.990617][ T5103] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 408.711539][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.699'. [ 410.802026][ T5103] Bluetooth: hci4: command tx timeout [ 412.881922][ T5103] Bluetooth: hci4: command tx timeout [ 413.467284][ T9252] chnl_net:caif_netlink_parms(): no params data found [ 413.876718][ T9252] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.903925][ T9302] netlink: 168 bytes leftover after parsing attributes in process `syz.0.706'. [ 413.920692][ T9252] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.931423][ T9252] bridge_slave_0: entered allmulticast mode [ 413.959153][ T9252] bridge_slave_0: entered promiscuous mode [ 413.985920][ T9252] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.003065][ T9252] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.010677][ T9252] bridge_slave_1: entered allmulticast mode [ 414.021256][ T9252] bridge_slave_1: entered promiscuous mode [ 414.114693][ T9252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.124439][ T9304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.709'. [ 414.162773][ T9252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.210824][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.709'. [ 414.257534][ T9252] team0: Port device team_slave_0 added [ 414.272863][ T9252] team0: Port device team_slave_1 added [ 414.346180][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.356163][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.388214][ T9252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.408731][ T9252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.417245][ T9252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.469997][ T9252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.567031][ T9252] hsr_slave_0: entered promiscuous mode [ 414.579864][ T9252] hsr_slave_1: entered promiscuous mode [ 414.587167][ T9252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 414.600869][ T9252] Cannot create hsr debugfs directory [ 414.788666][ T9308] overlayfs: missing 'lowerdir' [ 415.014301][ T5103] Bluetooth: hci4: command tx timeout [ 415.773874][ T9311] overlayfs: failed to resolve './file0': -2 [ 416.798309][ T9252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.845677][ T9252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.857094][ T9252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.876055][ T9252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.052095][ T5103] Bluetooth: hci4: command tx timeout [ 418.463236][ T9252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.485375][ T9252] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.707903][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.715090][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.818875][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.826097][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.452847][ T9252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 421.479760][ T24] block nbd3: Possible stuck request ffff888021c40000: control (read@0,1024B). Runtime 120 seconds [ 421.493245][ T24] block nbd3: Possible stuck request ffff888021c40200: control (read@1024,3072B). Runtime 120 seconds [ 421.575052][ T9353] netlink: 168 bytes leftover after parsing attributes in process `syz.3.717'. [ 421.602755][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.0.718'. [ 421.716363][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 421.864591][ T9364] overlayfs: missing 'lowerdir' [ 423.745335][ T9252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.112652][ T23] Process accounting resumed [ 426.508013][ T9406] overlayfs: failed to resolve './file0': -2 [ 428.134945][ T9252] veth0_vlan: entered promiscuous mode [ 428.174914][ T9413] syz.3.727: attempt to access beyond end of device [ 428.174914][ T9413] loop7: rw=0, sector=0, nr_sectors = 8 limit=0 [ 428.175392][ T9252] veth1_vlan: entered promiscuous mode [ 428.194092][ T9413] F2FS-fs (loop7): Unable to read 1th superblock [ 429.051412][ T9413] syz.3.727: attempt to access beyond end of device [ 429.051412][ T9413] loop7: rw=0, sector=8, nr_sectors = 8 limit=0 [ 429.079347][ T9413] F2FS-fs (loop7): Unable to read 2th superblock [ 429.088486][ T9252] veth0_macvtap: entered promiscuous mode [ 429.113200][ T9252] veth1_macvtap: entered promiscuous mode [ 429.147314][ T9420] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 430.046226][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.071694][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.101972][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.131633][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.152086][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.163202][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.189342][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.209055][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.229331][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.314156][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.339422][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.349528][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.361983][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.373392][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.384198][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.398626][ T9252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.410959][ T9252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.430192][ T9252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.439123][ T9427] netlink: 168 bytes leftover after parsing attributes in process `syz.1.730'. [ 430.448253][ T9425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.731'. [ 430.507195][ T9385] Process accounting resumed [ 430.514283][ T9252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.536472][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 430.545791][ T9252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.557585][ T9252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.571390][ T9252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.634328][ T9431] overlayfs: missing 'lowerdir' [ 431.636023][ T6092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.685822][ T6092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.746211][ T9439] overlayfs: failed to resolve './file0': -2 [ 432.613267][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.634128][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.416361][ T9454] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 433.489427][ T9456] overlayfs: failed to resolve './file0': -2 [ 434.667763][ T6193] block nbd2: Possible stuck request ffff888021c07e00: control (read@0,4096B). Runtime 150 seconds [ 434.757025][ T9460] netlink: 168 bytes leftover after parsing attributes in process `syz.4.695'. [ 435.919036][ T9466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.740'. [ 436.078296][ T9470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.740'. [ 438.387910][ T9478] overlayfs: missing 'lowerdir' [ 439.275165][ T9477] netlink: 168 bytes leftover after parsing attributes in process `syz.1.742'. [ 439.411250][ T9484] overlayfs: failed to resolve './file0': -2 [ 440.461640][ T9493] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 440.472869][ T9496] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 440.667897][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.675951][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.836877][ T9498] syz.0.746: attempt to access beyond end of device [ 440.836877][ T9498] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 441.272298][ T9498] F2FS-fs (loop1): Unable to read 1th superblock [ 441.321061][ T9498] syz.0.746: attempt to access beyond end of device [ 441.321061][ T9498] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 441.474841][ T9505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.750'. [ 441.485995][ T9498] F2FS-fs (loop1): Unable to read 2th superblock [ 442.630628][ T9511] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 442.672625][ T9507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'. [ 446.085627][ T9524] netlink: 168 bytes leftover after parsing attributes in process `syz.3.753'. [ 446.191088][ T9528] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 447.243144][ T9537] overlayfs: missing 'lowerdir' [ 449.834299][ T9560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.763'. [ 450.798125][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 450.855389][ T9572] netlink: 168 bytes leftover after parsing attributes in process `syz.0.771'. [ 452.532899][ T9583] syz.1.767: attempt to access beyond end of device [ 452.532899][ T9583] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 452.566520][ T9587] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 452.995750][ T9583] F2FS-fs (loop3): Unable to read 1th superblock [ 453.631011][ T24] block nbd3: Possible stuck request ffff888021c40000: control (read@0,1024B). Runtime 150 seconds [ 453.649001][ T24] block nbd3: Possible stuck request ffff888021c40200: control (read@1024,3072B). Runtime 150 seconds [ 453.695630][ T9583] syz.1.767: attempt to access beyond end of device [ 453.695630][ T9583] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 453.825290][ T9583] F2FS-fs (loop3): Unable to read 2th superblock [ 456.008426][ T9603] overlayfs: missing 'lowerdir' [ 459.983483][ T9626] syz.1.775: attempt to access beyond end of device [ 459.983483][ T9626] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 459.998093][ T9626] F2FS-fs (loop3): Unable to read 1th superblock [ 460.029970][ T9628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.776'. [ 460.075069][ T9626] syz.1.775: attempt to access beyond end of device [ 460.075069][ T9626] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 460.113049][ T9626] F2FS-fs (loop3): Unable to read 2th superblock [ 460.316643][ T9633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'. [ 461.150657][ T9640] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 461.254878][ T9642] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 463.165545][ T9656] netlink: 168 bytes leftover after parsing attributes in process `syz.0.780'. [ 464.962121][ T9457] block nbd2: Possible stuck request ffff888021c07e00: control (read@0,4096B). Runtime 180 seconds [ 465.170543][ T9673] syz.4.785: attempt to access beyond end of device [ 465.170543][ T9673] loop9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 465.193078][ T9673] F2FS-fs (loop9): Unable to read 1th superblock [ 465.201429][ T9673] syz.4.785: attempt to access beyond end of device [ 465.201429][ T9673] loop9: rw=0, sector=8, nr_sectors = 8 limit=0 [ 465.228568][ T9673] F2FS-fs (loop9): Unable to read 2th superblock [ 466.804536][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 468.634035][ T9721] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 473.869910][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 475.644827][ T9766] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 478.775250][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.811'. [ 480.080715][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 482.177059][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 482.212795][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 482.223526][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 482.238420][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 482.256755][ T50] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 482.265236][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 484.371695][ T5103] Bluetooth: hci5: command tx timeout [ 485.142290][ T5945] block nbd3: Possible stuck request ffff888021c40000: control (read@0,1024B). Runtime 180 seconds [ 485.153214][ T5945] block nbd3: Possible stuck request ffff888021c40200: control (read@1024,3072B). Runtime 180 seconds [ 485.460618][ T9808] chnl_net:caif_netlink_parms(): no params data found [ 486.402310][ T5103] Bluetooth: hci5: command tx timeout [ 488.739957][ T5103] Bluetooth: hci5: command tx timeout [ 490.130827][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.694036][ T9808] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.805386][ T9808] bridge_slave_0: entered allmulticast mode [ 490.821749][ T5103] Bluetooth: hci5: command tx timeout [ 490.980231][ T9808] bridge_slave_0: entered promiscuous mode [ 490.989289][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.003697][ T9808] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.011425][ T9808] bridge_slave_1: entered allmulticast mode [ 491.029273][ T9808] bridge_slave_1: entered promiscuous mode [ 491.262283][ T9808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 491.281274][ T9808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 491.364067][ T9808] team0: Port device team_slave_0 added [ 491.386400][ T9808] team0: Port device team_slave_1 added [ 491.455897][ T9863] syz.0.825: attempt to access beyond end of device [ 491.455897][ T9863] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 491.499821][ T9863] F2FS-fs (loop1): Unable to read 1th superblock [ 491.544889][ T9863] syz.0.825: attempt to access beyond end of device [ 491.544889][ T9863] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 491.549247][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.572075][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.576356][ T9863] F2FS-fs (loop1): Unable to read 2th superblock [ 491.598321][ T9808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.800335][ T9808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.860924][ T9808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.979857][ T9808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.335327][ T9808] hsr_slave_0: entered promiscuous mode [ 492.367410][ T9808] hsr_slave_1: entered promiscuous mode [ 492.382357][ T9808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 492.513834][ T9808] Cannot create hsr debugfs directory [ 494.616025][ T9882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 494.713867][ T9884] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 494.731334][ T9808] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 494.762547][ T9808] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 494.800930][ T9808] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 494.819496][ T9808] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 495.073482][ T9457] block nbd2: Possible stuck request ffff888021c07e00: control (read@0,4096B). Runtime 210 seconds [ 495.081260][ T9808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.870059][ T9808] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.959153][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.966353][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.030724][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.038009][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.220490][ T9902] syz.4.835: attempt to access beyond end of device [ 496.220490][ T9902] loop9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 496.419329][ T9808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.446142][ T9808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 496.913248][ T9902] F2FS-fs (loop9): Unable to read 1th superblock [ 496.919802][ T9902] syz.4.835: attempt to access beyond end of device [ 496.919802][ T9902] loop9: rw=0, sector=8, nr_sectors = 8 limit=0 [ 496.982582][ T9902] F2FS-fs (loop9): Unable to read 2th superblock [ 498.424686][ T9808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.032313][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.842'. [ 501.134444][ T9808] veth0_vlan: entered promiscuous mode [ 501.173965][ T9808] veth1_vlan: entered promiscuous mode [ 501.245195][ T9808] veth0_macvtap: entered promiscuous mode [ 501.276142][ T9808] veth1_macvtap: entered promiscuous mode [ 501.316014][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.342879][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.379114][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.398167][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.414760][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.084428][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.090819][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.246569][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.257259][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.267978][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.277847][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.289986][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.302169][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.313273][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.324973][ T9949] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 502.337673][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.347746][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.358763][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.368689][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.398230][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.702713][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.713277][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.723929][ T9808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.763861][ T9808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.100013][ T9808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.269017][ T9808] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.297771][ T9808] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.325799][ T9808] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.378666][ T9808] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.261460][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.284668][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.496272][ T3420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.510849][ T3420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.234160][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 515.701415][ T24] block nbd3: Possible stuck request ffff888021c40000: control (read@0,1024B). Runtime 210 seconds [ 515.718614][ T24] block nbd3: Possible stuck request ffff888021c40200: control (read@1024,3072B). Runtime 210 seconds [ 516.583197][T10041] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 516.592281][T10039] syz.1.862: attempt to access beyond end of device [ 516.592281][T10039] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 516.634957][T10039] F2FS-fs (loop3): Unable to read 1th superblock [ 516.664453][T10039] syz.1.862: attempt to access beyond end of device [ 516.664453][T10039] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 517.757240][T10039] F2FS-fs (loop3): Unable to read 2th superblock [ 518.151534][T10061] fuse: Unknown parameter 'fd0x0000000000000009' [ 525.182051][ T9457] block nbd2: Possible stuck request ffff888021c07e00: control (read@0,4096B). Runtime 240 seconds [ 525.253891][T10106] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 526.776079][T10127] snd_dummy snd_dummy.0: control 4:1:0:syz1:211 is already present [ 529.604234][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.884'. [ 530.755382][T10158] overlayfs: missing 'lowerdir' [ 531.797266][T10162] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 534.920467][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 535.240834][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 535.364589][T10196] overlayfs: missing 'lowerdir' [ 536.574377][T10199] fuse: Unknown parameter 'fd0x0000000000000009' [ 536.638038][T10203] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 541.944014][T10239] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 541.954454][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.909'. [ 542.160546][T10244] overlayfs: missing 'lowerdir' [ 543.544903][ T27] audit: type=1326 audit(1757592526.225:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 543.639711][ T27] audit: type=1326 audit(1757592526.225:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 544.457457][ T27] audit: type=1326 audit(1757592526.225:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 544.539391][ T27] audit: type=1326 audit(1757592526.225:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 544.562221][ T27] audit: type=1326 audit(1757592526.225:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 544.585988][ T27] audit: type=1326 audit(1757592526.245:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 544.608677][ T27] audit: type=1326 audit(1757592526.245:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 544.682304][ T27] audit: type=1326 audit(1757592526.245:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 544.710751][ T27] audit: type=1326 audit(1757592526.345:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 544.803387][ T27] audit: type=1326 audit(1757592526.345:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10241 comm="syz.4.913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe206b8eba9 code=0x7ffc0000 [ 545.602590][ T28] INFO: task syz.2.672:9118 blocked for more than 143 seconds. [ 545.610202][ T28] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 545.671968][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.702898][ T28] task:syz.2.672 state:D stack:25704 pid:9118 ppid:5785 flags:0x00004004 [ 545.828949][ T28] Call Trace: [ 545.835186][ T28] [ 545.838168][ T28] __schedule+0x14d2/0x44d0 [ 545.848179][ T28] ? asan.module_dtor+0x20/0x20 [ 545.853435][ T28] ? __mutex_lock+0x6b2/0xcc0 [ 545.858760][ T28] ? __mutex_trylock_common+0x84/0x250 [ 545.864340][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 546.593485][ T24] block nbd3: Possible stuck request ffff888021c40000: control (read@0,1024B). Runtime 240 seconds [ 546.604381][ T24] block nbd3: Possible stuck request ffff888021c40200: control (read@1024,3072B). Runtime 240 seconds [ 546.624820][ T28] schedule+0xbd/0x170 [ 546.629340][ T28] schedule_preempt_disabled+0x13/0x20 [ 546.636427][ T28] __mutex_lock+0x6b7/0xcc0 [ 546.641196][ T28] ? __mutex_lock+0x4e8/0xcc0 [ 546.647348][ T28] ? blkdev_get_by_dev+0x121/0x600 [ 546.653919][ T28] ? mutex_lock_nested+0x20/0x20 [ 546.658956][ T28] ? iput+0x347/0x920 [ 546.664536][ T28] ? ilookup+0x1c4/0x200 [ 546.668900][ T28] ? disk_block_events+0xa7/0x120 [ 546.674361][ T28] ? blkdev_get_by_dev+0xf7/0x600 [ 546.679514][ T28] blkdev_get_by_dev+0x121/0x600 [ 546.689686][ T28] blkdev_open+0x152/0x360 [ 546.707210][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 546.759410][ T28] do_dentry_open+0x8c6/0x1500 [ 546.852316][ T28] path_openat+0x274b/0x3190 [ 546.963958][ T28] ? __schedule+0x14da/0x44d0 [ 547.044676][ T28] ? do_filp_open+0x3d0/0x3d0 [ 548.165304][ T28] ? asan.module_dtor+0x20/0x20 [ 548.285694][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 548.400367][ T28] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 548.493865][ T28] do_filp_open+0x1c5/0x3d0 [ 548.557688][ T28] ? vfs_tmpfile+0x490/0x490 [ 548.621178][ T28] ? preempt_schedule_common+0x82/0xc0 [ 548.655649][ T28] ? _raw_spin_unlock+0x3a/0x40 [ 548.686075][ T28] ? alloc_fd+0x58f/0x630 [ 548.690489][ T28] do_sys_openat2+0x12c/0x1c0 [ 548.695318][ T28] ? do_sys_open+0xe0/0xe0 [ 548.699762][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 548.701964][ T5158] udevd[5158]: worker [5940] /devices/virtual/block/nbd2 timeout; kill it [ 548.705810][ T28] ? lock_chain_count+0x20/0x20 [ 548.719260][ T28] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 548.741920][ T28] __x64_sys_openat+0x139/0x160 [ 548.741970][ T5158] udevd[5158]: seq 11212 '/devices/virtual/block/nbd2' killed [ 548.746887][ T5158] udevd[5158]: worker [5939] /devices/virtual/block/nbd3 timeout; kill it [ 548.754337][ T28] do_syscall_64+0x55/0xb0 [ 548.754363][ T28] ? clear_bhb_loop+0x40/0x90 [ 548.754378][ T28] ? clear_bhb_loop+0x40/0x90 [ 548.754394][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 548.754416][ T28] RIP: 0033:0x7f62eb58d510 [ 548.754432][ T28] RSP: 002b:00007f62e93d2b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 548.754452][ T28] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f62eb58d510 [ 548.754465][ T28] RDX: 0000000000000000 RSI: 00007f62e93d2c10 RDI: 00000000ffffff9c [ 548.754476][ T28] RBP: 00007f62e93d2c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 548.820600][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 548.829027][ T28] R13: 00007f62eb7d6308 R14: 00007f62eb7d6270 R15: 00007fff5fdc3328 [ 548.837347][ T28] [ 548.840774][ T28] [ 548.840774][ T28] Showing all locks held in the system: [ 548.849873][ T28] 1 lock held by khungtaskd/28: [ 548.854849][ T28] #0: ffffffff8cd2fc20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 548.864849][ T28] 2 locks held by getty/5549: [ 548.869534][ T28] #0: ffff88814ce5b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 548.950601][ T5158] udevd[5158]: seq 11274 '/devices/virtual/block/nbd3' killed [ 548.950970][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 548.984745][ T28] 2 locks held by kworker/1:3/5822: [ 548.991993][ T28] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 549.011942][ T28] #1: ffffc9000470fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 549.024187][ T28] 1 lock held by udevd/5939: [ 549.028784][ T28] #0: ffff888021b0d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 549.038971][ T28] 1 lock held by udevd/5940: [ 549.043786][ T28] #0: ffff888021bb94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 549.061913][ T28] 2 locks held by kworker/u4:15/6078: [ 549.067322][ T28] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 549.080148][ T28] #1: ffffc900054b7d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 549.092002][ T28] 3 locks held by kworker/u4:21/6092: [ 549.101992][ T28] #0: ffff888017871538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 549.113865][ T28] #1: ffffc90005547d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 549.124936][ T28] #2: ffffffff8dfbc648 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 549.134056][ T28] 1 lock held by syz.2.672/9118: [ 549.142013][ T28] #0: ffff888021bb94c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 549.162251][ T28] 1 lock held by syz.3.782/9661: [ 549.167201][ T28] #0: ffff888021b0d4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 549.177447][ T28] 1 lock held by syz.4.913/10241: [ 549.184057][ T28] #0: ffffffff8dfbc648 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 549.193217][ T28] 1 lock held by syz.1.917/10264: [ 549.201922][ T28] #0: ffffffff8cd35bf8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 549.212997][ T28] 1 lock held by syz.5.918/10266: [ 549.222007][ T28] #0: ffffffff8cd35bf8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 549.485409][ T28] [ 549.488290][ T28] ============================================= [ 549.488290][ T28] [ 549.552190][ T28] NMI backtrace for cpu 0 [ 549.556601][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 549.563811][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.573862][ T28] Call Trace: [ 549.577165][ T28] [ 549.580092][ T28] dump_stack_lvl+0x16c/0x230 [ 549.584770][ T28] ? show_regs_print_info+0x20/0x20 [ 549.589970][ T28] ? load_image+0x3b0/0x3b0 [ 549.594477][ T28] nmi_cpu_backtrace+0x39b/0x3d0 [ 549.599406][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 549.605560][ T28] ? _printk+0xd0/0x110 [ 549.609725][ T28] ? load_image+0x3b0/0x3b0 [ 549.614222][ T28] ? load_image+0x3b0/0x3b0 [ 549.618715][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 549.624784][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 549.630761][ T28] watchdog+0xf41/0xf80 [ 549.634914][ T28] ? watchdog+0x1e1/0xf80 [ 549.639262][ T28] kthread+0x2fa/0x390 [ 549.643341][ T28] ? hungtask_pm_notify+0x90/0x90 [ 549.648369][ T28] ? kthread_blkcg+0xd0/0xd0 [ 549.652958][ T28] ret_from_fork+0x48/0x80 [ 549.657363][ T28] ? kthread_blkcg+0xd0/0xd0 [ 549.661942][ T28] ret_from_fork_asm+0x11/0x20 [ 549.666706][ T28] [ 549.670440][ T28] Sending NMI from CPU 0 to CPUs 1: [ 549.675944][ C1] NMI backtrace for cpu 1 [ 549.675955][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 549.675970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.675979][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 549.676006][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 16 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 549.676019][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 549.676033][ C1] RAX: 32ee9243b58e7a00 RBX: ffffffff8161925b RCX: 32ee9243b58e7a00 [ 549.676044][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabaa0 RDI: ffffffff8afc70c0 [ 549.676055][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d6b R09: 1ffff110171e6dad [ 549.676066][ C1] R10: dffffc0000000000 R11: ffffed10171e6dae R12: ffffffff8e4a9228 [ 549.676077][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780 [ 549.676087][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 549.676100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 549.676111][ C1] CR2: 000020000010f030 CR3: 000000000cb30000 CR4: 00000000003526e0 [ 549.676124][ C1] Call Trace: [ 549.676130][ C1] [ 549.676135][ C1] default_idle+0x13/0x20 [ 549.676149][ C1] default_idle_call+0x6c/0xa0 [ 549.676164][ C1] do_idle+0x1eb/0x510 [ 549.676184][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 549.676200][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 549.676223][ C1] cpu_startup_entry+0x43/0x60 [ 549.676239][ C1] start_secondary+0xee/0xf0 [ 549.676254][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 549.676282][ C1] [ 549.902978][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 549.909898][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 549.917110][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 549.927171][ T28] Call Trace: [ 549.930441][ T28] [ 549.933361][ T28] dump_stack_lvl+0x16c/0x230 [ 549.938039][ T28] ? show_regs_print_info+0x20/0x20 [ 549.943227][ T28] ? load_image+0x3b0/0x3b0 [ 549.947725][ T28] panic+0x2c0/0x710 [ 549.951614][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 549.957239][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 549.961732][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 549.967272][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 549.973449][ T28] watchdog+0xf80/0xf80 [ 549.977599][ T28] ? watchdog+0x1e1/0xf80 [ 549.981922][ T28] kthread+0x2fa/0x390 [ 549.986067][ T28] ? hungtask_pm_notify+0x90/0x90 [ 549.991084][ T28] ? kthread_blkcg+0xd0/0xd0 [ 549.995661][ T28] ret_from_fork+0x48/0x80 [ 550.000072][ T28] ? kthread_blkcg+0xd0/0xd0 [ 550.004655][ T28] ret_from_fork_asm+0x11/0x20 [ 550.009420][ T28] [ 550.012702][ T28] Kernel Offset: disabled [ 550.017025][ T28] Rebooting in 86400 seconds..