last executing test programs: 3m47.83760795s ago: executing program 4 (id=621): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x34020000) 3m46.191477s ago: executing program 4 (id=625): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) write$6lowpan_enable(r0, &(0x7f0000000340)='1', 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfe68}}]}, 0x38}}, 0x0) sendfile(r5, r5, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) 3m43.649905819s ago: executing program 4 (id=629): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 3m42.241513451s ago: executing program 4 (id=633): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000011140100000002000000000008004a000000130408004b0013"], 0x28}}, 0x0) sendfile(r0, r0, 0x0, 0x6) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f00000004c0)={0x4, 0x15, 0x20, 0x0, "c3fea293681a0fa1ff856aa471fe2617dfb4eb45d73158000000568e00"}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000400)="66e000b8010000000f01c1b94c0300000f32b9be0200000f32b9800000c00f3235000400000f307373baf80cb8185c2989b8dd6a00000f23c80f21f8350c0000000f23f86619820c252566baf80cb89fa7d981ef66bafc0cec0f01c566ba4200b00dee0f01cb", 0x66}], 0x1, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xfcab) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r6, 0x2) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000f00)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000380)=0x3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000005c0)={0x48, 0x0, &(0x7f0000000700)=[@enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000004c0)='Q'}) 3m38.132338075s ago: executing program 4 (id=638): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000004000000050000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000009400"/128]) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(cast5)\x00'}, 0x5d) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='9p\x00', 0xfffffffffffffffe) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x8c001, 0x2c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$char_usb(r9, &(0x7f00000000c0)=""/41, 0x29) syz_kvm_setup_cpu$x86(r2, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="f30fc7365ad064f30faee10fc7b5db8666b9ad0200000f323e0f01caf30f08360f01c4baf80c66b895f60c8366efbafc0cec260fe501f00fc16bd1", 0x3b}], 0x1, 0x10, &(0x7f0000000240), 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f00000000c0)=0xc, 0x9, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x7ff) r10 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0xc0844123, &(0x7f0000000000)=0x6) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) 3m35.577433415s ago: executing program 4 (id=646): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x6) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r7, r6, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 3m20.407657475s ago: executing program 32 (id=646): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x2) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000000)=0x6) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r7, r6, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 2m58.764507383s ago: executing program 0 (id=703): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000440), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00"/14, @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYBLOB="000000020000de213c8cffff000000000037d9f55749503b4f007adaa12521397eed204837338cafd70a6567dabdb0624b6c87f263716843a67f8dceb30f2661ffe6742509a5a41aa4e5ff45ce30aa5fd9bb66312d141c9f88afa5e1b116c2209442dccc08210799854437ca23901b8a67493f5204673dbc2f90b6b083f30d21ac028bbde0eb1d59054d547592fc9921f9f0378496304555ed326ec7bbb1831c9b1ea8d50ebfbf74c25bc5b3"], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) timer_gettime(0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000140)="08001ebbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x40) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000340)=@usbdevfs_connect) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000180)=@urb_type_control={0x2, {0x8, 0x1}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x9, 0x4, 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) 2m56.899418876s ago: executing program 0 (id=707): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x11e, 0x48f, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x2, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) lgetxattr(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000004c0)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x1}], 0xfa}}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x688d43, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, 0x0, 0x0, 0x7c9ce320e12db95) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000000000000000008001e00000400000800170000020000"], 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 2m53.479632362s ago: executing program 0 (id=711): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'veth1_vlan\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, 'syz_tun\x00'}}, 0x1e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e0030000280080001001000000010000580070004"], 0x68}}, 0x0) r4 = socket$kcm(0x10, 0x5, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xa, &(0x7f0000000340)=0x9, 0x4) bind$inet(r6, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r7, 0x0) write$binfmt_elf64(r5, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r6, @ANYRES16=r4, @ANYRESOCT=r5, @ANYRES64=r4], 0xffffff34) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbb00080045000038000000000073907800000000e0000001000000000008907800000000000000"], 0x0) bind$rds(r5, &(0x7f0000000040)={0xa, 0x4e21, @dev}, 0x10) r8 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) getpeername$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r8, 0xc10c5541, &(0x7f0000000000)=0x2) close(r4) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="043c07aaaaaaaaaa10"], 0xa) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="5c00000013006bcd9e3fe3dc6e48aa311c6b8700350000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x4, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x9118}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x98}}, 0x4045) 2m49.645595242s ago: executing program 0 (id=717): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5", @ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x4adaf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x27f) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, 0x0, 0x0) write$FUSE_DIRENTPLUS(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000200)={0x50, 0x0, r10, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 2m45.806962607s ago: executing program 0 (id=722): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) 2m42.56949218s ago: executing program 0 (id=727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000010000000400", @ANYRES32, @ANYBLOB], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f00000000c0)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sync() sync() sync() sync() sync() sync() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m25.932106146s ago: executing program 33 (id=727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d000000010000000400", @ANYRES32, @ANYBLOB], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f00000000c0)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sync() sync() sync() sync() sync() sync() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 47.657461014s ago: executing program 1 (id=891): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x3, &(0x7f0000000440)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) rt_sigpending(0xffffffffffffffff, 0x0) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000180)) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r2, &(0x7f0000000040)={r4, r2}) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r6, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000640)={&(0x7f0000121000/0x1000)=nil, 0x1000}) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) waitid(0x2, r9, &(0x7f0000000200), 0x80000000, &(0x7f0000000280)) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r10, &(0x7f0000009780)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000840)={0xb0, 0xffffffda, 0x3, [{{0x4, 0x0, 0x8000000000000000, 0x4, 0x0, 0xff, {0x1, 0x6, 0x5, 0x9c, 0x81, 0x7e, 0x0, 0x7, 0x46e, 0x8000, 0x8c50, r11, r12, 0x4, 0x81}}, {0x0, 0x2, 0x1, 0x7, '\x00'}}]}, 0xb0) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r13, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) 46.818661034s ago: executing program 1 (id=894): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept(r1, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r6, 0x5) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r7, &(0x7f0000002980), 0x400000000000239, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = semget(0x3, 0x3, 0x200) semop(r8, &(0x7f0000000000), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 45.23489634s ago: executing program 1 (id=898): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x8020000) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) read$FUSE(r5, &(0x7f0000001d40)={0x2020}, 0x2020) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, &(0x7f00000000c0)="26677e08864c083769237ec829d45d8caae0c6242ab4159c509cf8bb4e54d326b911f2c224c5141806f971c0cd23b2ff2bef3a540def3e9833411f37c0935b2b", 0x40, 0x40000, 0x1}) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000140)={0x2, 0xb, &(0x7f0000000500)="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"}) syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x1c1882) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000000)={0x9, 0x2d, 0xfffffffffffffff9, 0x3a, 0x0, 0x2c}, 0x48) 41.134470232s ago: executing program 1 (id=900): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000002080)={0x2e3a, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r5, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r6, 0x1}}, 0x18) socket(0xa, 0x1, 0x9) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 39.160459403s ago: executing program 1 (id=902): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00000ec000/0x1000)=nil, 0x1000, 0x9) times(0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) syz_open_dev$sndmidi(&(0x7f0000000380), 0x4, 0x640a00) syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a'], 0x20000408}}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)=ANY=[]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r5, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) 34.450508177s ago: executing program 1 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sync() sync() sync() sync() sync() sync() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 17.029890916s ago: executing program 34 (id=908): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$kcm(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sync() sync() sync() sync() sync() sync() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13.545624473s ago: executing program 3 (id=940): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000e1ffd018009400000000000109022400010000000009040000000300000009210000000122000009051d03"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0xf5, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x5, 0xe7, 0x68, 0x0, 0x7, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x23}}, {0x4e23, 0x4e24, 0xd3, 0x0, @opaque="f4af30d8900ca44debfc1ed31c963d65172b210e6d44e95925ab28273086b004519b82d905dafe8926c33e977afab17c03610b74a230c6b268db05169ee1a4544b31213394d2a2ec0e34d26de25c0a1b2e92e86f666ab0e117e6fd443b3eaa5352743698052e63ca732579d5319028fb266fe39fc0e97505b9a2dcc314f645ce8f18c86d84b0e68f1bc0af2911f3eadad204a87d3faae5f78f1963bda7843dd9c8e7a5cc55b780c20961c7ac5cb6f97da14883ca0c3572d66e9406493ef82e4a615e3d8231797cccdaf566"}}}}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4810}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000388a846008100290008004500005800000000082f"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x32d) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x5) getrusage(0x1, &(0x7f0000000540)) accept4(r3, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='affs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000000080)='\'@//}@$-]-]{H&+\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) 13.33669154s ago: executing program 6 (id=942): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x5) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x4c4c0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000200)=0x200) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x20, 0x80, 0xfff, 0x1, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0x9, 0x2f, 0x0, @multicast2, @multicast1}}}}) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x1}]}}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) r8 = dup2(r7, r7) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000280)={0x0, 0x1, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newtaction={0x14, 0x30, 0x48b, 0x1000}, 0x14}}, 0x0) 10.115896358s ago: executing program 2 (id=945): mprotect(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/24], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) 10.099920049s ago: executing program 3 (id=946): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000004000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000844000e802c00018014000300ff02000000000000000000000000000114000400fc0100"/192], 0xd8}}, 0x20010000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r4 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) read$smackfs_access(r4, 0x0, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000700)) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x1}, {0x3, 0xd}, {0xf, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c841}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) 9.710290129s ago: executing program 6 (id=948): r0 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) socket(0x2000000015, 0x80005, 0x0) syz_io_uring_setup(0x754f, &(0x7f0000000680)={0x0, 0x7de6, 0x10, 0x3, 0x3c8}, &(0x7f0000000700), &(0x7f0000000780)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000dc0)={0x1, @pix={0x0, 0x0, 0x55595659, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}}) fcntl$dupfd(0xffffffffffffffff, 0x17ad4b06eaddf9a7, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$ndb(0x0, 0x0, 0x50000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000380)='svcrdma_send_pullup\x00'}, 0x18) syncfs(0xffffffffffffffff) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) unshare(0xa000200) semtimedop(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x20000011) 8.626150997s ago: executing program 2 (id=949): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000001000100ff7f000002"], 0x50) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000010c0)=0x40) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r5}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) r8 = eventfd2(0x0, 0x0) poll(&(0x7f0000000080)=[{r8}], 0x1, 0xda90) 8.625422775s ago: executing program 5 (id=950): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x8020000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) read$FUSE(r4, &(0x7f0000001d40)={0x2020}, 0x2020) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47ba, 0xffffffff, 0x1, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000140)={0x2, 0xb, &(0x7f0000000500)="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"}) syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x1c1882) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r7, &(0x7f0000000000)={0x9, 0x2d, 0xfffffffffffffff9, 0x3a, 0x0, 0x2c}, 0x48) 8.588148822s ago: executing program 6 (id=951): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0xc, &(0x7f0000000000)=""/12, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) socket$inet(0x2, 0xc, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0xfffc, 0x0, @loopback}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@local}) ppoll(&(0x7f00000000c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local}, 0x400, "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"}, 0x418, 0x7fffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r4, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) 7.237122399s ago: executing program 3 (id=952): pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x1, 0x5, 0x4, 0x3, 0x8001, 0xfffffffffffffff6, 0x1, 0x95c}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x4}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340), 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v2={0x2000000, [{0x3}, {0x9, 0x1}]}, 0x14, 0x0) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x80, &(0x7f0000000800)=ANY=[@ANYBLOB="736d61f38f93e96861743d2e2c00"]) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x141341) ioctl$USBDEVFS_BULK(r4, 0xc0185502, 0x0) r5 = syz_open_dev$vivid(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0xb9, 0xd, 0x4, 0x0, 0x4}) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x64040, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)={{0x14, 0x3ed}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELOBJ={0x104, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_OBJ_USERDATA={0xe2, 0x8, "695bf716c011c5cdc4f170ff4268b25a58d06e8cf9e46f66218a9e449b045c825d02118a14f091e0fbdb8f8591f7360de92ebda0ee0de71c00ade87fee7c8a93fba38651ee067d94f5ad514726c683c5d7fc6d28415c6f3859db8d14f265b6b084d5f8f295803b2a79066005504b422b7ed0b58d4f6f44f9631f4554c904910b17a33a166ae33bd379266731109065680cc77bce90c66ddaa07090dafab8ae3abbda32aeaaa66f51bae531230807efa7c7cffcaa5a932d98efb09e10e3e34224d0de61acd7ac95312367e18acb1942fd6b00243667640f80bd312bb8ffed"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x138, 0x2, 0xa, 0xd06f6450605060fb, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x6c, 0x6, "702a245e47b7c16bb9e0cd4aff771010a7679d6f027267e04b522a7f6318c7a360dfebbeddf8a6af98c6601d6477e3c872d7abb89c3fd4efc98081cad569ea6a84de234f9b98eed4d8118d3257f7d2546d84c83b56f35c36113fdabcb726c2c2670ebcc02ac7979f"}, @NFTA_TABLE_USERDATA={0xb7, 0x6, "25358eae56c0ab2a4a80261a3fd0af9fcbfe85e78c967a8dbf5d43a6a033fdf8508b56c0a0d151e3ef58cfac285ff9414b7729ca6691fd3a388270b1bbbaf69603dd7c5c02b7d1052e4cc6d086b0d18df704f7f550bd96aa6c9f8a54716914ca2467155f26290bfc3da762d3055a389e54da760398158dcfac6a921d38cc93328d95e5af29040ac619a6a1cb338eec88546169390dfe1d69cce7bd56b5d7d8fc541be7a115a1a308dd1bbc0c078991172cebb1"}]}, @NFT_MSG_DELOBJ={0x19c, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x82, 0x8, "fc0c745301a134ed0de1fa7e9478ad4a49c67f8baa1a3d37d8be72d3ffb5031b4154a6a7db8115207041661e0bc16f88526f9ffa771a8cef12fe79bc4dfea20386f7187667cef9b2a5262704a57cd35aa124043e5e386e5e96dca9872d2f9dae3d7ba54fec9cd071befc91af471bc04dc0ed513185111a6f4bac398841fd"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0xd8, 0x8, "eb283461ace2cc8735caa11f304ff41507743caf649b894c1bc12128813e1c2569801a93d69bb5a49a2eb82a8db6c653104c9b274718c346528b262610abab3606bd88fabc25d69a7e978d6d45c2941dbd90f4f312a8aea64fe6d89caa16d3efe3bf1848e5510bc3013593130f85a32171a61bd8d66ef283f3fb7e35adcc20d1f2fd0cc7ba8445bf01900d8be4de1d76fa20e2c7a12bc90a65df75640f93e396c0a0ab1b5645945e8368701dfb6d17f07bcdee68c89359cf735b80ffd8c4d43a7e944f235d1394a12cb5597c85ce3a9919fccd33"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x13, 0x6, "e4d78c83fdbd18ca85be50fd6c734f"}]}], {0x14, 0x3ed}}, 0x45c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[], 0x0) 7.23638383s ago: executing program 5 (id=953): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b34, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x1, 0x4) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e24, @multicast2}, {0x306}, 0x54, {0x2, 0x4e21, @rand_addr=0x64010102}, 'pimreg1\x00'}) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "865a009e972761f2dc018bb4d1815919599912fb3cc489e47ad0cbd17289c9b3", "0b3d82131bd745d86e571116e84a77de", {"ce3cc52c9d3125303e6d62169092acb5", "c84a03a4b0fb473b682387c080293688"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/28, 0x1c}, {0x0}], 0x2}, 0x7fff}], 0x1, 0x2, 0x0) 7.090280014s ago: executing program 2 (id=954): socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) dup2(r5, r0) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x400}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x500}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) read$FUSE(r6, &(0x7f0000009800)={0x2020}, 0x2020) write$FUSE_INIT(r6, 0x0, 0x0) 6.986456795s ago: executing program 6 (id=955): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = gettid() capset(&(0x7f0000000280)={0x19980330, r3}, &(0x7f00000002c0)={0x80000001, 0x10000, 0x4, 0x5, 0x1000, 0xfb}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x2}, 0x38998cba849c52d7) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000"], 0x48) fstat(0xffffffffffffffff, &(0x7f0000000140)) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x8}}}, 0x7) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 6.682815554s ago: executing program 5 (id=956): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/24], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) 4.861472151s ago: executing program 2 (id=957): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x8020000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) read$FUSE(r3, &(0x7f0000001d40)={0x2020}, 0x2020) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, &(0x7f00000000c0)="26677e08864c083769237ec829d45d8caae0c6242ab4159c509cf8bb4e54d326b911f2c224c5141806f971c0cd23b2ff2bef3a540def3e9833411f37c0935b2b", 0x40, 0x40000, 0x1}) io_uring_enter(r4, 0x47ba, 0xffffffff, 0x1, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000140)={0x2, 0xb, &(0x7f0000000500)="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"}) r7 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x1c1882) ioctl$SCSI_IOCTL_STOP_UNIT(r7, 0x6) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r8, &(0x7f0000000000)={0x9, 0x2d, 0xfffffffffffffff9, 0x3a, 0x0, 0x2c}, 0x48) 4.810223244s ago: executing program 6 (id=958): mprotect(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB="00000000000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/24], 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc) 4.139795123s ago: executing program 3 (id=959): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1a}}, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000400)=0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setns(0xffffffffffffffff, 0x24020000) gettid() mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = syz_io_uring_setup(0x4072, &(0x7f000001ab40)={0x0, 0x0, 0x10100, 0x280, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) unshare(0x60400) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x15) write(r10, &(0x7f0000000b80)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400849ab9010000000000008500000005000000bca900000000000035090100000000009500000000000000b5091000020004007b9af0ff00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000008040000f0ffffffb7020000087f00001822ae56e7f8f3e6b8b23ecd4e0000a6e98db6d0c54a7488ffbf92baed5e619c4653bedd07b80c47feb6e54352d2daeac109560dbfb376bb13cda33efb57dad24589656f745d5e27440864", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.983556203s ago: executing program 2 (id=960): r0 = syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) socket(0x2000000015, 0x80005, 0x0) syz_io_uring_setup(0x754f, &(0x7f0000000680)={0x0, 0x7de6, 0x10, 0x3, 0x3c8}, &(0x7f0000000700), &(0x7f0000000780)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000dc0)={0x1, @pix={0x0, 0x0, 0x55595659, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}}) fcntl$dupfd(0xffffffffffffffff, 0x17ad4b06eaddf9a7, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = syz_open_dev$ndb(0x0, 0x0, 0x50000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000380)='svcrdma_send_pullup\x00'}, 0x18) syncfs(0xffffffffffffffff) ioctl$BLKRRPART(r5, 0x125f, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) unshare(0xa000200) semtimedop(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f00000022c0)=[{0x0}], 0x0}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000004f40)={0x0, 0x0, &(0x7f0000004f00)=[{0x0}], 0xfffffffffffffffe, 0x1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x20000011) 3.518752587s ago: executing program 5 (id=961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x4, 0x7fffff) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0) copy_file_range(r4, 0x0, r3, 0x0, 0x0, 0x0) mkdirat(r3, 0x0, 0x5) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="08000300010000000800030007000000080003001ac4e140ebf1365aa4a6e6f1bf00d147", @ANYRES16, @ANYBLOB="080003000000"], 0x70}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000818) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5309, &(0x7f0000000000)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000140)={0x1}) truncate(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r11, 0x0, 0x48a, &(0x7f0000000000)={0xd3e9, 0xfffffff7, 0x2}, 0xc) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c010000", @ANYBLOB="010065bd7000fcdbdf254f00000008000300", @ANYRES32=r10, @ANYBLOB="48007a8014000100c396d979a8f802a09c5d7bfaeb3575f21c0002002c8b2ddcc0a3a020196b852ff1e5776edd2fed6a243a33220c000300b38b3e2d8514cc07080004000500000030007a800800040007000000240001006b367eca9776d5c92ac3b99cce28c8dbdebd62217f9c5f46d4b1a11c682b40d61c007a800c000300e028aa46e44ee6830c0003009cf7de"], 0x12c}}, 0x0) 1.377163782s ago: executing program 3 (id=962): openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\x00\x04\x00\x00\x00\x00\x00\x00nh#\xcf)\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc01000000020000000200000000000000000000000000000800"], 0xe0}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) shutdown(r5, 0x0) write(r5, &(0x7f0000000180)="9288738e1e0e233b05a8ebfad3ef466f5d89", 0x12) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.227613422s ago: executing program 5 (id=963): syz_io_uring_setup(0x339e, &(0x7f0000000300)={0x0, 0x0, 0x800}, &(0x7f0000002480), &(0x7f00000024c0)) socket(0x2000000015, 0x80005, 0x0) syz_io_uring_setup(0x754f, &(0x7f0000000680)={0x0, 0x7de6, 0x10, 0x3, 0x3c8}, &(0x7f0000000700), &(0x7f0000000780)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000dc0)={0x1, @pix={0x0, 0x0, 0x55595659, 0x8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2}}) fcntl$dupfd(0xffffffffffffffff, 0x17ad4b06eaddf9a7, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$ndb(0x0, 0x0, 0x50000) unshare(0xa000200) unshare(0x60400) 785.185685ms ago: executing program 2 (id=964): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000", @ANYRESDEC=r0, @ANYRES16=r1], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000740)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000002000000000800040001000000", 0x24) r7 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 554.950595ms ago: executing program 6 (id=965): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x2040400) epoll_pwait2(r1, &(0x7f0000000440)=[{}], 0x1, 0x0, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0884123, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x8000) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r6, @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030303030303030309b523030302c757365725f69643d2040fa4308a74cb52da05ed4bab4313c4638315408d7cec12b3d142f64c4ecc6579f91dd978c4c47074ab5de3e144efbdb6dd3965adfc495f580d9d83fa51981981f6095", @ANYRES64=r1, @ANYBLOB, @ANYRESHEX, @ANYBLOB]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x80008}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x0) 1.012473ms ago: executing program 3 (id=966): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x1800a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) prlimit64(0x0, 0x7, 0x0, 0x0) pipe(0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r8) syz_usb_connect(0x5, 0x36, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12003, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) 0s ago: executing program 5 (id=967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r4, r4, 0x0, 0xfffffffffffffff9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x7, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b31, &(0x7f0000000580)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r6, 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x24000004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r9 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000580)="f8181d940c80e4d00d8c6d3c845124a88308988e50571338407b5f13aacac8537a22904aa75117b5a6c17283d7beb64c16c9199f451e14b7a2e47fda886f5d8e9b07a3b89b5babbe5e4c4cd4e820756cb3ee00156ea8cdefa74f2a80e2dc09c16a24527fdf191462549c181ed0da5506a8ef571c16b51be391715b59f63e2de9d478b2d9a20c6c92e8707e6510f5728e7ea7ac1dd516e4b2e937fb75bb83c495f68f486015382abe7dad292f67637cba4b5c2a6796bbbb9aa10a1aa4bbdc50e4a8d797524d4ab83d470bcd0152c516120e40183bec77", 0xd6}, {&(0x7f0000000680)="13cb8c20ee1a8feaa147648508c8371afaa4561e8ec8b0796a084189f30590a2f48b71bd5e97583e434302193e1e3fe43fcd11f9b112b244688fe717f9febd8d30913fff409eab09b9c205a37fd481aab1a0e3ccec543ce358f5df8ea08327156d17524ed4db2f7c4bfdf325f91e13b9da3e0e80d1d559ea2193f7bd863b47ec27038b2132aa5df650513dd9a7fa401b363ae2b43cbd97221cc118c03ea5893a96c72ddbb18e8626658256360d45a904d45310bafa0cd1ce922b", 0xba}], 0x2, 0x0, 0x0, 0x4008000}, 0x800) kernel console output (not intermixed with test programs): T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.396438][ T5822] team0: Port device team_slave_0 added [ 96.445249][ T5822] team0: Port device team_slave_1 added [ 96.473559][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 96.497849][ T5828] team0: Port device team_slave_0 added [ 96.552178][ T5828] team0: Port device team_slave_1 added [ 96.570614][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.578001][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.608464][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.646506][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.655327][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.662967][ T5826] bridge_slave_0: entered allmulticast mode [ 96.671983][ T5826] bridge_slave_0: entered promiscuous mode [ 96.694318][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.702315][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.733754][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.778947][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.787358][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.796132][ T5826] bridge_slave_1: entered allmulticast mode [ 96.804736][ T5826] bridge_slave_1: entered promiscuous mode [ 96.824737][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.832782][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.863836][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.877586][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.886803][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.923557][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.953496][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.961561][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.969362][ T5833] bridge_slave_0: entered allmulticast mode [ 96.976342][ T5833] bridge_slave_0: entered promiscuous mode [ 97.002956][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.024713][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.032846][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.042041][ T5833] bridge_slave_1: entered allmulticast mode [ 97.050357][ T5833] bridge_slave_1: entered promiscuous mode [ 97.064192][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.103939][ T5828] hsr_slave_0: entered promiscuous mode [ 97.111878][ T5828] hsr_slave_1: entered promiscuous mode [ 97.129063][ T5837] Bluetooth: hci0: command tx timeout [ 97.157637][ T5822] hsr_slave_0: entered promiscuous mode [ 97.164655][ T5822] hsr_slave_1: entered promiscuous mode [ 97.173683][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.182504][ T5822] Cannot create hsr debugfs directory [ 97.212678][ T5826] team0: Port device team_slave_0 added [ 97.241523][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.254902][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.267904][ T5826] team0: Port device team_slave_1 added [ 97.278694][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.287015][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.295423][ T5837] Bluetooth: hci1: command tx timeout [ 97.296180][ T5832] bridge_slave_0: entered allmulticast mode [ 97.310406][ T5832] bridge_slave_0: entered promiscuous mode [ 97.362874][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.374257][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.379541][ T5837] Bluetooth: hci2: command tx timeout [ 97.385408][ T5832] bridge_slave_1: entered allmulticast mode [ 97.395776][ T5832] bridge_slave_1: entered promiscuous mode [ 97.439743][ T5833] team0: Port device team_slave_0 added [ 97.447605][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.456103][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.486690][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.528381][ T5837] Bluetooth: hci4: command tx timeout [ 97.538785][ T5837] Bluetooth: hci3: command tx timeout [ 97.543693][ T5833] team0: Port device team_slave_1 added [ 97.565026][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.573827][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.604895][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.620174][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.633937][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.669117][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.677727][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.710063][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.764280][ T5832] team0: Port device team_slave_0 added [ 97.774507][ T5832] team0: Port device team_slave_1 added [ 97.782388][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.790354][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.819058][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.924115][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.932184][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.961474][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.974480][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.982193][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.009320][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.067691][ T5826] hsr_slave_0: entered promiscuous mode [ 98.074821][ T5826] hsr_slave_1: entered promiscuous mode [ 98.082728][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.091074][ T5826] Cannot create hsr debugfs directory [ 98.180471][ T5833] hsr_slave_0: entered promiscuous mode [ 98.187599][ T5833] hsr_slave_1: entered promiscuous mode [ 98.194790][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.203121][ T5833] Cannot create hsr debugfs directory [ 98.256846][ T5832] hsr_slave_0: entered promiscuous mode [ 98.264278][ T5832] hsr_slave_1: entered promiscuous mode [ 98.275086][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.284806][ T5832] Cannot create hsr debugfs directory [ 98.351581][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.392768][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.431485][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.485093][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.621569][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.658256][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.692793][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.729681][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.780691][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.806467][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.839612][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.872981][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.924571][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.965729][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.986333][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.016128][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.052986][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.108547][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.127734][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.149888][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.172833][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.185184][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.212390][ T5837] Bluetooth: hci0: command tx timeout [ 99.240307][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.248175][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.261906][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.273342][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.342372][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.363036][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.371032][ T5837] Bluetooth: hci1: command tx timeout [ 99.437334][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.451394][ T5837] Bluetooth: hci2: command tx timeout [ 99.470133][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.478606][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.529787][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.537702][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.557212][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.569619][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.588677][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.596447][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.608493][ T5837] Bluetooth: hci3: command tx timeout [ 99.611316][ T5831] Bluetooth: hci4: command tx timeout [ 99.630179][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.656257][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.664352][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.716598][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.725002][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.823945][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.832002][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.956194][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.002277][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.132276][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.198532][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.207074][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.240570][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.249119][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.306903][ T5828] veth0_vlan: entered promiscuous mode [ 100.355785][ T5828] veth1_vlan: entered promiscuous mode [ 100.373620][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.393573][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.495393][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.529259][ T5828] veth0_macvtap: entered promiscuous mode [ 100.572000][ T5828] veth1_macvtap: entered promiscuous mode [ 100.646556][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.675706][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.690273][ T5826] veth0_vlan: entered promiscuous mode [ 100.721777][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.739892][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.753016][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.764016][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.775433][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.797542][ T5822] veth0_vlan: entered promiscuous mode [ 100.821588][ T5826] veth1_vlan: entered promiscuous mode [ 100.884732][ T5822] veth1_vlan: entered promiscuous mode [ 100.950795][ T5833] veth0_vlan: entered promiscuous mode [ 100.994888][ T5826] veth0_macvtap: entered promiscuous mode [ 101.023159][ T5826] veth1_macvtap: entered promiscuous mode [ 101.061960][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.077348][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.107916][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.133205][ T5833] veth1_vlan: entered promiscuous mode [ 101.186210][ T5822] veth0_macvtap: entered promiscuous mode [ 101.204391][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.209042][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.225612][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.227483][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.251599][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.290025][ T5831] Bluetooth: hci0: command tx timeout [ 101.297843][ T5822] veth1_macvtap: entered promiscuous mode [ 101.331439][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.356254][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.380867][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.405146][ T5833] veth0_macvtap: entered promiscuous mode [ 101.405278][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.419207][ T5833] veth1_macvtap: entered promiscuous mode [ 101.447680][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.459763][ T5831] Bluetooth: hci1: command tx timeout [ 101.465737][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.476904][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.488741][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.501848][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.512785][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.523863][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.535107][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.546207][ T5831] Bluetooth: hci2: command tx timeout [ 101.552163][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.564692][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.576722][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.586022][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.595382][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.604861][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.656476][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.683462][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.693869][ T5831] Bluetooth: hci4: command tx timeout [ 101.700050][ T5831] Bluetooth: hci3: command tx timeout [ 101.706182][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.717327][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.736784][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.748786][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.760228][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.774059][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.785227][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.796918][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.809423][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.900515][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.920770][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.948989][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.970381][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.989919][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.005046][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.020096][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.946261][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.963675][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.986246][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.996011][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.046326][ T5832] veth0_vlan: entered promiscuous mode [ 103.060225][ T5832] veth1_vlan: entered promiscuous mode [ 103.086364][ T5832] veth0_macvtap: entered promiscuous mode [ 103.096605][ T5832] veth1_macvtap: entered promiscuous mode [ 103.114715][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.126260][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.136968][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.147792][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.158112][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.169197][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.179601][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.190378][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.202406][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.213259][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.224296][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.235659][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.246357][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.256633][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.267403][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.277562][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.289385][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.305771][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.310111][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.327558][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.368181][ T5837] Bluetooth: hci0: command tx timeout [ 103.561011][ T5837] Bluetooth: hci1: command tx timeout [ 103.609637][ T5837] Bluetooth: hci2: command tx timeout [ 103.769572][ T5837] Bluetooth: hci3: command tx timeout [ 103.776445][ T5837] Bluetooth: hci4: command tx timeout [ 103.994161][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.008589][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.033236][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.047559][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.084849][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.142757][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.239947][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.253985][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.412104][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.460008][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.523280][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.533849][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.370711][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.424689][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.479633][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.687288][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.288224][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.408501][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.238339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.371185][ T29] audit: type=1326 audit(1736870474.161:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5931 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd945185d29 code=0x0 [ 108.481333][ T5943] netlink: 'syz.0.1': attribute type 33 has an invalid length. [ 108.738372][ T5943] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1'. [ 108.875765][ T5945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 109.692239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 109.703870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.033088][ T5948] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.714378][ T5870] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.768854][ T29] audit: type=1326 audit(1736870476.421:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.257601][ T29] audit: type=1326 audit(1736870476.421:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.280860][ T29] audit: type=1326 audit(1736870476.461:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.305061][ T29] audit: type=1326 audit(1736870476.461:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.327151][ T29] audit: type=1326 audit(1736870476.461:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.351514][ T29] audit: type=1326 audit(1736870476.461:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.377243][ T29] audit: type=1326 audit(1736870476.461:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.400739][ T29] audit: type=1326 audit(1736870476.461:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.424057][ T29] audit: type=1326 audit(1736870476.461:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5952 comm="syz.2.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 111.705432][ T5870] usb 4-1: device descriptor read/all, error -71 [ 114.528834][ T5977] Zero length message leads to an empty skb [ 115.674043][ T5985] capability: warning: `syz.0.20' uses 32-bit capabilities (legacy support in use) [ 120.819050][ T6004] block device autoloading is deprecated and will be removed. [ 120.830451][ T6004] syz.0.25: attempt to access beyond end of device [ 120.830451][ T6004] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.060560][ T6012] syz.4.26: attempt to access beyond end of device [ 121.060560][ T6012] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.749980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 121.997286][ T6014] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 122.058578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.261799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 122.466449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 122.773635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 124.881736][ T6042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 125.048511][ T6047] netlink: 92 bytes leftover after parsing attributes in process `syz.2.32'. [ 126.252947][ T6052] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 127.091554][ T6054] tty tty21: ldisc open failed (-12), clearing slot 20 [ 127.336635][ T6039] ALSA: mixer_oss: invalid OSS volume '' [ 127.556775][ T6064] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.654024][ T6052] syz.4.35 (6052) used greatest stack depth: 18736 bytes left [ 127.673888][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.38'. [ 127.946798][ T6068] can0: slcan on ttyS3. [ 127.960289][ T6068] vivid-000: ================= START STATUS ================= [ 127.968545][ T6068] vivid-000: Generate PTS: true [ 127.974630][ T6068] vivid-000: Generate SCR: true [ 127.979818][ T6068] tpg source WxH: 640x360 (Y'CbCr) [ 128.117696][ T6070] openvswitch: netlink: Actions may not be safe on all matching packets [ 128.644344][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.656019][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.231337][ T6068] tpg field: 1 [ 129.234852][ T6068] tpg crop: 640x360@0x0 [ 129.239295][ T6068] tpg compose: 640x360@0x0 [ 129.243839][ T6068] tpg colorspace: 8 [ 129.247737][ T6068] tpg transfer function: 0/0 [ 129.252569][ T6068] tpg Y'CbCr encoding: 0/0 [ 129.257366][ T6068] tpg quantization: 0/0 [ 129.261734][ T6068] tpg RGB range: 0/2 [ 129.265730][ T6068] vivid-000: ================== END STATUS ================== [ 129.570175][ T6064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.589693][ T6064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.641737][ T6078] Smack: duplicate mount options [ 130.010996][ T5837] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 130.021751][ T5837] Bluetooth: hci2: Injecting HCI hardware error event [ 130.039888][ T5831] Bluetooth: hci2: hardware error 0x00 [ 130.555733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.658495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.743861][ T6078] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 130.752474][ T6078] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 130.762273][ T6078] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 130.874328][ T6088] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.889890][ T6088] xt_socket: unknown flags 0x50 [ 131.000026][ T6059] can0 (unregistered): slcan off ttyS3. [ 132.214321][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 138.922862][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.938406][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.662413][ T6150] input: syz0 as /devices/virtual/input/input5 [ 140.308125][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 140.308173][ T29] audit: type=1326 audit(1736870506.091:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6154 comm="syz.3.60" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0acd785d29 code=0x0 [ 142.170659][ T6177] Cannot find add_set index 0 as target [ 147.039695][ T5870] IPVS: starting estimator thread 0... [ 147.270656][ T6208] Bluetooth: MGMT ver 1.23 [ 147.412131][ T6197] IPVS: using max 18 ests per chain, 43200 per kthread [ 149.602804][ T6224] process 'syz.4.72' launched './file0' with NULL argv: empty string added [ 151.197658][ T9] libceph: connect (1)[c::]:6789 error -101 [ 151.230266][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 151.521598][ T6227] ceph: No mds server is up or the cluster is laggy [ 151.529614][ T9] libceph: connect (1)[c::]:6789 error -101 [ 151.535746][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 153.155118][ T6253] syz.2.77: attempt to access beyond end of device [ 153.155118][ T6253] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 153.345891][ T29] audit: type=1804 audit(1736870519.131:51): pid=6250 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.78" name="/newroot/15/file0/file0" dev="ramfs" ino=8997 res=1 errno=0 [ 154.965218][ T6265] netlink: 'syz.2.81': attribute type 10 has an invalid length. [ 155.060793][ T6266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 155.642205][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.651969][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.667598][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.676005][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.684707][ T6265] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.691930][ T6265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.703757][ T6265] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 155.712581][ T6266] bridge_slave_1: left allmulticast mode [ 155.718384][ T6266] bridge_slave_1: left promiscuous mode [ 155.724183][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.743131][ T6266] bridge_slave_0: left allmulticast mode [ 155.749912][ T6266] bridge_slave_0: left promiscuous mode [ 155.755874][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.564583][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 156.589729][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 157.346422][ T6266] bond0: (slave bridge0): Releasing backup interface [ 161.531976][ T6317] atomic_op ffff88805d31e998 conn xmit_atomic 0000000000000000 [ 162.490751][ T6330] mmap: syz.2.96 (6330) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.175644][ T6336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 168.628113][ T5910] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.209111][ T5910] usb 4-1: device not accepting address 4, error -71 [ 172.976677][ T6396] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 173.038502][ T6396] CIFS mount error: No usable UNC path provided in device string! [ 173.038502][ T6396] [ 173.208774][ T6396] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 174.126957][ T6399] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 174.188752][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 174.230591][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.247251][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.661448][ T6403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.698307][ T6403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.101885][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.112365][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.121192][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.144418][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.152539][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.160582][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 175.605938][ T6298] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.850053][ T6298] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.280842][ T6431] sg_write: data in/out 11/14 bytes for SCSI command 0x0-- guessing data in; [ 176.280842][ T6431] program syz.1.122 not setting count and/or reply_len properly [ 177.080301][ T6412] chnl_net:caif_netlink_parms(): no params data found [ 177.234997][ T5831] Bluetooth: hci0: command tx timeout [ 177.636994][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.645566][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.854941][ T6412] bridge_slave_0: entered allmulticast mode [ 179.002284][ T6412] bridge_slave_0: entered promiscuous mode [ 179.010989][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.019917][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.027480][ T6412] bridge_slave_1: entered allmulticast mode [ 179.035116][ T6412] bridge_slave_1: entered promiscuous mode [ 179.311253][ T5831] Bluetooth: hci0: command tx timeout [ 185.196295][ T5831] Bluetooth: hci0: command tx timeout [ 185.370422][ T6298] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.053003][ T6298] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.140525][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.165003][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.208209][ T5831] Bluetooth: hci0: command tx timeout [ 187.479644][ T6412] team0: Port device team_slave_0 added [ 187.502296][ T6412] team0: Port device team_slave_1 added [ 187.896199][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.018798][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.803211][ T6412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.820567][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.828257][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.998282][ T6412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.262888][ T6298] bridge_slave_1: left allmulticast mode [ 190.304464][ T6298] bridge_slave_1: left promiscuous mode [ 190.333188][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.386949][ T6298] bridge_slave_0: left allmulticast mode [ 190.393485][ T6298] bridge_slave_0: left promiscuous mode [ 190.400882][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.036552][ T6565] dccp_close: ABORT with 50 bytes unread [ 194.545872][ T29] audit: type=1326 audit(1736870560.151:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.118144][ T29] audit: type=1326 audit(1736870560.151:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.149776][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 195.268164][ T29] audit: type=1326 audit(1736870560.161:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.308412][ T29] audit: type=1326 audit(1736870560.161:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.329739][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.336305][ T29] audit: type=1326 audit(1736870560.161:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.360521][ T29] audit: type=1326 audit(1736870560.171:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.381751][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.388711][ T29] audit: type=1326 audit(1736870560.171:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.410699][ T29] audit: type=1326 audit(1736870560.171:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.432176][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.438824][ T29] audit: type=1326 audit(1736870560.181:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.460427][ T29] audit: type=1326 audit(1736870560.181:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6580 comm="syz.4.144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7d9d85d29 code=0x7ffc0000 [ 195.481722][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.550798][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 196.656681][ T6298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.682569][ T6298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.699174][ T6298] bond0 (unregistering): Released all slaves [ 197.401684][ T6412] hsr_slave_0: entered promiscuous mode [ 197.630071][ T6412] hsr_slave_1: entered promiscuous mode [ 197.660169][ T6412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.684064][ T6412] Cannot create hsr debugfs directory [ 197.901196][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.940832][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.977091][ T6632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.029699][ T6632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.128971][ T6642] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 198.141911][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 199.796345][ T6649] netlink: 'syz.4.153': attribute type 2 has an invalid length. [ 199.804754][ T6649] netlink: 'syz.4.153': attribute type 8 has an invalid length. [ 199.812656][ T6649] netlink: 132 bytes leftover after parsing attributes in process `syz.4.153'. [ 200.336360][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.346010][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.879559][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.4.157'. [ 202.859854][ T6685] overlayfs: failed to resolve './file0': -2 [ 202.914801][ T6298] hsr_slave_0: left promiscuous mode [ 202.996957][ T6298] hsr_slave_1: left promiscuous mode [ 203.277131][ T6298] veth1_macvtap: left promiscuous mode [ 203.294218][ T6298] veth0_macvtap: left promiscuous mode [ 203.306710][ T6298] veth1_vlan: left promiscuous mode [ 204.204041][ T6298] veth0_vlan: left promiscuous mode [ 206.594478][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 207.012808][ T6735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.505838][ T6298] team0 (unregistering): Port device team_slave_1 removed [ 207.624614][ T6758] ./bus: Can't lookup blockdev [ 208.316898][ T6298] team0 (unregistering): Port device team_slave_0 removed [ 210.545548][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 210.545572][ T29] audit: type=1107 audit(1736870576.231:101): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 210.852142][ T29] audit: type=1326 audit(1736870576.641:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 211.153166][ T29] audit: type=1326 audit(1736870576.641:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 212.060613][ T29] audit: type=1326 audit(1736870576.641:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 212.328927][ T29] audit: type=1326 audit(1736870576.641:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 212.359534][ T29] audit: type=1326 audit(1736870576.641:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 212.359588][ T29] audit: type=1326 audit(1736870576.681:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 212.359628][ T29] audit: type=1326 audit(1736870576.681:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 212.359673][ T29] audit: type=1326 audit(1736870576.681:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 212.359712][ T29] audit: type=1326 audit(1736870576.681:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6783 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 213.364112][ T6824] can0: slcan on ttyS3. [ 214.139671][ T6818] can0 (unregistered): slcan off ttyS3. [ 216.562547][ T6412] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.789123][ T6412] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.826015][ T6857] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 217.835891][ T6857] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 217.878771][ T6412] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.986598][ T6412] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.179598][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 218.892677][ T5837] Bluetooth: hci1: command 0x0406 tx timeout [ 218.892888][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 219.154166][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.252480][ T6412] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.276231][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.276386][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.309470][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.309537][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.402662][ T6412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.455374][ T6412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.792138][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.939362][ T6412] veth0_vlan: entered promiscuous mode [ 223.056342][ T6412] veth1_vlan: entered promiscuous mode [ 223.196637][ T6412] veth0_macvtap: entered promiscuous mode [ 223.220496][ T6412] veth1_macvtap: entered promiscuous mode [ 223.282947][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.325508][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.395555][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.434047][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.455468][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.490511][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.528484][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.540995][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.552380][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.563589][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.214984][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 225.587692][ T6412] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.658377][ T6412] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.667167][ T6412] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.714418][ T6412] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.810997][ T6945] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 225.817340][ T6945] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 226.058884][ T6962] capability: warning: `syz.2.193' uses deprecated v2 capabilities in a way that may be insecure [ 226.341030][ T6945] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 226.358495][ T6945] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 226.685475][ T6945] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 226.691717][ T6945] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 226.841959][ T6945] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 226.848981][ T6945] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 226.862863][ T6945] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 227.127391][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.216584][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.419983][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.509974][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.948529][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 228.542181][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 228.778411][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 229.049283][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 230.417413][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 230.455640][ T7002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 230.568431][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 230.808137][ T5831] Bluetooth: hci4: command 0x0c1a tx timeout [ 231.508163][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.177553][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 233.542828][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 233.688595][ T7032] syz.1.203(7032): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 234.140963][ T7037] ax25_connect(): syz.4.206 uses autobind, please contact jreuter@yaina.de [ 234.264648][ T7023] delete_channel: no stack [ 234.272274][ T7023] delete_channel: no stack [ 240.357638][ T7078] tty tty26: ldisc open failed (-12), clearing slot 25 [ 240.748930][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 240.748952][ T29] audit: type=1326 audit(1736870606.531:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7fc00000 [ 243.897216][ T5869] IPVS: starting estimator thread 0... [ 244.008232][ T29] audit: type=1326 audit(1736870609.781:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7084 comm="syz.3.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0acd785d29 code=0x7fc00000 [ 244.091446][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 244.132966][ T7108] IPVS: using max 19 ests per chain, 45600 per kthread [ 250.277478][ T7159] Bluetooth: MGMT ver 1.23 [ 250.338664][ T7148] delete_channel: no stack [ 252.413962][ T7182] tipc: Trying to set illegal importance in message [ 255.092706][ T7191] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 255.100226][ T7191] program syz.1.235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 255.118979][ T7191] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 256.446888][ T7196] netlink: 'syz.4.236': attribute type 9 has an invalid length. [ 258.448748][ T7206] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.458606][ T7206] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.468187][ T7206] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.476968][ T7206] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.929525][ T7226] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 261.838222][ T7226] program syz.2.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 261.958124][ T7226] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 262.065880][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.072626][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.240541][ T7239] overlayfs: missing 'workdir' [ 264.173932][ T7252] input: syz0 as /devices/virtual/input/input6 [ 267.991883][ T7280] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 267.999263][ T7280] program syz.0.256 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 268.016420][ T7280] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 269.009130][ T7283] gre1: entered promiscuous mode [ 269.014281][ T7283] gre1: entered allmulticast mode [ 269.191116][ T7284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 270.619084][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 270.694153][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.259'. [ 270.726947][ T7294] syz.4.259 uses obsolete (PF_INET,SOCK_PACKET) [ 271.335504][ T7302] 9pnet: Unknown protocol version 9p200 [ 271.359154][ T7302] lo speed is unknown, defaulting to 1000 [ 271.365655][ T7302] lo speed is unknown, defaulting to 1000 [ 271.377855][ T7302] lo speed is unknown, defaulting to 1000 [ 271.396873][ T7302] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 271.412252][ T7302] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 271.704691][ T7302] lo speed is unknown, defaulting to 1000 [ 271.712077][ T7302] lo speed is unknown, defaulting to 1000 [ 271.719080][ T7302] lo speed is unknown, defaulting to 1000 [ 271.727301][ T7302] lo speed is unknown, defaulting to 1000 [ 271.734276][ T7302] lo speed is unknown, defaulting to 1000 [ 276.963283][ T29] audit: type=1326 audit(1736870642.751:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 276.999816][ T29] audit: type=1326 audit(1736870642.751:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 277.036790][ T29] audit: type=1326 audit(1736870642.751:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 277.073097][ T29] audit: type=1326 audit(1736870642.751:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 277.542625][ T7350] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 277.550061][ T7350] program syz.1.271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 277.567254][ T7350] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 278.041385][ T29] audit: type=1326 audit(1736870642.751:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 278.063660][ T29] audit: type=1326 audit(1736870642.751:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 278.085276][ T29] audit: type=1326 audit(1736870642.751:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 279.054048][ T29] audit: type=1326 audit(1736870642.751:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 279.086300][ T29] audit: type=1326 audit(1736870642.771:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 279.498136][ T29] audit: type=1326 audit(1736870642.781:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7338 comm="syz.0.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a0385d29 code=0x7ffc0000 [ 281.798432][ T7372] netlink: 68 bytes leftover after parsing attributes in process `syz.4.276'. [ 285.060481][ T7401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.282'. [ 285.789363][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 285.800022][ T5871] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 285.921400][ T7406] netlink: 'syz.4.284': attribute type 1 has an invalid length. [ 285.962186][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.973538][ T5871] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.986133][ T7406] netlink: 'syz.4.284': attribute type 2 has an invalid length. [ 285.987681][ T5871] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 286.002833][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.034545][ T5871] usb 1-1: config 0 descriptor?? [ 286.401535][ T7390] can0: slcan on ttyS3. [ 286.914290][ T7410] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 286.925484][ T7410] program syz.3.285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.968361][ T7410] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 292.085706][ T7413] can0 (unregistered): slcan off ttyS3. [ 292.085725][ T5871] usbhid 1-1:0.0: can't add hid device: -32 [ 292.099567][ T5871] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 292.124349][ T5871] usb 1-1: USB disconnect, device number 2 [ 293.360745][ T7447] Invalid ELF header type: 0 != 1 [ 294.181852][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 294.181876][ T29] audit: type=1107 audit(1736870659.201:185): pid=7444 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='p?€†vãÊ&_q• ¨<ñ,PÊ~1çéîwOBÓi•ëÔ¿;Ì‹È÷$e5Ðø}rxÃ]Xf“êÆ? ‡âÖG·iMò]4Ð0p„ÕêtÖ³ñh`»ö~¬ÈŠÙÑYшxeGǦª<#u¸á-…ã]êÇÜ\= G!í y-œ÷ [ 294.181876][ T29] hõ'ÃÆd”ÓÙù¶A) Œ×‚ßsó7©­ˆy †µ>|Ç3Weæ|¾¾üÜ¥#1ézŽ_R§?=' [ 297.705779][ T7486] loop2: detected capacity change from 0 to 7 [ 297.734399][ T7486] Dev loop2: unable to read RDB block 7 [ 297.740626][ T7486] loop2: unable to read partition table [ 297.747269][ T7486] loop2: partition table beyond EOD, truncated [ 297.762195][ T7486] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 298.075429][ T7488] xt_NFQUEUE: number of total queues is 0 [ 300.155635][ T7505] Bluetooth: MGMT ver 1.23 [ 300.163992][ T7505] ======================================================= [ 300.163992][ T7505] WARNING: The mand mount option has been deprecated and [ 300.163992][ T7505] and is ignored by this kernel. Remove the mand [ 300.163992][ T7505] option from the mount to silence this warning. [ 300.163992][ T7505] ======================================================= [ 302.773515][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 302.773681][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 302.863087][ T7524] Cannot find set identified by id 0 to match [ 302.911590][ T5871] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 303.138306][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 303.180125][ T5871] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 303.180281][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.180446][ T5871] usb 1-1: Product: syz [ 303.180550][ T5871] usb 1-1: Manufacturer: syz [ 303.180652][ T5871] usb 1-1: SerialNumber: syz [ 303.258439][ T5871] usb 1-1: config 0 descriptor?? [ 304.502626][ T7537] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 304.504497][ T7537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 304.506394][ T7537] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 304.506545][ T7537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 305.071152][ T5871] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 305.456211][ T7543] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 305.511320][ T7543] kernel profiling enabled (shift: 9) [ 306.405301][ T5870] usb 1-1: USB disconnect, device number 3 [ 306.610099][ T7552] binder: 7545:7552 ioctl c0306201 0 returned -14 [ 311.410193][ T7605] netlink: 48 bytes leftover after parsing attributes in process `syz.3.316'. [ 311.421591][ T2954] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.522045][ T7643] input: syz1 as /devices/virtual/input/input7 [ 314.894942][ T7643] syz.3.323: attempt to access beyond end of device [ 314.894942][ T7643] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 314.908569][ T7643] SQUASHFS error: Failed to read block 0x0: -5 [ 314.914801][ T7643] unable to read squashfs_super_block [ 321.379429][ T5870] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 321.808165][ T5837] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 323.242982][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.257528][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 330.041350][ T7753] Can't find ip_set type has [ 330.509565][ T7758] netlink: 48 bytes leftover after parsing attributes in process `syz.2.347'. [ 330.828213][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 331.973946][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 332.051962][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.198022][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.207866][ T9] usb 1-1: New USB device found, idVendor=056a, idProduct=003f, bcdDevice= 0.00 [ 332.219552][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.279135][ T9] usb 1-1: config 0 descriptor?? [ 332.421860][ T7782] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 333.343547][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 333.360392][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 334.293838][ T9] usb 1-1: USB disconnect, device number 4 [ 336.708039][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 339.396381][ T29] audit: type=1326 audit(1736870705.181:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7825 comm="syz.0.366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72a0385d29 code=0x0 [ 341.063755][ T7838] random: crng reseeded on system resumption [ 342.390668][ T7847] binder: 7842:7847 ioctl c0306201 0 returned -14 [ 348.304420][ T7889] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.313341][ T7889] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.322176][ T7889] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.331047][ T7889] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.109980][ T7899] delete_channel: no stack [ 353.465871][ T5869] IPVS: starting estimator thread 0... [ 355.588443][ T7917] IPVS: using max 17 ests per chain, 40800 per kthread [ 355.609278][ T7926] vivid-001: kernel_thread() failed [ 355.629736][ T7932] loop7: detected capacity change from 0 to 7 [ 355.685534][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 355.769624][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 355.839100][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 355.859952][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.138364][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.147145][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 356.669956][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 357.412021][ T7932] ldm_validate_partition_table(): Disk read failed. [ 357.425316][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 357.434975][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 357.523323][ T7932] Buffer I/O error on dev loop7, logical block 0, async page read [ 357.654474][ T7932] Dev loop7: unable to read RDB block 0 [ 357.751254][ T7932] loop7: unable to read partition table [ 357.757185][ T7932] loop7: partition table beyond EOD, truncated [ 357.772116][ T7932] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 357.772116][ T7932] ) failed (rc=-5) [ 358.658601][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 361.018565][ T7979] syz.4.394[7979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.018683][ T7979] syz.4.394[7979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 361.091811][ T7979] syz.4.394[7979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 365.926482][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 366.760132][ T8016] tipc: Started in network mode [ 366.760217][ T8016] tipc: Node identity 7f000001, cluster identity 4711 [ 366.761520][ T8016] tipc: Enabled bearer , priority 10 [ 366.762832][ T8016] tipc: Enabled bearer , priority 0 [ 367.579587][ T8023] tty tty24: ldisc open failed (-12), clearing slot 23 [ 367.587129][ T8024] tty tty24: ldisc open failed (-12), clearing slot 23 [ 367.645308][ T8025] warning: `syz.0.405' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 367.788445][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 367.880658][ T9] tipc: Node number set to 2130706433 [ 367.947503][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 367.962409][ T8] usb 5-1: can't read configurations, error -71 [ 370.629505][ T8045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.410'. [ 374.945298][ T8070] evm: overlay not supported [ 374.958978][ T8069] Invalid ELF header magic: != ELF [ 374.977268][ T29] audit: type=1804 audit(1736870740.561:187): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.415" name="/newroot/91/bus/bus" dev="overlay" ino=504 res=1 errno=0 [ 385.051104][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.057462][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.488215][ T8154] netlink: 464 bytes leftover after parsing attributes in process `syz.4.432'. [ 392.516190][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 393.281353][ T8194] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 393.442274][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.442'. [ 393.896694][ T8202] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 395.444367][ T8209] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 402.037317][ T8233] Cannot find set identified by id 0 to match [ 408.958740][ T8268] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.966171][ T8268] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.982713][ T8268] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 408.989063][ T8268] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 411.378077][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 411.384178][ T5824] Bluetooth: hci1: command 0x0c1a tx timeout [ 411.390338][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 411.396379][ T5824] Bluetooth: hci4: command 0x0c1a tx timeout [ 412.416212][ T8287] IPVS: length: 46 != 8 [ 412.928613][ T8292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 413.553116][ T5871] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 415.108241][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 415.123357][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 415.152055][ T5871] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 415.566520][ T8303] SET target dimension over the limit! [ 415.618808][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 415.657504][ T5871] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 415.898944][ T5871] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 415.913594][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 415.921969][ T5871] usb 4-1: Product: syz [ 415.926171][ T5871] usb 4-1: Manufacturer: syz [ 415.932735][ T5871] usb 4-1: SerialNumber: syz [ 416.289712][ T5871] usb 4-1: config 0 descriptor?? [ 416.328135][ T5871] usb 4-1: can't set config #0, error -71 [ 416.346797][ T5871] usb 4-1: USB disconnect, device number 6 [ 417.977862][ T8315] delete_channel: no stack [ 420.418967][ T8341] netlink: 80 bytes leftover after parsing attributes in process `syz.1.473'. [ 421.779293][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.472'. [ 425.564180][ T8377] fuse: Unknown parameter ' [ 425.564180][ T8377] 0000000000000000000001200000000000000000000012}ˆìs8a00000000000000000010 [ 425.564180][ T8377] ' [ 426.715063][ T8375] netlink: 24 bytes leftover after parsing attributes in process `syz.2.481'. [ 431.601707][ T8417] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 433.440493][ T8430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 434.189236][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 435.383090][ T8443] netlink: 16 bytes leftover after parsing attributes in process `syz.3.497'. [ 435.457447][ T8444] netlink: 'syz.3.497': attribute type 4 has an invalid length. [ 437.528121][ T8444] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 437.534685][ T8444] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 437.880512][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 438.362670][ T8459] futex_wake_op: syz.0.498 tries to shift op by -1; fix this program [ 438.372279][ T8444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 438.378353][ T8444] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 438.388651][ T8444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 438.394602][ T8444] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 438.405603][ T8444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 438.411700][ T8444] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 438.499101][ T8459] netlink: 32 bytes leftover after parsing attributes in process `syz.0.498'. [ 440.928047][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 444.096772][ T8489] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.129241][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.135595][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.291503][ T8497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'. [ 447.962038][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.508'. [ 448.059837][ T8527] qnx4: no qnx4 filesystem (no root dir). [ 450.060791][ T8540] netlink: 72 bytes leftover after parsing attributes in process `syz.3.512'. [ 450.086192][ T8540] ipvlan0: entered promiscuous mode [ 450.091602][ T8540] ipvlan0: entered allmulticast mode [ 450.097001][ T8540] veth0_vlan: entered allmulticast mode [ 450.817194][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 450.817249][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 451.623493][ T8550] ax25_connect(): syz.4.513 uses autobind, please contact jreuter@yaina.de [ 451.643402][ T8550] hub 6-0:1.0: USB hub found [ 451.650122][ T8550] hub 6-0:1.0: 1 port detected [ 454.988573][ T8565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.517'. [ 455.578974][ T8560] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 457.717371][ T8599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.523'. [ 458.883857][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.520'. [ 459.478565][ T8607] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 460.479384][ T8609] ipvlan2: entered allmulticast mode [ 460.494223][ T8609] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 460.504621][ T8609] batman_adv: batadv0: Adding interface: ipvlan2 [ 460.511241][ T8609] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.536975][ T8609] batman_adv: batadv0: Interface activated: ipvlan2 [ 462.596638][ T8614] binder: 8613:8614 ioctl c0306201 0 returned -14 [ 463.915081][ T8626] netlink: 84 bytes leftover after parsing attributes in process `syz.2.529'. [ 466.378615][ T8639] random: crng reseeded on system resumption [ 467.874754][ T8653] GUP no longer grows the stack in syz.1.532 (8653): 20004000-20008000 (20002000) [ 467.927162][ T8653] CPU: 0 UID: 0 PID: 8653 Comm: syz.1.532 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 467.937856][ T8653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 467.947959][ T8653] Call Trace: [ 467.951276][ T8653] [ 467.954249][ T8653] dump_stack_lvl+0x241/0x360 [ 467.958989][ T8653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.964265][ T8653] ? __pfx__printk+0x10/0x10 [ 467.969431][ T8653] ? find_vma+0xf9/0x170 [ 467.973742][ T8653] __get_user_pages+0x4385/0x49e0 [ 467.978905][ T8653] ? __lock_acquire+0x1397/0x2100 [ 467.984017][ T8653] ? __pfx___get_user_pages+0x10/0x10 [ 467.989446][ T8653] get_user_pages_remote+0x31e/0xb60 [ 467.994763][ T8653] ? __pfx_get_user_pages_remote+0x10/0x10 [ 468.000608][ T8653] ? __access_remote_vm+0x320/0x800 [ 468.005851][ T8653] __access_remote_vm+0x229/0x800 [ 468.010923][ T8653] ? __pfx___access_remote_vm+0x10/0x10 [ 468.016498][ T8653] ? rep_movs_alternative+0x4c/0x70 [ 468.021725][ T8653] proc_pid_cmdline_read+0x5b2/0x860 [ 468.027042][ T8653] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 468.032886][ T8653] ? rw_verify_area+0x55e/0x6f0 [ 468.037762][ T8653] vfs_readv+0x6bc/0xa80 [ 468.042030][ T8653] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 468.047864][ T8653] ? __pfx_vfs_readv+0x10/0x10 [ 468.052641][ T8653] ? smk_access+0x4ab/0x4e0 [ 468.057173][ T8653] ? __pfx_do_futex+0x10/0x10 [ 468.061873][ T8653] ? smack_file_ioctl+0x2f7/0x3a0 [ 468.066931][ T8653] __x64_sys_preadv+0x1b7/0x2d0 [ 468.071834][ T8653] ? __pfx___x64_sys_preadv+0x10/0x10 [ 468.077350][ T8653] ? do_syscall_64+0x100/0x230 [ 468.082152][ T8653] ? do_syscall_64+0xb6/0x230 [ 468.086855][ T8653] do_syscall_64+0xf3/0x230 [ 468.091382][ T8653] ? clear_bhb_loop+0x35/0x90 [ 468.096079][ T8653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.102010][ T8653] RIP: 0033:0x7fae6f985d29 [ 468.106445][ T8653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.126160][ T8653] RSP: 002b:00007fae707cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 468.134644][ T8653] RAX: ffffffffffffffda RBX: 00007fae6fb75fa0 RCX: 00007fae6f985d29 [ 468.142648][ T8653] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000007 [ 468.150639][ T8653] RBP: 00007fae6fa01b08 R08: 0000000000000000 R09: 0000000000000000 [ 468.158638][ T8653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.166625][ T8653] R13: 0000000000000000 R14: 00007fae6fb75fa0 R15: 00007fff96402048 [ 468.174638][ T8653] [ 468.770522][ T8666] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 469.862634][ T8661] CIFS: Unable to determine destination address [ 471.407879][ T8682] syz.4.537: attempt to access beyond end of device [ 471.407879][ T8682] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 473.069337][ T8694] xt_cluster: node mask cannot exceed total number of nodes [ 473.788499][ T8704] Invalid ELF header magic: != ELF [ 473.951909][ T8705] Bluetooth: MGMT ver 1.23 [ 475.059547][ T8712] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 475.068903][ T8712] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 477.372599][ T8716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'. [ 479.442327][ T8735] Can't find a SQUASHFS superblock on nullb0 [ 479.468096][ T8735] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 479.476004][ T8735] netlink: 40 bytes leftover after parsing attributes in process `syz.3.549'. [ 480.175114][ T8733] program syz.1.550 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.184776][ T8733] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 480.449155][ T8735] bridge0: port 3(macvlan1) entered blocking state [ 480.456450][ T8735] bridge0: port 3(macvlan1) entered disabled state [ 480.463731][ T8735] macvlan1: entered allmulticast mode [ 480.469198][ T8735] veth1_vlan: entered allmulticast mode [ 480.476688][ T8735] macvlan1: entered promiscuous mode [ 480.489345][ T8735] bridge0: port 3(macvlan1) entered blocking state [ 480.495989][ T8735] bridge0: port 3(macvlan1) entered forwarding state [ 482.471857][ T8763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.556'. [ 484.401469][ T8769] tipc: Started in network mode [ 484.406415][ T8769] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 484.415599][ T8769] tipc: Enabling of bearer rejected, failed to enable media [ 485.904098][ T8789] xt_hashlimit: max too large, truncated to 1048576 [ 485.952931][ T8789] netlink: 256 bytes leftover after parsing attributes in process `syz.1.562'. [ 486.921644][ T8795] 9pnet: Unknown protocol version 9p2000.„?ÒUÎ6ïu [ 487.379442][ T8804] netlink: 424 bytes leftover after parsing attributes in process `syz.1.565'. [ 488.325960][ T8808] program syz.0.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 488.336542][ T8808] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 491.475114][ T8835] tmpfs: Bad value for 'mpol' [ 491.481991][ T8835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.574'. [ 491.871857][ T8839] binder: 8828:8839 ioctl c0306201 0 returned -14 [ 495.741701][ T8867] netlink: 'syz.1.578': attribute type 5 has an invalid length. [ 495.749794][ T8867] netlink: 380 bytes leftover after parsing attributes in process `syz.1.578'. [ 500.197105][ T8903] netlink: 124 bytes leftover after parsing attributes in process `syz.4.588'. [ 501.381553][ T8909] mkiss: ax0: crc mode is auto. [ 502.947013][ T5871] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 503.838783][ T8918] netlink: 52 bytes leftover after parsing attributes in process `syz.4.592'. [ 506.257436][ T8929] tipc: Started in network mode [ 506.263638][ T8929] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 506.277403][ T8929] tipc: New replicast peer: fc01:0000:0000:0000:0000:0000:0000:0000 [ 506.290578][ T8929] tipc: Enabled bearer , priority 10 [ 507.659967][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.666331][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.817783][ T5886] tipc: Node number set to 1 [ 510.943730][ T8966] netlink: 5 bytes leftover after parsing attributes in process `syz.4.603'. [ 510.952623][ T8966] netlink: 5 bytes leftover after parsing attributes in process `syz.4.603'. [ 510.961925][ T8966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.603'. [ 510.972809][ T8966] netlink: 5 bytes leftover after parsing attributes in process `syz.4.603'. [ 513.273349][ T29] audit: type=1326 audit(1736870878.501:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.458221][ T29] audit: type=1326 audit(1736870878.501:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.515070][ T29] audit: type=1326 audit(1736870878.521:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.538112][ T29] audit: type=1326 audit(1736870878.521:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.559644][ T29] audit: type=1326 audit(1736870878.521:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.559685][ T29] audit: type=1326 audit(1736870878.531:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.559719][ T29] audit: type=1326 audit(1736870878.531:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.559755][ T29] audit: type=1326 audit(1736870878.531:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.559794][ T29] audit: type=1326 audit(1736870878.551:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f0acd785d29 code=0x7ffc0000 [ 513.559835][ T29] audit: type=1326 audit(1736870878.551:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8974 comm="syz.3.605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 514.762441][ T8991] Bluetooth: MGMT ver 1.23 [ 517.204343][ T8987] kexec: Could not allocate control_code_buffer [ 523.473606][ T9050] Option ' ÜÛP©ª¡´ià ' to dns_resolver key: bad/missing value [ 527.232972][ T9060] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 527.251785][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 527.270043][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.277721][ T9065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.407769][ T9065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.477436][ T9065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.538250][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 527.538273][ T29] audit: type=1326 audit(1736870893.321:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9069 comm="syz.4.625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7d9d85d29 code=0x0 [ 528.588874][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.625'. [ 530.487198][ T9090] block nbd4: not configured, cannot reconfigure [ 531.298353][ T29] audit: type=1326 audit(1736870897.071:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9094 comm="syz.0.631" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72a0385d29 code=0x0 [ 531.676454][ T9102] netlink: 'syz.1.632': attribute type 1 has an invalid length. [ 532.613336][ T9107] No such timeout policy "syz0" [ 532.625985][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.633'. [ 534.417216][ T9124] tipc: Started in network mode [ 534.422296][ T29] audit: type=1400 audit(1736870899.701:242): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=9109 comm="syz.2.634" name="133" dev="tmpfs" ino=732 [ 534.422494][ T29] audit: type=1400 audit(1736870899.731:243): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=9121 comm="syz.2.634" name="133" dev="tmpfs" ino=732 [ 534.703910][ T9124] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 534.803506][ T9124] tipc: Enabled bearer , priority 0 [ 535.951029][ T5870] tipc: Node number set to 11578026 [ 535.951110][ T9151] Mount JFS Failure: -22 [ 535.962565][ T9151] jfs_mount failed w/return code = -22 [ 535.966078][ T9143] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 536.345591][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.639'. [ 536.427717][ T9143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.698276][ T9143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.745638][ T9143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.755167][ T9143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.764629][ T9143] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 537.125790][ T9143] batman_adv: batadv0: Removing interface: ipvlan2 [ 546.038094][ T9251] xt_NFQUEUE: number of total queues is 0 [ 549.126581][ T9251] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 549.126658][ T9251] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 549.129333][ T9251] vhci_hcd vhci_hcd.0: Device attached [ 549.799517][ T9258] vhci_hcd: connection closed [ 549.832390][ T6529] vhci_hcd: stop threads [ 549.891324][ T6529] vhci_hcd: release socket [ 549.895860][ T6529] vhci_hcd: disconnect device [ 550.355893][ T9277] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 550.396452][ T9277] program syz.0.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 550.414122][ T9277] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 550.764456][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.659'. [ 551.325792][ T9279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.660'. [ 554.608936][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.632749][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 554.651177][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 554.666092][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.678948][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 554.686639][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 554.704092][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.711874][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 554.719787][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 554.744944][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.753562][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 554.761276][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 554.899951][ T9322] lo speed is unknown, defaulting to 1000 [ 554.992732][ T978] libceph: connect (1)[c::]:6789 error -101 [ 555.000277][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 555.012569][ T9323] ceph: No mds server is up or the cluster is laggy [ 555.336981][ T9322] chnl_net:caif_netlink_parms(): no params data found [ 556.336967][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.672'. [ 556.582719][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.593203][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.603662][ T9322] bridge_slave_0: entered allmulticast mode [ 556.616078][ T9322] bridge_slave_0: entered promiscuous mode [ 556.633581][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.702586][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.726528][ T9322] bridge_slave_1: entered allmulticast mode [ 556.743677][ T9322] bridge_slave_1: entered promiscuous mode [ 556.830151][ T5837] Bluetooth: hci5: command tx timeout [ 557.711307][ T9322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.811266][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.676982][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 558.714771][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.732693][ T9377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.746833][ T9377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.757399][ T9377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.114098][ T9322] team0: Port device team_slave_0 added [ 559.122376][ T9322] team0: Port device team_slave_1 added [ 559.147309][ T5837] Bluetooth: hci5: command tx timeout [ 560.144005][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.155336][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.268422][ T9322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.281929][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.465673][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.494032][ T9322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.842178][ T9322] hsr_slave_0: entered promiscuous mode [ 560.848896][ T9322] hsr_slave_1: entered promiscuous mode [ 560.855208][ T9322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.863459][ T9322] Cannot create hsr debugfs directory [ 561.035103][ T9322] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 561.059734][ T9322] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 561.226134][ T5837] Bluetooth: hci5: command tx timeout [ 561.254762][ T9322] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 561.332276][ T9322] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 561.593287][ T9402] overlay: Unknown parameter '/dev/cpu/#/msr' [ 562.522313][ T9322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.539025][ T9322] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.037418][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.044728][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.289306][ T5837] Bluetooth: hci5: command tx timeout [ 563.554717][ T9322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.383677][ T9322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 564.660663][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.667959][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.291312][ T9322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.009038][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.015640][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.626270][ T9322] veth0_vlan: entered promiscuous mode [ 571.644126][ T9322] veth1_vlan: entered promiscuous mode [ 571.666798][ T9322] veth0_macvtap: entered promiscuous mode [ 571.689312][ T9322] veth1_macvtap: entered promiscuous mode [ 571.725808][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.015336][ T9322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.025681][ T9322] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.034650][ T9322] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.043443][ T9322] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.052417][ T9322] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.162027][ T9495] input: syz1 as /devices/virtual/input/input10 [ 573.812994][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.857760][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.765404][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.972744][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.674591][ T5871] IPVS: starting estimator thread 0... [ 576.569971][ T9534] IPVS: using max 29 ests per chain, 69600 per kthread [ 576.584331][ T9526] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 580.965679][ T9569] netlink: 'syz.0.711': attribute type 10 has an invalid length. [ 581.020837][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'. [ 581.032236][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.711'. [ 581.041508][ T9572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.711'. [ 581.057661][ T9572] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.247526][ T9569] macvlan0: entered promiscuous mode [ 581.348324][ T9569] macvlan0: entered allmulticast mode [ 581.755680][ T9569] veth1_vlan: entered allmulticast mode [ 581.770905][ T9569] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 582.088244][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 584.952358][ T9599] mkiss: ax0: crc mode is auto. [ 588.127422][ T9618] netlink: 'syz.1.720': attribute type 10 has an invalid length. [ 588.139448][ T9618] tipc: Resetting bearer [ 588.266398][ T9618] tipc: Resetting bearer [ 588.408463][ T9618] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.426678][ T9618] bond0: (slave team0): Enslaving as an active interface with an up link [ 589.656118][ T9630] Cannot find set identified by id 0 to match [ 589.661521][ T9632] block nbd0: not configured, cannot reconfigure [ 589.666781][ T9630] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.725'. [ 589.678553][ T9630] netlink: 8280 bytes leftover after parsing attributes in process `syz.5.725'. [ 591.149039][ T9644] mkiss: ax0: crc mode is auto. [ 594.653238][ T9662] netlink: 'syz.5.732': attribute type 1 has an invalid length. [ 597.021228][ T9696] cgroup: none used incorrectly [ 597.634927][ T9696] orangefs_mount: mount request failed with -4 [ 600.428037][ T5870] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 600.559428][ T9724] pimreg: entered allmulticast mode [ 601.311993][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 601.398056][ T5870] usb 6-1: device descriptor read/all, error -71 [ 605.377938][ T5870] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 606.588016][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 606.601834][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 606.626493][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.587514][ T5870] usb 6-1: New USB device found, idVendor=0c70, idProduct=f1b6, bcdDevice= 0.00 [ 607.596829][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.035025][ T9781] devtmpfs: Too few inodes for current use [ 608.587673][ T5870] usb 6-1: config 0 descriptor?? [ 609.045578][ T5870] usb 6-1: can't set config #0, error -71 [ 609.054019][ T5870] usb 6-1: USB disconnect, device number 4 [ 609.266948][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 609.285744][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 609.297079][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 609.306666][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 609.316436][ T5831] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 609.323988][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 609.372569][ T9787] lo speed is unknown, defaulting to 1000 [ 611.394685][ T9794] Bluetooth: hci6: command tx timeout [ 612.529567][ T9816] Mount JFS Failure: -22 [ 612.533878][ T9816] jfs_mount failed w/return code = -22 [ 612.770188][ T9787] chnl_net:caif_netlink_parms(): no params data found [ 613.203484][ T9811] vivid-007: disconnect [ 614.197172][ T9794] Bluetooth: hci6: command tx timeout [ 614.294030][ T9787] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.306366][ T9787] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.333317][ T9787] bridge_slave_0: entered allmulticast mode [ 614.429095][ T9787] bridge_slave_0: entered promiscuous mode [ 614.437535][ T9787] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.444931][ T9787] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.452274][ T9787] bridge_slave_1: entered allmulticast mode [ 614.460289][ T9787] bridge_slave_1: entered promiscuous mode [ 614.707772][ T9787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.709420][ T9811] vivid-007: reconnect [ 614.944667][ T9787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.743479][ T9787] team0: Port device team_slave_0 added [ 615.780614][ T9787] team0: Port device team_slave_1 added [ 616.284244][ T9794] Bluetooth: hci6: command tx timeout [ 616.595454][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.638990][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.702847][ T9787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.715957][ T9787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.733615][ T9787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.763983][ T9787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.871527][ T9849] xt_connbytes: Forcing CT accounting to be enabled [ 616.878553][ T9849] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 616.888576][ T9849] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 617.157302][ T9851] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 617.166043][ T9851] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 618.382045][ T9794] Bluetooth: hci6: command tx timeout [ 618.450048][ T9787] hsr_slave_0: entered promiscuous mode [ 618.462891][ T9787] hsr_slave_1: entered promiscuous mode [ 618.471438][ T9787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.481760][ T9787] Cannot create hsr debugfs directory [ 618.494923][ T9854] bridge0: port 4(syz_tun) entered blocking state [ 618.501859][ T9854] bridge0: port 4(syz_tun) entered disabled state [ 618.508887][ T9854] syz_tun: entered allmulticast mode [ 618.516520][ T9854] syz_tun: entered promiscuous mode [ 618.524341][ T9854] bridge0: port 4(syz_tun) entered blocking state [ 618.531317][ T9854] bridge0: port 4(syz_tun) entered forwarding state [ 621.421988][ T9871] siw: device registration error -23 [ 621.989472][ T9787] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 622.061752][ T9787] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 622.644550][ T9787] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 622.994720][ T9787] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 623.030478][ T29] audit: type=1326 audit(1736870988.821:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 623.107003][ T9787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.124988][ T9787] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.128365][ T29] audit: type=1326 audit(1736870988.821:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 623.158700][ T9787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 623.169248][ T9787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.183084][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.191826][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.204779][ T29] audit: type=1326 audit(1736870988.831:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 623.230246][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.237425][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.414496][ T29] audit: type=1326 audit(1736870988.831:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 623.452310][ T29] audit: type=1326 audit(1736870988.831:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 623.475196][ T29] audit: type=1326 audit(1736870988.831:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 623.496547][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.235503][ T29] audit: type=1326 audit(1736870988.831:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 625.574801][ T29] audit: type=1326 audit(1736870988.831:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 625.740786][ T29] audit: type=1326 audit(1736870988.911:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 625.762206][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.789473][ T29] audit: type=1326 audit(1736870988.911:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9883 comm="syz.5.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 625.810910][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.924941][ T9913] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 625.989197][ T9912] netlink: 'syz.5.782': attribute type 1 has an invalid length. [ 625.997028][ T9912] netlink: 188824 bytes leftover after parsing attributes in process `syz.5.782'. [ 626.148078][ T9787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.205137][ T6522] Bluetooth: Error in BCSP hdr checksum [ 626.419443][ T6535] Bluetooth: Error in BCSP hdr checksum [ 627.979984][ T5824] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 629.209547][ T9787] veth0_vlan: entered promiscuous mode [ 629.222521][ T9787] veth1_vlan: entered promiscuous mode [ 629.248767][ T9787] veth0_macvtap: entered promiscuous mode [ 629.257062][ T9787] veth1_macvtap: entered promiscuous mode [ 629.276447][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.287042][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.298193][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.308765][ T9787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.319424][ T9787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.330546][ T9787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.350075][ T9787] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.359268][ T9787] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.368273][ T9787] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.377004][ T9787] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.798544][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 629.798594][ T29] audit: type=1326 audit(1736870995.481:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 629.826307][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.521695][ T29] audit: type=1326 audit(1736870995.481:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 630.551881][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.559136][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.658653][ T29] audit: type=1326 audit(1736870995.491:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 630.807653][ T29] audit: type=1326 audit(1736870995.491:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 630.876300][ T29] audit: type=1326 audit(1736870995.491:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 630.902154][ T6297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.931199][ T29] audit: type=1326 audit(1736870995.491:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 631.046779][ T6297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.620448][ T29] audit: type=1326 audit(1736870995.491:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 631.641877][ C1] vkms_vblank_simulate: vblank timer overrun [ 631.923959][ T6298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.935723][ T6298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.757568][ T29] audit: type=1326 audit(1736870995.491:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 633.098685][ T29] audit: type=1326 audit(1736870995.491:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff224784690 code=0x7ffc0000 [ 633.501125][ T29] audit: type=1326 audit(1736870995.501:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9939 comm="syz.2.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x7ffc0000 [ 636.415979][ T9974] netlink: 'syz.2.794': attribute type 1 has an invalid length. [ 636.423882][ T9974] netlink: 'syz.2.794': attribute type 4 has an invalid length. [ 636.431751][ T9974] netlink: 212 bytes leftover after parsing attributes in process `syz.2.794'. [ 638.796315][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 638.796336][ T29] audit: type=1326 audit(1736871004.581:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 638.879470][ T29] audit: type=1326 audit(1736871004.621:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 638.901647][ T29] audit: type=1326 audit(1736871004.651:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 638.924302][ T29] audit: type=1326 audit(1736871004.651:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 638.945893][ T29] audit: type=1326 audit(1736871004.651:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 638.967501][ T29] audit: type=1326 audit(1736871004.651:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 638.989714][ T29] audit: type=1326 audit(1736871004.651:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 639.386468][ T29] audit: type=1326 audit(1736871004.651:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 639.411271][ T29] audit: type=1326 audit(1736871004.651:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 639.480241][ T29] audit: type=1326 audit(1736871005.241:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9992 comm="syz.5.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cf8785d29 code=0x7ffc0000 [ 639.531845][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.6.802'. [ 641.401739][T10011] No such timeout policy "syz1" [ 643.570906][T10029] overlayfs: missing 'lowerdir' [ 648.076015][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 651.898759][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 651.980482][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.002222][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 652.459318][T10077] infiniband syz0: set active [ 652.464343][T10077] infiniband syz0: added ip6_vti0 [ 652.470914][T10077] syz0: rxe_create_cq: returned err = -12 [ 652.476997][T10077] infiniband syz0: Couldn't create ib_mad CQ [ 652.483259][T10077] infiniband syz0: Couldn't open port 1 [ 653.178565][ T978] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.187131][T10077] RDS/IB: syz0: added [ 653.191840][T10077] smc: adding ib device syz0 with port count 1 [ 653.198601][T10077] smc: ib device syz0 port 1 has pnetid [ 653.222064][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.319239][ T978] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.512181][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.624859][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 653.761492][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.821'. [ 655.489802][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 655.599990][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 655.708179][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 655.815745][T10077] ip6_vti0 speed is unknown, defaulting to 1000 [ 659.389595][T10103] batman_adv: batadv0: Adding interface: ip6gretap1 [ 659.396278][T10103] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.529410][T10103] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 663.053392][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 663.053413][ T29] audit: type=1326 audit(1736871028.486:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10121 comm="syz.3.830" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0acd785d29 code=0x0 [ 664.714085][T10153] cgroup: none used incorrectly [ 665.211569][T10153] orangefs_mount: mount request failed with -4 [ 666.019990][T10160] netlink: 64 bytes leftover after parsing attributes in process `syz.3.835'. [ 667.031457][T10174] netlink: 1 bytes leftover after parsing attributes in process `syz.2.838'. [ 667.906441][T10176] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 668.194513][T10174] vivid-000: kernel_thread() failed [ 669.251019][T10179] batman_adv: batadv0: Adding interface: ip6gretap2 [ 669.297555][T10179] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.380508][T10187] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 670.140957][T10179] batman_adv: batadv0: Not using interface ip6gretap2 (retrying later): interface not active [ 672.144224][ T5886] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 672.155369][T10199] mkiss: ax0: crc mode is auto. [ 673.890561][ T5886] usb 2-1: device descriptor read/all, error -71 [ 674.093164][T10219] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 676.679059][T10231] netlink: 'syz.1.852': attribute type 4 has an invalid length. [ 678.370365][T10262] IPVS: length: 46 != 8 [ 679.176788][T10266] trusted_key: encrypted_key: keylen parameter is missing [ 679.743938][T10265] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 680.314942][ T9794] Bluetooth: hci5: command 0x0406 tx timeout [ 682.655879][ T5871] IPVS: starting estimator thread 0... [ 683.051721][T10285] IPVS: using max 20 ests per chain, 48000 per kthread [ 685.098203][T10298] block device autoloading is deprecated and will be removed. [ 685.189182][T10305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.568737][T10308] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 686.576059][T10308] program syz.5.870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 686.593659][T10308] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 687.348605][T10318] virtio-fs: tag <(null)> not found [ 687.641465][T10319] cgroup: none used incorrectly [ 688.511896][T10319] orangefs_mount: mount request failed with -4 [ 689.812793][T10327] bridge0: port 3(syz_tun) entered blocking state [ 689.823316][T10327] bridge0: port 3(syz_tun) entered disabled state [ 689.831019][T10327] syz_tun: entered allmulticast mode [ 689.846486][T10327] syz_tun: entered promiscuous mode [ 689.856140][T10327] bridge0: port 3(syz_tun) entered blocking state [ 689.862714][T10327] bridge0: port 3(syz_tun) entered forwarding state [ 690.754057][ T5870] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 693.863350][T10345] tipc: Started in network mode [ 693.868538][T10345] tipc: Node identity 7f000001, cluster identity 4711 [ 693.876318][T10345] tipc: Enabled bearer , priority 10 [ 694.072725][T10343] syz.2.875: attempt to access beyond end of device [ 694.072725][T10343] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 694.086476][T10343] FAT-fs (nbd2): unable to read boot sector [ 694.896505][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.903648][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.416462][ T839] tipc: Node number set to 2130706433 [ 697.323193][ T29] audit: type=1326 audit(1736871060.683:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10355 comm="syz.2.880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff224785d29 code=0x0 [ 697.378981][T10365] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 701.079943][T10377] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 702.084905][T10377] program syz.1.884 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.234505][T10377] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 702.926610][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.886'. [ 702.935980][T10385] netlink: 48 bytes leftover after parsing attributes in process `syz.2.886'. [ 704.105006][T10398] cgroup: none used incorrectly [ 704.839123][T10398] orangefs_mount: mount request failed with -4 [ 707.058615][T10428] Mount JFS Failure: -22 [ 707.100161][T10428] jfs_mount failed w/return code = -22 [ 707.118157][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 707.132067][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 708.150633][ T8932] IPVS: starting estimator thread 0... [ 708.328184][T10408] IPVS: using max 19 ests per chain, 45600 per kthread [ 708.675751][T10440] netlink: 'syz.5.896': attribute type 2 has an invalid length. [ 709.931835][T10442] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 711.558370][ T5869] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 713.565547][ T5869] usb 6-1: device descriptor read/all, error -71 [ 713.623584][T10460] uprobe: syz.6.899:10460 failed to unregister, leaking uprobe [ 714.556024][T10459] tty tty32: ldisc open failed (-12), clearing slot 31 [ 718.310690][T10493] input: syz0 as /devices/virtual/input/input11 [ 718.347131][T10491] netlink: 412 bytes leftover after parsing attributes in process `syz.2.904'. [ 718.417705][T10492] netlink: 'syz.2.904': attribute type 2 has an invalid length. [ 720.141773][T10511] netlink: 'syz.6.912': attribute type 10 has an invalid length. [ 720.635701][T10514] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 721.369067][T10511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.412145][T10511] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 721.413716][T10513] gfs2: gfs2 mount does not exist [ 723.833127][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.918'. [ 727.518176][T10553] netlink: 104 bytes leftover after parsing attributes in process `syz.5.920'. [ 729.303098][T10568] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 731.881661][T10577] netlink: 124 bytes leftover after parsing attributes in process `syz.3.922'. [ 734.298207][T10588] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 734.965741][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.930'. [ 736.456755][T10604] netlink: 88 bytes leftover after parsing attributes in process `syz.5.932'. [ 737.246814][ T9794] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 737.266745][ T9794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 737.278805][ T9794] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 737.312280][ T9794] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 737.321415][T10605] Illegal XDP return value 4294967262 on prog (id 378) dev N/A, expect packet loss! [ 737.332669][ T9794] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 737.341683][ T9794] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 737.394123][T10608] lo speed is unknown, defaulting to 1000 [ 737.403680][T10608] ip6_vti0 speed is unknown, defaulting to 1000 [ 737.658237][T10617] netlink: 273 bytes leftover after parsing attributes in process `syz.6.936'. [ 737.871479][T10620] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 738.233515][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.936'. [ 739.609437][T10625] No such timeout policy "syz1" [ 739.832736][ T5824] Bluetooth: hci7: command tx timeout [ 740.812927][T10608] chnl_net:caif_netlink_parms(): no params data found [ 742.058402][ T9794] Bluetooth: hci7: command tx timeout [ 743.562338][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 743.823356][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'. [ 743.832968][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.946'. [ 743.854192][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.862553][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.132587][T10608] bridge_slave_0: entered allmulticast mode [ 744.868631][ T9794] Bluetooth: hci7: command tx timeout [ 744.926231][T10608] bridge_slave_0: entered promiscuous mode [ 745.663262][T10678] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 745.827040][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.843235][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.850778][T10608] bridge_slave_1: entered allmulticast mode [ 745.858882][T10608] bridge_slave_1: entered promiscuous mode [ 746.079763][T10682] No such timeout policy "syz1" [ 746.235511][T10608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.300995][T10608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.417604][T10608] team0: Port device team_slave_0 added [ 746.496658][T10608] team0: Port device team_slave_1 added [ 746.726976][T10608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.734226][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.760587][T10608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.775939][T10608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.783787][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.820199][T10608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.846775][ T9794] Bluetooth: hci7: command tx timeout [ 747.920214][T10608] hsr_slave_0: entered promiscuous mode [ 748.397556][T10608] hsr_slave_1: entered promiscuous mode [ 748.690579][T10608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 748.729784][T10608] Cannot create hsr debugfs directory [ 749.241396][T10711] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 749.254403][T10711] program syz.2.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 749.271842][T10711] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 750.469060][T10723] netlink: 11 bytes leftover after parsing attributes in process `syz.3.959'. [ 750.819667][T10608] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 750.920121][T10608] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 750.937911][T10608] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 751.203339][T10729] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 751.957337][T10608] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 752.393398][T10608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.017206][T10608] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.395543][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.403058][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.574100][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.581311][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.425856][T10608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 754.447468][T10608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.610705][ T30] INFO: task syz.0.727:9654 blocked for more than 144 seconds. [ 754.618470][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 754.626146][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 754.634959][ T30] task:syz.0.727 state:D stack:24992 pid:9654 tgid:9653 ppid:6412 flags:0x00004004 [ 754.645463][ T30] Call Trace: [ 754.648780][ T30] [ 754.651836][ T30] __schedule+0x17fb/0x4be0 [ 754.656535][ T30] ? __pfx___schedule+0x10/0x10 [ 754.661526][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.666601][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 754.672790][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 754.679658][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 754.693323][ T30] ? schedule+0x90/0x320 [ 754.697665][ T30] schedule+0x14b/0x320 [ 754.701875][ T30] ? down_read+0x6a5/0xa40 [ 754.707076][ T30] schedule_preempt_disabled+0x13/0x30 [ 754.712604][ T30] down_read+0x705/0xa40 [ 754.717102][ T30] ? __pfx_down_read+0x10/0x10 [ 754.721942][ T30] super_lock+0x27c/0x400 [ 754.726418][ T30] ? __pfx_lock_release+0x10/0x10 [ 754.731489][ T30] ? __pfx_super_lock+0x10/0x10 [ 754.736513][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 754.741769][ T30] iterate_supers+0x8c/0x190 [ 754.746502][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 754.752192][ T30] ksys_sync+0xbd/0x1c0 [ 754.756399][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 754.761314][ T30] ? do_syscall_64+0x100/0x230 [ 754.766134][ T30] ? do_syscall_64+0xb6/0x230 [ 754.772199][ T30] __do_sys_sync+0xe/0x20 [ 754.815789][ T30] do_syscall_64+0xf3/0x230 [ 754.820525][ T30] ? clear_bhb_loop+0x35/0x90 [ 754.825324][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.831290][ T30] RIP: 0033:0x7f72a0385d29 [ 754.835884][ T30] RSP: 002b:00007f729e1f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 754.844531][ T30] RAX: ffffffffffffffda RBX: 00007f72a0575fa0 RCX: 00007f72a0385d29 [ 754.852559][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 754.859474][T10758] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 754.860643][ T30] RBP: 00007f72a0575fa0 R08: 0000000000000000 R09: 0000000000000000 [ 754.878618][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.260015][ T30] R13: 0000000000000000 R14: 00007f72a0575fa0 R15: 00007ffc3c8c5338 [ 755.314046][ T30] [ 755.782918][T10758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 755.792149][ T30] INFO: task syz.0.727:9663 blocked for more than 145 seconds. [ 755.870792][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 755.878974][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 755.887965][ T30] task:syz.0.727 state:D stack:27360 pid:9663 tgid:9653 ppid:6412 flags:0x00004004 [ 755.899030][ T30] Call Trace: [ 755.912057][ T30] [ 755.915186][ T30] __schedule+0x17fb/0x4be0 [ 755.919788][ T30] ? __pfx___schedule+0x10/0x10 [ 755.924898][ T30] ? __pfx_lock_release+0x10/0x10 [ 755.929998][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 755.936172][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 755.942568][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 755.947935][ T30] ? schedule+0x90/0x320 [ 755.952249][ T30] schedule+0x14b/0x320 [ 755.956528][ T30] ? down_read+0x6a5/0xa40 [ 755.960997][ T30] schedule_preempt_disabled+0x13/0x30 [ 755.966902][ T30] down_read+0x705/0xa40 [ 755.971221][ T30] ? __pfx_down_read+0x10/0x10 [ 755.976193][ T30] super_lock+0x27c/0x400 [ 755.980585][ T30] ? __pfx_lock_release+0x10/0x10 [ 755.985671][ T30] ? __pfx_super_lock+0x10/0x10 [ 755.991315][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 755.996613][ T30] iterate_supers+0x8c/0x190 [ 756.001398][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 756.007024][ T30] ksys_sync+0xbd/0x1c0 [ 756.011453][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 756.016298][ T30] ? do_syscall_64+0xb6/0x230 [ 756.021399][ T30] __do_sys_sync+0xe/0x20 [ 756.025806][ T30] do_syscall_64+0xf3/0x230 [ 756.041015][ T30] ? clear_bhb_loop+0x35/0x90 [ 756.045803][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.052297][ T30] RIP: 0033:0x7f72a0385d29 [ 756.056791][ T30] RSP: 002b:00007f729e1d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 756.065655][ T30] RAX: ffffffffffffffda RBX: 00007f72a0576080 RCX: 00007f72a0385d29 [ 756.076670][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.085767][ T30] RBP: 00007f72a0576080 R08: 0000000000000000 R09: 0000000000000000 [ 756.094504][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.103495][ T30] R13: 0000000000000001 R14: 00007f72a0576080 R15: 00007ffc3c8c5338 [ 756.112203][ T30] [ 756.115791][ T30] INFO: task syz.0.727:9666 blocked for more than 146 seconds. [ 756.123486][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 756.134991][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.144457][ T30] task:syz.0.727 state:D stack:27360 pid:9666 tgid:9653 ppid:6412 flags:0x00004004 [ 756.156710][ T30] Call Trace: [ 756.160863][ T30] [ 756.163938][ T30] __schedule+0x17fb/0x4be0 [ 756.169192][ T30] ? __pfx___schedule+0x10/0x10 [ 756.174216][ T30] ? __pfx_lock_release+0x10/0x10 [ 756.180054][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 756.183938][T10608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.186177][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 756.199991][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 756.207305][ T30] ? schedule+0x90/0x320 [ 756.214745][ T30] schedule+0x14b/0x320 [ 756.219083][ T30] ? down_read+0x6a5/0xa40 [ 756.225577][ T30] schedule_preempt_disabled+0x13/0x30 [ 756.231219][ T30] down_read+0x705/0xa40 [ 756.238642][ T30] ? __pfx_down_read+0x10/0x10 [ 756.245133][ T30] super_lock+0x27c/0x400 [ 756.249674][ T30] ? __pfx_lock_release+0x10/0x10 [ 756.258108][ T30] ? __pfx_super_lock+0x10/0x10 [ 756.263175][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 756.272825][ T30] iterate_supers+0x8c/0x190 [ 756.281024][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 756.288289][ T30] ksys_sync+0xbd/0x1c0 [ 756.292645][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 756.300531][ T30] ? do_syscall_64+0xb6/0x230 [ 756.305434][ T30] __do_sys_sync+0xe/0x20 [ 756.311778][ T30] do_syscall_64+0xf3/0x230 [ 756.317487][ T30] ? clear_bhb_loop+0x35/0x90 [ 756.325542][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.333612][ T30] RIP: 0033:0x7f72a0385d29 [ 756.338162][ T30] RSP: 002b:00007f729e1b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 756.349829][ T30] RAX: ffffffffffffffda RBX: 00007f72a0576160 RCX: 00007f72a0385d29 [ 756.359957][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.368105][ T30] RBP: 00007f72a0576160 R08: 0000000000000000 R09: 0000000000000000 [ 756.379148][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.389721][ T30] R13: 0000000000000001 R14: 00007f72a0576160 R15: 00007ffc3c8c5338 [ 756.398004][ T30] [ 756.401122][ T30] INFO: task syz.0.727:9667 blocked for more than 146 seconds. [ 756.409536][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 756.417728][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.427242][ T30] task:syz.0.727 state:D stack:27360 pid:9667 tgid:9653 ppid:6412 flags:0x00004004 [ 756.437898][ T30] Call Trace: [ 756.441261][ T30] [ 756.444495][ T30] __schedule+0x17fb/0x4be0 [ 756.451032][ T30] ? __pfx___schedule+0x10/0x10 [ 756.456340][ T30] ? __pfx_lock_release+0x10/0x10 [ 756.462034][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 756.462306][T10608] veth0_vlan: entered promiscuous mode [ 756.468494][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 756.480398][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 756.485596][ T30] ? schedule+0x90/0x320 [ 756.485773][T10608] veth1_vlan: entered promiscuous mode [ 756.490607][ T30] schedule+0x14b/0x320 [ 756.499608][ T30] ? down_read+0x6a5/0xa40 [ 756.504759][ T30] schedule_preempt_disabled+0x13/0x30 [ 756.510310][ T30] down_read+0x705/0xa40 [ 756.515113][ T30] ? __pfx_down_read+0x10/0x10 [ 756.520029][ T30] super_lock+0x27c/0x400 [ 756.524977][ T30] ? __pfx_lock_release+0x10/0x10 [ 756.530068][ T30] ? __pfx_super_lock+0x10/0x10 [ 756.535981][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 756.541344][ T30] iterate_supers+0x8c/0x190 [ 756.546771][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 756.549722][T10608] veth0_macvtap: entered promiscuous mode [ 756.558783][ T30] ksys_sync+0xbd/0x1c0 [ 756.563004][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 756.566700][T10608] veth1_macvtap: entered promiscuous mode [ 756.573646][ T30] ? do_syscall_64+0xb6/0x230 [ 756.578898][ T30] __do_sys_sync+0xe/0x20 [ 756.583310][ T30] do_syscall_64+0xf3/0x230 [ 756.588816][ T30] ? clear_bhb_loop+0x35/0x90 [ 756.593560][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.594120][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.600171][ T30] RIP: 0033:0x7f72a0385d29 [ 756.611097][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.620278][ T30] RSP: 002b:00007f729dd91038 EFLAGS: 00000246 [ 756.626592][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 756.626955][ T30] ORIG_RAX: 00000000000000a2 [ 756.632774][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.634152][T10608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 756.650466][ T30] RAX: ffffffffffffffda RBX: 00007f72a0576240 RCX: 00007f72a0385d29 [ 756.667965][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.684477][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 756.692996][ T30] RBP: 00007f72a0576240 R08: 0000000000000000 R09: 0000000000000000 [ 756.701029][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.713206][ T30] R13: 0000000000000001 R14: 00007f72a0576240 R15: 00007ffc3c8c5338 [ 756.721792][ T30] [ 756.725362][ T30] INFO: task syz.0.727:9669 blocked for more than 146 seconds. [ 756.731586][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.733029][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 756.751680][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 756.765767][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 756.768293][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 756.784983][ T30] task:syz.0.727 state:D stack:27360 pid:9669 tgid:9653 ppid:6412 flags:0x00004004 [ 756.791304][T10608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 756.795866][ T30] Call Trace: [ 756.806487][ T30] [ 756.809485][ T30] __schedule+0x17fb/0x4be0 [ 756.815258][ T30] ? __pfx___schedule+0x10/0x10 [ 756.823508][T10608] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.832415][ T30] ? __pfx_lock_release+0x10/0x10 [ 756.837784][T10608] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.839866][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 756.853571][T10608] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.857644][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 756.863291][T10608] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 756.877008][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 756.882790][ T30] ? schedule+0x90/0x320 [ 756.888740][ T30] schedule+0x14b/0x320 [ 756.892977][ T30] ? down_read+0x6a5/0xa40 [ 756.897775][ T30] schedule_preempt_disabled+0x13/0x30 [ 756.903498][ T30] down_read+0x705/0xa40 [ 756.907887][ T30] ? __pfx_down_read+0x10/0x10 [ 756.912723][ T30] super_lock+0x27c/0x400 [ 756.917428][ T30] ? __pfx_lock_release+0x10/0x10 [ 756.922509][ T30] ? __pfx_super_lock+0x10/0x10 [ 756.927407][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 756.933155][ T30] iterate_supers+0x8c/0x190 [ 756.937800][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 756.943744][ T30] ksys_sync+0xbd/0x1c0 [ 756.947975][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 756.952879][ T30] ? do_syscall_64+0xb6/0x230 [ 756.957625][ T30] __do_sys_sync+0xe/0x20 [ 756.962184][ T30] do_syscall_64+0xf3/0x230 [ 756.966737][ T30] ? clear_bhb_loop+0x35/0x90 [ 756.971498][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.977979][ T30] RIP: 0033:0x7f72a0385d29 [ 756.982791][ T30] RSP: 002b:00007f729d96e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 756.991275][ T30] RAX: ffffffffffffffda RBX: 00007f72a0576320 RCX: 00007f72a0385d29 [ 756.999350][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.007605][ T30] RBP: 00007f72a0576320 R08: 0000000000000000 R09: 0000000000000000 [ 757.023346][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.031921][ T30] R13: 0000000000000001 R14: 00007f72a0576320 R15: 00007ffc3c8c5338 [ 757.040649][ T30] [ 757.043741][ T30] INFO: task syz.0.727:9671 blocked for more than 147 seconds. [ 757.070922][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 757.078697][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 757.087787][ T30] task:syz.0.727 state:D stack:25936 pid:9671 tgid:9653 ppid:6412 flags:0x00004004 [ 757.098285][ T30] Call Trace: [ 757.101809][ T30] [ 757.104763][ T30] __schedule+0x17fb/0x4be0 [ 757.109551][ T30] ? __pfx___schedule+0x10/0x10 [ 757.114476][ T30] ? __pfx_lock_release+0x10/0x10 [ 757.119575][ T30] ? schedule+0x90/0x320 [ 757.123916][ T30] schedule+0x14b/0x320 [ 757.128135][ T30] ? down_read+0x6a5/0xa40 [ 757.133237][ T30] schedule_preempt_disabled+0x13/0x30 [ 757.138760][ T30] down_read+0x705/0xa40 [ 757.143185][ T30] ? __pfx_down_read+0x10/0x10 [ 757.148104][ T30] super_lock+0x27c/0x400 [ 757.152882][ T30] ? __pfx_lock_release+0x10/0x10 [ 757.157988][ T30] ? __pfx_super_lock+0x10/0x10 [ 757.162971][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 757.168275][ T30] iterate_supers+0x8c/0x190 [ 757.172914][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 757.178837][ T30] ksys_sync+0xbd/0x1c0 [ 757.183046][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 757.187975][ T30] ? do_syscall_64+0xb6/0x230 [ 757.193076][ T30] __do_sys_sync+0xe/0x20 [ 757.197629][ T30] do_syscall_64+0xf3/0x230 [ 757.202556][ T30] ? clear_bhb_loop+0x35/0x90 [ 757.207338][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.213271][ T30] RIP: 0033:0x7f72a0385d29 [ 757.217869][ T30] RSP: 002b:00007f729d54b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 757.226349][ T30] RAX: ffffffffffffffda RBX: 00007f72a0576400 RCX: 00007f72a0385d29 [ 757.234437][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.243595][ T30] RBP: 00007f72a0576400 R08: 0000000000000000 R09: 0000000000000000 [ 757.251719][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.259908][ T30] R13: 0000000000000001 R14: 00007f72a0576400 R15: 00007ffc3c8c5338 [ 757.267942][ T30] [ 757.271316][ T30] [ 757.271316][ T30] Showing all locks held in the system: [ 757.281585][ T30] 1 lock held by ksoftirqd/1/24: [ 757.286591][ T30] #0: ffff8880b873e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 757.299772][ T30] 1 lock held by khungtaskd/30: [ 757.308411][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 757.318454][ T30] 3 locks held by kworker/u8:4/63: [ 757.323790][ T30] #0: ffff88814d0c1148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 757.335637][ T30] #1: ffffc90001547d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 757.348664][ T30] #2: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0xd0/0x16f0 [ 757.364732][ T30] 3 locks held by kworker/0:3/978: [ 757.370067][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 757.381342][ T30] #1: ffffc90003c8fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 757.394347][ T30] #2: ffff888028c51240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x2d1/0x4130 [ 757.404701][ T30] 1 lock held by klogd/5184: [ 757.409545][ T30] #0: ffff8880b873e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 757.420213][ T30] 2 locks held by getty/5578: [ 757.424941][ T30] #0: ffff88814d3040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 757.434951][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 757.445454][ T30] 1 lock held by syz-executor/5832: [ 757.450690][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: deactivate_super+0xb5/0xf0 [ 757.461203][ T30] 3 locks held by kworker/u8:10/6297: [ 757.466750][ T30] #0: ffff8880b873e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 757.476931][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x387/0x7a0 [ 757.488534][ T30] #2: ffffffff9a58b4a8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x158/0x390 [ 757.499345][ T30] 1 lock held by syz.0.727/9654: [ 757.504313][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.514496][ T30] 1 lock held by syz.0.727/9663: [ 757.520672][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.530852][ T30] 1 lock held by syz.0.727/9666: [ 757.535839][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.546048][ T30] 1 lock held by syz.0.727/9667: [ 757.551096][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.561195][ T30] 1 lock held by syz.0.727/9669: [ 757.566161][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.576135][ T30] 1 lock held by syz.0.727/9671: [ 757.581333][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.592984][ T30] 1 lock held by syz.1.908/10501: [ 757.598043][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.608119][ T30] 1 lock held by syz.1.908/10502: [ 757.613479][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.623734][ T30] 1 lock held by syz.1.908/10507: [ 757.629365][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.639383][ T30] 1 lock held by syz.1.908/10508: [ 757.644638][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.654617][ T30] 1 lock held by syz.1.908/10518: [ 757.659900][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.669966][ T30] 1 lock held by syz.1.908/10519: [ 757.675149][ T30] #0: ffff88805b63e0e0 (&type->s_umount_key#87){++++}-{4:4}, at: super_lock+0x27c/0x400 [ 757.685532][ T30] 3 locks held by syz-executor/10608: [ 757.691124][ T30] #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 757.700692][ T30] #1: ffff88805bfa94e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x22d/0x420 [ 757.710747][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 757.723213][ T30] [ 757.741359][ T30] ============================================= [ 757.741359][ T30] [ 757.749969][ T30] NMI backtrace for cpu 0 [ 757.754396][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 757.760959][T10608] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 757.764914][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 757.764933][ T30] Call Trace: [ 757.764942][ T30] [ 757.764952][ T30] dump_stack_lvl+0x241/0x360 [ 757.764992][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.798956][ T30] ? __pfx__printk+0x10/0x10 [ 757.803599][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.803604][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 757.816394][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 757.817992][T10608] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 757.821876][ T30] ? _printk+0xd5/0x120 [ 757.821912][ T30] ? __pfx__printk+0x10/0x10 [ 757.830699][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.833776][ T30] ? __wake_up_klogd+0xcc/0x110 [ 757.850580][ T30] ? __pfx__printk+0x10/0x10 [ 757.855226][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 757.860292][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 757.866324][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 757.872356][ T30] watchdog+0xff6/0x1040 [ 757.876658][ T30] ? watchdog+0x1ea/0x1040 [ 757.881116][ T30] ? __pfx_watchdog+0x10/0x10 [ 757.885824][ T30] kthread+0x2f0/0x390 [ 757.889923][ T30] ? __pfx_watchdog+0x10/0x10 [ 757.894614][ T30] ? __pfx_kthread+0x10/0x10 [ 757.899216][ T30] ret_from_fork+0x4b/0x80 [ 757.903687][ T30] ? __pfx_kthread+0x10/0x10 [ 757.908287][ T30] ret_from_fork_asm+0x1a/0x30 [ 757.913080][ T30] [ 757.917009][ T30] Sending NMI from CPU 0 to CPUs 1: [ 757.922581][ C1] NMI backtrace for cpu 1 [ 757.922595][ C1] CPU: 1 UID: 0 PID: 10608 Comm: syz-executor Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 757.922618][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 757.922629][ C1] RIP: 0010:__kasan_check_read+0x0/0x20 [ 757.922656][ C1] Code: 8e 4c 89 fe e8 61 af 03 ff 31 db eb d0 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 89 f6 48 8b 0c 24 31 d2 e9 6f e6 ff ff 66 2e 0f 1f 84 [ 757.922672][ C1] RSP: 0018:ffffc9000b706a68 EFLAGS: 00000246 [ 757.922688][ C1] RAX: dead000000000100 RBX: ffffea000125d408 RCX: dffffc0000000000 [ 757.922703][ C1] RDX: 00000000000d28c0 RSI: 0000000000000004 RDI: ffffea000125d434 [ 757.922715][ C1] RBP: 0000000000000004 R08: ffffffff9427188f R09: 0000000000100000 [ 757.922727][ C1] R10: dffffc0000000000 R11: fffffbfff284e312 R12: ffffea000125d434 [ 757.922741][ C1] R13: 0000000000000003 R14: ffffea000125d400 R15: dffffc0000000000 [ 757.922754][ C1] FS: 000055555e959500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 757.922770][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.922783][ C1] CR2: 00007f84f70ce440 CR3: 00000000330ee000 CR4: 00000000003526f0 [ 757.922798][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 757.922809][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 757.922820][ C1] Call Trace: [ 757.922826][ C1] [ 757.922832][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 757.922863][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 757.922884][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 757.922904][ C1] ? nmi_handle+0x2a/0x5a0 [ 757.922931][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 757.922955][ C1] ? nmi_handle+0x14f/0x5a0 [ 757.922974][ C1] ? nmi_handle+0x2a/0x5a0 [ 757.922993][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 757.923014][ C1] ? default_do_nmi+0x63/0x160 [ 757.923034][ C1] ? exc_nmi+0x123/0x1f0 [ 757.923053][ C1] ? end_repeat_nmi+0xf/0x53 [ 757.923075][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 757.923096][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 757.923117][ C1] ? __pfx___kasan_check_read+0x10/0x10 [ 757.923138][ C1] [ 757.923144][ C1] [ 757.923149][ C1] set_page_refcounted+0x4f/0x160 [ 757.923170][ C1] post_alloc_hook+0x61/0x230 [ 757.923190][ C1] get_page_from_freelist+0x3651/0x37a0 [ 757.923223][ C1] ? mark_lock+0x9a/0x360 [ 757.923244][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 757.923273][ C1] __alloc_pages_noprof+0x292/0x710 [ 757.923296][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 757.923333][ C1] alloc_pages_mpol_noprof+0x3e1/0x780 [ 757.923364][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 757.923392][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 757.923411][ C1] ? alloc_pages_noprof+0xef/0x170 [ 757.923438][ C1] ? ___slab_alloc+0x256/0x14a0 [ 757.923458][ C1] alloc_slab_page+0x6a/0x110 [ 757.923481][ C1] allocate_slab+0x5a/0x2b0 [ 757.923502][ C1] ? ___slab_alloc+0x256/0x14a0 [ 757.923522][ C1] ___slab_alloc+0xc27/0x14a0 [ 757.923544][ C1] ? pskb_expand_head+0x1f0/0x1380 [ 757.923570][ C1] ? pskb_expand_head+0x1f0/0x1380 [ 757.923592][ C1] __slab_alloc+0x58/0xa0 [ 757.923613][ C1] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 757.923632][ C1] ? pskb_expand_head+0x1f0/0x1380 [ 757.923656][ C1] ? pskb_expand_head+0x1f0/0x1380 [ 757.923678][ C1] kmalloc_reserve+0x111/0x2a0 [ 757.923698][ C1] pskb_expand_head+0x1f0/0x1380 [ 757.923720][ C1] ? __pfx_rtnl_fill_ifinfo+0x10/0x10 [ 757.923747][ C1] ? __pfx_pskb_expand_head+0x10/0x10 [ 757.923775][ C1] netlink_trim+0x183/0x220 [ 757.923793][ C1] netlink_unicast+0xab/0x990 [ 757.923810][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 757.923836][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 757.923866][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 757.923895][ C1] ? rtnl_getlink+0x6f4/0xc50 [ 757.923919][ C1] rtnl_getlink+0x75e/0xc50 [ 757.923944][ C1] ? __pfx_rtnl_getlink+0x10/0x10 [ 757.924006][ C1] ? __pfx_rtnl_getlink+0x10/0x10 [ 757.924029][ C1] rtnetlink_rcv_msg+0x73f/0xcf0 [ 757.924051][ C1] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 757.924075][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 757.924102][ C1] ? ref_tracker_free+0x643/0x7e0 [ 757.924124][ C1] netlink_rcv_skb+0x1e3/0x430 [ 757.924143][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 757.924166][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 757.924196][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 757.924215][ C1] netlink_unicast+0x7f6/0x990 [ 757.924235][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 757.924260][ C1] ? __virt_addr_valid+0x45f/0x530 [ 757.924280][ C1] ? __phys_addr_symbol+0x2f/0x70 [ 757.924299][ C1] ? __check_object_size+0x47a/0x730 [ 757.924327][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 757.924352][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.924373][ C1] ? __might_fault+0xaa/0x120 [ 757.924396][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.924414][ C1] __sock_sendmsg+0x221/0x270 [ 757.924441][ C1] __sys_sendto+0x363/0x4c0 [ 757.924462][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 757.924492][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 757.924512][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 757.924533][ C1] __x64_sys_sendto+0xde/0x100 [ 757.924553][ C1] do_syscall_64+0xf3/0x230 [ 757.924580][ C1] ? clear_bhb_loop+0x35/0x90 [ 757.924597][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.924625][ C1] RIP: 0033:0x7ff028787bbc [ 757.924639][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 757.924654][ C1] RSP: 002b:00007ffeeddbdde0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 757.924671][ C1] RAX: ffffffffffffffda RBX: 00007ff0294a4620 RCX: 00007ff028787bbc [ 757.924685][ C1] RDX: 0000000000000020 RSI: 00007ff0294a4670 RDI: 0000000000000005 [ 757.924696][ C1] RBP: 0000000000000000 R08: 00007ffeeddbde34 R09: 000000000000000c [ 757.924708][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 757.924719][ C1] R13: 00007ffeeddbde9c R14: 00007ff0294a4670 R15: 0000000000000000 [ 757.924739][ C1] [ 757.927734][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.931018][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 757.931037][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 757.931066][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 757.931080][ T30] Call Trace: [ 757.931090][ T30] [ 757.931100][ T30] dump_stack_lvl+0x241/0x360 [ 757.931139][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 757.931179][ T30] ? __pfx__printk+0x10/0x10 [ 757.931222][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 757.931253][ T30] ? vscnprintf+0x5d/0x90 [ 757.931285][ T30] panic+0x349/0x880 [ 757.931315][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 757.931349][ T30] ? __pfx_panic+0x10/0x10 [ 757.931374][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 757.931410][ T30] ? __irq_work_queue_local+0x137/0x410 [ 757.931438][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 757.931466][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 757.931495][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 757.931528][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 757.931563][ T30] watchdog+0x1035/0x1040 [ 757.931591][ T30] ? watchdog+0x1ea/0x1040 [ 757.931632][ T30] ? __pfx_watchdog+0x10/0x10 [ 757.931658][ T30] kthread+0x2f0/0x390 [ 757.931685][ T30] ? __pfx_watchdog+0x10/0x10 [ 757.931710][ T30] ? __pfx_kthread+0x10/0x10 [ 757.931739][ T30] ret_from_fork+0x4b/0x80 [ 757.931762][ T30] ? __pfx_kthread+0x10/0x10 [ 757.931794][ T30] ret_from_fork_asm+0x1a/0x30 [ 757.931843][ T30] [ 757.932380][ T30] Kernel Offset: disabled