last executing test programs: 21m22.330590235s ago: executing program 32 (id=14279): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RRENAMEAT(r0, &(0x7f00000002c0)={0x7, 0x4b, 0x2}, 0xff7a) write$P9_RREADDIR(r0, &(0x7f0000000300)={0x1012, 0x29, 0x2, {0x7, [{{0x20, 0x3, 0x3}, 0x100000000, 0xbc, 0xfef, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}]}}, 0x1012) 16m27.34048869s ago: executing program 33 (id=17690): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @rand_addr=0x64010100}, @RTA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x34}}, 0xea5bc50b619dd77e) 15m42.207631196s ago: executing program 34 (id=18017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 13m42.67383083s ago: executing program 35 (id=19250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x48}, 0x0) 13m8.027019444s ago: executing program 36 (id=19489): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) 11m39.367630518s ago: executing program 37 (id=20242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x9}}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 9m33.31626951s ago: executing program 8 (id=21391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x4, 0x610c0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x80000002}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 9m32.724014622s ago: executing program 8 (id=21397): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) 9m32.444685944s ago: executing program 8 (id=21399): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0xf0}], 0x1}, 0x1ff}], 0x1, 0x20022, 0x0) 9m31.968764348s ago: executing program 8 (id=21402): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00', 0x272) 9m31.670842768s ago: executing program 8 (id=21407): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4044874}, 0x20004000) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0xffffffff, 0x2, {}, 0x1c000}) 9m28.96073263s ago: executing program 8 (id=21428): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 9m28.622561949s ago: executing program 38 (id=21428): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 7m25.279689727s ago: executing program 1 (id=21887): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 7m23.520950615s ago: executing program 1 (id=21891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') 7m21.547767951s ago: executing program 1 (id=21894): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffc, 0x200, 0x3, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) 7m18.791106114s ago: executing program 1 (id=21898): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x87ffffd) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) lseek(r0, 0x400, 0x4) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close(r1) r4 = accept(r2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x578410ed) shutdown(r4, 0x1) 7m14.113643905s ago: executing program 1 (id=21902): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) pipe(&(0x7f0000000100)) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r2], 0x1c}}, 0x200040c4) 7m12.756505189s ago: executing program 1 (id=21904): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10fff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) recvmmsg(r3, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000300)}, 0xc2d}, {{0x0, 0x0, 0x0}, 0xf2}], 0x2, 0x21, 0x0) 6m56.074387643s ago: executing program 39 (id=21904): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10fff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$caif_seqpacket(0x25, 0x5, 0x4) recvmmsg(r3, &(0x7f00000032c0)=[{{0x0, 0x0, &(0x7f0000000300)}, 0xc2d}, {{0x0, 0x0, 0x0}, 0xf2}], 0x2, 0x21, 0x0) 6m47.594193523s ago: executing program 9 (id=21948): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x1, @rand_addr, 0x1000000}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) socket$netlink(0x10, 0x3, 0x8000000004) 6m45.845758666s ago: executing program 9 (id=21951): mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 6m43.402674022s ago: executing program 9 (id=21954): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) 6m41.029713466s ago: executing program 9 (id=21957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) listen(r3, 0x3) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300200000000008400800000008000300", @ANYRES32=r4, @ANYBLOB='\b', @ANYRES32=0x0, @ANYBLOB="fb6969641cc8761b830215b79bab9765b0c9941d238c586e432008e29cff3709b3361852b012b6d2c0bca3"], 0x24}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) 6m38.815244074s ago: executing program 9 (id=21960): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x40000010}) 6m37.166441435s ago: executing program 9 (id=21962): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) write$dsp(r0, &(0x7f0000000000)="81", 0x1) 6m19.431004869s ago: executing program 40 (id=21962): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) write$dsp(r0, &(0x7f0000000000)="81", 0x1) 6m10.925880776s ago: executing program 7 (id=21992): syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES32], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) shutdown(r2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x220}, 0x0) 6m7.664044871s ago: executing program 7 (id=21994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getrlimit(0xb, 0x0) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) 6m6.177857716s ago: executing program 7 (id=21995): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b907ef19edfff007049e0ff0888e", 0x0, 0x3ff, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m54.874426844s ago: executing program 7 (id=22010): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_udp_int(r0, 0x88, 0x1, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb) 5m52.019389156s ago: executing program 7 (id=22012): openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[], 0x50) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x0, 0x1, 0x8}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') read$FUSE(r5, 0x0, 0x0) 5m49.8783164s ago: executing program 7 (id=22014): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2c020400) socket$inet6_mptcp(0xa, 0x1, 0x106) fsmount(r2, 0x0, 0x0) r3 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r6) 5m33.325773708s ago: executing program 41 (id=22014): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2c020400) socket$inet6_mptcp(0xa, 0x1, 0x106) fsmount(r2, 0x0, 0x0) r3 = dup(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r6) 2m46.145260369s ago: executing program 4 (id=22305): setreuid(0x0, 0xee01) r0 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x170, 0x7}, 0x0, 0x0, 0x5, 0x8, 0x10001, 0x80000001, 0x7, 0x1ff, 0x5}) 2m46.04164408s ago: executing program 4 (id=22306): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 2m44.792077847s ago: executing program 4 (id=22307): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r0, 0x89f1, &(0x7f0000000100)={0xfffffffc, 0x0, 0x0, 0x7ff, 0x0, "5dee0000005940000000000f00"}) 2m44.680516374s ago: executing program 4 (id=22308): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000001300)=""/4096, 0x1000) 2m44.599403863s ago: executing program 4 (id=22309): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 2m44.240461073s ago: executing program 4 (id=22310): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m28.137571994s ago: executing program 42 (id=22310): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf25080001"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 14.843630225s ago: executing program 3 (id=22837): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6c5602, 0x0) fchdir(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) process_mrelease(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 14.520181546s ago: executing program 5 (id=22838): r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x32, 0x0, 0xfffffffc}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 14.073751577s ago: executing program 5 (id=22841): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x6}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 12.667964474s ago: executing program 0 (id=22842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() open(0x0, 0x147842, 0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180)) 12.461676108s ago: executing program 5 (id=22843): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 12.455250307s ago: executing program 3 (id=22844): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 12.453480025s ago: executing program 6 (id=22845): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000480)={{0xffff0002, 0x1000, 0x3, 0x9, 0x1, 0x9, 0x6, 0x3, 0x0, 0x84, 0x0, 0xb}, {0x6002, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x94, 0x1, 0x4, 0x0, 0xe}, {0x1f000, 0x1000, 0x4, 0x3, 0x10, 0xa5, 0x4, 0x4e, 0x3, 0x4, 0x92, 0x80}, {0x100000, 0x4, 0xe, 0x7, 0x1, 0x8, 0x2, 0x1, 0xfd, 0x29, 0x9, 0x9}, {0x4000, 0xdddd0000, 0x4, 0x9, 0x84, 0x2, 0xfd, 0xf1, 0x2, 0x6e, 0x2, 0x8}, {0x4000, 0xdddd1000, 0xe, 0x2, 0xae, 0x2, 0x5, 0x5, 0x9, 0xe, 0x6, 0x3}, {0xf000, 0x10000, 0x10, 0xf, 0xcd, 0x5, 0x5, 0x26, 0x8, 0xcf, 0xff, 0x6}, {0x2, 0xf000, 0x0, 0xe, 0x13, 0x40, 0xff, 0xfc, 0x7b, 0x1, 0xf, 0x8}, {0x100000, 0xd}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x2401c1, 0xe, 0xfd00, 0x0, 0x0, [0xffffffffffff0001, 0x2, 0x4, 0x3]}) 12.453216002s ago: executing program 2 (id=22846): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xa) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 11.241203036s ago: executing program 3 (id=22847): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 10.735147502s ago: executing program 5 (id=22848): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 10.492714914s ago: executing program 0 (id=22849): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.453500269s ago: executing program 2 (id=22850): r0 = socket$inet_udp(0x2, 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee00) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="84000000000000000000000007000000861e"], 0x88}}], 0x1, 0x3e) 9.701861118s ago: executing program 2 (id=22851): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x4000050) r3 = io_uring_setup(0x3c46, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r5 = dup2(r4, r4) syz_fuse_handle_req(r5, &(0x7f0000003400)="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", 0x2000, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r5, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000440)={0x0, {{0xa, 0xfffd, 0xfffffffd, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x8000000, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) 9.700301899s ago: executing program 3 (id=22852): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 8.715967818s ago: executing program 5 (id=22853): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 8.597820152s ago: executing program 6 (id=22854): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6c5602, 0x0) fchdir(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) process_mrelease(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 6.165310175s ago: executing program 0 (id=22855): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0xf, 0x6, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0xea}, {@multicast2, 0x2}]}]}}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 5.549114001s ago: executing program 0 (id=22856): openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$binfmt_elf64(r0, 0x0, 0x18) 5.464883015s ago: executing program 6 (id=22857): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000fcd353cb6b9a1a"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x20048004) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x82, 0x22501) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 5.265816395s ago: executing program 0 (id=22858): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 5.246493176s ago: executing program 6 (id=22859): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020601080000000000000000000000080c000780080006402000000005000100"], 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x20040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000021002101000000000000dc000a000000000000000000000008001a"], 0x24}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.162086952s ago: executing program 3 (id=22860): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() open(0x0, 0x147842, 0x6) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f00000001c0)='usrquota') r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r5, 0x3b82, &(0x7f0000000000)={0x18, r6, 0x1, 0x0, &(0x7f00000004c0)=[{0x81, 0xfffffffffffff801}]}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='net/icmp6\x00') ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000180)) 4.830258023s ago: executing program 5 (id=22861): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x27}, 0x94) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.830070377s ago: executing program 2 (id=22862): r0 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x200000000000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 4.789528763s ago: executing program 6 (id=22863): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000340), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="950000000000000000000000000d770300e1ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)={'#! ', './file0', [{}, {0x20, 'rp\xee\xff\xe4'}, {0x20, '\x12~\x85\xecZ@\xb5\x18\xec\x182\xc9L\xdc\xb2\x81\xdam\xa8\xc5{\x92\x14\xce\xf2\xb8\xf7\xa9\xa7\x00X \x93t\x91!%\xff\x13\xdc\aIY\x0e\xb4zh\\\x06\r\xe8^Z\x81\xb8$:P\x83\x98_\xa1\x98\xd6\xd2g-\xefr\x14<\xd1\xb84\x94\xa09\x9f\x12I\xed\xd5dT#f\xb4\xf3\x88\xcf\xde\x00\xd4\x81WN\xca\xb5c\xbf\r\xb0Q\xa9\xbaC\xd2\xa2\x1d~\xc5D(\x92A\x12f\x83fn\xd0\xb6\x02\x116t:|\x94\xc7\xac\xf6\xbc~m\xd6\xd1\xe5\xe0\xdd\xc2\x9cl#\x85\xab\xe7\xa9\xcb\"\xd2\x97\x10\xa5\xa8\xc1\x8d@U\a]Gi^\xd2\xdf\xb0\xa5!\x836\x92\xc9\x92\xe4'}], 0xa, "7bad65c4da5338577feb172ca63250224c76e2027f000000000000007e2ac7fe2e31a2e87e3ee43ed92dfbb6bc0700de24db4ec870b8000000000002002c65e7495fe9afeb28bb"}, 0x109) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000100000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000004400050000000000000000000000000000000000000000003c00000002000000ffffffff00000000000000000000000006000000040100"/176], 0xfc}}, 0x0) 4.601213567s ago: executing program 2 (id=22864): sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000041400032bbd7000fcdbdf2508000100000000fb08"], 0x50}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000003000000010000000500008b9b3e9f7767757c06040000000f0000000300000008000000560000000200000006000000090000000600000006000000"], 0x0, 0x97, 0x0, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x0, 0xfffffffffffffe43}, 0x68) 4.481961233s ago: executing program 2 (id=22865): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 217.45209ms ago: executing program 3 (id=22866): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) 179.732245ms ago: executing program 0 (id=22867): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x6c5602, 0x0) fchdir(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, 0x0, 0x1c}, 0x28) process_mrelease(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) write$binfmt_elf64(r5, 0x0, 0xfffffe3e) 0s ago: executing program 6 (id=22868): r0 = socket(0xa, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z\t\x00\x00\x00\x00\x00\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x05\xfe\xdc\x11\x04\xa1u\x81', 0x0) fsetxattr$security_capability(r1, &(0x7f0000000080), 0x0, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): rms(): no params data found [ 1680.985023][ T37] audit: type=1326 audit(1767178691.959:6428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d95f749 code=0x7ffc0000 [ 1680.985170][ T37] audit: type=1326 audit(1767178691.959:6429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d95f749 code=0x7ffc0000 [ 1680.985685][ T37] audit: type=1326 audit(1767178691.959:6430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa53d95f749 code=0x7ffc0000 [ 1680.985913][ T37] audit: type=1326 audit(1767178691.959:6431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d95f749 code=0x7ffc0000 [ 1680.986095][ T37] audit: type=1326 audit(1767178691.959:6432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa53d95f749 code=0x7ffc0000 [ 1680.986345][ T37] audit: type=1326 audit(1767178691.959:6433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa53d95f749 code=0x7ffc0000 [ 1680.995282][ T37] audit: type=1326 audit(1767178691.968:6434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa53d8fb829 code=0x7ffc0000 [ 1680.996485][ T37] audit: type=1326 audit(1767178691.968:6435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa53d8fb829 code=0x7ffc0000 [ 1680.999709][ T37] audit: type=1326 audit(1767178691.977:6436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa53d8fb829 code=0x7ffc0000 [ 1681.006463][ T37] audit: type=1326 audit(1767178691.977:6437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24561 comm="syz.1.21467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa53d8fb829 code=0x7ffc0000 [ 1681.259693][T24569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21468'. [ 1681.480028][ T5812] Bluetooth: hci1: command tx timeout [ 1681.501402][ T822] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1681.526393][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036db0400: rx timeout, send abort [ 1681.796183][ T822] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.796233][ T822] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1681.796263][ T822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.802564][ T822] usb 10-1: config 0 descriptor?? [ 1682.060151][ T822] usbhid 10-1:0.0: can't add hid device: -71 [ 1682.060278][ T822] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1682.061231][ C1] vcan0: j1939_tp_rxtimer: 0xffff888036db0400: abort rx timeout. Force session deactivation [ 1682.061362][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ba2dc00: rx timeout, send abort [ 1682.065711][ T822] usb 10-1: USB disconnect, device number 20 [ 1682.596184][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ba2dc00: abort rx timeout. Force session deactivation [ 1682.784891][ T822] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1683.001154][ T822] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1683.001191][ T822] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1683.001232][ T822] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1683.001249][ T822] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.006130][ T822] usb 10-1: config 0 descriptor?? [ 1683.566300][ T822] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1683.617735][T24614] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21475'. [ 1683.705337][ T5812] Bluetooth: hci1: command tx timeout [ 1683.869866][ C1] plantronics 0003:047F:FFFF.0057: hid_field_extract() called with n (132) > 32! (ktimers/1) [ 1684.130528][ T822] usb 10-1: USB disconnect, device number 21 [ 1684.983205][ T3530] bond0 (unregistering): Released all slaves [ 1685.929321][ T5812] Bluetooth: hci1: command tx timeout [ 1687.021756][T24315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.021975][T24315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.022270][T24315] bridge_slave_0: entered allmulticast mode [ 1687.087571][T24315] bridge_slave_0: entered promiscuous mode [ 1687.095345][T24315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.095498][T24315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.095778][T24315] bridge_slave_1: entered allmulticast mode [ 1687.098762][T24315] bridge_slave_1: entered promiscuous mode [ 1687.573548][T24733] kvm: pic: level sensitive irq not supported [ 1687.573845][T24733] kvm: pic: non byte read [ 1687.574030][T24733] kvm: pic: level sensitive irq not supported [ 1687.574095][T24733] kvm: pic: non byte read [ 1687.607511][T24733] kvm: pic: level sensitive irq not supported [ 1687.607700][T24733] kvm: pic: non byte read [ 1687.608609][T24733] kvm: pic: level sensitive irq not supported [ 1687.608765][T24733] kvm: pic: non byte read [ 1687.609078][T24733] kvm: pic: level sensitive irq not supported [ 1687.609200][T24733] kvm: pic: non byte read [ 1687.609414][T24733] kvm: pic: level sensitive irq not supported [ 1687.609547][T24733] kvm: pic: non byte read [ 1687.614329][T24733] kvm: pic: level sensitive irq not supported [ 1687.614488][T24733] kvm: pic: non byte read [ 1687.614786][T24733] kvm: pic: level sensitive irq not supported [ 1687.615198][T24733] kvm: pic: non byte read [ 1687.615448][T24733] kvm: pic: level sensitive irq not supported [ 1687.615576][T24733] kvm: pic: non byte read [ 1687.615887][T24733] kvm: pic: level sensitive irq not supported [ 1687.616018][T24733] kvm: pic: non byte read [ 1688.612113][T24315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.886599][T24315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1689.448234][ T5937] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1689.613684][ T5937] usb 10-1: config 0 has an invalid interface number: 84 but max is 0 [ 1689.613717][ T5937] usb 10-1: config 0 has an invalid interface number: 66 but max is 0 [ 1689.613739][ T5937] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1689.613759][ T5937] usb 10-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 1689.613780][ T5937] usb 10-1: config 0 has no interface number 0 [ 1689.613797][ T5937] usb 10-1: config 0 has no interface number 1 [ 1689.613874][ T5937] usb 10-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 1689.613905][ T5937] usb 10-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1689.613933][ T5937] usb 10-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 1689.613973][ T5937] usb 10-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 1689.613999][ T5937] usb 10-1: config 0 interface 66 altsetting 153 has an invalid descriptor for endpoint zero, skipping [ 1689.614021][ T5937] usb 10-1: config 0 interface 66 altsetting 153 has 2 endpoint descriptors, different from the interface descriptor's value: 216 [ 1689.614048][ T5937] usb 10-1: config 0 interface 66 has no altsetting 0 [ 1689.621403][ T5937] usb 10-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 1689.621435][ T5937] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.621457][ T5937] usb 10-1: Product: syz [ 1689.621473][ T5937] usb 10-1: Manufacturer: syz [ 1689.621489][ T5937] usb 10-1: SerialNumber: syz [ 1689.801159][ T5937] usb 10-1: config 0 descriptor?? [ 1689.845912][ T5937] ljca 10-1:0.84: bulk endpoints not found [ 1689.919802][T24315] team0: Port device team_slave_0 added [ 1689.924532][T24315] team0: Port device team_slave_1 added [ 1690.089992][ T5937] ljca 10-1:0.66: bulk endpoints not found [ 1690.150767][ T5937] usb 10-1: USB disconnect, device number 22 [ 1691.013746][ T3530] hsr_slave_0: left promiscuous mode [ 1691.106902][ T3530] hsr_slave_1: left promiscuous mode [ 1692.250504][ T3530] veth1_macvtap: left promiscuous mode [ 1692.250589][ T3530] veth0_macvtap: left promiscuous mode [ 1692.250768][ T3530] veth1_vlan: left promiscuous mode [ 1692.250906][ T3530] veth0_vlan: left promiscuous mode [ 1692.348296][ T37] kauditd_printk_skb: 178 callbacks suppressed [ 1692.348317][ T37] audit: type=1400 audit(1767178702.580:6616): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=24892 comm="syz.9.21518" daddr=::ffff:172.20.20.187 dest=5 [ 1693.516001][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21523'. [ 1694.303925][ T37] audit: type=1400 audit(1767178704.422:6617): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=24933 comm="syz.7.21530" daddr=::ffff:172.20.20.187 [ 1696.220970][T24960] netlink: 40 bytes leftover after parsing attributes in process `syz.9.21537'. [ 1696.221163][T24960] netlink: 32 bytes leftover after parsing attributes in process `syz.9.21537'. [ 1696.678121][ T8239] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1696.956306][ T8239] usb 10-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1696.956342][ T8239] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.956363][ T8239] usb 10-1: Product: syz [ 1696.956380][ T8239] usb 10-1: Manufacturer: syz [ 1696.956396][ T8239] usb 10-1: SerialNumber: syz [ 1696.962631][ T8239] usb 10-1: config 0 descriptor?? [ 1697.003527][ T8239] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1697.515383][ T3818] usb 10-1: USB disconnect, device number 23 [ 1699.382203][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1699.382811][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1704.123027][T24315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.123042][T24315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.123063][T24315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.644529][T24315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1704.644549][T24315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1704.644578][T24315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1705.453950][T25098] netlink: 'syz.1.21563': attribute type 10 has an invalid length. [ 1705.648024][ T37] audit: type=1400 audit(1767178714.969:6618): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=25097 comm="syz.4.21564" daddr=fc01:: [ 1705.723133][T24315] hsr_slave_0: entered promiscuous mode [ 1705.724300][T24315] hsr_slave_1: entered promiscuous mode [ 1705.725126][T24315] debugfs: 'hsr0' already exists in 'hsr' [ 1705.725158][T24315] Cannot create hsr debugfs directory [ 1706.221013][T25126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21568'. [ 1706.285401][T25124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21566'. [ 1706.285431][T25124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21566'. [ 1706.867612][T25145] overlayfs: failed to clone upperpath [ 1708.944410][ T37] audit: type=1400 audit(1767178718.101:6619): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=25213 comm="syz.7.21579" dest=2 [ 1710.335348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1711.943682][T25261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21585'. [ 1715.467243][T24315] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1715.547796][T24315] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1715.643782][T24315] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1715.752654][T24315] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1716.188904][ T37] audit: type=1400 audit(1767178724.880:6620): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=25366 comm="syz.1.21605" daddr=::ffff:172.20.20.4 [ 1716.381043][T24315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.462126][T24315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.522978][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.523093][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.549576][T24949] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.549726][T24949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1717.394749][T24315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.264520][T24315] veth0_vlan: entered promiscuous mode [ 1718.309532][T24315] veth1_vlan: entered promiscuous mode [ 1718.371800][T24315] veth0_macvtap: entered promiscuous mode [ 1718.384893][T24315] veth1_macvtap: entered promiscuous mode [ 1718.480184][T24315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.584237][T24315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.676548][ T4225] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.676606][ T4225] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.676644][ T4225] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.676683][ T4225] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.542004][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.542029][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.924438][ T4222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.924462][ T4222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1722.820084][ T5937] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1722.977607][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 1723.008394][ T5937] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1723.008427][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.008449][ T5937] usb 5-1: Product: syz [ 1723.008465][ T5937] usb 5-1: Manufacturer: syz [ 1723.008482][ T5937] usb 5-1: SerialNumber: syz [ 1724.058399][ T5937] usb 5-1: config 0 descriptor?? [ 1724.289263][ T5937] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1724.593204][T25526] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21631'. [ 1724.595183][T25526] bridge0: port 3(syz_tun) entered blocking state [ 1724.595494][T25526] bridge0: port 3(syz_tun) entered disabled state [ 1724.595760][T25526] syz_tun: entered allmulticast mode [ 1724.779992][T25526] syz_tun: entered promiscuous mode [ 1725.063932][T25537] batadv_slave_1: entered promiscuous mode [ 1725.274529][T25536] batadv_slave_1: left promiscuous mode [ 1726.255704][ T5937] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1726.256416][ T5937] dvbdev: DVB: registering new adapter (Terratec H7) [ 1726.256469][ T5937] usb 5-1: media controller created [ 1726.475000][ T5937] usb read operation failed. (-71) [ 1726.488059][ T5937] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1726.526195][ T5937] usb 5-1: USB disconnect, device number 27 [ 1726.721449][T25584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21639'. [ 1727.348577][ T37] audit: type=1400 audit(1767178735.305:6621): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=25603 comm="syz.7.21643" dest=2 [ 1727.569526][T25611] binder: 25609:25611 unknown command 0 [ 1727.569549][T25611] binder: 25609:25611 ioctl c0306201 200000000080 returned -22 [ 1727.574866][T25611] binder: 25609:25611 ioctl c0306201 2000000003c0 returned -14 [ 1727.652940][T25614] overlayfs: failed to clone upperpath [ 1730.405274][T25684] loop2: detected capacity change from 0 to 7 [ 1730.422700][T25684] loop2: [ 1730.422750][T25684] loop2: partition table partially beyond EOD, truncated [ 1730.864396][ T37] audit: type=1400 audit(1767178738.597:6622): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=25693 comm="syz.9.21670" dest=20000 [ 1732.214683][T25724] netlink: 1276 bytes leftover after parsing attributes in process `syz.7.21677'. [ 1732.880807][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1732.884978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1733.882136][T25746] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21683'. [ 1733.882175][T25746] netlink: 16 bytes leftover after parsing attributes in process `syz.9.21683'. [ 1734.314012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1734.317753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1737.353217][ T37] audit: type=1400 audit(1767178744.665:6623): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=25839 comm="syz.9.21707" dest=2 [ 1737.354779][T25841] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1738.101853][T25882] overlayfs: failed to clone upperpath [ 1742.043442][T26028] binder: BINDER_SET_CONTEXT_MGR already set [ 1742.043460][T26028] binder: 26027:26028 ioctl 4018620d 200000004a80 returned -16 [ 1743.866266][ T37] audit: type=1400 audit(1767178750.761:6624): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=26069 comm="syz.1.21742" daddr=fc01:: [ 1743.971713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1743.981687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1743.982311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1743.982398][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1744.276147][T26073] program syz.4.21741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1747.580222][T26115] netlink: 'syz.5.21754': attribute type 1 has an invalid length. [ 1749.480099][ T37] audit: type=1804 audit(1767178755.997:6625): pid=26133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.21757" name="/newroot/27/file0" dev="tmpfs" ino=156 res=1 errno=0 [ 1750.088132][T26137] 9pnet_fd: p9_fd_create_tcp (26137): problem connecting socket to 127.0.0.1 [ 1760.054235][ T822] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1760.520533][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1760.520571][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.520613][ T822] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1760.520638][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1760.526740][ T822] usb 6-1: config 0 descriptor?? [ 1761.046407][ T37] audit: type=1400 audit(1767178766.815:6626): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=26239 comm="syz.4.21789" dest=2 [ 1761.076910][ T822] uclogic 0003:5543:0005.0058: item fetching failed at offset 5/7 [ 1761.079902][ T822] uclogic 0003:5543:0005.0058: parse failed [ 1761.080021][ T822] uclogic 0003:5543:0005.0058: probe with driver uclogic failed with error -22 [ 1761.267122][T26205] usb 6-1: USB disconnect, device number 26 [ 1762.415034][ T37] audit: type=1326 audit(1767178768.096:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff414cff749 code=0x7ffc0000 [ 1762.415401][ T37] audit: type=1326 audit(1767178768.096:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff414cff749 code=0x7ffc0000 [ 1762.417130][ T37] audit: type=1326 audit(1767178768.096:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff414cfdf90 code=0x7ffc0000 [ 1762.417980][ T37] audit: type=1326 audit(1767178768.096:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff414cff749 code=0x7ffc0000 [ 1762.418288][ T37] audit: type=1326 audit(1767178768.096:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff414cff749 code=0x7ffc0000 [ 1762.456051][ T37] audit: type=1326 audit(1767178768.143:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff414cff749 code=0x7ffc0000 [ 1762.456219][ T37] audit: type=1326 audit(1767178768.143:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff414cff749 code=0x7ffc0000 [ 1762.457986][ T37] audit: type=1326 audit(1767178768.143:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff414cff749 code=0x7ffc0000 [ 1762.461485][ T37] audit: type=1326 audit(1767178768.143:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26262 comm="syz.4.21792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff414cff749 code=0x7ffc0000 [ 1765.342811][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1765.343362][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1767.203939][T26301] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21800'. [ 1772.475801][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21812'. [ 1772.488261][T26349] netlink: 24 bytes leftover after parsing attributes in process `syz.9.21812'. [ 1775.405030][T26206] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1775.709180][T26206] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1775.709242][T26206] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1775.709267][T26206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.713211][T26206] usb 5-1: config 0 descriptor?? [ 1776.009212][T26206] pwc: Askey VC010 type 2 USB webcam detected. [ 1776.922408][T26206] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1776.931149][T26206] pwc: recv_control_msg error -32 req 02 val 2700 [ 1776.940943][T26206] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1776.941797][T26206] pwc: recv_control_msg error -32 req 04 val 1000 [ 1776.942515][T26206] pwc: recv_control_msg error -32 req 04 val 1300 [ 1776.943419][T26206] pwc: recv_control_msg error -32 req 04 val 1400 [ 1776.948003][T26206] pwc: recv_control_msg error -32 req 02 val 2000 [ 1776.978385][T26206] pwc: recv_control_msg error -32 req 02 val 2100 [ 1777.194424][T26206] pwc: recv_control_msg error -71 req 02 val 2500 [ 1777.194948][T26206] pwc: recv_control_msg error -71 req 02 val 2400 [ 1777.195525][T26206] pwc: recv_control_msg error -71 req 02 val 2600 [ 1777.196085][T26206] pwc: recv_control_msg error -71 req 02 val 2900 [ 1777.196718][T26206] pwc: recv_control_msg error -71 req 02 val 2800 [ 1777.197480][T26206] pwc: recv_control_msg error -71 req 04 val 1100 [ 1777.198053][T26206] pwc: recv_control_msg error -71 req 04 val 1200 [ 1777.247603][T26206] pwc: Registered as video103. [ 1777.281630][T26206] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input134 [ 1777.321893][T26206] usb 5-1: USB disconnect, device number 28 [ 1778.140898][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 1778.140992][ T37] audit: type=1400 audit(1767178782.803:6653): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=26408 comm="syz.7.21832" daddr=fe80::bb dest=20003 [ 1790.948087][T26524] veth3: entered promiscuous mode [ 1790.948122][T26524] veth3: entered allmulticast mode [ 1792.568303][ T37] audit: type=1400 audit(1767178796.267:6654): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=26560 comm="syz.7.21873" daddr=::ffff:172.20.20.0 [ 1794.142039][ T37] audit: type=1400 audit(1767178797.763:6655): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=26573 comm="syz.7.21878" [ 1794.429410][T26571] ptrace attach of "./syz-executor exec"[5810] was attempted by " [ 1799.830342][T26612] netlink: 'syz.1.21887': attribute type 4 has an invalid length. [ 1799.937323][T26613] netlink: 'syz.1.21887': attribute type 4 has an invalid length. [ 1812.067206][T12071] Bluetooth: hci1: command 0x0406 tx timeout [ 1817.635906][ T37] audit: type=1400 audit(1767178819.624:6656): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=26718 comm="syz.5.21914" daddr=fe80::3a dest=20001 [ 1817.724618][ T37] audit: type=1400 audit(1767178819.624:6657): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=26718 comm="syz.5.21914" daddr=fe80::bb dest=20007 [ 1826.886188][T26759] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 1830.870737][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1830.871356][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1831.682413][T12209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1831.721663][T12209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1831.724925][T12209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1831.728145][T12209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1831.729101][T12209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1833.041279][T25489] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1834.615175][T12209] Bluetooth: hci4: command tx timeout [ 1834.782253][ T4682] bond0: (slave syz_tun): Releasing backup interface [ 1835.640505][T25489] usb 5-1: device descriptor read/all, error -71 [ 1837.153116][T12209] Bluetooth: hci4: command tx timeout [ 1839.036802][T26858] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1839.036948][T26858] Error validating options; rc = [-22] [ 1839.935234][T12209] Bluetooth: hci4: command tx timeout [ 1842.538582][T12209] Bluetooth: hci4: command tx timeout [ 1847.876532][T26794] chnl_net:caif_netlink_parms(): no params data found [ 1852.782368][ T37] audit: type=1326 audit(1767178852.592:6658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.782529][ T37] audit: type=1326 audit(1767178852.592:6659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.784078][ T37] audit: type=1326 audit(1767178852.592:6660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.784277][ T37] audit: type=1326 audit(1767178852.592:6661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.784752][ T37] audit: type=1326 audit(1767178852.601:6662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.785094][ T37] audit: type=1326 audit(1767178852.601:6663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.785791][ T37] audit: type=1326 audit(1767178852.601:6664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.789795][ T37] audit: type=1326 audit(1767178852.601:6665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.789851][ T37] audit: type=1326 audit(1767178852.601:6666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1852.789902][ T37] audit: type=1326 audit(1767178852.601:6667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27064 comm="syz.5.21969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 1854.785052][T26794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.785288][T26794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.785580][T26794] bridge_slave_0: entered allmulticast mode [ 1854.788467][T26794] bridge_slave_0: entered promiscuous mode [ 1854.854753][T26794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.858068][T26794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.858341][T26794] bridge_slave_1: entered allmulticast mode [ 1856.300487][T26794] bridge_slave_1: entered promiscuous mode [ 1866.577109][T26794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1867.696672][T26794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1867.980067][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1868.010313][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1868.013674][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1868.214132][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1868.247042][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1869.470819][T26794] team0: Port device team_slave_0 added [ 1869.519911][T26794] team0: Port device team_slave_1 added [ 1870.923569][T12209] Bluetooth: hci0: command tx timeout [ 1873.267749][T12209] Bluetooth: hci0: command tx timeout [ 1874.043078][T26794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1874.043098][T26794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1874.043128][T26794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1874.104133][T26794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1874.104156][T26794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1874.104187][T26794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1875.616347][ T5812] Bluetooth: hci0: command tx timeout [ 1877.536705][T26794] hsr_slave_0: entered promiscuous mode [ 1877.538905][T26794] hsr_slave_1: entered promiscuous mode [ 1877.555242][T26794] debugfs: 'hsr0' already exists in 'hsr' [ 1877.555275][T26794] Cannot create hsr debugfs directory [ 1877.758628][ T5812] Bluetooth: hci0: command tx timeout [ 1879.958534][T27333] sctp: [Deprecated]: syz.4.21988 (pid 27333) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1879.958534][T27333] Use struct sctp_sack_info instead [ 1880.004949][T27333] tipc: Failed to remove unknown binding: 66,0,0/0:2609641974/2609641975 [ 1880.005404][T27333] tipc: Failed to remove unknown binding: 66,0,0/0:2609641974/2609641975 [ 1880.305083][T27346] fuse: Bad value for 'fd' [ 1884.110263][T26794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1884.110305][T26794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1884.110334][T26794] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1886.760092][ T37] kauditd_printk_skb: 130 callbacks suppressed [ 1886.760114][ T37] audit: type=1326 audit(1767178884.363:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27389 comm="syz.5.22005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7fc00000 [ 1886.762453][ T37] audit: type=1326 audit(1767178884.363:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27389 comm="syz.5.22005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff5e34af749 code=0x7fc00000 [ 1887.501209][ T37] audit: type=1326 audit(1767178885.046:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27389 comm="syz.5.22005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7fc00000 [ 1887.595184][T26794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1887.595214][T26794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.595235][T26794] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1893.202412][T26794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.202464][T26794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.202494][T26794] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1897.075412][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1897.076033][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1897.432550][T26794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1897.432593][T26794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.432623][T26794] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1897.768811][T27449] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22015'. [ 1898.728917][T12209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1898.795696][T12209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1898.801972][T12209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1898.808023][T12209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1898.813474][T12209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1901.182924][T12209] Bluetooth: hci2: command tx timeout [ 1901.538602][ T37] audit: type=1400 audit(1767178898.182:6801): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=27493 comm="syz.4.22018" [ 1903.340842][T12209] Bluetooth: hci2: command tx timeout [ 1903.971236][ T37] audit: type=1400 audit(1767178900.445:6802): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=27562 comm="syz.5.22020" daddr=fe80::aa dest=20003 [ 1904.839553][T27171] chnl_net:caif_netlink_parms(): no params data found [ 1906.902313][ T5812] Bluetooth: hci2: command tx timeout [ 1909.082001][ T5812] Bluetooth: hci2: command tx timeout [ 1913.387581][T12209] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1913.426267][T12209] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1913.431897][T12209] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1914.602787][T12209] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1914.613004][T12209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1916.905552][T12209] Bluetooth: hci4: command tx timeout [ 1917.225728][T12209] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 1917.245729][T27648] syz_tun (unregistering): left allmulticast mode [ 1917.245807][T27648] syz_tun (unregistering): left promiscuous mode [ 1917.246043][T27648] bridge0: port 3(syz_tun) entered disabled state [ 1918.999677][ T3530] bridge_slave_1: left allmulticast mode [ 1918.999702][ T3530] bridge_slave_1: left promiscuous mode [ 1918.999913][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1919.084243][T12209] Bluetooth: hci4: command tx timeout [ 1919.102840][ T3530] bridge_slave_0: left allmulticast mode [ 1919.102864][ T3530] bridge_slave_0: left promiscuous mode [ 1919.103054][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1919.773519][ T3530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1919.919280][ T3530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1919.985753][ T3530] bond0 (unregistering): Released all slaves [ 1920.051516][T27171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.051609][T27171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.051925][T27171] bridge_slave_0: entered allmulticast mode [ 1920.054056][T27171] bridge_slave_0: entered promiscuous mode [ 1920.097496][T27171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.097585][T27171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.097819][T27171] bridge_slave_1: entered allmulticast mode [ 1920.101397][T27171] bridge_slave_1: entered promiscuous mode [ 1920.938111][T27171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1920.960941][T27171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1921.308997][T12209] Bluetooth: hci4: command tx timeout [ 1923.592703][T12209] Bluetooth: hci4: command tx timeout [ 1924.413852][T27171] team0: Port device team_slave_0 added [ 1927.704699][ T3530] hsr_slave_0: left promiscuous mode [ 1927.911110][ T3530] hsr_slave_1: left promiscuous mode [ 1927.912383][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1927.976560][ T3530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1930.351524][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1930.380748][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1930.383459][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1930.410621][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1930.448188][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1932.069066][ T3530] team0 (unregistering): Port device team_slave_1 removed [ 1932.410994][ T3530] team0 (unregistering): Port device team_slave_0 removed [ 1932.741550][ T5812] Bluetooth: hci5: command tx timeout [ 1933.525931][T27171] team0: Port device team_slave_1 added [ 1933.605634][T27453] chnl_net:caif_netlink_parms(): no params data found [ 1935.858906][ T5812] Bluetooth: hci5: command tx timeout [ 1939.598068][ T5812] Bluetooth: hci5: command tx timeout [ 1940.358641][T27453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1940.359743][T27453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1940.360058][T27453] bridge_slave_0: entered allmulticast mode [ 1940.363564][T27453] bridge_slave_0: entered promiscuous mode [ 1940.436133][T27453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1940.436261][T27453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1940.436531][T27453] bridge_slave_1: entered allmulticast mode [ 1940.439416][T27453] bridge_slave_1: entered promiscuous mode [ 1941.047028][T27453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1941.102224][T27453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1942.258697][ T5812] Bluetooth: hci5: command tx timeout [ 1945.834261][ T3530] bridge_slave_1: left allmulticast mode [ 1945.834284][ T3530] bridge_slave_1: left promiscuous mode [ 1945.834487][ T3530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1946.721908][ T3530] bridge_slave_0: left allmulticast mode [ 1946.721940][ T3530] bridge_slave_0: left promiscuous mode [ 1946.722222][ T3530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1949.870322][ T3530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1951.769559][ T3530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1951.953726][ T3530] bond0 (unregistering): Released all slaves [ 1953.429891][T27453] team0: Port device team_slave_0 added [ 1953.482597][T27453] team0: Port device team_slave_1 added [ 1954.988047][T27453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1954.988068][T27453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1954.988100][T27453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1955.096579][T27453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1955.096600][T27453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1955.096631][T27453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1955.900511][T28179] ufs: You didn't specify the type of your ufs filesystem [ 1955.900511][T28179] [ 1955.900511][T28179] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1955.900511][T28179] [ 1955.900511][T28179] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1955.928953][T28179] ufs: ufstype=old is supported read-only [ 1959.071124][T12209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1959.093534][T12209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1959.095738][T12209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1959.097107][T12209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1959.099144][T12209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1961.346729][T12209] Bluetooth: hci0: command tx timeout [ 1962.230215][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1962.230832][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1963.705529][ T3530] team0 (unregistering): Port device team_slave_1 removed [ 1965.114406][T12209] Bluetooth: hci0: command tx timeout [ 1965.545244][ T3530] team0 (unregistering): Port device team_slave_0 removed [ 1966.959276][T28334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22080'. [ 1967.323524][T12209] Bluetooth: hci0: command tx timeout [ 1969.801464][T12209] Bluetooth: hci0: command tx timeout [ 1971.179132][T27656] chnl_net:caif_netlink_parms(): no params data found [ 1971.183205][T28411] netlink: 'syz.4.22085': attribute type 22 has an invalid length. [ 1971.183228][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22085'. [ 1971.287965][T28411] bond0: option ad_select: unable to set because the bond device is up [ 1971.670877][T27892] chnl_net:caif_netlink_parms(): no params data found [ 1972.429623][T28481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22084'. [ 1976.898254][T27656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.915981][T27656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1976.916245][T27656] bridge_slave_0: entered allmulticast mode [ 1976.918936][T27656] bridge_slave_0: entered promiscuous mode [ 1977.354341][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1977.359946][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1977.906788][T28549] netlink: 32 bytes leftover after parsing attributes in process `syz.5.22092'. [ 1977.982897][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1977.986063][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1977.997892][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1979.023882][T27892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1979.024021][T27892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.024350][T27892] bridge_slave_0: entered allmulticast mode [ 1979.030676][T27892] bridge_slave_0: entered promiscuous mode [ 1979.108092][T27892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1979.108246][T27892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.108538][T27892] bridge_slave_1: entered allmulticast mode [ 1979.114158][T27892] bridge_slave_1: entered promiscuous mode [ 1979.485105][T28602] overlayfs: failed to clone upperpath [ 1980.386262][T12209] Bluetooth: hci2: command tx timeout [ 1981.977915][T17508] bridge_slave_1: left allmulticast mode [ 1981.977948][T17508] bridge_slave_1: left promiscuous mode [ 1981.983540][T17508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1982.261735][T17508] bridge_slave_0: left allmulticast mode [ 1982.261761][T17508] bridge_slave_0: left promiscuous mode [ 1982.262967][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1982.744195][T12209] Bluetooth: hci2: command tx timeout [ 1985.400047][T12209] Bluetooth: hci2: command tx timeout [ 1985.897964][T17508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.651037][T12209] Bluetooth: hci2: command tx timeout [ 1987.667823][T17508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.776886][T17508] bond0 (unregistering): Released all slaves [ 1988.046060][T27892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1988.903004][T27892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1990.832907][T27892] team0: Port device team_slave_0 added [ 1990.850198][T27892] team0: Port device team_slave_1 added [ 1991.307210][T27892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1991.307225][T27892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1991.307245][T27892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1991.367831][T27892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1991.367851][T27892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1991.367882][T27892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1992.790653][T27892] hsr_slave_0: entered promiscuous mode [ 1992.794003][T27892] hsr_slave_1: entered promiscuous mode [ 1993.565513][T27892] debugfs: 'hsr0' already exists in 'hsr' [ 1993.565556][T27892] Cannot create hsr debugfs directory [ 1995.303103][T17508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1995.331097][T17508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1995.904526][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1995.938779][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1995.950835][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1995.977343][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1995.979573][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1996.064666][T17508] team0 (unregistering): Port device team_slave_1 removed [ 1998.602747][ T5812] Bluetooth: hci4: command tx timeout [ 1998.884717][T17508] team0 (unregistering): Port device team_slave_0 removed [ 2000.796327][ T5812] Bluetooth: hci4: command tx timeout [ 2002.325979][T28291] chnl_net:caif_netlink_parms(): no params data found [ 2003.522206][ T5812] Bluetooth: hci4: command tx timeout [ 2006.314000][ T37] audit: type=1400 audit(1767178995.656:6803): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=28955 comm="syz.4.22120" daddr=fc01:: [ 2006.412636][ T5812] Bluetooth: hci4: command tx timeout [ 2008.187192][T28996] nfs4: Unknown parameter '"' [ 2010.539948][T28291] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.540176][T28291] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.540848][T28291] bridge_slave_0: entered allmulticast mode [ 2010.544726][T28291] bridge_slave_0: entered promiscuous mode [ 2011.107645][T28291] bridge0: port 2(bridge_slave_1) entered blocking state [ 2011.107874][T28291] bridge0: port 2(bridge_slave_1) entered disabled state [ 2011.109388][T28291] bridge_slave_1: entered allmulticast mode [ 2011.115608][T28291] bridge_slave_1: entered promiscuous mode [ 2011.746702][ T5812] Bluetooth: hci1: unexpected event for opcode 0x2039 [ 2012.127754][T29132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22126'. [ 2012.127837][T29132] openvswitch: netlink: Flow key attr not present in new flow. [ 2015.057790][T28291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2015.084784][T28539] chnl_net:caif_netlink_parms(): no params data found [ 2016.084636][T28291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2016.588802][T29186] 9pnet_virtio: no channels available for device syz [ 2016.673626][T29186] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22136'. [ 2017.870880][T17508] bridge_slave_1: left allmulticast mode [ 2017.870905][T17508] bridge_slave_1: left promiscuous mode [ 2017.871102][T17508] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.968351][T29222] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22140'. [ 2018.428195][T17508] bridge_slave_0: left allmulticast mode [ 2018.428229][T17508] bridge_slave_0: left promiscuous mode [ 2018.428566][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.532380][T17508] bridge_slave_0: left allmulticast mode [ 2018.532411][T17508] bridge_slave_0: left promiscuous mode [ 2018.532665][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 2018.745341][ T37] audit: type=1400 audit(1767179007.774:6804): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=29233 comm="syz.5.22146" dest=20002 [ 2019.089569][T17508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2019.256136][T17508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2019.391990][T17508] bond0 (unregistering): Released all slaves [ 2019.857567][T17508] bond0 (unregistering): Released all slaves [ 2020.366149][T28291] team0: Port device team_slave_0 added [ 2020.643010][T28291] team0: Port device team_slave_1 added [ 2021.210156][T29299] netlink: 48 bytes leftover after parsing attributes in process `syz.4.22159'. [ 2024.076963][T28291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2024.076980][T28291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2024.077003][T28291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2024.225964][T12209] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2024.296785][T12209] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2024.318502][T12209] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2024.491259][T12209] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2024.568358][T12209] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2025.135761][T17508] hsr_slave_0: left promiscuous mode [ 2025.223740][T17508] hsr_slave_1: left promiscuous mode [ 2025.226248][T17508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2025.292193][T17508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2027.063997][ T5812] Bluetooth: hci5: command tx timeout [ 2027.570706][T17508] team0 (unregistering): Port device team_slave_1 removed [ 2027.940310][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2027.940832][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2028.074303][T17508] team0 (unregistering): Port device team_slave_0 removed [ 2029.287252][ T5812] Bluetooth: hci5: command tx timeout [ 2029.536166][T28539] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.537088][T28539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.537348][T28539] bridge_slave_0: entered allmulticast mode [ 2029.539325][T28539] bridge_slave_0: entered promiscuous mode [ 2031.427144][T28539] bridge0: port 2(bridge_slave_1) entered blocking state [ 2031.427315][T28539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.427642][T28539] bridge_slave_1: entered allmulticast mode [ 2031.430015][T28539] bridge_slave_1: entered promiscuous mode [ 2031.512036][ T5812] Bluetooth: hci5: command tx timeout [ 2032.096388][T28539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2032.204012][T28539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2034.003709][ T5812] Bluetooth: hci5: command tx timeout [ 2035.049358][T28539] team0: Port device team_slave_0 added [ 2035.064602][T28539] team0: Port device team_slave_1 added [ 2036.642994][T28539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2036.643020][T28539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2036.643046][T28539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2036.643829][T28878] chnl_net:caif_netlink_parms(): no params data found [ 2036.709902][T28539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2036.709928][T28539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2036.709950][T28539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2036.856761][ T37] audit: type=1326 audit(1767179024.697:6805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2036.856804][ T37] audit: type=1326 audit(1767179024.697:6806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2036.856837][ T37] audit: type=1326 audit(1767179024.697:6807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2036.856870][ T37] audit: type=1326 audit(1767179024.697:6808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2036.893963][ T37] audit: type=1326 audit(1767179024.735:6809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2036.914246][ T37] audit: type=1326 audit(1767179024.735:6810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2036.915212][ T37] audit: type=1326 audit(1767179024.763:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2036.916827][ T37] audit: type=1326 audit(1767179024.763:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2036.937276][ T37] audit: type=1326 audit(1767179024.772:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29615 comm="syz.5.22194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2037.673217][T29644] netlink: 16 bytes leftover after parsing attributes in process `syz.5.22197'. [ 2039.001946][T28539] hsr_slave_0: entered promiscuous mode [ 2039.003175][T28539] hsr_slave_1: entered promiscuous mode [ 2039.003932][T28539] debugfs: 'hsr0' already exists in 'hsr' [ 2039.003962][T28539] Cannot create hsr debugfs directory [ 2039.733908][T29749] netlink: 16 bytes leftover after parsing attributes in process `syz.5.22207'. [ 2040.685508][T12209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2040.703450][T12209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2040.722798][T12209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2040.746680][T12209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2040.747413][T12209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2040.805674][T28878] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.805943][T28878] bridge0: port 1(bridge_slave_0) entered disabled state [ 2040.806235][T28878] bridge_slave_0: entered allmulticast mode [ 2040.839249][T28878] bridge_slave_0: entered promiscuous mode [ 2040.880298][T28878] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.880465][T28878] bridge0: port 2(bridge_slave_1) entered disabled state [ 2040.881445][T28878] bridge_slave_1: entered allmulticast mode [ 2040.903515][T28878] bridge_slave_1: entered promiscuous mode [ 2042.465300][T28878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2042.491109][T28878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2043.469229][T29878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22216'. [ 2043.909945][T12209] Bluetooth: hci0: command tx timeout [ 2044.120554][T29883] netlink: 56 bytes leftover after parsing attributes in process `syz.4.22218'. [ 2044.840321][T28878] team0: Port device team_slave_0 added [ 2044.916007][T28878] team0: Port device team_slave_1 added [ 2044.916294][T17508] bridge_slave_1: left allmulticast mode [ 2044.916316][T17508] bridge_slave_1: left promiscuous mode [ 2044.916546][T17508] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.011010][T17508] bridge_slave_0: left allmulticast mode [ 2045.011043][T17508] bridge_slave_0: left promiscuous mode [ 2045.011331][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.314728][T17508] bridge_slave_1: left allmulticast mode [ 2045.314761][T17508] bridge_slave_1: left promiscuous mode [ 2045.315063][T17508] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.406070][T29950] netlink: 16 bytes leftover after parsing attributes in process `syz.5.22225'. [ 2046.252618][T12209] Bluetooth: hci0: command tx timeout [ 2046.261431][T17508] bridge_slave_0: left allmulticast mode [ 2046.261462][T17508] bridge_slave_0: left promiscuous mode [ 2046.261720][T17508] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.340772][T29972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22231'. [ 2047.748814][T17508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2047.854914][T17508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2047.927444][T17508] bond0 (unregistering): Released all slaves [ 2048.090750][T17508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2048.177522][T17508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2048.247811][T17508] bond0 (unregistering): Released all slaves [ 2048.455101][T12209] Bluetooth: hci0: command tx timeout [ 2048.470768][T29352] chnl_net:caif_netlink_parms(): no params data found [ 2048.897407][T28878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2048.897425][T28878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2048.897457][T28878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2049.009976][T28878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2049.009999][T28878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2049.010029][T28878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2050.683281][T12209] Bluetooth: hci0: command tx timeout [ 2051.919244][T28878] hsr_slave_0: entered promiscuous mode [ 2051.922981][T28878] hsr_slave_1: entered promiscuous mode [ 2051.924299][T28878] debugfs: 'hsr0' already exists in 'hsr' [ 2051.924326][T28878] Cannot create hsr debugfs directory [ 2053.913631][T29352] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.913850][T29352] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.914171][T29352] bridge_slave_0: entered allmulticast mode [ 2053.917456][T29352] bridge_slave_0: entered promiscuous mode [ 2055.193838][T29352] bridge0: port 2(bridge_slave_1) entered blocking state [ 2055.193969][T29352] bridge0: port 2(bridge_slave_1) entered disabled state [ 2055.194218][T29352] bridge_slave_1: entered allmulticast mode [ 2055.197129][T29352] bridge_slave_1: entered promiscuous mode [ 2055.212547][T30162] 9pnet_virtio: no channels available for device syz [ 2055.520843][T12209] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:256' [ 2055.520877][T12209] CPU: 1 UID: 0 PID: 12209 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2055.520911][T12209] Tainted: [L]=SOFTLOCKUP [ 2055.520921][T12209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2055.520938][T12209] Workqueue: hci3 hci_rx_work [ 2055.520967][T12209] Call Trace: [ 2055.520977][T12209] [ 2055.520988][T12209] dump_stack_lvl+0xe8/0x150 [ 2055.521026][T12209] sysfs_create_dir_ns+0x259/0x280 [ 2055.521063][T12209] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2055.521099][T12209] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 2055.521139][T12209] ? rt_spin_unlock+0x161/0x200 [ 2055.521176][T12209] kobject_add_internal+0x6b1/0xcd0 [ 2055.521214][T12209] kobject_add+0x155/0x220 [ 2055.521260][T12209] ? __pfx_kobject_add+0x10/0x10 [ 2055.521296][T12209] ? get_device_parent+0x370/0x3a0 [ 2055.521328][T12209] device_add+0x408/0xb80 [ 2055.521359][T12209] hci_conn_add_sysfs+0xd5/0x210 [ 2055.521400][T12209] le_conn_complete_evt+0xf1d/0x1420 [ 2055.521443][T12209] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 2055.521475][T12209] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2055.521500][T12209] ? lockdep_hardirqs_on+0x7b/0x110 [ 2055.521526][T12209] ? skb_pull_data+0xfb/0x200 [ 2055.521568][T12209] hci_le_enh_conn_complete_evt+0x189/0x4a0 [ 2055.521598][T12209] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 2055.521634][T12209] hci_event_packet+0x78f/0x1260 [ 2055.521676][T12209] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 2055.521708][T12209] ? __pfx_hci_event_packet+0x10/0x10 [ 2055.521746][T12209] ? rt_spin_unlock+0x150/0x200 [ 2055.521795][T12209] ? hci_send_to_monitor+0xe2/0x590 [ 2055.521832][T12209] hci_rx_work+0x3ee/0x1060 [ 2055.521863][T12209] ? process_scheduled_works+0x9ef/0x1770 [ 2055.521894][T12209] process_scheduled_works+0xad1/0x1770 [ 2055.521956][T12209] ? __pfx_process_scheduled_works+0x10/0x10 [ 2055.521981][T12209] ? do_raw_spin_lock+0x121/0x290 [ 2055.522022][T12209] worker_thread+0x8a0/0xda0 [ 2055.522077][T12209] kthread+0x711/0x8a0 [ 2055.522113][T12209] ? __pfx_worker_thread+0x10/0x10 [ 2055.522139][T12209] ? __pfx_kthread+0x10/0x10 [ 2055.522169][T12209] ? rt_spin_unlock+0x150/0x200 [ 2055.522204][T12209] ? rt_spin_unlock+0x161/0x200 [ 2055.522241][T12209] ? __pfx_kthread+0x10/0x10 [ 2055.522278][T12209] ret_from_fork+0x510/0xa50 [ 2055.522306][T12209] ? __pfx_ret_from_fork+0x10/0x10 [ 2055.522330][T12209] ? __switch_to+0xc9e/0x1480 [ 2055.522370][T12209] ? __pfx_kthread+0x10/0x10 [ 2055.522404][T12209] ret_from_fork_asm+0x1a/0x30 [ 2055.522459][T12209] [ 2055.522896][T12209] kobject: kobject_add_internal failed for hci3:256 with -EEXIST, don't try to register things with the same name in the same directory. [ 2055.522941][T12209] Bluetooth: hci3: failed to register connection device [ 2055.918972][T17508] hsr_slave_0: left promiscuous mode [ 2055.940416][T17508] hsr_slave_1: left promiscuous mode [ 2055.944013][T17508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2055.995721][T17508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2056.037969][T17508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2056.314160][T30192] 9pnet_virtio: no channels available for device syz [ 2057.507939][T17508] team0 (unregistering): Port device team_slave_1 removed [ 2057.878364][T17508] team0 (unregistering): Port device team_slave_0 removed [ 2060.722940][T30221] 9pnet_virtio: no channels available for device syz [ 2061.708467][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2061.726244][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2061.764652][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2061.804082][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2061.819723][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2062.945960][T17508] team0 (unregistering): Port device team_slave_1 removed [ 2063.181779][T17508] team0 (unregistering): Port device team_slave_0 removed [ 2064.105399][T12209] Bluetooth: hci2: command tx timeout [ 2064.247843][T30261] 9pnet_virtio: no channels available for device syz [ 2064.978758][T29352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2065.025993][T29352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2065.769884][T30284] 9pnet_virtio: no channels available for device syz [ 2066.538939][T12209] Bluetooth: hci2: command tx timeout [ 2066.946739][T30305] openvswitch: netlink: Flow actions attr not present in new flow. [ 2067.832639][T30327] 9pnet_virtio: no channels available for device syz [ 2068.289778][T29352] team0: Port device team_slave_0 added [ 2068.562506][T29352] team0: Port device team_slave_1 added [ 2068.877280][T12209] Bluetooth: hci2: command tx timeout [ 2070.508571][T30431] 9pnet_virtio: no channels available for device syz [ 2070.536312][T30431] netlink: 68 bytes leftover after parsing attributes in process `syz.4.22283'. [ 2071.043011][T12209] Bluetooth: hci2: command tx timeout [ 2071.074333][T29352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2071.074352][T29352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.074384][T29352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2071.077029][T29352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2071.077046][T29352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.077075][T29352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2072.892259][T29352] hsr_slave_0: entered promiscuous mode [ 2072.893997][T29352] hsr_slave_1: entered promiscuous mode [ 2072.895187][T29352] debugfs: 'hsr0' already exists in 'hsr' [ 2072.895215][T29352] Cannot create hsr debugfs directory [ 2072.909975][T29759] chnl_net:caif_netlink_parms(): no params data found [ 2074.120414][T30518] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2074.526548][T30522] netlink: 16 bytes leftover after parsing attributes in process `syz.5.22293'. [ 2076.202826][T30560] 9pnet_virtio: no channels available for device syz [ 2076.248441][T30560] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22298'. [ 2077.957840][T30629] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22302'. [ 2077.970417][T29759] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.970643][T29759] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.970999][T29759] bridge_slave_0: entered allmulticast mode [ 2077.999775][T29759] bridge_slave_0: entered promiscuous mode [ 2078.045494][T29759] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.045713][T29759] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.046017][T29759] bridge_slave_1: entered allmulticast mode [ 2078.071419][T29759] bridge_slave_1: entered promiscuous mode [ 2078.907718][T29759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2078.980435][T29759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2079.248413][T30708] 9pnet_virtio: no channels available for device syz [ 2079.293917][T30708] netlink: 68 bytes leftover after parsing attributes in process `syz.4.22306'. [ 2080.571013][T30435] bridge_slave_1: left allmulticast mode [ 2080.571045][T30435] bridge_slave_1: left promiscuous mode [ 2080.571314][T30435] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.659134][T30435] bridge_slave_0: left allmulticast mode [ 2080.659164][T30435] bridge_slave_0: left promiscuous mode [ 2080.659452][T30435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.738511][T30752] smc: removing ib device syz0 [ 2081.492841][T30435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2081.619332][T30765] 9pnet_virtio: no channels available for device syz [ 2081.670832][T30765] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22314'. [ 2082.550631][T30435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2082.654772][T30435] bond0 (unregistering): Released all slaves [ 2082.725106][T29759] team0: Port device team_slave_0 added [ 2082.954136][T29759] team0: Port device team_slave_1 added [ 2083.119236][T30808] 9pnet_virtio: no channels available for device syz [ 2083.156715][T30808] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22318'. [ 2084.075677][T30810] sock: sock_timestamping_bind_phc: sock not bind to device [ 2084.089268][ T37] audit: type=1400 audit(1767179068.848:6814): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=30809 comm="syz.5.22319" daddr=fe80::2d dest=20009 [ 2084.975341][T30883] 9pnet_virtio: no channels available for device syz [ 2085.012507][T30883] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22324'. [ 2085.673903][T29759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2085.673924][T29759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2085.673955][T29759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2085.694365][T29759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2085.694385][T29759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2085.694414][T29759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2085.840006][T30226] chnl_net:caif_netlink_parms(): no params data found [ 2086.301618][T30929] 9pnet_virtio: no channels available for device syz [ 2086.338653][T30929] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22326'. [ 2087.192594][T29352] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2087.521221][T29352] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2087.618451][T30953] 9pnet_virtio: no channels available for device syz [ 2087.656593][T30953] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22328'. [ 2088.525928][T29759] hsr_slave_0: entered promiscuous mode [ 2088.534689][T29759] hsr_slave_1: entered promiscuous mode [ 2088.535902][T29759] debugfs: 'hsr0' already exists in 'hsr' [ 2088.535930][T29759] Cannot create hsr debugfs directory [ 2088.994093][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2089.008836][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2089.035732][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2089.036996][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2089.038041][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2089.299448][T30226] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.299668][T30226] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.299944][T30226] bridge_slave_0: entered allmulticast mode [ 2089.302917][T30226] bridge_slave_0: entered promiscuous mode [ 2089.813195][T31036] 9pnet_virtio: no channels available for device syz [ 2089.851511][T31036] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22332'. [ 2090.702516][T30226] bridge0: port 2(bridge_slave_1) entered blocking state [ 2090.702661][T30226] bridge0: port 2(bridge_slave_1) entered disabled state [ 2090.702876][T30226] bridge_slave_1: entered allmulticast mode [ 2090.708027][T30226] bridge_slave_1: entered promiscuous mode [ 2091.046004][T30226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2091.080968][T30226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2091.319405][T12209] Bluetooth: hci4: command tx timeout [ 2091.656859][T31115] 9pnet_virtio: no channels available for device syz [ 2091.695117][T31115] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22340'. [ 2092.559230][ T37] audit: type=1400 audit(1767179076.777:6815): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=31126 comm="syz.5.22341" daddr=::ffff:0.0.0.0 dest=20000 [ 2092.829308][T30226] team0: Port device team_slave_0 added [ 2092.857383][T30226] team0: Port device team_slave_1 added [ 2092.876896][T31140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22343'. [ 2094.413212][T12209] Bluetooth: hci4: command tx timeout [ 2094.431610][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2094.432225][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2094.695672][T30226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2094.695692][T30226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2094.695717][T30226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2094.990849][T30226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2094.990869][T30226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2094.990899][T30226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2095.465494][T30226] hsr_slave_0: entered promiscuous mode [ 2095.467040][T30226] hsr_slave_1: entered promiscuous mode [ 2095.468061][T30226] debugfs: 'hsr0' already exists in 'hsr' [ 2095.468087][T30226] Cannot create hsr debugfs directory [ 2095.904391][T31235] 9pnet_virtio: no channels available for device syz [ 2095.941101][T31235] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22348'. [ 2096.625149][T12209] Bluetooth: hci4: command tx timeout [ 2098.513640][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2098.554183][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2098.556489][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2098.583473][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2098.605249][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2098.854803][T12209] Bluetooth: hci4: command tx timeout [ 2099.242852][T31004] chnl_net:caif_netlink_parms(): no params data found [ 2099.653848][T29759] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2099.788661][T29759] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2100.185139][T29759] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2100.585230][T31481] 9pnet_virtio: no channels available for device syz [ 2100.624998][T31481] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22356'. [ 2101.418986][T12209] Bluetooth: hci5: command tx timeout [ 2101.467378][T29759] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2101.521383][T31004] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.521628][T31004] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.522194][T31004] bridge_slave_0: entered allmulticast mode [ 2101.529688][T31004] bridge_slave_0: entered promiscuous mode [ 2101.681129][T31004] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.681258][T31004] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.681791][T31004] bridge_slave_1: entered allmulticast mode [ 2101.692210][T31004] bridge_slave_1: entered promiscuous mode [ 2102.160672][T31004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2102.191952][T31004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2102.226838][ T37] audit: type=1400 audit(1767179085.818:6816): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=31542 comm="syz.5.22361" daddr=fe80::bb dest=5 [ 2102.552833][T31004] team0: Port device team_slave_0 added [ 2102.575055][T31004] team0: Port device team_slave_1 added [ 2102.953968][T31584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22364'. [ 2103.297907][T31004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2103.297925][T31004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2103.297949][T31004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2103.370293][T31004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2103.370323][T31004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2103.370354][T31004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2103.640716][T12209] Bluetooth: hci5: command tx timeout [ 2104.071864][T31004] hsr_slave_0: entered promiscuous mode [ 2104.073068][T31004] hsr_slave_1: entered promiscuous mode [ 2104.086011][T31004] debugfs: 'hsr0' already exists in 'hsr' [ 2104.086096][T31004] Cannot create hsr debugfs directory [ 2104.194808][T31287] chnl_net:caif_netlink_parms(): no params data found [ 2104.331347][T30226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2104.429936][T30226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2104.735457][T30226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2104.893023][T30226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2105.035136][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2105.050400][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2105.063321][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2105.097122][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2105.097843][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2105.562994][T31287] bridge0: port 1(bridge_slave_0) entered blocking state [ 2105.563206][T31287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.563536][T31287] bridge_slave_0: entered allmulticast mode [ 2105.580140][T31287] bridge_slave_0: entered promiscuous mode [ 2105.684511][T31287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2105.684629][T31287] bridge0: port 2(bridge_slave_1) entered disabled state [ 2105.684892][T31287] bridge_slave_1: entered allmulticast mode [ 2105.694628][T31287] bridge_slave_1: entered promiscuous mode [ 2105.886292][T12209] Bluetooth: hci5: command tx timeout [ 2106.447724][T31287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2106.493883][T31287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2106.929944][T31287] team0: Port device team_slave_0 added [ 2106.949448][T31287] team0: Port device team_slave_1 added [ 2107.319826][T12209] Bluetooth: hci6: command tx timeout [ 2107.457383][T31287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2107.457402][T31287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.457431][T31287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2107.628318][T31287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2107.628338][T31287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.628367][T31287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2108.090271][T12209] Bluetooth: hci5: command tx timeout [ 2108.986916][T31287] hsr_slave_0: entered promiscuous mode [ 2108.994535][T31287] hsr_slave_1: entered promiscuous mode [ 2108.995455][T31287] debugfs: 'hsr0' already exists in 'hsr' [ 2108.995475][T31287] Cannot create hsr debugfs directory [ 2109.543971][T12209] Bluetooth: hci6: command tx timeout [ 2110.032106][T31801] chnl_net:caif_netlink_parms(): no params data found [ 2110.727831][T31004] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2110.814484][T31004] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2111.087003][T31004] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2111.423519][T31004] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2111.768933][T12209] Bluetooth: hci6: command tx timeout [ 2112.012492][T31287] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2112.108120][T31801] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.111188][T31801] bridge0: port 1(bridge_slave_0) entered disabled state [ 2112.112205][T31801] bridge_slave_0: entered allmulticast mode [ 2112.120017][T31801] bridge_slave_0: entered promiscuous mode [ 2112.149762][T30226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2112.175698][T31801] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.175812][T31801] bridge0: port 2(bridge_slave_1) entered disabled state [ 2112.176101][T31801] bridge_slave_1: entered allmulticast mode [ 2112.218547][T31801] bridge_slave_1: entered promiscuous mode [ 2112.658831][T31287] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2112.951865][T31801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2113.048609][T32281] netlink: 16 bytes leftover after parsing attributes in process `syz.5.22388'. [ 2113.699417][T31801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2113.993206][T12209] Bluetooth: hci6: command tx timeout [ 2114.223242][T31287] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.289090][T31801] team0: Port device team_slave_0 added [ 2114.402425][T31801] team0: Port device team_slave_1 added [ 2114.407791][T30226] 8021q: adding VLAN 0 to HW filter on device team0 [ 2114.820781][T31287] team0: Port device netdevsim0 removed [ 2114.904488][T31287] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2115.056035][T31801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2115.056049][T31801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2115.056069][T31801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2115.061189][T13374] bridge0: port 1(bridge_slave_0) entered blocking state [ 2115.061414][T13374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2115.069200][T31801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2115.069217][T31801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2115.069240][T31801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2115.148204][T13374] bridge0: port 2(bridge_slave_1) entered blocking state [ 2115.148684][T13374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2115.403876][ T37] audit: type=1400 audit(1767179098.141:6817): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=32367 comm="syz.5.22391" daddr=feff:ffff:ffff:ffff:: [ 2115.465358][T31801] hsr_slave_0: entered promiscuous mode [ 2115.466948][T31801] hsr_slave_1: entered promiscuous mode [ 2115.468051][T31801] debugfs: 'hsr0' already exists in 'hsr' [ 2115.468077][T31801] Cannot create hsr debugfs directory [ 2116.257779][T32427] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22394'. [ 2117.220721][T31004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2117.321593][T31004] 8021q: adding VLAN 0 to HW filter on device team0 [ 2117.345997][T29041] bridge0: port 1(bridge_slave_0) entered blocking state [ 2117.346163][T29041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2117.394665][T29041] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.394778][T29041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2117.668810][T30226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2117.763560][T30226] veth0_vlan: entered promiscuous mode [ 2117.783539][T30226] veth1_vlan: entered promiscuous mode [ 2117.848278][T30226] veth0_macvtap: entered promiscuous mode [ 2117.861674][T30226] veth1_macvtap: entered promiscuous mode [ 2117.901757][T30226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2117.980935][T30226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2118.009558][ T859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.009611][ T859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.009651][ T859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.009690][ T859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2120.327216][T24477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2120.327300][T24477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2120.698519][T31004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2120.963945][ T7805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2120.963964][ T7805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2121.321799][T31004] veth0_vlan: entered promiscuous mode [ 2121.405632][T31004] veth1_vlan: entered promiscuous mode [ 2121.820198][T31004] veth0_macvtap: entered promiscuous mode [ 2121.871217][T31004] veth1_macvtap: entered promiscuous mode [ 2121.884314][T31287] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2122.138256][T31287] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2122.259391][T32496] 9pnet_virtio: no channels available for device syz [ 2122.427819][T32497] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22401'. [ 2123.201045][T31287] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2123.243749][ T37] audit: type=1326 audit(1767179105.472:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32501 comm="syz.5.22402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2123.244089][ T37] audit: type=1326 audit(1767179105.472:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32501 comm="syz.5.22402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2123.262909][ T37] audit: type=1326 audit(1767179105.491:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32501 comm="syz.5.22402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2123.263720][ T37] audit: type=1326 audit(1767179105.491:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=32501 comm="syz.5.22402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5e34af749 code=0x7ffc0000 [ 2124.346733][T32516] 9pnet_virtio: no channels available for device syz [ 2124.359300][T32516] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22404'. [ 2124.477804][T31287] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2124.772743][T31004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2124.934995][T31004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2124.988100][T13374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.992279][T13374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.024256][T13374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.026030][T13374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.183257][T31801] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2125.507636][T31801] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2125.576776][T32539] netlink: 16 bytes leftover after parsing attributes in process `syz.5.22407'. [ 2126.402596][T31801] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2126.447900][ T37] audit: type=1400 audit(1767179108.473:6822): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=32542 comm="syz.5.22409" daddr=fe80::a dest=20004 [ 2126.599764][T31801] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2128.144020][T29041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2128.144043][T29041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2128.912556][T32574] 9pnet_virtio: no channels available for device syz [ 2128.915781][T32574] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22413'. [ 2129.103852][ T859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2129.103878][ T859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2129.248112][T32577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22414'. [ 2129.269327][T31287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2129.563756][T31287] 8021q: adding VLAN 0 to HW filter on device team0 [ 2129.674616][T32583] netlink: 16 bytes leftover after parsing attributes in process `syz.5.22415'. [ 2130.434752][T13374] bridge0: port 1(bridge_slave_0) entered blocking state [ 2130.434986][T13374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2130.485657][T13374] bridge0: port 2(bridge_slave_1) entered blocking state [ 2130.485890][T13374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2130.567111][T31801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2131.742347][T31801] 8021q: adding VLAN 0 to HW filter on device team0 [ 2131.804320][T30743] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.819581][T30743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2131.872562][T30743] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.929178][T30743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2133.118935][T32603] 9pnet_virtio: no channels available for device syz [ 2133.124170][T32603] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22421'. [ 2133.307721][T32607] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22422'. [ 2133.762061][T31287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2134.655036][T32629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.22425'. [ 2135.363799][T31801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2135.417281][T31287] veth0_vlan: entered promiscuous mode [ 2135.467585][T32637] 9pnet_virtio: no channels available for device syz [ 2135.482499][T32637] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22426'. [ 2135.515621][T31287] veth1_vlan: entered promiscuous mode [ 2135.707298][T31287] veth0_macvtap: entered promiscuous mode [ 2135.732416][T31287] veth1_macvtap: entered promiscuous mode [ 2135.827324][T31287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2135.868212][T31287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2135.928345][ T7805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.937644][ T7805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.937750][ T7805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2135.937825][ T7805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.982365][T32646] 9pnet_virtio: no channels available for device syz [ 2136.985638][T32646] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22431'. [ 2137.120687][T32648] 9pnet_virtio: no channels available for device syz [ 2137.132854][T32648] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22432'. [ 2137.213749][T32657] delete_channel: no stack [ 2137.737358][T26954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2137.737383][T26954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2138.167254][T31801] veth0_vlan: entered promiscuous mode [ 2139.192479][T31801] veth1_vlan: entered promiscuous mode [ 2139.193283][T30723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2139.193302][T30723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2139.261747][T32691] 9pnet_virtio: no channels available for device syz [ 2139.264482][T32691] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22443'. [ 2139.518585][T31801] veth0_macvtap: entered promiscuous mode [ 2139.580939][T31801] veth1_macvtap: entered promiscuous mode [ 2139.671239][T31801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2139.745184][T31801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2139.787111][ T4225] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.787166][ T4225] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.787206][ T4225] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.787245][ T4225] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.361060][T32701] 9pnet_virtio: no channels available for device syz [ 2140.373346][T32701] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22446'. [ 2141.062799][ T7805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.062824][ T7805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.257023][ T859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2141.257177][ T859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2141.695697][T32720] overlayfs: maximum fs stacking depth exceeded [ 2142.086296][T32731] 9pnet_virtio: no channels available for device syz [ 2142.090696][T32731] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22453'. [ 2143.295858][ T37] audit: type=1400 audit(1767179124.219:6823): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=32741 comm="syz.5.22458" daddr=fe80::bb dest=20002 [ 2143.488438][T32745] 9pnet_virtio: no channels available for device syz [ 2143.504263][T32745] netlink: 68 bytes leftover after parsing attributes in process `syz.6.22456'. [ 2143.985549][T32764] 9pnet_virtio: no channels available for device syz [ 2143.990153][T32764] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22465'. [ 2146.583057][ T319] 9pnet_virtio: no channels available for device syz [ 2146.586287][ T319] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22469'. [ 2147.540036][ T355] 9pnet_virtio: no channels available for device syz [ 2147.642589][ T355] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22478'. [ 2148.396720][ T359] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 2150.499296][ T400] 9pnet_virtio: no channels available for device syz [ 2150.598070][ T400] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22497'. [ 2152.962836][ T417] 9pnet_virtio: no channels available for device syz [ 2152.967484][ T417] netlink: 68 bytes leftover after parsing attributes in process `syz.6.22505'. [ 2154.524752][ T435] 9pnet_virtio: no channels available for device syz [ 2154.580194][ T435] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22509'. [ 2155.095064][ T37] audit: type=1400 audit(1767179135.252:6824): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=434 comm="syz.3.22512" dest=20000 [ 2157.840353][ T463] 9pnet_virtio: no channels available for device syz [ 2158.203031][ T466] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22520'. [ 2159.010171][ T486] 9pnet_virtio: no channels available for device syz [ 2159.015258][ T486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22517'. [ 2159.501822][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2159.502433][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.803868][ T509] 9pnet_virtio: no channels available for device syz [ 2160.807437][ T505] 9pnet_virtio: no channels available for device syz [ 2160.811799][ T505] netlink: 68 bytes leftover after parsing attributes in process `syz.6.22533'. [ 2161.011227][ T509] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22532'. [ 2163.905258][ T581] 9pnet_virtio: no channels available for device syz [ 2163.978371][ T581] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22556'. [ 2164.646941][ T3818] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 2164.806596][ T3818] usb 1-1: Using ep0 maxpacket: 8 [ 2164.809550][ T3818] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 2164.809681][ T3818] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2164.809801][ T3818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2164.809931][ T3818] usb 1-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 2164.810746][ T3818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.917421][ T3818] usb 1-1: config 0 descriptor?? [ 2164.937245][ T582] 9pnet_virtio: no channels available for device syz [ 2165.003865][ T582] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22558'. [ 2165.439134][ T3818] razer 0003:1532:010E.0059: unknown main item tag 0x0 [ 2165.439175][ T3818] razer 0003:1532:010E.0059: unknown main item tag 0x0 [ 2165.439205][ T3818] razer 0003:1532:010E.0059: unknown main item tag 0x0 [ 2165.541942][ T3818] razer 0003:1532:010E.0059: hidraw0: USB HID v0.03 Device [HID 1532:010e] on usb-dummy_hcd.0-1/input0 [ 2165.610010][ T591] usb 1-1: USB disconnect, device number 37 [ 2167.608381][ T635] netlink: 165 bytes leftover after parsing attributes in process `syz.5.22574'. [ 2167.897011][ T37] audit: type=1326 audit(1767179147.220:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2167.897357][ T37] audit: type=1326 audit(1767179147.229:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2167.899086][ T37] audit: type=1326 audit(1767179147.229:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2167.899701][ T37] audit: type=1326 audit(1767179147.229:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2167.899752][ T37] audit: type=1326 audit(1767179147.229:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2167.900107][ T37] audit: type=1326 audit(1767179147.229:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2167.903004][ T37] audit: type=1326 audit(1767179147.229:6832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2167.903067][ T37] audit: type=1326 audit(1767179147.229:6831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2168.041082][ T37] audit: type=1326 audit(1767179147.229:6833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2168.043776][ T37] audit: type=1326 audit(1767179147.360:6834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=645 comm="syz.0.22580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2168.192590][ T649] 9pnet_virtio: no channels available for device syz [ 2168.374442][ T650] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22579'. [ 2172.541901][ T3818] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2172.699098][ T3818] usb 3-1: Using ep0 maxpacket: 32 [ 2172.704185][ T3818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2172.704247][ T3818] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 2172.704275][ T3818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2172.767249][ T3818] usb 3-1: config 0 descriptor?? [ 2172.773495][ T3818] dvb-usb: found a 'TeVii S662' in warm state. [ 2172.773550][ T3818] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2172.800226][ T3818] dvb-usb: bulk message failed: -22 (2/0) [ 2172.817433][ T3818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2172.818441][ T3818] dvbdev: DVB: registering new adapter (TeVii S662) [ 2172.818500][ T3818] usb 3-1: media controller created [ 2172.818544][ T3818] dvb-usb: bulk message failed: -22 (6/0) [ 2172.818562][ T3818] dw2102: i2c transfer failed. [ 2172.818587][ T3818] dvb-usb: bulk message failed: -22 (6/0) [ 2172.818603][ T3818] dw2102: i2c transfer failed. [ 2172.818621][ T3818] dvb-usb: bulk message failed: -22 (6/0) [ 2172.818645][ T3818] dw2102: i2c transfer failed. [ 2172.818663][ T3818] dvb-usb: bulk message failed: -22 (6/0) [ 2172.818679][ T3818] dw2102: i2c transfer failed. [ 2172.818711][ T3818] dvb-usb: bulk message failed: -22 (6/0) [ 2172.818727][ T3818] dw2102: i2c transfer failed. [ 2172.824131][ T3818] dvb-usb: bulk message failed: -22 (6/0) [ 2172.824154][ T3818] dw2102: i2c transfer failed. [ 2172.824168][ T3818] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2172.938755][ T3818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2172.980632][ T3818] dvb-usb: bulk message failed: -22 (3/0) [ 2172.980656][ T3818] dw2102: command 0x0e transfer failed. [ 2172.980669][ T3818] dvb-usb: bulk message failed: -22 (3/0) [ 2172.980685][ T3818] dw2102: command 0x0e transfer failed. [ 2173.308591][ T3818] dvb-usb: bulk message failed: -22 (3/0) [ 2173.308619][ T3818] dw2102: command 0x0e transfer failed. [ 2173.308631][ T3818] dvb-usb: bulk message failed: -22 (3/0) [ 2173.308647][ T3818] dw2102: command 0x0e transfer failed. [ 2173.308659][ T3818] dvb-usb: bulk message failed: -22 (1/0) [ 2173.308674][ T3818] dw2102: command 0x51 transfer failed. [ 2173.308685][ T3818] dvb-usb: bulk message failed: -22 (5/0) [ 2173.308701][ T3818] dw2102: i2c probe for address 0x68 failed. [ 2173.308714][ T3818] dvb-usb: bulk message failed: -22 (5/0) [ 2173.308729][ T3818] dw2102: i2c probe for address 0x69 failed. [ 2173.308742][ T3818] dvb-usb: bulk message failed: -22 (5/0) [ 2173.308757][ T3818] dw2102: i2c probe for address 0x6a failed. [ 2173.308769][ T3818] dw2102: probing for demodulator failed. Is the external power switched on? [ 2173.308780][ T3818] dvb-usb: no frontend was attached by 'TeVii S662' [ 2173.525418][ T716] 9pnet_virtio: no channels available for device syz [ 2173.565233][ T716] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22597'. [ 2174.398749][ T721] 9pnet_virtio: no channels available for device syz [ 2174.403399][ T721] netlink: 68 bytes leftover after parsing attributes in process `syz.6.22586'. [ 2174.497847][ T3818] rc_core: IR keymap rc-tt-1500 not found [ 2174.497869][ T3818] Registered IR keymap rc-empty [ 2174.499986][ T3818] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 2174.512518][ T3818] input: TeVii S662 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input135 [ 2174.527742][ T3818] dvb-usb: schedule remote query interval to 250 msecs. [ 2174.527771][ T3818] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2174.527787][ T3818] dvb-usb: TeVii S662 successfully initialized and connected. [ 2174.629509][ T3818] usb 3-1: USB disconnect, device number 59 [ 2174.878803][ T3818] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 2175.718738][ T764] 9pnet_virtio: no channels available for device syz [ 2175.740496][ T764] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22608'. [ 2177.303066][T12209] Bluetooth: hci6: link tx timeout [ 2177.310422][T12209] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 2177.484482][ T795] netlink: 96 bytes leftover after parsing attributes in process `syz.2.22622'. [ 2177.563698][ T799] : entered promiscuous mode [ 2177.929244][ T591] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2178.092192][ T591] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2178.092252][ T591] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 2178.092278][ T591] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2178.097924][ T591] usb 4-1: config 0 descriptor?? [ 2178.550779][ T591] elecom 0003:056E:00FF.005A: hidraw0: USB HID v0.00 Device [HID 056e:00ff] on usb-dummy_hcd.3-1/input0 [ 2180.035939][ T856] 9pnet_virtio: no channels available for device syz [ 2180.040553][ T856] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22631'. [ 2180.042895][ T841] 9pnet_virtio: no channels available for device syz [ 2180.047956][ T841] netlink: 68 bytes leftover after parsing attributes in process `syz.2.22639'. [ 2180.050927][ T5812] Bluetooth: hci6: command 0x0406 tx timeout [ 2180.127243][ T591] usb 4-1: USB disconnect, device number 55 [ 2180.680494][ T874] program syz.3.22646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2180.977086][ T6248] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2181.137601][ T6248] usb 1-1: Using ep0 maxpacket: 32 [ 2181.140328][ T6248] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2181.140388][ T6248] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 2181.140414][ T6248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.156793][ T6248] usb 1-1: config 0 descriptor?? [ 2181.198734][ T6248] dvb-usb: found a 'TeVii S662' in warm state. [ 2181.198784][ T6248] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2181.198806][ T6248] dvb-usb: bulk message failed: -22 (2/0) [ 2181.231676][ T6248] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2181.233138][ T6248] dvbdev: DVB: registering new adapter (TeVii S662) [ 2181.233195][ T6248] usb 1-1: media controller created [ 2181.233227][ T6248] dvb-usb: bulk message failed: -22 (6/0) [ 2181.233244][ T6248] dw2102: i2c transfer failed. [ 2181.233262][ T6248] dvb-usb: bulk message failed: -22 (6/0) [ 2181.233278][ T6248] dw2102: i2c transfer failed. [ 2181.233295][ T6248] dvb-usb: bulk message failed: -22 (6/0) [ 2181.233310][ T6248] dw2102: i2c transfer failed. [ 2181.233328][ T6248] dvb-usb: bulk message failed: -22 (6/0) [ 2181.233345][ T6248] dw2102: i2c transfer failed. [ 2181.233361][ T6248] dvb-usb: bulk message failed: -22 (6/0) [ 2181.233391][ T6248] dw2102: i2c transfer failed. [ 2181.233409][ T6248] dvb-usb: bulk message failed: -22 (6/0) [ 2181.233424][ T6248] dw2102: i2c transfer failed. [ 2181.233434][ T6248] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2181.362948][ T6248] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2181.389606][ T6248] dvb-usb: bulk message failed: -22 (3/0) [ 2181.389630][ T6248] dw2102: command 0x0e transfer failed. [ 2181.389640][ T6248] dvb-usb: bulk message failed: -22 (3/0) [ 2181.389656][ T6248] dw2102: command 0x0e transfer failed. [ 2181.716835][ T6248] dvb-usb: bulk message failed: -22 (3/0) [ 2181.716861][ T6248] dw2102: command 0x0e transfer failed. [ 2181.716872][ T6248] dvb-usb: bulk message failed: -22 (3/0) [ 2181.716888][ T6248] dw2102: command 0x0e transfer failed. [ 2181.716899][ T6248] dvb-usb: bulk message failed: -22 (1/0) [ 2181.716915][ T6248] dw2102: command 0x51 transfer failed. [ 2181.716927][ T6248] dvb-usb: bulk message failed: -22 (5/0) [ 2181.716942][ T6248] dw2102: i2c probe for address 0x68 failed. [ 2181.716955][ T6248] dvb-usb: bulk message failed: -22 (5/0) [ 2181.716970][ T6248] dw2102: i2c probe for address 0x69 failed. [ 2181.716983][ T6248] dvb-usb: bulk message failed: -22 (5/0) [ 2181.716999][ T6248] dw2102: i2c probe for address 0x6a failed. [ 2181.717012][ T6248] dw2102: probing for demodulator failed. Is the external power switched on? [ 2181.717024][ T6248] dvb-usb: no frontend was attached by 'TeVii S662' [ 2182.059643][ T6248] rc_core: IR keymap rc-tt-1500 not found [ 2182.059666][ T6248] Registered IR keymap rc-empty [ 2182.061320][ T6248] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 2182.064513][ T6248] input: TeVii S662 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input136 [ 2182.104254][ T6248] dvb-usb: schedule remote query interval to 250 msecs. [ 2182.104279][ T6248] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2182.104295][ T6248] dvb-usb: TeVii S662 successfully initialized and connected. [ 2182.136198][ T6248] usb 1-1: USB disconnect, device number 38 [ 2182.398608][ T6248] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 2182.413646][ T952] netlink: 88 bytes leftover after parsing attributes in process `syz.5.22664'. [ 2182.413690][ T952] netlink: 48 bytes leftover after parsing attributes in process `syz.5.22664'. [ 2182.821803][ T667] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2182.888385][ T973] 9pnet_virtio: no channels available for device syz [ 2182.892987][ T973] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22654'. [ 2183.011450][ T667] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 2183.011484][ T667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2183.025241][ T667] usb 3-1: config 0 descriptor?? [ 2184.181430][ T667] asus 0003:0B05:19B6.005B: unknown main item tag 0x0 [ 2184.181466][ T667] asus 0003:0B05:19B6.005B: item fetching failed at offset 3/5 [ 2184.182387][ T667] asus 0003:0B05:19B6.005B: Asus hid parse failed: -22 [ 2184.182504][ T667] asus 0003:0B05:19B6.005B: probe with driver asus failed with error -22 [ 2184.395401][ T6248] usb 3-1: USB disconnect, device number 60 [ 2185.068158][ T1013] 9pnet_virtio: no channels available for device syz [ 2190.616521][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 2190.616542][ T37] audit: type=1400 audit(1767179168.463:6839): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=1087 comm="syz.5.22694" daddr=fe80:: [ 2193.410072][ T1128] 9pnet_virtio: no channels available for device syz [ 2193.428262][ T1128] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22701'. [ 2194.427979][T12209] Bluetooth: hci2: command 0x0406 tx timeout [ 2194.601045][ T37] audit: type=1326 audit(1767179172.193:6840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2194.601420][ T37] audit: type=1326 audit(1767179172.193:6841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb84fb5b829 code=0x7ffc0000 [ 2194.657566][ T37] audit: type=1326 audit(1767179172.193:6842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb84fb5b829 code=0x7ffc0000 [ 2194.657624][ T37] audit: type=1326 audit(1767179172.193:6843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb84fb5b829 code=0x7ffc0000 [ 2194.657665][ T37] audit: type=1326 audit(1767179172.193:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2194.657704][ T37] audit: type=1326 audit(1767179172.193:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2194.657743][ T37] audit: type=1326 audit(1767179172.240:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2194.657790][ T37] audit: type=1326 audit(1767179172.240:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb84fb5b829 code=0x7ffc0000 [ 2194.657829][ T37] audit: type=1326 audit(1767179172.240:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1134 comm="syz.0.22708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb84fbbf749 code=0x7ffc0000 [ 2195.752237][ T1145] 9pnet_virtio: no channels available for device syz [ 2196.582350][ T1145] netlink: 68 bytes leftover after parsing attributes in process `syz.6.22710'. [ 2197.808723][ T1158] 9pnet_virtio: no channels available for device syz [ 2198.817996][ T1157] veth1_to_batadv: entered promiscuous mode [ 2198.818359][ T1157] macsec1: entered promiscuous mode [ 2199.620509][ T1177] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 2199.950503][ T728] kernel read not supported for file /126/fdinfo/4 (pid: 728 comm: kworker/0:1) [ 2204.263134][ T1216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22732'. [ 2204.483692][ T1222] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22733'. [ 2204.753051][ T3818] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2205.160881][ T3818] usb 3-1: Using ep0 maxpacket: 8 [ 2205.179051][ T3818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2205.179088][ T3818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2205.179114][ T3818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2205.179161][ T3818] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 2205.179187][ T3818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.267681][ T3818] usb 3-1: config 0 descriptor?? [ 2205.473608][ T5812] Bluetooth: hci6: unexpected cc 0x203e length: 2 > 1 [ 2205.487013][ T5812] Bluetooth: hci6: unexpected event for opcode 0x203e [ 2205.734684][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734724][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734754][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734783][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734811][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734840][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734869][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734898][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734927][ T3818] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0 [ 2205.734954][ T3818] hid-rmi 0003:06CB:81A7.005C: unbalanced collection at end of report description [ 2205.735846][ T3818] hid-rmi 0003:06CB:81A7.005C: parse failed [ 2205.735962][ T3818] hid-rmi 0003:06CB:81A7.005C: probe with driver hid-rmi failed with error -22 [ 2206.012941][ T1249] 9pnet_virtio: no channels available for device syz [ 2206.052365][ T1249] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22738'. [ 2206.635492][ T1231] usb 3-1: USB disconnect, device number 61 [ 2209.066613][ T1241] 9pnet_virtio: no channels available for device syz [ 2209.079452][ T1241] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22739'. [ 2210.084834][ T5812] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 2210.085413][ T5812] Bluetooth: hci6: Injecting HCI hardware error event [ 2210.108504][T12209] Bluetooth: hci6: hardware error 0x00 [ 2210.795373][ T3818] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2211.113601][ T37] kauditd_printk_skb: 133 callbacks suppressed [ 2211.113626][ T37] audit: type=1400 audit(1767179187.630:6982): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=1313 comm="syz.3.22757" daddr=2001::1 dest=20004 [ 2211.127077][ T3818] usb 3-1: Using ep0 maxpacket: 32 [ 2211.130354][ T3818] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 2211.130383][ T3818] usb 3-1: config 0 has no interface number 0 [ 2211.130484][ T3818] usb 3-1: config 0 interface 184 has no altsetting 0 [ 2211.210139][ T3818] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2211.210173][ T3818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.210195][ T3818] usb 3-1: Product: syz [ 2211.210212][ T3818] usb 3-1: Manufacturer: syz [ 2211.210227][ T3818] usb 3-1: SerialNumber: syz [ 2211.246795][ T3818] usb 3-1: config 0 descriptor?? [ 2211.475075][ T3818] smsc75xx v1.0.0 [ 2211.475103][ T3818] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 2211.475393][ T3818] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 2211.516779][ T3818] usb 3-1: USB disconnect, device number 62 [ 2213.794916][T12209] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 2215.929348][ T1404] 9pnet_virtio: no channels available for device syz [ 2216.962203][ T1404] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22778'. [ 2219.519991][ T1449] 9pnet_virtio: no channels available for device syz [ 2219.561711][ T1449] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22794'. [ 2220.465943][ T37] audit: type=1400 audit(1767179196.382:6983): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="veth1" object="_" requested=w pid=1456 comm="syz.6.22800" saddr=fc01:: src=20004 daddr=ff02::1 dest=3618 netif=wpan0 [ 2221.902676][ T1478] netlink: 24 bytes leftover after parsing attributes in process `syz.5.22806'. [ 2222.442727][ T1486] 9pnet_virtio: no channels available for device syz [ 2222.494375][ T1486] netlink: 68 bytes leftover after parsing attributes in process `syz.6.22809'. [ 2223.361437][T12209] Bluetooth: hci4: command 0x0406 tx timeout [ 2224.925563][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22819'. [ 2225.542455][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22819'. [ 2225.703268][ T1319] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2225.703907][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.042925][ T1534] input: syz1 as /devices/virtual/input/input137 [ 2227.490413][ T5911] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2227.654375][ T5911] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2227.654418][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.678365][ T5911] usb 3-1: config 0 descriptor?? [ 2227.818183][ T37] audit: type=1400 audit(1767179203.245:6984): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="veth1" requested=w pid=1548 comm="syz.6.22831" daddr=2001::1 dest=19999 [ 2228.741830][ T5911] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 2229.152799][ T1563] 9pnet_virtio: no channels available for device syz [ 2229.165855][ T1564] 9pnet_virtio: no channels available for device syz [ 2229.351524][ T1564] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22834'. [ 2229.378516][ T1563] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22833'. [ 2230.053589][ T5911] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 2230.053619][ T5911] [drm] Initialized udl on minor 2 [ 2230.328301][ T5911] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 2230.328912][ T5911] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2230.399604][ T6248] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2230.427433][ T5911] usb 3-1: USB disconnect, device number 63 [ 2230.461961][T20039] IPVS: starting estimator thread 0... [ 2230.505728][ T6248] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2230.570611][ T1580] IPVS: using max 11 ests per chain, 26400 per kthread [ 2233.087624][T12209] Bluetooth: hci5: command 0x0406 tx timeout [ 2233.409520][ T1616] 9pnet_virtio: no channels available for device syz [ 2233.451516][ T1616] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22843'. [ 2234.184190][ T1623] 9pnet_virtio: no channels available for device syz [ 2234.229989][ T1623] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22847'. [ 2235.309676][ T1632] 9pnet_virtio: no channels available for device syz [ 2235.356619][ T1632] netlink: 68 bytes leftover after parsing attributes in process `syz.5.22848'. [ 2239.132103][ T1630] 9pnet_virtio: no channels available for device syz [ 2239.136220][ T1630] netlink: 68 bytes leftover after parsing attributes in process `syz.3.22852'. [ 2239.583335][ T1651] program syz.6.22857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2240.037459][ T1660] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2240.174576][ T1662] gfs2: path_lookup on nl80211 returned error -2 [ 2240.552369][ T1672] 9pnet_virtio: no channels available for device syz [ 2241.754567][ T1675] netlink: 68 bytes leftover after parsing attributes in process `syz.0.22858'. [ 2242.976892][ T1677] 9pnet_virtio: no channels available for device syz [ 2244.270943][ T1678] netlink: 68 bytes leftover after parsing attributes in process `syz.6.22863'. [ 2244.891785][ T38] INFO: task kworker/u8:32:30435 blocked for more than 147 seconds. [ 2244.891817][ T38] Tainted: G L syzkaller #0 [ 2244.891831][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2244.891842][ T38] task:kworker/u8:32 state:D stack:24224 pid:30435 tgid:30435 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2244.891916][ T38] Workqueue: netns cleanup_net [ 2244.891947][ T38] Call Trace: [ 2244.891957][ T38] [ 2244.891973][ T38] __schedule+0x145f/0x5070 [ 2244.892032][ T38] ? __pfx___schedule+0x10/0x10 [ 2244.892071][ T38] ? irqentry_exit+0x5dd/0x660 [ 2244.892096][ T38] ? __pfx___schedule+0x10/0x10 [ 2244.892150][ T38] rt_mutex_schedule+0x77/0xf0 [ 2244.892187][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 2244.892234][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 2244.892271][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 2244.892306][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 2244.892339][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2244.892382][ T38] ? rdma_dev_change_netns+0x39/0x300 [ 2244.892431][ T38] ? rdma_dev_change_netns+0x39/0x300 [ 2244.892463][ T38] mutex_lock_nested+0x16a/0x1d0 [ 2244.892500][ T38] rdma_dev_change_netns+0x39/0x300 [ 2244.892538][ T38] rdma_dev_exit_net+0x203/0x340 [ 2244.892561][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 2244.892598][ T38] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2244.892628][ T38] ? rtnl_is_locked+0x9/0x20 [ 2244.892662][ T38] ops_undo_list+0x49a/0x990 [ 2244.892697][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 2244.892721][ T38] ? rt_spin_unlock+0x150/0x200 [ 2244.892766][ T38] ? rt_spin_unlock+0x161/0x200 [ 2244.892799][ T38] cleanup_net+0x4de/0x7b0 [ 2244.892829][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 2244.892859][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 2244.892884][ T38] ? process_scheduled_works+0x9ef/0x1770 [ 2244.892909][ T38] process_scheduled_works+0xad1/0x1770 [ 2244.892964][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 2244.892988][ T38] ? do_raw_spin_lock+0x121/0x290 [ 2244.893032][ T38] worker_thread+0x8a0/0xda0 [ 2244.893072][ T38] ? __kthread_parkme+0x7b/0x200 [ 2244.893112][ T38] kthread+0x711/0x8a0 [ 2244.893147][ T38] ? __pfx_worker_thread+0x10/0x10 [ 2244.893172][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.893201][ T38] ? rt_spin_unlock+0x150/0x200 [ 2244.893236][ T38] ? rt_spin_unlock+0x161/0x200 [ 2244.893265][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.893298][ T38] ret_from_fork+0x510/0xa50 [ 2244.893334][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2244.893357][ T38] ? __switch_to+0xc9e/0x1480 [ 2244.893395][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.893429][ T38] ret_from_fork_asm+0x1a/0x30 [ 2244.893482][ T38] [ 2244.893504][ T38] INFO: task syz.4.22310:30752 blocked for more than 147 seconds. [ 2244.893522][ T38] Tainted: G L syzkaller #0 [ 2244.893534][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2244.893544][ T38] task:syz.4.22310 state:D stack:23904 pid:30752 tgid:30751 ppid:19704 task_flags:0x400140 flags:0x00080002 [ 2244.893609][ T38] Call Trace: [ 2244.893617][ T38] [ 2244.893630][ T38] __schedule+0x145f/0x5070 [ 2244.893666][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 2244.893699][ T38] ? stack_depot_save_flags+0x3f3/0x810 [ 2244.893730][ T38] ? __bfs+0x154/0x290 [ 2244.893777][ T38] ? check_noncircular+0xda/0x150 [ 2244.893818][ T38] ? __pfx___schedule+0x10/0x10 [ 2244.893863][ T38] ? schedule+0x91/0x360 [ 2244.893906][ T38] schedule+0x165/0x360 [ 2244.893942][ T38] schedule_timeout+0x9a/0x270 [ 2244.893978][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 2244.894013][ T38] ? do_raw_spin_lock+0x121/0x290 [ 2244.894049][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 2244.894069][ T38] ? wait_for_completion+0x267/0x5d0 [ 2244.894094][ T38] wait_for_completion+0x2bf/0x5d0 [ 2244.894136][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 2244.894168][ T38] ? remove_client_context+0x19c/0x1e0 [ 2244.894206][ T38] disable_device+0x1c6/0x320 [ 2244.894228][ T38] ? __pfx_disable_device+0x10/0x10 [ 2244.894248][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 2244.894271][ T38] ? mutex_lock_nested+0x154/0x1d0 [ 2244.894298][ T38] ? __ib_unregister_device+0x284/0x3f0 [ 2244.894333][ T38] __ib_unregister_device+0x2cb/0x3f0 [ 2244.894366][ T38] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 2244.894404][ T38] ib_unregister_device_and_put+0xb8/0xf0 [ 2244.894440][ T38] nldev_dellink+0x2d1/0x320 [ 2244.894473][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 2244.894592][ T38] ? rcu_is_watching+0x15/0xb0 [ 2244.894613][ T38] ? cap_capable+0x123/0x440 [ 2244.894650][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 2244.894683][ T38] ? bpf_lsm_capable+0x9/0x20 [ 2244.894704][ T38] ? security_capable+0x7e/0x2e0 [ 2244.894730][ T38] ? __pfx_nldev_dellink+0x10/0x10 [ 2244.894786][ T38] rdma_nl_rcv+0x6ae/0x980 [ 2244.894830][ T38] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 2244.894883][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 2244.894923][ T38] netlink_unicast+0x846/0xa10 [ 2244.894962][ T38] ? __pfx_netlink_unicast+0x10/0x10 [ 2244.894988][ T38] ? __alloc_skb+0x198/0x3a0 [ 2244.895015][ T38] ? netlink_sendmsg+0x642/0xb30 [ 2244.895045][ T38] ? skb_put+0x11b/0x210 [ 2244.895074][ T38] netlink_sendmsg+0x805/0xb30 [ 2244.895113][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2244.895151][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2244.895182][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2244.895212][ T38] __sock_sendmsg+0x21c/0x270 [ 2244.895250][ T38] ____sys_sendmsg+0x508/0x810 [ 2244.895279][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2244.895309][ T38] ? import_iovec+0x74/0xa0 [ 2244.895331][ T38] ___sys_sendmsg+0x21f/0x2a0 [ 2244.895355][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 2244.895384][ T38] ? futex_wait+0x285/0x360 [ 2244.895439][ T38] ? __fget_files+0x2a/0x420 [ 2244.895458][ T38] ? __fget_files+0x3a6/0x420 [ 2244.895485][ T38] __x64_sys_sendmsg+0x1a1/0x260 [ 2244.895510][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2244.895540][ T38] ? rcu_is_watching+0x15/0xb0 [ 2244.895567][ T38] do_syscall_64+0xec/0xf80 [ 2244.895586][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2244.895602][ T38] ? trace_irq_disable+0x37/0x100 [ 2244.895621][ T38] ? clear_bhb_loop+0x60/0xb0 [ 2244.895643][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2244.895660][ T38] RIP: 0033:0x7ff414cff749 [ 2244.895677][ T38] RSP: 002b:00007ff412f5e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2244.895695][ T38] RAX: ffffffffffffffda RBX: 00007ff414f55fa0 RCX: 00007ff414cff749 [ 2244.895709][ T38] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 2244.895720][ T38] RBP: 00007ff414d83f91 R08: 0000000000000000 R09: 0000000000000000 [ 2244.895731][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2244.895741][ T38] R13: 00007ff414f56038 R14: 00007ff414f55fa0 R15: 00007ffcf0dadfe8 [ 2244.895778][ T38] [ 2244.895838][ T38] [ 2244.895838][ T38] Showing all locks held in the system: [ 2244.895849][ T38] 4 locks held by ktimers/1/29: [ 2244.895862][ T38] 1 lock held by khungtaskd/38: [ 2244.895871][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2244.895955][ T38] 2 locks held by kworker/u8:11/3454: [ 2244.895965][ T38] #0: ffff88813ff69138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2244.896022][ T38] #1: ffffc9000dc9fbc0 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2244.896067][ T38] 2 locks held by getty/5555: [ 2244.896076][ T38] #0: ffff88814ecbd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2244.896120][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 2244.896177][ T38] 9 locks held by kworker/u8:21/24477: [ 2244.896192][ T38] 4 locks held by kworker/u8:32/30435: [ 2244.896202][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 2244.896243][ T38] #1: ffffc90005d8fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 2244.896283][ T38] #2: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 2244.896324][ T38] #3: ffff88805c3ec750 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300 [ 2244.896373][ T38] 2 locks held by syz.4.22310/30752: [ 2244.896383][ T38] #0: ffffffff99013378 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980 [ 2244.896427][ T38] #1: ffff88805c3ec750 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 2244.896475][ T38] 9 locks held by syz-executor/31801: [ 2244.896489][ T38] 1 lock held by syz.5.22861/1660: [ 2244.896499][ T38] #0: ffffffff8e8a8c38 (bpf_dispatcher_xdp.mutex){+.+.}-{4:4}, at: bpf_dispatcher_change_prog+0x9c/0xc90 [ 2244.896542][ T38] 1 lock held by dhcpcd/1666: [ 2244.896558][ T38] #0: ffff88803b600358 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 2244.896614][ T38] 1 lock held by syz.0.22867/1679: [ 2244.896624][ T38] #0: ffff888074c59d30 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x214/0x4d0 [ 2244.896668][ T38] 2 locks held by syz.0.22867/1680: [ 2244.896678][ T38] [ 2244.896683][ T38] ============================================= [ 2244.896683][ T38] [ 2244.896691][ T38] NMI backtrace for cpu 0 [ 2244.896707][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2244.896730][ T38] Tainted: [L]=SOFTLOCKUP [ 2244.896737][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2244.896756][ T38] Call Trace: [ 2244.896764][ T38] [ 2244.896772][ T38] dump_stack_lvl+0xe8/0x150 [ 2244.896797][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2244.896821][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2244.896842][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2244.896868][ T38] sys_info+0x135/0x170 [ 2244.896887][ T38] watchdog+0xf95/0xfe0 [ 2244.896911][ T38] ? watchdog+0x20a/0xfe0 [ 2244.896936][ T38] kthread+0x711/0x8a0 [ 2244.896963][ T38] ? __pfx_watchdog+0x10/0x10 [ 2244.896982][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.897006][ T38] ? rt_spin_unlock+0x150/0x200 [ 2244.897035][ T38] ? rt_spin_unlock+0x161/0x200 [ 2244.897057][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.897082][ T38] ret_from_fork+0x510/0xa50 [ 2244.897104][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2244.897122][ T38] ? __switch_to+0xc9e/0x1480 [ 2244.897152][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.897178][ T38] ret_from_fork_asm+0x1a/0x30 [ 2244.897217][ T38] [ 2244.897225][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2244.897261][ C1] NMI backtrace for cpu 1 [ 2244.897281][ C1] CPU: 1 UID: 0 PID: 24477 Comm: kworker/u8:21 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2244.897308][ C1] Tainted: [L]=SOFTLOCKUP [ 2244.897315][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2244.897329][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 2244.897353][ C1] RIP: 0010:__lock_acquire+0x183a/0x2cf0 [ 2244.897382][ C1] Code: bc 1e 1f 13 4d 85 e4 0f 84 b2 01 00 00 49 8b 44 24 10 48 85 c0 0f 84 1c 0d 00 00 8b 0d a7 1e 1f 13 39 48 5c 0f 84 67 ff ff ff <89> 48 5c 49 8b 44 24 30 48 85 c0 74 25 41 0f b6 4c 24 2a 89 ca 80 [ 2244.897400][ C1] RSP: 0018:ffffc90014d2e6a0 EFLAGS: 00000093 [ 2244.897415][ C1] RAX: ffffffff926a7100 RBX: 00000000000003cd RCX: 00000000001026ca [ 2244.897429][ C1] RDX: 0000000000000008 RSI: ffff8880347ee7b8 RDI: 00000000000003cd [ 2244.897441][ C1] RBP: 28a6e9d680098e71 R08: ffffc90014d2e668 R09: 0000000000000020 [ 2244.897455][ C1] R10: dffffc0000000000 R11: ffffffff819cebf0 R12: ffffffff957fc768 [ 2244.897470][ C1] R13: ffff8880347ee7b8 R14: ffff8880347edac0 R15: 0000000000000645 [ 2244.897484][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 2244.897500][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2244.897513][ C1] CR2: 0000001b2ee23ffc CR3: 0000000094012000 CR4: 00000000003526f0 [ 2244.897530][ C1] DR0: 0000000000800003 DR1: 00000000000001f5 DR2: 0000000000000483 [ 2244.897542][ C1] DR3: 0000000000000007 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2244.897554][ C1] Call Trace: [ 2244.897561][ C1] [ 2244.897583][ C1] ? cpudl_clear+0x6a/0x3b0 [ 2244.897604][ C1] lock_acquire+0x107/0x340 [ 2244.897630][ C1] ? cpudl_clear+0x6a/0x3b0 [ 2244.897655][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 2244.897682][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 2244.897701][ C1] ? cpudl_clear+0x6a/0x3b0 [ 2244.897722][ C1] cpudl_clear+0x6a/0x3b0 [ 2244.897750][ C1] dequeue_dl_entity+0x3a7/0xc10 [ 2244.897784][ C1] update_curr_dl_se+0x5b1/0xb70 [ 2244.897813][ C1] ? update_se+0x2e8/0x5e0 [ 2244.897832][ C1] update_curr+0x226/0x500 [ 2244.897864][ C1] enqueue_task_fair+0x2bc/0x2780 [ 2244.897896][ C1] enqueue_task+0xb3/0x4c0 [ 2244.897920][ C1] ttwu_do_activate+0x1dc/0x860 [ 2244.897951][ C1] try_to_wake_up+0x721/0x12b0 [ 2244.897982][ C1] kick_pool+0x47d/0x640 [ 2244.898010][ C1] ? insert_work+0x273/0x330 [ 2244.898030][ C1] __queue_work+0xd0b/0xff0 [ 2244.898056][ C1] ? __queue_work+0x1d0/0xff0 [ 2244.898080][ C1] queue_work_on+0x106/0x1c0 [ 2244.898106][ C1] wg_packet_receive+0x13c0/0x2630 [ 2244.898128][ C1] ? wg_packet_receive+0x92c/0x2630 [ 2244.898152][ C1] ? __pfx_wg_packet_receive+0x10/0x10 [ 2244.898172][ C1] ? udp4_lib_lookup2+0x3bc/0x950 [ 2244.898193][ C1] ? udp4_lib_lookup2+0x946/0x950 [ 2244.898220][ C1] ? xfrm4_policy_check+0x4c2/0x6c0 [ 2244.898249][ C1] wg_receive+0x75/0xa0 [ 2244.898270][ C1] udp_queue_rcv_one_skb+0x15ca/0x17f0 [ 2244.898303][ C1] ? __pfx_wg_receive+0x10/0x10 [ 2244.898325][ C1] ? __pfx_udp_queue_rcv_one_skb+0x10/0x10 [ 2244.898360][ C1] udp_unicast_rcv_skb+0x257/0x400 [ 2244.898386][ C1] ? __udp4_lib_rcv+0x137f/0x2600 [ 2244.898414][ C1] __udp4_lib_rcv+0x138f/0x2600 [ 2244.898450][ C1] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 2244.898479][ C1] ? __pfx_udp_rcv+0x10/0x10 [ 2244.898505][ C1] ip_protocol_deliver_rcu+0x282/0x440 [ 2244.898532][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 2244.898559][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 2244.898595][ C1] NF_HOOK+0x30c/0x3a0 [ 2244.898621][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2244.898648][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2244.898671][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2244.898695][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2244.898723][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2244.898752][ C1] ? skb_dst+0x4f/0xd0 [ 2244.898778][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 2244.898805][ C1] NF_HOOK+0x30c/0x3a0 [ 2244.898830][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2244.898856][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2244.898880][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2244.898906][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2244.898937][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2244.898961][ C1] __netif_receive_skb+0x143/0x380 [ 2244.898983][ C1] ? process_backlog+0x272/0x8f0 [ 2244.899010][ C1] process_backlog+0x315/0x8f0 [ 2244.899036][ C1] __napi_poll+0xae/0x520 [ 2244.899056][ C1] net_rx_action+0x64a/0xdb0 [ 2244.899085][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2244.899104][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 2244.899140][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2244.899170][ C1] ? send4+0x204/0xed0 [ 2244.899197][ C1] handle_softirqs+0x1df/0x650 [ 2244.899224][ C1] __local_bh_enable_ip+0x171/0x2c0 [ 2244.899247][ C1] ? wg_socket_send_skb_to_peer+0x59/0x200 [ 2244.899269][ C1] wg_socket_send_skb_to_peer+0x199/0x200 [ 2244.899294][ C1] wg_packet_handshake_send_worker+0x1db/0x320 [ 2244.899317][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 2244.899350][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 2244.899370][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 2244.899392][ C1] process_scheduled_works+0xad1/0x1770 [ 2244.899428][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 2244.899448][ C1] ? do_raw_spin_lock+0x21f/0x290 [ 2244.899478][ C1] worker_thread+0x8a0/0xda0 [ 2244.899513][ C1] kthread+0x711/0x8a0 [ 2244.899540][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2244.899563][ C1] ? __pfx_kthread+0x10/0x10 [ 2244.899588][ C1] ? rt_spin_unlock+0x150/0x200 [ 2244.899616][ C1] ? rt_spin_unlock+0x161/0x200 [ 2244.899640][ C1] ? __pfx_kthread+0x10/0x10 [ 2244.899668][ C1] ret_from_fork+0x510/0xa50 [ 2244.899689][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2244.899709][ C1] ? __switch_to+0xc9e/0x1480 [ 2244.899739][ C1] ? __pfx_kthread+0x10/0x10 [ 2244.899768][ C1] ret_from_fork_asm+0x1a/0x30 [ 2244.899806][ C1] [ 2244.900264][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2244.900284][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2244.900307][ T38] Tainted: [L]=SOFTLOCKUP [ 2244.900314][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2244.900324][ T38] Call Trace: [ 2244.900332][ T38] [ 2244.900339][ T38] vpanic+0x1e0/0x670 [ 2244.900368][ T38] panic+0xb9/0xc0 [ 2244.900392][ T38] ? __pfx_panic+0x10/0x10 [ 2244.900424][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2244.900451][ T38] watchdog+0xfdf/0xfe0 [ 2244.900475][ T38] ? watchdog+0x20a/0xfe0 [ 2244.900500][ T38] kthread+0x711/0x8a0 [ 2244.900527][ T38] ? __pfx_watchdog+0x10/0x10 [ 2244.900546][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.900568][ T38] ? rt_spin_unlock+0x150/0x200 [ 2244.900595][ T38] ? rt_spin_unlock+0x161/0x200 [ 2244.900639][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.900664][ T38] ret_from_fork+0x510/0xa50 [ 2244.900686][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2244.900703][ T38] ? __switch_to+0xc9e/0x1480 [ 2244.900733][ T38] ? __pfx_kthread+0x10/0x10 [ 2244.900766][ T38] ret_from_fork_asm+0x1a/0x30 [ 2244.900805][ T38] [ 2244.909513][ T38] Kernel Offset: disabled