last executing test programs: 18m42.288805539s ago: executing program 32 (id=871): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_emit_ethernet(0x36, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee6ff80bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 14m5.828132331s ago: executing program 1 (id=1613): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) set_mempolicy(0x6002, 0x0, 0x4) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) 14m0.396140017s ago: executing program 1 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0xff}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x0, 0xfc}}], 0x38) 13m45.386343678s ago: executing program 33 (id=1620): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time={0xff}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @note={0x0, 0xfc}}], 0x38) 13m21.09161424s ago: executing program 34 (id=1667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) shmget(0x2, 0x1000, 0x200, &(0x7f00003a3000/0x1000)=nil) shmget(0x2, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 11m31.592019602s ago: executing program 7 (id=1909): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmsg$802154_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)="d9536b9e4ec1457e4831f9b20e8701", 0xf}}, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f00000010c0)=0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000041c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f0000005240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005200)={&(0x7f0000001180)={0x10, 0x3f5, 0x300, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x200088c5) syz_emit_ethernet(0x46, &(0x7f0000001200)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd609e192300100000fe8000"/35], 0x0) pipe(0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x100000004, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x5, &(0x7f0000000000)=0x9, 0x8, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) pivot_root(&(0x7f00000011c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000021c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11m29.735522354s ago: executing program 7 (id=1914): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) io_uring_setup(0x177f, &(0x7f0000000140)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x202, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x3, r3, 0x5}) fcntl$setsig(r0, 0xa, 0x21) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x202, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80, 0x2e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c0c4) 11m28.22888943s ago: executing program 7 (id=1921): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000003c0)={{0xa, 0x4e21, 0x6, @mcast2, 0x10}, {0xa, 0x4e23, 0x3eb3, @mcast1, 0x8}, 0x1, {[0x8, 0x8, 0x6, 0xfffff801, 0x7, 0x2, 0x1, 0x478]}}, 0x5c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) sendfile(r5, r6, 0x0, 0x2) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 11m26.408168172s ago: executing program 7 (id=1925): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) syz_open_dev$vim2m(0x0, 0x200000000000000, 0x2) socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$sg(0x0, 0x0, 0x101005) socket$inet_sctp(0x2, 0x400000000001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) shutdown(r1, 0x0) 11m24.832560202s ago: executing program 7 (id=1931): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000640)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0, @ANYBLOB]) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x40001, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e56cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca3aad6b39905a9727d2001457df7be7e1aefebaf80e2697c143f28def4b73905ca14d90d1f600"}) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 11m23.32013235s ago: executing program 7 (id=1934): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @pix={0xb134, 0x7, 0x31435641, 0x9, 0x6, 0x7, 0xa, 0x7, 0x1, 0x7}}) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) unshare(0xa0060900) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x0) r3 = memfd_create(0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x7632, 0x8, 0x3136564e, 0x9, 0x3, [{0x2, 0x3}, {0x5}, {0x10000, 0x10000}, {0x33, 0x7ff}, {0x8, 0xffff61d4}, {0xff}, {0xffffff6b, 0x5}, {0x0, 0x7}], 0x3, 0xc, 0x0, 0x0, 0x4}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) splice(r3, 0x0, r2, 0x0, 0x4, 0xd) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}, 0xa) 11m8.055042419s ago: executing program 35 (id=1934): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @pix={0xb134, 0x7, 0x31435641, 0x9, 0x6, 0x7, 0xa, 0x7, 0x1, 0x7}}) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) unshare(0xa0060900) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r2, 0x0) r3 = memfd_create(0x0, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000080)={0x1, @pix_mp={0x7632, 0x8, 0x3136564e, 0x9, 0x3, [{0x2, 0x3}, {0x5}, {0x10000, 0x10000}, {0x33, 0x7ff}, {0x8, 0xffff61d4}, {0xff}, {0xffffff6b, 0x5}, {0x0, 0x7}], 0x3, 0xc, 0x0, 0x0, 0x4}}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) splice(r3, 0x0, r2, 0x0, 0x4, 0xd) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf}, 0xa) 9m47.893227506s ago: executing program 6 (id=2096): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x3ed, 0x200, 0x70bd29, 0x25dfdbfb, "3bd4a1a19f1de9"}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x2044015) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r3, 0x80089203, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4010) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0], 0x44}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x11, 0x0, 0x0) 9m47.460466118s ago: executing program 6 (id=2099): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$tipc(0x1e, 0x5, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8008, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x5, 0x1, 0x1, "7e0efe3287fdaced3d4fd6e8c46a2ca55aab2500000000b482b200", 0x3031334d}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffdfc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 9m44.800698726s ago: executing program 6 (id=2102): socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x28, 0x4, r4, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000380)={0x28, 0x3, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m43.488655403s ago: executing program 6 (id=2106): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup3(r2, r3, 0x0) recvmmsg(r4, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0xf00, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x4008000) creat(0x0, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/oops_count', 0x0, 0x0) close(r0) 9m38.098090846s ago: executing program 6 (id=2114): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @broadcast, 0x0}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000340)=""/97, 0x0, 0x61, 0x0, 0xa, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xffff, 0x0, 0x6, 0x4040, r3, 0x3, '\x00', r4, r5, 0x2, 0x2, 0x0, 0x800000007, @void, @value, @void, @value}, 0x50) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x501000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x20}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8937, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x600c01, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x56}, 0x0, 0x40000000, 0x1, {0x1}}) io_uring_enter(r0, 0x47f6, 0x21000000, 0x0, 0x0, 0xfffffffffffffeb4) 9m33.069221034s ago: executing program 6 (id=2123): r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x101, 0x300}}) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xffffffffffffff15}}]}, 0x30}}, 0x800) 9m18.020199774s ago: executing program 36 (id=2123): r0 = socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b45, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x101, 0x300}}) r4 = socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xffffffffffffff15}}]}, 0x30}}, 0x800) 4m40.835560623s ago: executing program 8 (id=2642): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x4000000805, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x7734, &(0x7f0000000380)={0x0, 0x5914, 0x1, 0xfffffffd, 0x2b8}, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @mcast2, @remote, 0x10}}) syz_io_uring_setup(0x4033, &(0x7f0000000000)={0x0, 0x9231, 0x80, 0x3}, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4m38.507925664s ago: executing program 8 (id=2649): socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x20}, 0x1, 0x0, 0x0, 0x48004}, 0x40800) sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f00000012c0), &(0x7f0000000080)={'fscrypt:', @auto=[0x33, 0x39, 0x37, 0x33, 0x31, 0x33, 0x34, 0x62, 0x31, 0x31, 0x65, 0x36, 0x34, 0x34, 0x35, 0x64]}, &(0x7f00000000c0)={0x0, "f1a1173fd9462d3589e671a5f90be6e423ceb0ab4912f9f6a318cfed21fcad7ff0fbcb0d6a0982f8938caa52dd8d39af14c31ed56ad59300", 0x3e}, 0x48, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x70bd2a, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f00000028c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000002c00)=""/4100, 0x1004}], 0x4}}], 0x1, 0x40000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x9800}}, 0x2e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0xffffffffffffff99) 4m38.18687417s ago: executing program 8 (id=2650): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x6, &(0x7f00000001c0)=0xffffffffffffffff, 0x80, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x38) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r6, 0x5607, 0x2) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1800000000030500000000000000fd000000000092000000"], 0x18}}, 0x0) 4m35.471947584s ago: executing program 8 (id=2652): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8000000000004, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x0, 0x0, 0x2c, 0x2, 0x104, 0x2}) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) 4m34.033357804s ago: executing program 8 (id=2655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe0500000000000000000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) 4m30.310957349s ago: executing program 8 (id=2660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m14.096388879s ago: executing program 37 (id=2660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m33.964368773s ago: executing program 0 (id=2862): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000340)="db", 0x1}], 0x1) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) recvmmsg(r5, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r1) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=mma']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r7 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r7, r8, 0x0, 0x7ffff000) lstat(&(0x7f00000002c0)='./file0\x00', 0x0) 2m30.820232209s ago: executing program 0 (id=2868): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='mm_collapse_huge_page_isolate\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280)=0x38, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWSETELEM={0x20, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x7c}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$int_in(r2, 0x5421, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000002c0)={0x0, 0x1}) 2m27.749688584s ago: executing program 0 (id=2872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0x98}}, 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000080)={0x0, {0x5, 0x4}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, 0x0, 0x0) write$usbip_server(r2, &(0x7f0000000100)=@ret_unlink={{0x4, 0x0, 0x0, 0x0, 0x5}, {0x1}}, 0x30) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) 2m25.379727557s ago: executing program 0 (id=2878): socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x200000008b}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0x30) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0x1, 0x0, 0x3247504d, 0x7, 0x800, 0x9, 0x3, 0x6, 0x0, 0x6, 0x2, 0x1}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, 0x0, 0x0) 2m23.117709505s ago: executing program 0 (id=2881): gettid() bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r0, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x4}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) write$FUSE_OPEN(r0, &(0x7f00000002c0)={0x20, 0x0, r1}, 0x20) 2m21.729266372s ago: executing program 0 (id=2884): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) open(0x0, 0x143042, 0xe2) 2m6.589663169s ago: executing program 38 (id=2884): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x206, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) clock_getres(0xfffffffffffffff1, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x0) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast]}, 0x48) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, 0x0) open(0x0, 0x143042, 0xe2) 1m41.683210182s ago: executing program 5 (id=2950): socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r3, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/8, 0x8}, {&(0x7f00000000c0)=""/188, 0xbc}], 0x2) dup(0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000940)=[{{&(0x7f00000004c0)={0xa, 0x4e1d, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000007c0)={0xa, 0x4e28, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="200000000000000029000000370000002f00000000000000c204000000070000200000000000000034000000360000007300000000000000c2040000000900001400000000000000290000000800000000000000000000001400000000000000290000003400000080000000000000001400000000000000290000000b000000000004010000000020000000000000002900000037000000080000000000000000010004010000e3170000000000000029000000040000002b0000000000000014"], 0xd8}}], 0x2, 0x0) 1m38.532601582s ago: executing program 5 (id=2953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305616, &(0x7f0000000080)={0x0, {0x5, 0x4}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, 0x0, 0x0) write$usbip_server(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000100)={0xc, 0x8, 0xfa00, {0xffffffffffffffff}}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) 1m33.375983491s ago: executing program 5 (id=2962): sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r3, 0x5402, 0x0) r4 = dup(r3) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r7, &(0x7f0000000140)=ANY=[], 0xff2e) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x4008050) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)) r8 = syz_open_pts(r7, 0x60c40) r9 = dup3(r8, r7, 0x0) read$FUSE(r9, &(0x7f0000001a40)={0x2020}, 0x2020) splice(r7, 0x0, r6, 0x0, 0x3, 0x0) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 1m29.577360598s ago: executing program 5 (id=2967): r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000a00)=ANY=[@ANYBLOB="04"], 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$alg(0x26, 0x5, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4c085) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="6e02c49f365031924ea6699facb1a3bb72dde352b13f67fc75cce90c802f06a53b75f5b4649c005296d43efc5b6c6281d208125615fff674d9e0cb48a20244e970c4e5838f749d092f704de87680ca88", 0x50}, {&(0x7f0000000700)="dcbb2ec18acf2ae030d6a8", 0xb}], 0x2, 0x0, 0x0, 0x6000004}}], 0x1, 0x40050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1m28.605840855s ago: executing program 5 (id=2968): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) 1m27.41480223s ago: executing program 5 (id=2970): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x12) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x8, 0x0, &(0x7f00000007c0)="9f44948721919580", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write(r1, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) 1m12.101201152s ago: executing program 39 (id=2970): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x12) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x8, 0x0, &(0x7f00000007c0)="9f44948721919580", 0x0, 0x241, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write(r1, &(0x7f0000000100), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x2}}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000014c0)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) 15.224664781s ago: executing program 9 (id=3071): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[], 0x20}}, 0x1) openat(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'rr\x00'}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x8, &(0x7f0000000000)) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x1275, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r5, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback}, 0x7c, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 14.203553554s ago: executing program 2 (id=3072): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) sendmmsg(r0, &(0x7f0000001180), 0x0, 0x20000055) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xe9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 13.118093895s ago: executing program 9 (id=3074): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r2, 0xfffffffc}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ff, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, 0xffffffffffffffff, 0xb}}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r4 = io_uring_setup(0x29d5, &(0x7f0000000100)={0x0, 0x9255}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000000800bbfe8000000000000000000022000000aa0200907800000000605b29ab00001100fc010000000000000000000000000000ff01000000000000000000000000000100000000000000000532000000000000fb36eeca6fad50b375a22a584d16ca559e9e3cfb7cc9ffa1e9fc72e2a7a15ec712ee5d"], 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r6, 0x1) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$nci(r0, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000300)}}, 0x18) 12.190628191s ago: executing program 3 (id=3076): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x80000000000008, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "27d6fbaafc521ec401fb21bc3ae8496f903a09dddf333a06fc3b73473df74440b027e481ad8aa0e3cae0"}, 0x35) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) getresuid(0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x9, 0x2, 0x0, &(0x7f0000000340)=0x2, 0x0) 12.173221923s ago: executing program 2 (id=3077): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x101) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, 0x0, 0x0) sendfile(r4, r3, 0x0, 0xffefffff) shutdown(r4, 0x0) preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000040)}, {&(0x7f00000000c0)=""/170, 0xaa}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000001c0)=""/81, 0x51}, {&(0x7f0000000240)=""/152, 0x98}], 0x5, 0x1, 0x7) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r5, 0x1) ioctl$int_in(r5, 0x5452, &(0x7f0000000180)=0x401) listen(r5, 0x0) accept4(r5, 0x0, 0x0, 0x0) shutdown(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x1a}}]}, 0x1c}}, 0x0) close(r0) 11.288602493s ago: executing program 2 (id=3078): syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$vga_arbiter(r0, 0x0, 0x0) syz_io_uring_setup(0x2386, &(0x7f0000002fc0)={0x0, 0x0, 0x1800}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x947, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r4) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x20000004) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r6}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000040)}) 11.112658164s ago: executing program 3 (id=3079): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) socket(0x10, 0x400000000080803, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r4, 0x89e0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) 11.064486769s ago: executing program 4 (id=3080): r0 = gettid() bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x4}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00'}, 0x10) write$FUSE_OPEN(r1, &(0x7f00000002c0)={0x20, 0x0, r2}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@userxattr}, {@nfs_export_on}, {@redirect_dir_nofollow}]}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r3 = syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x4c85, 0x40, 0x3, 0x2d7}, &(0x7f0000000080), &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x28000810) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000001c0)=0x6) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x1e, &(0x7f0000000180), 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000041600000400100008000000142d0000", @ANYRES8=r0, @ANYBLOB="0000000000ff35ca8ab34cbfa0ef89e4f7b872ea", @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x50) 10.868011731s ago: executing program 9 (id=3081): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x80000000000008, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "27d6fbaafc521ec401fb21bc3ae8496f903a09dddf333a06fc3b73473df74440b027e481ad8aa0e3cae0"}, 0x35) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) getresuid(0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x9, 0x2, 0x0, &(0x7f0000000340)=0x2, 0x0) 9.954480306s ago: executing program 2 (id=3082): r0 = gettid() bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x4}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) write$FUSE_OPEN(r1, &(0x7f00000002c0)={0x20, 0x0, r2}, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@userxattr}, {@nfs_export_on}, {@redirect_dir_nofollow}]}) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r4 = syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x4c85, 0x40, 0x3, 0x2d7}, &(0x7f0000000080), &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r5], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x28000810) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000001c0)=0x6) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x1e, &(0x7f0000000180), 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000041600000400100008000000142d0000", @ANYRES8=r0, @ANYBLOB="0000000000ff35ca8ab34cbfa0ef89e4f7b872ea", @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x50) 9.926871347s ago: executing program 4 (id=3091): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ustat(0xfffffffeffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1000000010, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000480)='adfs\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000540)={0x1f, @none}, 0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f00000008c0)={0x0, 0xfb, 0xef0, 0x0, 0x8, "8a0ee9c0f380cf348f128dba81c754cb", "9c35547dc3c586d203356255f55afbcb790f76752067429935c8bb44d371ddd8b2404803ba2feeed919400cd64d65ec00845952b77b2df56defb76abc3e06662302903fef3e3055667bf76586f71027d6d5a6cbf91e846384c794f1ad0611b4b71c51cf44f1f49f2490d27466f37697250cb1de9644faeee4c208e5d17c9735eb91f08134ef91d44d75f2c98da6a9d189e2d08a824f7fab84e5e7ede7b224f5ed83a62247c5c30be284040a7be4b838d2793c4e472321140a18da892e847244e7a388988edea8ad27dc323aa6d9a9afd1c6901af052d3cc6acee4e7efa970bab88994271ce01018865e3ae87cc49ed79783d1bd86058257dd03108023d59c7a2609d2d6074169735d54e552d84509bedd6093873792d2995fc3c3601caea26e84e9f1612ca4e3b2ac4bdf40fcd061924ec238cbfea0912a3e010412ba17d2d0a075a75fd06cebc12084e3927e9816a5e9e263a9b3362a5515c91043397ad0bcbf98f233779c353d99fd4bc3e6922deda5b51a461164806a2e4ae840faa7930781c4fa25539c1d8b80755c96b381e35c383bca5c9060e42021f0c11c592e0c4266e0f304fae25f7226091e43920f0e6b7ee4c852136206e5e927ede6e5e4c92a2b331e00e436b52fed65c31d3cb4b9f1e2f8b7ae8ab6d8588259818e4414d3c2e4218a1f27c7021ea3eb5c80b4cae8bf15a1d65e744049f93d3838f07bf1c4b86810370411a317073486ed3826e0abca6b8fb698d37067211b481e8abdf52d111a6e45cc05f2c9decc06396c9dd1c2256f9465b902acf20d5d6fd00ef6bd116e64d741d0ff07c4af5f70945fe552c8b16cafbdb443196e049cd89168df3383c0794f3a3fd61b935a987bfe7f98e927985da6f04449fbb5c89a15b1990af46fa901aa3545e9005369736e57ce9e6083a39beb27a1a071818b7b37d018d4b9e8166ed87bb98ad0b64a9c295658136945e3181dacfc138f45e439cb0acb49a3c3c577d0b40d4408013b76cbac54da6c7bee36ed01a455ef25a9f1e65ba489c3faa593e379fc8e1c8b25de85131f34fdf65db5c4ac1c5e976296f49bc93432e9c0d632bbd42e24375c2c8d4142b4e5343a9731945e7e2732b711200f100bcca925837df42845678c1d8efd5d72b5545794fee7aa79462ee9bf34adb0ee29060e9c7abef3cb729912b5786b98584cc39594b8f24694d7d6816fa1a27ff0c83571dceecb4f85b4f5ac9cbb69723b79bde8e261310cc671c2b8b4f31e5bdc0b2e4b57bc724f081cf92dbe62047966ae796c96be6b4a7633e68a3a917a878101d661313419433af81e8c42b2005eda5ea0eb6fd1f8c2723eefb535dc13bc6c9fc2f415f57c0a51248848ccefe1858ee15d6781697a8216c571d4622f866f1c96fc7d640da321126530737aa62f4e8d1f367d2022e15e301a5d624cbd269f917c3d31405d3ea8c9a6febe1988a012df5b3331453fbb0b1de7802b2d45446b282899ae6e65ca4fa542b4ec62a476e31c4cb086ab188c3592a2fc4fd4afe88eebc6da382a892061c9a10d30f8531ffa31a2e3eebda22c85524fc2e31bf2b09498d43e885dfcc9394aa67aed9894389fb827a8d14c387e81d869356ccda7f3780ce97edaf9fccf86d8dc649c9770f947c869ece060c750d8081ab9eb3b1bd1d4786d6b8adafb95bd1b754bbb299a020ed76664af22add3c6f77e117c90df8aa1c7a98234bbe9212302584a830fce48023c0588fa8c73ac6c5e9b204e015705931e99e5cd109303afd7ffc5d54de59dde2daaf780110fe8dac2b2e6c1fee5edff6751c91e838f0b5d17caeb13bce8e68ce7b4d58314687aeba4dd3644925353aade18fef6f6bd106f1861ef8156a400f0c00295158c9542dbf3fb21da86548ad287a610bb3c3f0bf62220cf8775b3250b9e10c4c085d04ddc7e28486fc7fcfee93e748cb4c4f06df0a376872f1f9933f3497e08792f9f8127b761e9320eb8a3489b84c0ce64ca2c96d74fe552ebcb05762d613103d9e1a748ccf7c623d14531e760ce68796b1fcb1c5aa12d7f6396a43a214c02f043dd323a94f1f6ab5cdc0a02c70ce8319deded598bfd2aae27fa51b61b758264a5ece5f794d500ff761e2a241d6a40d0a6feb2a48947c8deb015c07c4197f67c8b8bdd89e3ce8a0066b86d2ee0040c38b42a5323d2e14f29740f44b85e084d38f08c417d9c077020efd095531cbaa8fb889072cc002d25f32473d8d29c3b708060714f27349a3651b0ed031d87bc7ff9133fc65531346e9c70a5a317e1be2330de2d9d4c007f930c349c52c677db42052dc48907737cd651f8680fce4461a5c1f4700b7bd833a1a46464045c2be31c66dee9df266a6c5e4bd675abbf955c0b7be6e0ffcf49d38fca02c459e14d07996b8cfa4360e9ca28ce86e14f639a54bd261b87a51d5c2d844962143b3d0e5fd460ed1d068cd11fef9f4f856bc22a6fee346a0c7fb5c2b159f8562b626e9f8a508c616563bec40961a8707f65e28dfa4ab197f7d6bacf4332f3ea81fa48d9ad12d1782138f8ff2f79b39a78b7449544b33ed697f15aa1f45deff90ea10c61d04cf91221af53d5d68a8fff37e2d158a5a5356f24fcc157207b375a3a06f76c7208812374212726fa6f74475ebb30b88f3c91090c0a991818066d825ea50a79badcb6bfe98aa506fb935fe52b193a8b5d5e666da8a02de4b9b178a54c02edd74368ac8f04ef13edc7c508487554c45eb0f8990c11b5d3219c36d4a061582365b60747aae2e711e0195b057d27dff7f201c82f3bdac6c1893239f0bb75da7dd81719722689884893d34c93d2961774ab16c8f3f06e34cdfeca41ee47e2de0746fb3e52fe96a346f5a81445c35b919fcfd09e2a7e08be30b69a2d42eda266d6a0f663a5c16314316bfcb2968a9ecc1b84ec9d56aeba5bddeaf5dad68fa47b8e517d76412cb3f17d47cc9285da5ab4bc81f444e2e608194428d6c6009e195bf03b99764c2421d98619100f2b4d2aa6488f62fe840cf0fe04e5a10ac62cb47dab44c4c7e0cb5c2fed7a67317a6cc7070312c6e3dd33016716bc871c73208a7e35f53458e6f6d064b05b0abce5fc8e2eaf1957d3c91dce2c13ae142975e55b82dc70deba1bc8d276f7079038b78a538939e198f6e565382ee79183159f91cffe47c34416f5e3c4d24a4e5f843258cb341edf8dd90df22205608c3587b0f7e6f24367b77da7dddf94af2a4d162863f3a2735352672543fe55ed1a8562171a1d3cee97693c2b24c169a80adf58a4242d15f12b6e1c8f3d7680705ee03614bab5cbca7b594d8a73b5473cedda851a6bfb66a5fe3fa1e04d9c79b43ea1c4f8a14cb95446e270a65849c6ed4d9a8f467003fbe9fa864b1e440aec98c95c13f9bd47638ff5a23476b545f9ed346f54954ee3f902eff8039e88bca6d1d1d8473a790dd368e35fb005fee2553ced37070bbb135bc6db9a69c80bf3a1cbe0c632072ff3859b1111d8f73d4ef5431e1d9870d4909c4b6bbd6fc317d36b9f0f0dfdbb163f5df2e4be4fb6ceefed35d324d30ababb0a89a521aa849e83f2c6f3ffd8398e6ba90b62383a5802e145e338414dc0264cab4104605089c993a2b63b6121b699bc1708296a9a12082b0045f6758aef4eea053ef06f8877f5fb82e2da34c0041a0e9aee0834e03308c5cf1453ab8418bad23a76d1444d3de8a87335f73fc8dcfd39f2ada13c92a076e0e37f5c42e7885442ec7924e51cfeaf067a7d776add6ce8e6daacd05e3c1c71583c48857bf29e887952e86c9308e3310113e4e30f45e439ca724a80663920527a39feae745e11953dca656d2842960e18268e13b337a5251703976051e69de9e589caebefe18f21c64c14fe1fa5e5f83b43dae418d3c525423bd11023ae2b2f47b0e60640886a722d4270b9d89b72b825f699bcffa8038528f0ffbdfe08a16503444dc1b0e5c4c7ad0ab253360148263ef4f40751b7231bb9292c2fce7c295c408aba466418bc0a12f608a1204fff5a3712a1c91c152caf4d31d87307656c3cd835c1426e7728cf4e2d6a7be142d2650e264b59db5c7bffad15a23e5eec2b0d8d579d731d682cc09fbd45f01851d69eccde0e04ce69f1a5813183e2511031b018be755cc00f0189fee7f61afcdd6982f1c89b38cb90ad545433de31aa1d7c98784e01bf6819a1dfa060608a324686ccdc2e6890636d0f6e4e821147edde9aefd4f5741892f9b7a920f10e1dbb602a98d68e4316ffe9aec6954641b732865b3be228884a48be22b92e552bc913c226e7c61982be4d8b0178559625c079ee8a651d62e3d0c40b5316e0ffcc9a27b614a506cf251403b805c85d482bd43c2d4e871b7213019fd28bb3b80494e98f8193fcc7df99c8442f3efb6815eab6e0d71eef376cf5c6ac26cfd7b9c6d6fa2d8bf3f02f9f39c12a98059478598fa2a64945b3aaf15e8c979b82c8aafe2a028ee8a5beb033830ea4c3f1e8e7a7e6b09a2a6a01af12d4839fada8dbaab021e36ad9063d330b88ba2cd4290014ece03afb3fe63f42161c36bcd44b8f8ecb15128ee806250bae4531884516ebd25e01ad2cd2bd67b04b8abb77fbb1524ac7a70654dc8da15a426cdef5ffe2ae73ddd15c49d7e172d52f03cf099e6218297da2d4c015b76c5fc70b87803cf7ed2b78d582024424a111c4b7f71c6f103f42baf34e030fec928b9b76971879307a2a88602e70b5a00a2ed1bb150592e9dc0462363b7a221579daf6662be564f7ddff8914c887baa0ebadbdd5ea40aea15c3dd8dfb352638f44d5d129e57ebfabf8c8b984d502cef0f7347d60eab6ef6fa2af2abcb5b3fe7f74b89ef8b043bab73bf1c71de88ea844e6396a89f72750de14dee04906f08974911450ebf098bc5ce61d73332958d705ee63045de73145a3672d8f58d18ddd94f4558d7fe79328c3f8a52109640ea9e5837ca9215299a515b699284e2a0f03718a45be50491579914283ceaa0816968c965fdfaf3cedf789d18679e8ce39b35ae33b6057cf6fb6e2c65c07bf5ce23cae2fba518673a1220c984d9c0307d88910f0cf7a551b642bcd6ec153f2d11cadffc1980fb40980c012516b28961b9e9b5e868871e8bafea4697f12562968c1d56e07925330beea081e26232b52389abea276f5307c23755226f6e253a95991dcc8aca7b9a1edf0c1c69cf89543ac9b1773f7c6698164a2bca7bcfacafef8d2f2859af6cb909882df7e6f4086b0ad6a22a50cc5d322ce16564c363ab9a739de1f78bbfe0a178817589406bcf47d50b54cc7357dacc5788f36ea2bc0bd31ff1ac3814fe5b41a178315f17ee6cf33984ca458a5c70fb7c6269b9dfd6e8fd8e8446905109d1a41eff6ce554c02a5b204e11cc3cfa1d899cc110707aece76b4e40"}, 0xef0, 0x1) listen(0xffffffffffffffff, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xc, {"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", 0x1000}}, 0x1006) 9.864321471s ago: executing program 1 (id=2911): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.862758893s ago: executing program 3 (id=3083): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000f00)=ANY=[], 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket(0x2b, 0x4, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x61]}}, 0x0, 0x1b, 0x0, 0x1, 0x3, 0x10000, @value}, 0x28) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000000)="632bdda57e7fcb09dbca4420f2e37113", 0x10) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) 8.655403348s ago: executing program 4 (id=3084): r0 = socket(0x2, 0xa, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000002"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) read$msr(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, r1, 0x0, 0x5005) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffd, @local}, 0x10) write$binfmt_elf32(r0, 0x0, 0x58) 7.76089389s ago: executing program 4 (id=3085): r0 = gettid() bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) futex_waitv(&(0x7f0000002180)=[{0x2, &(0x7f00000020c0)=0xffffffffffffff6c, 0x2}, {0x3ff, &(0x7f0000002100)=0x4, 0x82}, {0x3, &(0x7f0000002140)=0x11380000000000, 0x82}], 0x3, 0x0, &(0x7f0000002200), 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xa}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000280)={0x80, 0x461a, 0x7, 0x2, 0x4, "85eaae546faf16b73e21755c206e19e518a7f4"}) 7.709385907s ago: executing program 9 (id=3086): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) sendmmsg(r0, &(0x7f0000001180), 0x0, 0x20000055) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xe9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 6.145154558s ago: executing program 4 (id=3087): r0 = gettid() bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004180)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x4}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00'}, 0x10) write$FUSE_OPEN(r1, &(0x7f00000002c0)={0x20, 0x0, r2}, 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x4c85, 0x40, 0x3, 0x2d7}, &(0x7f0000000080), &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x28000810) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000041600000400100008000000142d0000", @ANYRES8=r0, @ANYBLOB="0000000000ff35ca8ab34cbfa0ef89e4f7b872ea", @ANYRES32=0x0, @ANYRES32, @ANYRES8=0x0], 0x50) 6.084683308s ago: executing program 3 (id=3088): openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000300), 0x100040000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000240)=0xfffffffffffffee0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x80000000000008, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "27d6fbaafc521ec401fb21bc3ae8496f903a09dddf333a06fc3b73473df74440b027e481ad8aa0e3cae0"}, 0x35) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) getresuid(0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x9, 0x2, 0x0, &(0x7f0000000340)=0x2, 0x0) 5.884647601s ago: executing program 1 (id=3089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20020400) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x38, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x6}]}]}]}, 0x38}}, 0x0) 3.874272898s ago: executing program 1 (id=3090): ioctl(0xffffffffffffffff, 0x8915, 0x0) syz_open_dev$usbfs(0x0, 0x6, 0x84400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 3.749074164s ago: executing program 2 (id=3092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0xfe}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_dev$vim2m(0x0, 0x7, 0x2) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x8, 0x4) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.748714961s ago: executing program 3 (id=3093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(0x0, 0x0, &(0x7f0000000080), 0x0, 0xffffffffffffffff) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000180)={{@local}, 0x0, 0x0, 0x100000000, 0x0, 0xfffffffe, 0x0, 0x20000007, 0x20000005}) keyctl$revoke(0x3, r3) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000029c0)={r3}, &(0x7f0000002a00)={'enc=', 'oaep', ' hash=', {'wp256-generic\x00'}}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f0000001040)=ANY=[], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) fstat(r2, 0x0) fchown(r2, r6, 0x0) 3.579509961s ago: executing program 9 (id=3094): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="00ffffffed000008e3000000", @ANYRES16, @ANYRES64, @ANYRES64=0x0], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[0xffffffffffffffff], 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000314010027bd7000000000000900130073797a3200000034ad204b88dbae0c00140033007465616d3000"/56], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000001040)={0x5, 0xda1f, 0x3, 0x8a9e, 0x5, "d658e439ece538ad720eb71c0561bd9f20832a", 0x5, 0x54}) write$UHID_INPUT(r5, &(0x7f0000002740)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e1b230963ff7fc6e5539b9b3b098b9b711b5d39101b080d29308f0e1ac6e7049b3468959b189a242a9b64f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62ba678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ff06738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957696c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0xd8b) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@fd, @fda={0x66646185, 0x9, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/117, 0x75, 0x1, 0x1b}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x8, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) 2.633130969s ago: executing program 1 (id=3095): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x80000000000002) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) syz_init_net_socket$ax25(0x3, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1115000, 0x0, 0x0, 0x2}, 0x1c) r3 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') read$FUSE(r3, &(0x7f0000000340)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000340)={0x0, 0xffff, 0x6, 0x0, 0x100003, 0x8001}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 2.632101766s ago: executing program 4 (id=3096): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) r5 = fanotify_init(0x200, 0x0) r6 = memfd_create(&(0x7f0000001440)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x8b\xf4\x87\xe5I\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x066\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06', 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r7 = dup(r6) fanotify_mark(r5, 0x1, 0x4000007b, r7, 0x0) write$cgroup_pid(r7, &(0x7f0000000040), 0x12) ioctl$IOMMU_IOAS_COPY(r3, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, 0x0, r4, 0x1c, 0x3, 0x2}) 2.475908878s ago: executing program 3 (id=3097): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@dyn}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xce9e1000) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000180)={[{@subsystem='hugetlb'}, {@cpuset_v2_mode}, {@subsystem='cpuacct'}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f0000002080)=0x3a, 0x1) 52.948689ms ago: executing program 9 (id=3098): setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @rand_addr, 0x8}, 0x1c) listen(r0, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) getpid() r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0xe9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x88080100}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r6, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@newtaction={0xeb8, 0x30, 0xb, 0x0, 0x0, {}, [{0xea4, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe58, 0x2, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x0, 0x0, 0x0, 0x4}, 0x1}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3272}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}]}}, @TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb8}}, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) 0s ago: executing program 2 (id=3099): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$getflags(r3, 0x401) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) ustat(0xfffffffeffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x2, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000017f82677000000000000000900000000030000009c020000000200000000004db69d690021000000050000000000001bd869b59363b3ea69f36369100f5419eb334869845394409076035e15fa150f573f8ef2db905cfd8b3f5efa06ed3d7a965332d54c39ec3e22154c394cb881121f6374c1fb"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0xd511}}) kernel console output (not intermixed with test programs): netdevsim8 netdevsim1: renamed from eth1 [ 826.699975][T13944] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 826.746824][T13944] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 827.014300][T13944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 827.059210][T13944] 8021q: adding VLAN 0 to HW filter on device team0 [ 827.071028][T11595] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.078172][T11595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.200499][T14107] /dev/nullb0: Can't lookup blockdev [ 827.259758][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.267228][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 828.680818][T13944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 829.663375][T13944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 831.650433][T13944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.959340][T14135] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 831.974142][T14135] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 834.620853][T13944] veth0_vlan: entered promiscuous mode [ 834.759201][T13944] veth1_vlan: entered promiscuous mode [ 834.984686][T14167] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 835.465326][T14169] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x38415262, 2, 0, 0, 0) [ 837.049561][T13944] veth0_macvtap: entered promiscuous mode [ 837.071363][T13944] veth1_macvtap: entered promiscuous mode [ 837.164758][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.263349][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.550636][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 837.573287][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 837.583164][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 838.674289][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 838.693320][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.037166][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.214116][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.293305][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.319459][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.379663][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.446259][T13944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.474330][T14204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 841.564842][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.708446][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.907986][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.201928][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.252566][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.327089][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.433052][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.443718][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.453955][T13944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.464573][T13944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.475520][T13944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.682150][T13944] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.691124][T13944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.699939][T13944] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.716270][T13944] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.002552][T14216] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 844.868110][T11591] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.934398][T14229] Smack: duplicate mount options [ 846.526133][ T8075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.583391][ T8075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.708073][T11591] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.930367][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.938732][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.232501][T11591] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.747221][T11591] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.750689][T14253] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2031'. [ 849.783522][T14253] bond0: option ad_select: unable to set because the bond device is up [ 853.803253][T14288] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 854.478753][T14294] pim6reg: entered allmulticast mode [ 854.512291][T14294] pim6reg: left allmulticast mode [ 854.527467][T14288] [U] `è [ 854.845832][T14304] binder: BC_ACQUIRE_RESULT not supported [ 854.858444][T14304] binder: 14291:14304 ioctl c0306201 20000480 returned -22 [ 856.684768][T11591] bridge_slave_1: left allmulticast mode [ 856.690471][T11591] bridge_slave_1: left promiscuous mode [ 856.797954][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.971934][T11591] bridge_slave_0: left allmulticast mode [ 856.981586][T11591] bridge_slave_0: left promiscuous mode [ 856.992889][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.554773][T14349] netlink: 'syz.8.2054': attribute type 10 has an invalid length. [ 864.519497][T11591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.531801][T11591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.552571][T11591] bond0 (unregistering): Released all slaves [ 865.075825][T14317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 865.089395][T14317] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 865.412067][T14372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2060'. [ 869.536499][T14342] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 870.474794][T14349] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 870.497081][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.546502][T14349] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 871.030207][T14401] batman_adv: batadv0: Adding interface: vxlan0 [ 871.037069][T14401] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 871.063943][T14401] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 872.316595][T14413] netlink: 'syz.8.2070': attribute type 12 has an invalid length. [ 874.381703][ T29] audit: type=1326 audit(1734561061.224:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.412737][ T29] audit: type=1326 audit(1734561061.244:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.449043][ T29] audit: type=1326 audit(1734561061.244:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.470987][ T29] audit: type=1326 audit(1734561061.244:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.492555][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.499381][ T29] audit: type=1326 audit(1734561061.244:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.521277][ T29] audit: type=1326 audit(1734561061.244:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.542835][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.549391][ T29] audit: type=1326 audit(1734561061.244:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.571356][ T29] audit: type=1326 audit(1734561061.244:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.592925][ C1] vkms_vblank_simulate: vblank timer overrun [ 874.599815][ T29] audit: type=1326 audit(1734561061.244:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.622177][ T29] audit: type=1326 audit(1734561061.244:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14426 comm="syz.8.2072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6de1985d29 code=0x7ffc0000 [ 874.643756][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.946640][T14443] bridge0: port 3(vlan5) entered blocking state [ 875.953017][T14443] bridge0: port 3(vlan5) entered disabled state [ 875.959972][T14443] vlan5: entered allmulticast mode [ 875.965269][T14443] syz_tun: entered allmulticast mode [ 875.972523][T14443] vlan5: entered promiscuous mode [ 875.977847][T14443] syz_tun: entered promiscuous mode [ 876.771676][T14455] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2080'. [ 878.371797][T14481] xt_CONNSECMARK: invalid mode: 0 [ 878.404611][T11591] hsr_slave_0: left promiscuous mode [ 880.273345][T11591] hsr_slave_1: left promiscuous mode [ 880.291324][T11591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.299760][T11591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.346315][T11591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.364284][T11591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 881.513590][T11591] veth1_macvtap: left promiscuous mode [ 881.519157][T11591] veth0_macvtap: left promiscuous mode [ 881.552474][T11591] veth1_vlan: left promiscuous mode [ 881.561879][T11591] veth0_vlan: left promiscuous mode [ 881.607778][T14505] IPVS: length: 198 != 24 [ 882.108813][T11591] team0 (unregistering): Port device team_slave_1 removed [ 882.171432][T11591] team0 (unregistering): Port device team_slave_0 removed [ 886.575218][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 886.575274][ T29] audit: type=1326 audit(1734561073.484:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14536 comm="syz.4.2098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x0 [ 888.694344][T14570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 889.624026][T14571] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 889.630566][T14571] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 889.692721][T14571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 889.700467][T14571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 889.711210][T11591] IPVS: stop unused estimator thread 0... [ 889.954688][T14571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 891.657880][T12943] Bluetooth: hci4: command 0x0406 tx timeout [ 891.733344][T12686] Bluetooth: hci3: command 0x0c1a tx timeout [ 892.087515][T14605] net_ratelimit: 10 callbacks suppressed [ 892.087538][T14605] netlink: zone id is out of range [ 892.098545][T14605] netlink: zone id is out of range [ 892.103739][T14605] netlink: zone id is out of range [ 892.108862][T14605] netlink: zone id is out of range [ 892.115943][T14605] netlink: set zone limit has 8 unknown bytes [ 893.308579][T11591] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.742422][T12686] Bluetooth: hci4: command 0x0406 tx timeout [ 893.826883][T12686] Bluetooth: hci3: command 0x0c1a tx timeout [ 894.539391][T11591] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.943429][T12686] Bluetooth: hci3: command 0x0c1a tx timeout [ 897.408905][T11591] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.481552][T14641] binder: 14636:14641 ioctl 4018620d 0 returned -22 [ 898.726867][T14653] kAFS: No cell specified [ 900.178243][T14663] /dev/nullb0: Can't lookup blockdev [ 900.910720][T11591] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.012775][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2123'. [ 903.218692][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'. [ 903.242460][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2128'. [ 903.285547][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2128'. [ 903.358742][T11591] bridge_slave_1: left allmulticast mode [ 903.370796][T11591] bridge_slave_1: left promiscuous mode [ 903.399119][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.621514][T11591] bridge_slave_0: left allmulticast mode [ 903.627438][T11591] bridge_slave_0: left promiscuous mode [ 903.633228][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.600562][T14725] syz.8.2131: attempt to access beyond end of device [ 907.600562][T14725] loop8: rw=0, sector=2, nr_sectors = 1 limit=0 [ 907.614146][T14725] hfs: can't find a HFS filesystem on dev loop8 [ 908.414175][T11591] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 913.765790][T11591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.970290][T11591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.017471][T11591] bond0 (unregistering): Released all slaves [ 914.060092][T11591] bond1 (unregistering): Released all slaves [ 917.280277][T12943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 917.290645][T12943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 917.299859][T12943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 917.308850][T12943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 917.334886][T12943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 917.342238][T12943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 920.663365][T12943] Bluetooth: hci1: command tx timeout [ 920.732326][T12428] bond0: (slave syz_tun): Releasing backup interface [ 922.871471][T12686] Bluetooth: hci1: command tx timeout [ 923.889297][T11591] hsr_slave_0: left promiscuous mode [ 923.902069][T11591] hsr_slave_1: left promiscuous mode [ 925.416509][T12686] Bluetooth: hci1: command tx timeout [ 925.513535][T11591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 925.522522][T11591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.133702][T11591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.141186][T11591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.325926][T11591] veth1_macvtap: left promiscuous mode [ 926.331750][T11591] veth0_macvtap: left promiscuous mode [ 926.344063][T11591] veth1_vlan: left promiscuous mode [ 926.349420][T11591] veth0_vlan: left promiscuous mode [ 927.493410][T12686] Bluetooth: hci1: command tx timeout [ 928.532050][T11591] team0 (unregistering): Port device virt_wifi0 removed [ 929.611859][T11591] team0 (unregistering): Port device team_slave_1 removed [ 929.701467][T11591] team0 (unregistering): Port device team_slave_0 removed [ 931.836455][T14866] : renamed from bond0 (while UP) [ 931.902115][T14797] chnl_net:caif_netlink_parms(): no params data found [ 931.916671][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.826852][T14797] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.841786][T14797] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.860024][T14797] bridge_slave_0: entered allmulticast mode [ 935.698898][T14797] bridge_slave_0: entered promiscuous mode [ 936.323460][T14797] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.370807][T14797] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.379347][T14797] bridge_slave_1: entered allmulticast mode [ 936.386840][T14797] bridge_slave_1: entered promiscuous mode [ 938.605063][T14938] team0: Port device team_slave_1 removed [ 938.630250][T14797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.672130][T14963] pim6reg: entered allmulticast mode [ 938.682631][T14797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.813519][T14971] pim6reg: left allmulticast mode [ 939.929482][T14797] team0: Port device team_slave_0 added [ 939.938619][T14797] team0: Port device team_slave_1 added [ 940.075071][T14797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.146944][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.300333][T14797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.313553][T14797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.320523][T14797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 940.357403][T14797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.609344][T12943] Bluetooth: hci1: command 0x0405 tx timeout [ 942.689188][T11591] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.936130][T15012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2193'. [ 945.228767][T14797] hsr_slave_0: entered promiscuous mode [ 945.250470][T14797] hsr_slave_1: entered promiscuous mode [ 945.259793][T14797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.268658][T14797] Cannot create hsr debugfs directory [ 945.382633][T15012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.397999][T15012] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.409202][T15012] tipc: Resetting bearer [ 945.418870][T15012] tipc: Resetting bearer [ 945.440359][T15012] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 945.530772][T11591] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.634145][T15032] syz.8.2198: attempt to access beyond end of device [ 947.634145][T15032] nbd8: rw=0, sector=0, nr_sectors = 2 limit=0 [ 948.227035][T11591] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.151028][T11591] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.514336][T15060] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.2207'. [ 951.638258][T15060] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.2207'. [ 951.690167][T15060] netlink: 69 bytes leftover after parsing attributes in process `syz.4.2207'. [ 951.718458][T15061] input: syz0 as /devices/virtual/input/input18 [ 952.020740][T15067] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 953.374514][T15074] batman_adv: batadv0: Interface deactivated: dummy0 [ 953.574668][T15074] batman_adv: batadv0: Removing interface: dummy0 [ 953.637260][T15078] xt_CT: No such helper "snmp_trap" [ 953.704595][T15074] bridge_slave_0: left allmulticast mode [ 953.710512][T15074] bridge_slave_0: left promiscuous mode [ 953.758045][T15074] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.951623][T15074] bridge_slave_1: left allmulticast mode [ 955.063835][T15074] bridge_slave_1: left promiscuous mode [ 955.069806][T15074] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.161273][T15074] : (slave bond_slave_0): Releasing backup interface [ 955.194832][T15074] bond_slave_0: left promiscuous mode [ 955.240806][T15074] : (slave bond_slave_1): Releasing backup interface [ 955.267381][T15074] bond_slave_1: left promiscuous mode [ 955.328899][T15074] team0: Port device team_slave_0 removed [ 955.342569][T15074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.383640][T15074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.417210][T15074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.426370][T15074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.469546][T15074] vlan5: left allmulticast mode [ 955.474834][T15074] syz_tun: left allmulticast mode [ 955.480045][T15074] vlan5: left promiscuous mode [ 955.485307][T15074] syz_tun: left promiscuous mode [ 955.498588][T15074] bridge0: port 3(vlan5) entered disabled state [ 956.124339][T15095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 956.134147][T15095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 956.140122][T15095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 956.159580][T15095] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 956.212542][T14797] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 956.234784][T14797] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 956.463889][T11591] bridge_slave_1: left allmulticast mode [ 956.469656][T11591] bridge_slave_1: left promiscuous mode [ 956.478827][T11591] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.661120][T11591] bridge_slave_0: left allmulticast mode [ 958.093541][T11591] bridge_slave_0: left promiscuous mode [ 958.104911][T11591] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.553298][T12686] Bluetooth: hci3: command 0x0c1a tx timeout [ 958.553420][T12943] Bluetooth: hci1: command 0x0405 tx timeout [ 961.177625][T12943] Bluetooth: hci1: command 0x0405 tx timeout [ 961.521975][T15142] syz.8.2219 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 961.672336][T11591] batman_adv: batadv0: Removing interface: vxlan0 [ 963.253495][T12686] Bluetooth: hci1: command 0x0405 tx timeout [ 965.016484][T15159] rtc_cmos 00:00: Alarms can be up to one day in the future [ 965.286650][T11591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.326923][T11591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.351952][T11591] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 965.390415][T11591] nlmon0: left promiscuous mode [ 965.409735][T11591] bond0 (unregistering): Released all slaves [ 965.431181][T14797] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 965.525110][T14797] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 965.734475][T15165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2227'. [ 965.788610][T15164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 966.312778][T14797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.730165][T14797] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.925738][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.932900][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.985455][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.992600][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.543035][T15190] ebt_among: dst integrity fail: 101 [ 968.298214][T11591] hsr_slave_0: left promiscuous mode [ 968.333328][T11591] hsr_slave_1: left promiscuous mode [ 968.458018][T11591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 968.465896][T11591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 968.601832][T11591] dummy0: left promiscuous mode [ 968.667861][T11591] veth1_macvtap: left promiscuous mode [ 968.769731][T11591] veth0_macvtap: left promiscuous mode [ 968.896812][T11591] veth1_vlan: left promiscuous mode [ 968.999814][T11591] veth0_vlan: left promiscuous mode [ 969.533216][T11591] team0 (unregistering): Port device vlan3 removed [ 971.828443][T11591] team0 (unregistering): Port device team_slave_1 removed [ 971.882439][T11591] team0 (unregistering): Port device team_slave_0 removed [ 972.496249][T14797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 972.618627][T14797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.096710][T14797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.143640][T15279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.224698][T15279] bond0: (slave rose0): Enslaving as an active interface with an up link [ 977.492105][T12943] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 977.510557][T12943] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 977.540166][T12943] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 977.550381][T12943] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 977.561632][T12943] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 977.569630][T12943] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 977.601392][T15287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 978.010817][T15296] mkiss: ax0: crc mode is auto. [ 979.654433][T12686] Bluetooth: hci1: command tx timeout [ 979.716295][T15288] chnl_net:caif_netlink_parms(): no params data found [ 981.756179][T12686] Bluetooth: hci1: command tx timeout [ 982.262861][T15351] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2259'. [ 982.272389][T15351] openvswitch: netlink: Message has 44053 unknown bytes. [ 982.283540][T15288] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.297185][T15288] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.341435][T15288] bridge_slave_0: entered allmulticast mode [ 982.403231][T15288] bridge_slave_0: entered promiscuous mode [ 983.409199][T15288] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.416719][T15288] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.573433][T15288] bridge_slave_1: entered allmulticast mode [ 983.634645][T15288] bridge_slave_1: entered promiscuous mode [ 983.678744][ T12] bridge_slave_1: left allmulticast mode [ 983.684532][ T12] bridge_slave_1: left promiscuous mode [ 983.690279][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.716386][ T12] bridge_slave_0: left allmulticast mode [ 983.722191][ T12] bridge_slave_0: left promiscuous mode [ 983.729410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.813334][T12686] Bluetooth: hci1: command tx timeout [ 985.073387][ T29] audit: type=1326 audit(1734561171.914:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 985.103773][ T29] audit: type=1326 audit(1734561171.924:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 985.166038][ T29] audit: type=1326 audit(1734561171.934:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 985.261135][ T29] audit: type=1326 audit(1734561171.934:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 985.323648][ T29] audit: type=1326 audit(1734561171.954:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 985.408280][ T29] audit: type=1326 audit(1734561171.954:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 985.432120][ T29] audit: type=1326 audit(1734561171.954:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 985.453751][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.383311][ T29] audit: type=1326 audit(1734561171.964:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 986.419468][T12686] Bluetooth: hci1: command tx timeout [ 986.434399][ T29] audit: type=1326 audit(1734561171.964:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 986.455915][ C1] vkms_vblank_simulate: vblank timer overrun [ 986.462352][ T29] audit: type=1326 audit(1734561171.964:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15373 comm="syz.3.2264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 987.320158][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.332422][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.346021][ T12] bond0 (unregistering): Released all slaves [ 987.384439][T15288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.417196][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2265'. [ 987.428301][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2265'. [ 987.473928][T15288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.877237][ T12] hsr_slave_0: left promiscuous mode [ 988.069182][ T12] hsr_slave_1: left promiscuous mode [ 988.247959][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.383067][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 993.826913][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.070191][ T12] team0 (unregistering): Port device team_slave_1 removed [ 995.179227][ T12] team0 (unregistering): Port device team_slave_0 removed [ 995.951096][T15288] team0: Port device team_slave_0 added [ 996.071886][T15288] team0: Port device team_slave_1 added [ 996.964649][T15288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.971645][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.045574][T15288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.144188][T15288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.173648][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.322437][T15288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.930878][T15288] hsr_slave_0: entered promiscuous mode [ 997.977924][T15288] hsr_slave_1: entered promiscuous mode [ 999.021462][T15288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 999.029255][T15288] Cannot create hsr debugfs directory [ 1000.302672][T15492] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1001.194687][T15496] Invalid logical block size (524288) [ 1003.947092][T15505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1004.503663][T15510] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1004.518798][T15510] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1004.524959][T15510] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1004.988702][T15510] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1005.695661][T15530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1005.702978][T15530] IPv6: NLM_F_CREATE should be set when creating new route [ 1005.710295][T15530] IPv6: NLM_F_CREATE should be set when creating new route [ 1006.398860][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1006.398906][ T29] audit: type=1400 audit(1734561193.214:174): lsm=SMACK fn=smack_inode_setattr action=denied subject="y" object="_" requested=w pid=15535 comm="syz.3.2298" name="508" dev="tmpfs" ino=2798 [ 1006.992954][T15288] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1007.063244][T12686] Bluetooth: hci1: command 0x0c1a tx timeout [ 1007.069372][T12686] Bluetooth: hci3: command 0x0c1a tx timeout [ 1007.077968][T15288] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1007.138404][T15545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2299'. [ 1007.166652][T15288] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1007.186746][T15545] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2299'. [ 1007.203664][T15288] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1007.220607][T15545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2299'. [ 1007.237188][T15545] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2299'. [ 1007.449199][T15288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.467156][T15288] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.480601][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.487729][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.686226][T15288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1008.663746][T15288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1008.690104][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.697289][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.260731][T15566] xt_TCPMSS: Only works on TCP SYN packets [ 1010.031617][T12686] Bluetooth: hci1: command 0x0c1a tx timeout [ 1010.582692][T15288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.053245][T12686] Bluetooth: hci1: command 0x0c1a tx timeout [ 1012.381508][ T29] audit: type=1326 audit(1734561199.284:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.088340][ T29] audit: type=1326 audit(1734561199.284:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.150989][ T29] audit: type=1326 audit(1734561199.434:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.193190][ T29] audit: type=1326 audit(1734561199.434:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.225443][ T29] audit: type=1326 audit(1734561199.434:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.335930][ T29] audit: type=1326 audit(1734561199.444:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.395649][ T29] audit: type=1326 audit(1734561199.454:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.416961][T15288] veth0_vlan: entered promiscuous mode [ 1013.448338][ T29] audit: type=1326 audit(1734561199.454:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.467359][T15288] veth1_vlan: entered promiscuous mode [ 1013.515262][ T29] audit: type=1326 audit(1734561200.044:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.531287][T15288] veth0_macvtap: entered promiscuous mode [ 1013.592507][ T29] audit: type=1326 audit(1734561200.044:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15596 comm="syz.4.2307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x7ffc0000 [ 1013.598811][T15288] veth1_macvtap: entered promiscuous mode [ 1015.372836][T15616] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1015.417230][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.480438][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.541267][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.581892][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.610355][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1015.620968][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1015.632097][T15288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.858091][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.023283][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.063507][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.881855][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.014380][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1017.090609][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1017.148850][T15288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.216112][T15288] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.287931][T15288] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.296756][T15288] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.305657][T15288] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.743432][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.751333][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.799888][T15658] No such timeout policy "syz1" [ 1021.131654][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.163588][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.504422][T14227] IPVS: starting estimator thread 0... [ 1021.695462][T15669] IPVS: using max 20 ests per chain, 48000 per kthread [ 1024.563191][T15691] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 1024.790608][T15699] netdevsim netdevsim5: Direct firmware load for printk failed with error -2 [ 1024.790760][T15699] netdevsim netdevsim5: Falling back to sysfs fallback for: printk [ 1025.719658][T15693] [U] vÔ3 [ 1026.613694][T15719] Bluetooth: hci4: Frame reassembly failed (-84) [ 1032.543512][T15763] MTD: Couldn't look up '/dev/nullb0': -15 [ 1032.549445][T15763] /dev/nullb0: Can't lookup blockdev [ 1033.490125][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 1033.490139][ T29] audit: type=1326 audit(1734561220.394:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1033.547745][ T29] audit: type=1326 audit(1734561220.434:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1033.585012][ T29] audit: type=1326 audit(1734561220.454:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1033.606841][ T29] audit: type=1326 audit(1734561220.454:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1033.628663][ T29] audit: type=1326 audit(1734561220.454:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1033.761025][ T29] audit: type=1326 audit(1734561220.454:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d20d84690 code=0x7ffc0000 [ 1033.782771][ T29] audit: type=1326 audit(1734561220.454:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1033.804747][ T29] audit: type=1326 audit(1734561220.454:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1034.303934][ T29] audit: type=1326 audit(1734561220.454:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1034.382903][ T29] audit: type=1326 audit(1734561220.454:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15769 comm="syz.5.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f5d20d85d29 code=0x7ffc0000 [ 1036.383839][T15798] fuse: Bad value for 'fd' [ 1041.436651][T15845] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2363'. [ 1047.086292][T15894] netlink: 'syz.4.2370': attribute type 1 has an invalid length. [ 1047.086380][T15894] netlink: 'syz.4.2370': attribute type 2 has an invalid length. [ 1047.086427][T15894] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1047.483221][T15891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1048.028716][T15893] tty tty39: ldisc open failed (-12), clearing slot 38 [ 1055.274962][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.269423][T16001] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2395'. [ 1058.027565][T16005] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1072.144756][T16117] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2419'. [ 1072.157484][T16117] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2419'. [ 1072.392503][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 1072.392554][ T29] audit: type=1326 audit(1734561259.294:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16118 comm="syz.3.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 1073.355910][ T29] audit: type=1326 audit(1734561259.294:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16118 comm="syz.3.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 1073.377835][ T29] audit: type=1326 audit(1734561259.324:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16118 comm="syz.3.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 1073.399387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.405741][ T29] audit: type=1326 audit(1734561259.334:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16118 comm="syz.3.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 1073.427549][ T29] audit: type=1326 audit(1734561259.354:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16118 comm="syz.3.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 1073.449171][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.455547][ T29] audit: type=1326 audit(1734561259.814:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16118 comm="syz.3.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 1073.477523][ T29] audit: type=1326 audit(1734561259.864:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16118 comm="syz.3.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 1073.499075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1073.505263][ T29] audit: type=1326 audit(1734561259.864:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16118 comm="syz.3.2420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7ffc0000 [ 1076.379835][T16176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2429'. [ 1077.666640][T16200] syz.4.2431: attempt to access beyond end of device [ 1077.666640][T16200] nbd4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1093.614081][ T5822] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1099.106578][T12863] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1099.762493][T12863] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 520, setting to 64 [ 1099.906896][T12863] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1099.923193][T12863] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1099.933462][T12863] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1099.941611][T12863] usb 10-1: SerialNumber: syz [ 1099.953716][T16357] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1100.793854][T16357] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1101.128431][T16381] netlink: 25 bytes leftover after parsing attributes in process `syz.4.2473'. [ 1102.534219][T12863] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 1102.584350][T12863] usb 10-1: USB disconnect, device number 3 [ 1105.850272][T16422] usb usb8: usbfs: process 16422 (syz.9.2481) did not claim interface 0 before use [ 1106.475902][T12863] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1107.325992][T12863] usb 10-1: config 9 has an invalid interface number: 109 but max is 0 [ 1107.343131][T12863] usb 10-1: config 9 has no interface number 0 [ 1108.483261][T12863] usb 10-1: config 9 interface 109 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 1108.494477][T12863] usb 10-1: config 9 interface 109 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1109.376872][T16439] 9pnet: Could not find request transport: rdmaÿÿÿÿ18446744073709551615 [ 1109.459801][T12863] usb 10-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=a1.f2 [ 1109.470121][T12863] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.481984][T12863] usb 10-1: Product: syz [ 1109.486922][T12863] usb 10-1: Manufacturer: syz [ 1109.491855][T12863] usb 10-1: SerialNumber: syz [ 1109.527436][T16451] input: syz1 as /devices/virtual/input/input21 [ 1109.551881][T16449] veth0_vlan: left promiscuous mode [ 1109.565030][T16449] veth0_vlan: entered promiscuous mode [ 1109.687104][T12863] usb 10-1: can't set config #9, error -71 [ 1109.695389][T12863] usb 10-1: USB disconnect, device number 4 [ 1110.856423][T16473] ALSA: seq fatal error: cannot create timer (-22) [ 1116.461255][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.193248][ T5822] IPVS: starting estimator thread 0... [ 1117.213822][ T29] audit: type=1804 audit(1734561304.114:291): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2501" name="/newroot/341/file0/bus" dev="ramfs" ino=58728 res=1 errno=0 [ 1117.234867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1117.277848][T16532] mkiss: ax0: crc mode is auto. [ 1117.303243][T16528] IPVS: using max 22 ests per chain, 52800 per kthread [ 1118.533229][T16541] : (slave dummy0): Releasing backup interface [ 1119.365361][T16541] batman_adv: batadv0: Adding interface: dummy0 [ 1119.371886][T16541] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.413223][T16541] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1120.392477][ T29] audit: type=1800 audit(1734561307.294:292): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2501" name="bus" dev="ramfs" ino=58728 res=0 errno=0 [ 1121.561988][T16575] atomic_op ffff88802137a998 conn xmit_atomic 0000000000000000 [ 1131.571161][T16656] sctp: [Deprecated]: syz.9.2528 (pid 16656) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1131.571161][T16656] Use struct sctp_sack_info instead [ 1133.250499][T16673] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2531'. [ 1133.479093][T16675] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 1133.889265][T16679] GUP no longer grows the stack in syz.5.2534 (16679): 20004000-2000a000 (20002000) [ 1133.899827][T16679] CPU: 0 UID: 0 PID: 16679 Comm: syz.5.2534 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1133.910630][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1133.920713][T16679] Call Trace: [ 1133.924009][T16679] [ 1133.926951][T16679] dump_stack_lvl+0x241/0x360 [ 1133.931662][T16679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.936887][T16679] ? __pfx__printk+0x10/0x10 [ 1133.941503][T16679] ? find_vma+0xf9/0x170 [ 1133.945814][T16679] __get_user_pages+0x4385/0x49e0 [ 1133.950875][T16679] ? __lock_acquire+0x1397/0x2100 [ 1133.955969][T16679] ? __pfx___get_user_pages+0x10/0x10 [ 1133.961396][T16679] get_user_pages_remote+0x31e/0xb60 [ 1133.966719][T16679] ? __pfx_get_user_pages_remote+0x10/0x10 [ 1133.972579][T16679] ? __access_remote_vm+0x320/0x800 [ 1133.977905][T16679] __access_remote_vm+0x229/0x800 [ 1133.982974][T16679] ? __pfx___access_remote_vm+0x10/0x10 [ 1133.988549][T16679] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1133.993780][T16679] ? alloc_pages_noprof+0xef/0x170 [ 1133.998931][T16679] proc_pid_cmdline_read+0x5b2/0x860 [ 1134.004257][T16679] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1134.010096][T16679] ? rw_verify_area+0x55e/0x6f0 [ 1134.015319][T16679] vfs_readv+0x6bc/0xa80 [ 1134.019591][T16679] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 1134.025428][T16679] ? __pfx_vfs_readv+0x10/0x10 [ 1134.030228][T16679] ? __fget_files+0x2a/0x410 [ 1134.034840][T16679] ? __fget_files+0x395/0x410 [ 1134.039534][T16679] ? __fget_files+0x2a/0x410 [ 1134.044158][T16679] __x64_sys_preadv+0x1b7/0x2d0 [ 1134.049041][T16679] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1134.054440][T16679] ? do_syscall_64+0x100/0x230 [ 1134.059219][T16679] ? do_syscall_64+0xb6/0x230 [ 1134.063904][T16679] do_syscall_64+0xf3/0x230 [ 1134.068412][T16679] ? clear_bhb_loop+0x35/0x90 [ 1134.073124][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.079058][T16679] RIP: 0033:0x7f5d20d85d29 [ 1134.083492][T16679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.103200][T16679] RSP: 002b:00007f5d21afa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1134.111630][T16679] RAX: ffffffffffffffda RBX: 00007f5d20f75fa0 RCX: 00007f5d20d85d29 [ 1134.119689][T16679] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000006 [ 1134.127664][T16679] RBP: 00007f5d20e01a20 R08: 00000000fffffff9 R09: 0000000000000000 [ 1134.135643][T16679] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 1134.143630][T16679] R13: 0000000000000000 R14: 00007f5d20f75fa0 R15: 00007ffcc53fa338 [ 1134.151629][T16679] [ 1134.363503][T16684] netlink: 'syz.4.2533': attribute type 298 has an invalid length. [ 1135.128185][T16686] overlayfs: missing 'lowerdir' [ 1141.745355][T16756] /dev/nullb0: Can't lookup blockdev [ 1147.667267][T16830] sch_tbf: burst 1 is lower than device lo mtu (14) ! [ 1153.597490][T16879] bridge_slave_0: left allmulticast mode [ 1153.629401][T16879] bridge_slave_0: left promiscuous mode [ 1153.659705][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.729499][T16879] bridge_slave_1: left allmulticast mode [ 1154.243559][T16879] bridge_slave_1: left promiscuous mode [ 1154.257754][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.426461][T16879] bond0: (slave bond_slave_0): Releasing backup interface [ 1155.027621][T16897] bad cache= option: noneÿÿÿÿÿÿ [ 1155.027621][T16897] [ 1155.035997][T16897] CIFS: VFS: bad cache= option: noneÿÿÿÿÿÿ [ 1155.160633][T16879] bond0: (slave bond_slave_1): Releasing backup interface [ 1157.679449][T16924] overlayfs: failed to resolve './file0': -2 [ 1158.312718][T16879] team0: Port device team_slave_0 removed [ 1158.482947][T16879] team0: Port device team_slave_1 removed [ 1158.617729][T16879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.625862][T16879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.667340][T16879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1158.682861][T16879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.773694][T16947] /dev/nullb0: Can't lookup blockdev [ 1165.378818][T16997] overlayfs: failed to resolve './file0': -2 [ 1172.582798][T17067] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2608'. [ 1173.446881][T17060] overlayfs: missing 'lowerdir' [ 1175.182068][T17094] overlayfs: failed to resolve './file0': -2 [ 1177.656776][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.109123][T17139] dns_resolver: Unsupported content type (24) [ 1181.051479][T17137] tty tty37: ldisc open failed (-12), clearing slot 36 [ 1183.611530][T17159] overlayfs: invalid redirect ((null)) [ 1188.135504][T17191] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:0 [ 1190.880007][T17262] overlayfs: invalid redirect ((null)) [ 1190.938932][T17264] 9pnet_virtio: no channels available for device syz [ 1195.753152][T17354] overlayfs: invalid redirect ((null)) [ 1196.054406][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2650'. [ 1200.456755][T17402] overlayfs: invalid redirect ((null)) [ 1202.025190][T17419] tipc: Resetting bearer [ 1202.101423][T15431] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1202.145245][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.501191][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.529520][T17424] overlayfs: invalid redirect ((null)) [ 1203.628968][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1203.885287][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1204.406188][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1204.614330][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1205.716751][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.134289][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.314444][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.057290][T17452] overlayfs: invalid redirect ((null)) [ 1207.145591][ T8076] net_ratelimit: 2 callbacks suppressed [ 1207.145611][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.362058][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.572857][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.759272][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1208.138972][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1208.263165][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1208.405334][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1209.471741][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1209.935092][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1210.603943][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.637062][T17516] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 1212.235936][ T12] net_ratelimit: 9 callbacks suppressed [ 1212.235961][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1213.687482][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1214.045551][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1214.324726][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1214.577565][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1214.918610][T17534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2677'. [ 1215.444744][T17534] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.454175][T17534] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.462877][T17534] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.471720][T17534] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1215.482185][T17534] vxlan0: entered promiscuous mode [ 1215.492831][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1215.716403][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1215.833294][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1215.954150][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.317622][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1216.558284][T17545] fuse: Unknown parameter '' [ 1217.812044][T17548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1218.153150][T11593] net_ratelimit: 4 callbacks suppressed [ 1218.153171][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1218.504786][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1218.873232][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1219.073420][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1219.193166][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1219.303670][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1219.313741][T17569] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1219.476437][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1219.603124][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1221.420599][T12943] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1221.628964][T17603] x_tables: unsorted underflow at hook 1 [ 1221.705835][T17604] hub 1-0:1.0: USB hub found [ 1221.714020][T17604] hub 1-0:1.0: 1 port detected [ 1222.396421][T12943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1222.405762][T12943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1222.696836][T17600] overlayfs: invalid redirect ((null)) [ 1223.454523][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1223.604739][T12943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1223.613919][T12943] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1223.622873][T12943] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1223.631321][T17609] random: crng reseeded on system resumption [ 1223.639816][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1224.837913][ T1130] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.847347][T17630] blktrace: Concurrent blktraces are not allowed on loop8 [ 1224.884302][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1224.938132][T17630] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1225.001085][ T1130] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.044649][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1225.134822][ T1130] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.226485][ T1130] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.303233][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1225.456893][T17592] chnl_net:caif_netlink_parms(): no params data found [ 1225.470459][ T1130] bridge_slave_1: left allmulticast mode [ 1225.477218][ T1130] bridge_slave_1: left promiscuous mode [ 1225.483820][ T1130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1225.492622][ T1130] bridge_slave_0: left allmulticast mode [ 1225.499049][ T1130] bridge_slave_0: left promiscuous mode [ 1225.505899][ T1130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1225.795779][T12943] Bluetooth: hci3: command tx timeout [ 1226.308698][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1226.321173][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1226.348124][ T1130] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1226.381348][ T1130] bond0 (unregistering): Released all slaves [ 1226.423286][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.619613][ T1130] IPVS: stopping master sync thread 15691 ... [ 1226.695369][T17592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.738844][T17592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.795782][T17592] bridge_slave_0: entered allmulticast mode [ 1226.820013][T17592] bridge_slave_0: entered promiscuous mode [ 1227.162573][T17658] overlayfs: invalid redirect ((null)) [ 1227.189846][T17592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.202113][T17655] input: syz0 as /devices/virtual/input/input22 [ 1227.563296][T17592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.575928][T17592] bridge_slave_1: entered allmulticast mode [ 1227.641300][T17592] bridge_slave_1: entered promiscuous mode [ 1228.001499][T12943] Bluetooth: hci3: command tx timeout [ 1229.337707][T17659] overlayfs: missing 'lowerdir' [ 1229.941074][T17592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.950358][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1231.600964][T12943] Bluetooth: hci3: command tx timeout [ 1231.858761][T17678] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1231.996319][T17592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1233.632945][T17592] team0: Port device team_slave_0 added [ 1233.647062][T17592] team0: Port device team_slave_1 added [ 1233.655895][T12686] Bluetooth: hci3: command tx timeout [ 1233.768926][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1233.911538][T17592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1233.943101][T17592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.020726][T17592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.136800][ T1130] hsr_slave_0: left promiscuous mode [ 1234.170511][ T1130] hsr_slave_1: left promiscuous mode [ 1234.302677][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1234.328778][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1234.361041][ T1130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1234.382255][ T1130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1234.502486][ T1130] veth1_macvtap: left promiscuous mode [ 1234.503841][ T1130] veth0_macvtap: left promiscuous mode [ 1234.504137][ T1130] veth1_vlan: left promiscuous mode [ 1234.504394][ T1130] veth0_vlan: left promiscuous mode [ 1235.561625][T17723] netlink: 'syz.3.2716': attribute type 9 has an invalid length. [ 1235.683555][T17723] netlink: 'syz.3.2716': attribute type 6 has an invalid length. [ 1237.452584][T17740] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1239.154619][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.601724][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 1241.750535][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 1242.875968][T17592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.891548][T17592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.952877][T17592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.374992][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1245.097069][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1245.350224][T17775] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1245.508993][T17592] hsr_slave_0: entered promiscuous mode [ 1247.794360][T17592] hsr_slave_1: entered promiscuous mode [ 1248.003272][T17592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1248.013816][T17592] Cannot create hsr debugfs directory [ 1248.035950][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1248.351088][T17804] Bluetooth: MGMT ver 1.23 [ 1249.923562][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1250.094513][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1250.503406][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1250.544816][ T1130] IPVS: stop unused estimator thread 0... [ 1251.053241][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.193088][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1253.359747][ T5822] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 1253.390393][T17838] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 1253.396985][T17838] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1253.404733][T17838] vhci_hcd vhci_hcd.0: Device attached [ 1253.523929][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1253.587393][ T6014] vhci_hcd: vhci_device speed not set [ 1254.330448][ T5822] usb 5-1: config 0 has no interfaces? [ 1254.336131][ T5822] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1254.345926][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.475990][T17842] vhci_hcd: connection closed [ 1254.476265][ T6014] usb 41-1: new full-speed USB device number 3 using vhci_hcd [ 1254.495765][T17843] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1254.534172][ T5822] usb 5-1: config 0 descriptor?? [ 1254.539584][ T5822] usb 5-1: can't set config #0, error -71 [ 1254.552408][ T5822] usb 5-1: USB disconnect, device number 13 [ 1254.565359][ T8076] vhci_hcd: stop threads [ 1254.569795][ T8076] vhci_hcd: release socket [ 1254.576738][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1254.584267][ T8076] vhci_hcd: disconnect device [ 1256.091799][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.218607][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.323621][T17872] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1256.394783][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.404019][T17857] netlink: ct family unspecified [ 1256.409197][T17857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1256.627178][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.763123][T17592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1256.901913][T17592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1256.923504][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.946458][T17592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1257.327085][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1257.503611][T17592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1257.605400][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1257.869601][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1257.918135][T17592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1257.990119][T17592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1258.012543][T11595] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.019864][T11595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1258.150264][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.157534][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1259.211281][T17901] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1259.526251][T17592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1259.643203][ T6014] vhci_hcd: vhci_device speed not set [ 1259.713927][T17592] veth0_vlan: entered promiscuous mode [ 1260.153011][T17592] veth1_vlan: entered promiscuous mode [ 1261.883383][ T81] net_ratelimit: 14 callbacks suppressed [ 1261.883406][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1262.064239][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1262.135447][T17592] veth0_macvtap: entered promiscuous mode [ 1262.179849][T17592] veth1_macvtap: entered promiscuous mode [ 1262.195697][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.206824][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.217328][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.227987][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.239100][T17592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.249126][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.259647][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.270430][T17592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1262.280932][T17592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.291932][T17592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.301868][T17592] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.310853][T17592] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.319616][T17592] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.328417][T17592] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.798418][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1264.892324][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.925817][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.943351][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1264.975606][T17941] overlayfs: missing 'lowerdir' [ 1264.990868][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1265.010799][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1265.064179][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.223453][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.436504][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.563491][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.694301][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.843377][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.880776][T15283] kernel write not supported for file /cpu/0/msr (pid: 15283 comm: kworker/1:2) [ 1267.306510][ T1324] net_ratelimit: 1 callbacks suppressed [ 1267.306532][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1268.184005][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1268.454162][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1268.583647][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1268.658996][T17975] KVM: debugfs: duplicate directory 17975-4 [ 1268.715008][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1269.335763][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1269.650710][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1269.771124][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1270.133616][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1270.278218][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1270.485227][T17994] snd_dummy snd_dummy.0: control 0:65279:0:syz0:0 is already present [ 1271.158220][T18006] overlayfs: missing 'lowerdir' [ 1272.503701][T18018] hub 6-0:1.0: USB hub found [ 1272.512313][T18018] hub 6-0:1.0: 1 port detected [ 1272.527446][T11612] net_ratelimit: 6 callbacks suppressed [ 1272.527519][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1272.931099][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.212261][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1274.273544][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1274.664210][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1275.028962][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1275.551428][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1275.673741][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1276.617855][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1276.961471][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1277.977064][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1277.993850][ T29] audit: type=1326 audit(1734565559.553:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.4.2790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe89e185d29 code=0x0 [ 1278.225842][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.764570][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.109247][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.616900][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.988157][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1280.098675][T18064] overlayfs: refusing to follow metacopy origin for (/file0) [ 1280.271108][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1281.090288][T18072] overlayfs: missing 'lowerdir' [ 1281.120973][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1281.789966][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1282.003146][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1282.303106][T14227] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1282.483062][T14227] usb 10-1: Using ep0 maxpacket: 16 [ 1282.509706][T14227] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1282.527712][T14227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.552035][T14227] usb 10-1: Product: syz [ 1282.560892][T14227] usb 10-1: Manufacturer: syz [ 1282.571105][T14227] usb 10-1: SerialNumber: syz [ 1282.599037][T14227] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1282.611960][T14227] r8152-cfgselector 10-1: config 0 descriptor?? [ 1283.338105][ T1130] net_ratelimit: 8 callbacks suppressed [ 1283.338168][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1285.062633][T14227] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1285.069337][T14227] r8152-cfgselector 10-1: bad CDC descriptors [ 1285.969013][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1285.990105][T14227] r8152-cfgselector 10-1: USB disconnect, device number 5 [ 1286.093898][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1286.264091][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1287.041391][T18133] veth0_to_team: entered promiscuous mode [ 1287.047400][T18133] veth0_to_team: entered allmulticast mode [ 1289.204444][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1289.369667][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1289.576922][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1290.356776][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1290.382165][T18148] kvm: user requested TSC rate below hardware speed [ 1290.634301][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1290.721960][T18157] Set syz1 is full, maxelem 65536 reached [ 1291.148315][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1291.523526][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1291.683196][T11595] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1292.073940][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1292.903274][T18189] input: syz1 as /devices/virtual/input/input23 [ 1294.600816][T11593] net_ratelimit: 8 callbacks suppressed [ 1294.600840][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1294.727421][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1294.879769][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1295.026769][T18205] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2815'. [ 1295.042024][T18205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1295.062916][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1295.865541][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1295.995929][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1296.113749][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1296.224546][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1296.345203][T11593] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1296.514653][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1297.038954][T18220] overlayfs: missing 'lowerdir' [ 1297.798241][T18227] netlink: 'syz.4.2821': attribute type 21 has an invalid length. [ 1297.810480][T18227] netlink: 'syz.4.2821': attribute type 20 has an invalid length. [ 1297.853430][T18227] IPv6: NLM_F_CREATE should be specified when creating new route [ 1299.059781][T18258] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1299.086111][T18258] CIFS mount error: No usable UNC path provided in device string! [ 1299.086111][T18258] [ 1299.097222][T18258] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1299.652665][ T8076] net_ratelimit: 12 callbacks suppressed [ 1299.652688][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1299.879311][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.066606][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.653533][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.866710][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.985822][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1301.141475][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1301.196974][ T29] audit: type=1804 audit(1734565583.093:294): pid=18269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.2827" name="/newroot/629/file1" dev="fuse" ino=1 res=1 errno=0 [ 1301.778898][T11612] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1301.797803][ T29] audit: type=1804 audit(1734565583.103:295): pid=18269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.2827" name="/newroot/629/file1" dev="fuse" ino=1 res=1 errno=0 [ 1302.771921][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1302.896412][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1303.024498][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1304.586682][T18284] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2832'. [ 1304.657593][T18301] overlayfs: failed to set uuid (600/file1, err=-1); falling back to uuid=null. [ 1304.667759][T18301] overlayfs: failed to verify upper root origin [ 1304.683947][ T81] net_ratelimit: 6 callbacks suppressed [ 1304.683969][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1304.725072][T18309] overlayfs: failed to resolve '/øÿÿÿ·': -2 [ 1304.943355][ T81] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1307.150751][ T1130] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1307.283436][ T6879] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1308.746492][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1309.016052][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1309.111883][T18335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2841'. [ 1309.196191][ T6879] usb 10-1: device not accepting address 6, error -71 [ 1309.831808][ T1324] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1310.040451][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1310.672225][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1310.810561][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.703974][T18345] overlayfs: missing 'lowerdir' [ 1311.827906][T18387] : entered promiscuous mode [ 1311.832854][T18387] bond_slave_0: entered promiscuous mode [ 1311.839486][T18387] bond_slave_1: entered promiscuous mode [ 1312.246743][T15431] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1312.952401][ T5974] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1313.173249][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1313.291511][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1313.425894][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1314.275261][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1314.312125][T18427] overlayfs: missing 'lowerdir' [ 1315.812702][T18414] net_ratelimit: 2 callbacks suppressed [ 1315.812724][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.107386][T18465] block device autoloading is deprecated and will be removed. [ 1316.306999][T18448] overlayfs: missing 'lowerdir' [ 1316.329349][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.463115][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.470104][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.955842][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1318.087776][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1318.417043][T11591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1319.443377][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1319.583582][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1319.701809][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1319.744530][ T29] audit: type=1800 audit(1734565601.653:296): pid=18492 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2862" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1320.634383][T18502] 9pnet_fd: Insufficient options for proto=fd [ 1320.816695][T18400] net_ratelimit: 3 callbacks suppressed [ 1320.816755][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1320.963298][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.154814][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.461826][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.578284][T11591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.693458][T11591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.967020][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.094310][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.223376][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.336448][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1324.622600][T18528] overlayfs: missing 'lowerdir' [ 1326.136080][T18407] net_ratelimit: 8 callbacks suppressed [ 1326.136103][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1326.989552][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1327.106990][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1328.143769][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1328.406364][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1328.930378][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1329.294539][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1329.404116][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1329.719297][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1329.877458][T18593] input: syz0 as /devices/virtual/input/input24 [ 1330.021803][T11591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.245061][T11578] net_ratelimit: 3 callbacks suppressed [ 1331.245118][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.365979][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.494387][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.631960][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.834197][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.943124][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.053159][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.073778][T18617] overlayfs: missing 'lowerdir' [ 1333.194278][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.394131][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.995925][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1334.257429][T18651] netlink: 'syz.4.2891': attribute type 4 has an invalid length. [ 1334.277396][T18642] netlink: 'syz.3.2892': attribute type 10 has an invalid length. [ 1334.453521][T18642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2892'. [ 1335.788100][T18665] ucma_write: process 2393 (syz.3.2892) changed security contexts after opening file descriptor, this is not allowed. [ 1335.890602][T18642] team0: Port device geneve0 added [ 1337.037795][T18396] net_ratelimit: 5 callbacks suppressed [ 1337.037819][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.169399][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.283519][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.421018][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.534202][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.679165][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.793566][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.917322][T11591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.986099][T18692] vivid-004: disconnect [ 1338.058841][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1338.213291][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1338.247452][T18674] vivid-004: reconnect [ 1339.292491][T18713] overlayfs: missing 'lowerdir' [ 1340.223060][T18731] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2901'. [ 1342.028419][T18747] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2904'. [ 1342.111759][T18747] /dev/nullb0: Can't lookup blockdev [ 1342.139140][T18406] net_ratelimit: 13 callbacks suppressed [ 1342.139194][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1342.263489][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1342.694810][T18745] overlayfs: missing 'lowerdir' [ 1343.502036][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1343.621686][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1343.743453][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1344.716504][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1344.845367][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1344.958781][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1345.859004][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1345.991017][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1347.396549][T11578] net_ratelimit: 1 callbacks suppressed [ 1347.396570][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1347.532345][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1347.663909][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1347.834121][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1348.101262][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1348.224787][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1348.344537][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1348.373345][T18790] overlayfs: missing 'lowerdir' [ 1348.389093][T17594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1348.408976][T17594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1348.421654][T17594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1348.429754][T17594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1348.437635][T17594] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1348.445565][T17594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1348.463652][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1348.512363][T18800] overlayfs: missing 'lowerdir' [ 1348.573132][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1348.915618][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1349.672409][T17594] Bluetooth: hci3: command 0x0405 tx timeout [ 1350.721140][T12686] Bluetooth: hci4: command tx timeout [ 1350.836763][T18822] overlayfs: missing 'lowerdir' [ 1351.420771][T18796] chnl_net:caif_netlink_parms(): no params data found [ 1351.456468][T18834] vivid-004: disconnect [ 1351.696324][T18826] vivid-004: reconnect [ 1353.205338][T12686] Bluetooth: hci4: command tx timeout [ 1355.657600][T18866] hub 9-0:1.0: USB hub found [ 1355.663242][T18866] hub 9-0:1.0: 1 port detected [ 1355.747209][T12686] Bluetooth: hci4: command tx timeout [ 1356.589620][T18796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1356.903091][T18796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.920800][T18796] bridge_slave_0: entered allmulticast mode [ 1356.945196][T18871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.954296][T18878] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1356.966669][T18871] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1357.903570][T18796] bridge_slave_0: entered promiscuous mode [ 1357.912042][T18796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.920160][T18796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.038562][T12686] Bluetooth: hci4: command tx timeout [ 1358.057018][T18796] bridge_slave_1: entered allmulticast mode [ 1358.080588][T18796] bridge_slave_1: entered promiscuous mode [ 1359.033392][T18874] overlayfs: missing 'lowerdir' [ 1361.485029][T11574] net_ratelimit: 2 callbacks suppressed [ 1361.485052][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1362.301163][ T29] audit: type=1804 audit(1734565643.583:297): pid=18908 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2935" name="/newroot/441/bus/bus" dev="overlay" ino=2465 res=1 errno=0 [ 1362.405287][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.787884][T18922] input: syz1 as /devices/virtual/input/input25 [ 1364.929030][T18406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.066956][T18796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1365.359943][T18796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.509063][T18940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1366.505006][T18406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.215489][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1367.239990][T18796] team0: Port device team_slave_0 added [ 1367.386100][T18796] team0: Port device team_slave_1 added [ 1368.715359][T18406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.090594][T18406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.949445][T18796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.981608][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.019766][T18987] syz.5.2947: attempt to access beyond end of device [ 1370.019766][T18987] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1370.283042][T18796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1370.319154][T18796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1370.380534][T18796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1370.442308][T18796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1370.778992][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1371.930051][T18796] hsr_slave_0: entered promiscuous mode [ 1372.928269][T18796] hsr_slave_1: entered promiscuous mode [ 1372.935305][T18796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.149896][T19021] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2949'. [ 1373.161794][T18796] Cannot create hsr debugfs directory [ 1373.824996][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1374.212475][T18406] bridge_slave_1: left allmulticast mode [ 1374.303196][T18406] bridge_slave_1: left promiscuous mode [ 1375.502645][T18406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.819466][T18406] bridge_slave_0: left allmulticast mode [ 1375.825213][T18406] bridge_slave_0: left promiscuous mode [ 1375.830901][T18406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.651195][T18406] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.666818][T18406] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.677179][T18406] bond0 (unregistering): Released all slaves [ 1378.989200][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1381.996865][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1382.546064][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1383.996110][T19122] blktrace: Concurrent blktraces are not allowed on loop10 [ 1384.064076][T11607] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1384.867520][T19122] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1384.972070][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1387.763160][T19144] orangefs_mount: mount request failed with -4 [ 1388.144398][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1388.395537][T11607] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1388.513457][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1391.445347][ T29] audit: type=1326 audit(1734565673.343:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19149 comm="syz.3.2975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932e185d29 code=0x7fc00000 [ 1391.951710][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1392.030697][T18406] hsr_slave_0: left promiscuous mode [ 1392.045923][T18406] hsr_slave_1: left promiscuous mode [ 1392.381437][T19181] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1392.444283][T18406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.519808][T18406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.707138][T18406] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.759240][T18406] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1394.424617][T19189] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1394.537322][T18406] veth1_macvtap: left promiscuous mode [ 1394.543057][T18406] veth0_macvtap: left promiscuous mode [ 1394.549771][T18406] veth1_vlan: left promiscuous mode [ 1394.555486][T18406] veth0_vlan: left promiscuous mode [ 1400.553874][T18406] team0 (unregistering): Port device team_slave_1 removed [ 1400.661125][T18406] team0 (unregistering): Port device team_slave_0 removed [ 1400.794239][T12686] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1400.835911][T12686] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1400.876053][T12686] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1400.923811][T12686] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1400.949926][T12686] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1400.957853][T12686] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1402.177560][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1402.563514][T11607] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1402.873331][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1403.093133][T12686] Bluetooth: hci3: command tx timeout [ 1403.982347][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1404.047499][T18796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1404.084738][T18796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1404.697050][T19246] chnl_net:caif_netlink_parms(): no params data found [ 1404.745529][T18796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1404.877096][T18796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1405.100622][T19246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.175983][T19246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.184192][T12686] Bluetooth: hci3: command tx timeout [ 1405.185096][T19299] overlayfs: missing 'lowerdir' [ 1405.306704][T19246] bridge_slave_0: entered allmulticast mode [ 1405.347613][T19246] bridge_slave_0: entered promiscuous mode [ 1405.363986][T19246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.376911][T19246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.408026][T19246] bridge_slave_1: entered allmulticast mode [ 1405.415232][T19246] bridge_slave_1: entered promiscuous mode [ 1405.564459][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1405.786654][T11591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1405.865587][T19270] CIFS mount error: No usable UNC path provided in device string! [ 1405.865587][T19270] [ 1405.875902][T19270] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1406.318256][T19246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.391189][T11607] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1406.494254][T19246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.288284][T12686] Bluetooth: hci3: command tx timeout [ 1407.596576][T17594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1407.616506][T19322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3002'. [ 1407.641355][T19320] netlink: 132 bytes leftover after parsing attributes in process `syz.9.3000'. [ 1407.642788][T17594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1407.666974][T17594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1407.678689][T17594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1407.744002][T17594] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1407.753825][T17594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1408.050246][T19327] Bluetooth: MGMT ver 1.23 [ 1408.698623][T19246] team0: Port device team_slave_0 added [ 1408.833948][T19246] team0: Port device team_slave_1 added [ 1408.882566][T19315] vlan2: entered allmulticast mode [ 1408.984072][T11591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1409.095868][T19246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.108210][T19246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1409.142354][T19246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.172064][T19246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.224191][T19246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.028446][T19246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.071344][T12686] Bluetooth: hci3: command tx timeout [ 1410.077614][T12686] Bluetooth: hci5: command tx timeout [ 1410.137025][ T29] audit: type=1326 audit(1734565691.383:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.158728][ T29] audit: type=1326 audit(1734565691.383:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.180468][ T29] audit: type=1326 audit(1734565691.383:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.202501][ T29] audit: type=1326 audit(1734565691.383:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.224552][ T29] audit: type=1326 audit(1734565691.383:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.246370][ T29] audit: type=1326 audit(1734565691.383:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.268121][ T29] audit: type=1326 audit(1734565691.383:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.289816][ T29] audit: type=1326 audit(1734565691.383:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.311836][ T29] audit: type=1326 audit(1734565691.383:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.333573][ T29] audit: type=1326 audit(1734565691.383:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19330 comm="syz.9.3004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6033785d29 code=0x7fc00000 [ 1410.380917][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1410.635810][T19246] hsr_slave_0: entered promiscuous mode [ 1410.642600][T19246] hsr_slave_1: entered promiscuous mode [ 1410.649159][T19246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1410.657034][T19246] Cannot create hsr debugfs directory [ 1411.621550][T19346] overlayfs: missing 'lowerdir' [ 1412.213156][T17594] Bluetooth: hci5: command tx timeout [ 1413.159274][T19363] overlayfs: missing 'lowerdir' [ 1413.423844][T11607] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1413.743496][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1414.385304][T17594] Bluetooth: hci5: command tx timeout [ 1414.833411][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1415.014144][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1415.430793][T19374] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1416.279109][T19382] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1416.917245][T17594] Bluetooth: hci5: command tx timeout [ 1417.228960][T19390] ptrace attach of "./syz-executor exec"[15288] was attempted by "./syz-executor exec"[19390] [ 1417.512523][T19318] chnl_net:caif_netlink_parms(): no params data found [ 1417.597817][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1417.905378][T19398] netlink: 'syz.4.3017': attribute type 3 has an invalid length. [ 1418.665709][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1418.791807][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1418.913859][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1419.035687][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1419.162570][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1419.278939][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1419.545389][T19408] overlayfs: missing 'lowerdir' [ 1421.034373][T19417] overlayfs: missing 'lowerdir' [ 1421.376271][T19318] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.548136][T19318] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.623640][T19318] bridge_slave_0: entered allmulticast mode [ 1421.632034][T19318] bridge_slave_0: entered promiscuous mode [ 1422.126183][T19246] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1422.259299][T19429] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1423.573446][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.628663][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1423.690996][T19318] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.698646][T19318] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.706153][T19318] bridge_slave_1: entered allmulticast mode [ 1423.712809][T19318] bridge_slave_1: entered promiscuous mode [ 1423.811538][T11578] bridge_slave_1: left allmulticast mode [ 1423.818862][T11578] bridge_slave_1: left promiscuous mode [ 1423.835425][T11578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.864567][T11578] bridge_slave_0: left allmulticast mode [ 1423.870350][T11578] bridge_slave_0: left promiscuous mode [ 1423.876579][T11578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.942269][T11578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.958761][T11578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.250119][T11578] bond0 (unregistering): Released all slaves [ 1425.421499][T19448] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x38415262, 2, 0, 0, 0) [ 1426.113880][T19447] tty tty2: ldisc open failed (-12), clearing slot 1 [ 1426.988445][T19454] netlink: 'syz.3.3029': attribute type 11 has an invalid length. [ 1427.139077][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1427.247151][T19456] program syz.3.3029 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1429.923793][T19246] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.984299][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1430.957168][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1430.984632][T19465] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1431.062482][T19468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 1431.077751][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1431.104852][T19318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1431.143941][T11578] hsr_slave_0: left promiscuous mode [ 1431.169141][T11578] hsr_slave_1: left promiscuous mode [ 1431.197976][T11578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1431.269496][T19473] overlayfs: missing 'lowerdir' [ 1431.370460][T11578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.853522][T19480] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1432.999708][T11578] team0 (unregistering): Port device team_slave_1 removed [ 1433.102756][T11578] team0 (unregistering): Port device team_slave_0 removed [ 1433.868005][T19246] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.490902][T19318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.083550][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1436.105116][T19496] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1436.343600][T19502] overlayfs: missing 'lowerdir' [ 1436.727651][T19246] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.849702][T19318] team0: Port device team_slave_0 added [ 1437.543086][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1437.748256][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1438.696501][T19518] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1438.835190][T19318] team0: Port device team_slave_1 added [ 1438.998958][T19318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1439.020868][T19318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.096861][T19318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1439.714193][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1439.742817][T19318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1439.744738][T19525] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1439.759908][T19318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1439.915317][T19318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.984776][T19246] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1440.053925][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1440.086295][T19246] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1440.275859][T19246] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1440.309702][T19318] hsr_slave_0: entered promiscuous mode [ 1440.360340][T19318] hsr_slave_1: entered promiscuous mode [ 1440.424151][T19318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1440.431829][T19318] Cannot create hsr debugfs directory [ 1440.479956][T19246] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1442.400653][T19246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1442.725388][T19558] overlayfs: missing 'lowerdir' [ 1443.674178][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1443.831736][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1444.163511][T19246] 8021q: adding VLAN 0 to HW filter on device team0 [ 1444.211065][T11607] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1444.610927][T18407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.618175][T18407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1444.650308][T18407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1444.657535][T18407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1444.903129][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1444.991865][T19580] IPVS: Error connecting to the multicast addr [ 1446.015714][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1446.464844][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1446.480307][T19246] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1446.555784][T19246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1446.734123][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1446.852065][T19592] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1446.960102][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1447.143048][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1447.265058][T19605] qrtr: Invalid version 0 [ 1447.433527][T19318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1447.551729][T19318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1447.876802][T19318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1448.057281][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1448.244456][T19318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1449.208726][T19616] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 1449.299764][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1449.422740][T19246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.444935][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1449.593543][T19246] veth0_vlan: entered promiscuous mode [ 1449.655157][T19318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.671777][T19318] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.701962][T18407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.709169][T18407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.744438][T18407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.751610][T18407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1450.205213][T19246] veth1_vlan: entered promiscuous mode [ 1450.218638][T19318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1450.294736][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1450.433125][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1450.658003][T18396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1450.816804][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1450.884884][T19641] overlayfs: missing 'lowerdir' [ 1451.344592][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1451.598178][T19246] veth0_macvtap: entered promiscuous mode [ 1451.644831][T19246] veth1_macvtap: entered promiscuous mode [ 1451.678735][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.711235][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.721523][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1451.732402][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.746466][T19246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.756228][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.766906][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.777252][T19246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1451.788506][T19246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1451.802388][T19246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.816933][T19246] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.826053][T19246] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.835166][T19246] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.845479][T19246] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.035254][T11607] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1452.448822][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1452.562083][T19662] block nbd9: not configured, cannot reconfigure [ 1453.144013][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1453.260366][T19668] input: syz0 as /devices/virtual/input/input27 [ 1454.081888][T19318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.327004][T11578] net_ratelimit: 2 callbacks suppressed [ 1454.327023][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1454.346746][T18400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.479404][T18407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.781516][T18400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.867106][T18407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.493151][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1456.666598][T19318] veth0_vlan: entered promiscuous mode [ 1456.676108][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1456.701733][T19318] veth1_vlan: entered promiscuous mode [ 1456.720731][T19690] overlayfs: missing 'lowerdir' [ 1456.794345][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1457.033064][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1457.055392][T19318] veth0_macvtap: entered promiscuous mode [ 1457.070384][T19318] veth1_macvtap: entered promiscuous mode [ 1457.165057][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1457.179794][T19701] IPVS: Error connecting to the multicast addr [ 1458.301435][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.373144][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.391872][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.004846][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.028150][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1459.090054][T19723] overlayfs: missing 'lowerdir' [ 1459.158035][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1459.314405][T19318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1460.064164][T18406] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1460.187840][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1460.209316][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.264087][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.286136][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.305086][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.469146][T19318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1460.659939][T19318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1460.704926][T19318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1460.735386][T19738] netlink: 'syz.9.3074': attribute type 10 has an invalid length. [ 1460.910677][T19318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.933035][T19318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.941783][T19318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1460.956963][T19738] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3074'. [ 1460.970628][T19318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1461.281073][T19738] team0: Port device geneve0 added [ 1461.340180][T19744] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 1461.425212][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1461.501276][T18407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.509376][T11578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1461.523277][T11578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.552365][T18407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1461.589236][T18414] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1461.749179][T11591] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1462.133246][T18400] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1462.142848][T19771] overlayfs: missing 'lowerdir' [ 1462.288618][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1462.696333][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1463.904429][ T8076] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1464.074248][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1465.695214][T18405] net_ratelimit: 6 callbacks suppressed [ 1465.695237][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1465.787472][T19817] overlayfs: missing 'lowerdir' [ 1465.836564][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1466.301249][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1466.473990][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1466.670797][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1467.863571][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.390193][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.573016][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.683068][T11578] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1468.806423][T11574] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1469.056889][T19846] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1469.270174][T19848] Context (ID=0x1) not attached to queue pair (handle=0x1:0x0) [ 1470.775901][T18405] net_ratelimit: 1 callbacks suppressed [ 1470.775923][T18405] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1471.971598][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1472.341114][T18407] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1578.672841][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1578.679977][ C0] rcu: 1-...!: (1 GPs behind) idle=c254/1/0x4000000000000000 softirq=75398/75401 fqs=0 [ 1578.693439][ C0] rcu: (detected by 0, t=10502 jiffies, g=67101, q=452 ncpus=2) [ 1578.701202][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1578.701239][ C1] NMI backtrace for cpu 1 [ 1578.701258][ C1] CPU: 1 UID: 0 PID: 19870 Comm: syz.2.3099 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1578.701278][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1578.701289][ C1] RIP: 0010:check_preemption_disabled+0x4/0x120 [ 1578.701323][ C1] Code: 8c 48 c7 c6 c0 d9 5e 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 <41> 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 [ 1578.701337][ C1] RSP: 0018:ffffc90000a18a08 EFLAGS: 00000083 [ 1578.701353][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff817ad660 [ 1578.701364][ C1] RDX: 0000000000000000 RSI: ffffffff8c5ed9c0 RDI: ffffffff8c5ed980 [ 1578.701376][ C1] RBP: ffffc90000a18b70 R08: ffffffff90185037 R09: 1ffffffff2030a06 [ 1578.701388][ C1] R10: dffffc0000000000 R11: fffffbfff2030a07 R12: 1ffff92000143154 [ 1578.701401][ C1] R13: ffffffff84c0a525 R14: ffffc90000a18ba0 R15: dffffc0000000000 [ 1578.701414][ C1] FS: 00005555923e8500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1578.701429][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1578.701440][ C1] CR2: 0000001b2ee18ff8 CR3: 000000004b460000 CR4: 00000000003526f0 [ 1578.701455][ C1] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 1578.701466][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1578.701477][ C1] Call Trace: [ 1578.701485][ C1] [ 1578.701495][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1578.701533][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1578.701574][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1578.701612][ C1] ? nmi_handle+0x2a/0x5a0 [ 1578.701656][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1578.701679][ C1] ? nmi_handle+0x14f/0x5a0 [ 1578.701696][ C1] ? nmi_handle+0x2a/0x5a0 [ 1578.701714][ C1] ? check_preemption_disabled+0x4/0x120 [ 1578.701737][ C1] ? default_do_nmi+0x63/0x160 [ 1578.701755][ C1] ? exc_nmi+0x123/0x1f0 [ 1578.701771][ C1] ? end_repeat_nmi+0xf/0x53 [ 1578.701787][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 1578.701813][ C1] ? lock_release+0xb0/0xa30 [ 1578.701830][ C1] ? check_preemption_disabled+0x4/0x120 [ 1578.701854][ C1] ? check_preemption_disabled+0x4/0x120 [ 1578.701878][ C1] ? check_preemption_disabled+0x4/0x120 [ 1578.701902][ C1] [ 1578.701908][ C1] [ 1578.701914][ C1] rcu_is_watching+0x15/0xb0 [ 1578.701935][ C1] lock_release+0xbf/0xa30 [ 1578.701955][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 1578.701978][ C1] ? __pfx_lock_release+0x10/0x10 [ 1578.701996][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1578.702020][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1578.702043][ C1] _raw_spin_unlock_irqrestore+0x79/0x140 [ 1578.702063][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1578.702088][ C1] debug_object_deactivate+0x2d5/0x390 [ 1578.702113][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1578.702139][ C1] ? timerqueue_add+0x260/0x290 [ 1578.702156][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1578.702178][ C1] debug_deactivate+0x1b/0x220 [ 1578.702201][ C1] __hrtimer_run_queues+0x305/0xd30 [ 1578.702230][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1578.702255][ C1] ? sched_clock+0x4a/0x70 [ 1578.702278][ C1] ? rcu_is_watching+0x15/0xb0 [ 1578.702300][ C1] hrtimer_interrupt+0x403/0xa40 [ 1578.702331][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1578.702352][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1578.702374][ C1] [ 1578.702379][ C1] [ 1578.702386][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1578.702410][ C1] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1578.702432][ C1] Code: c9 50 e8 59 0c 0c 00 48 83 c4 08 4c 89 f7 e8 ed 39 00 00 e9 de 04 00 00 4c 89 f7 e8 50 a8 54 0a e8 eb 8a 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1578.702446][ C1] RSP: 0018:ffffc900044bf6c8 EFLAGS: 00000282 [ 1578.702461][ C1] RAX: 273fff25ffcc5b00 RBX: ffff888059823c00 RCX: ffffffff9a377903 [ 1578.702473][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5ed9e0 [ 1578.702486][ C1] RBP: ffffc900044bf710 R08: ffffffff90185037 R09: 1ffffffff2030a06 [ 1578.702498][ C1] R10: dffffc0000000000 R11: fffffbfff2030a07 R12: 1ffff110170e7eac [ 1578.702511][ C1] R13: dffffc0000000000 R14: ffff8880b863e740 R15: ffff8880b873f560 [ 1578.702531][ C1] ? finish_task_switch+0x1e5/0x870 [ 1578.702553][ C1] __schedule+0x1803/0x4be0 [ 1578.702584][ C1] ? __pfx___schedule+0x10/0x10 [ 1578.702603][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1578.702621][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1578.702642][ C1] ? irqentry_exit+0x63/0x90 [ 1578.702665][ C1] ? preempt_schedule+0xe1/0xf0 [ 1578.702684][ C1] preempt_schedule_common+0x84/0xd0 [ 1578.702705][ C1] preempt_schedule+0xe1/0xf0 [ 1578.702725][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1578.702745][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 1578.702766][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1578.702785][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1578.702806][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1578.702827][ C1] try_to_wake_up+0x9c3/0x1470 [ 1578.702849][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 1578.702866][ C1] ? preempt_schedule+0xe1/0xf0 [ 1578.702885][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1578.702905][ C1] ? plist_del+0x3f1/0x410 [ 1578.702926][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 1578.702943][ C1] wake_up_q+0xc8/0x120 [ 1578.702967][ C1] futex_wake+0x523/0x5c0 [ 1578.702989][ C1] ? __pfx_futex_wake+0x10/0x10 [ 1578.703009][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1578.703029][ C1] do_futex+0x392/0x560 [ 1578.703055][ C1] ? __pfx_do_futex+0x10/0x10 [ 1578.703076][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1578.703097][ C1] __se_sys_futex+0x3f9/0x480 [ 1578.703121][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1578.703143][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 1578.703170][ C1] ? __x64_sys_futex+0x21/0xf0 [ 1578.703194][ C1] do_syscall_64+0xf3/0x230 [ 1578.703217][ C1] ? clear_bhb_loop+0x35/0x90 [ 1578.703234][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.703261][ C1] RIP: 0033:0x7f358bf85d29 [ 1578.703277][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1578.703291][ C1] RSP: 002b:00007ffd52331e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1578.703307][ C1] RAX: ffffffffffffffda RBX: 00007f358c176168 RCX: 00007f358bf85d29 [ 1578.703319][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f358c176168 [ 1578.703330][ C1] RBP: 00007f358c17616c R08: 0000000000000003 R09: 00007ffd5233217f [ 1578.703342][ C1] R10: 00007f358c175fa0 R11: 0000000000000246 R12: 0000000000000002 [ 1578.703352][ C1] R13: 00007f358c176160 R14: 0000000000000002 R15: 0000000000001823 [ 1578.703371][ C1] [ 1578.704232][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g67101 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1579.390610][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1579.400598][ C0] rcu: RCU grace-period kthread stack dump: [ 1579.406496][ C0] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1579.418271][ C0] Call Trace: [ 1579.421561][ C0] [ 1579.424509][ C0] __schedule+0x17fb/0x4be0 [ 1579.429059][ C0] ? __pfx___schedule+0x10/0x10 [ 1579.433930][ C0] ? __pfx_lock_release+0x10/0x10 [ 1579.438990][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1579.445345][ C0] ? schedule+0x90/0x320 [ 1579.449606][ C0] schedule+0x14b/0x320 [ 1579.453783][ C0] schedule_timeout+0x15a/0x290 [ 1579.458648][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1579.464042][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1579.469356][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1579.474921][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1579.479876][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1579.485108][ C0] ? rcu_gp_init+0x1256/0x1630 [ 1579.489893][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 1579.494841][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1579.500749][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1579.506060][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1579.511979][ C0] ? finish_swait+0xd4/0x1e0 [ 1579.516584][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1579.521190][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1579.526405][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1579.532328][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1579.537397][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1579.542614][ C0] kthread+0x2f0/0x390 [ 1579.550645][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1579.558517][ C0] ? __pfx_kthread+0x10/0x10 [ 1579.569952][ C0] ret_from_fork+0x4b/0x80 [ 1579.575174][ C0] ? __pfx_kthread+0x10/0x10 [ 1579.580076][ C0] ret_from_fork_asm+0x1a/0x30 [ 1579.585453][ C0] [ 1579.588510][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1579.594876][ C0] CPU: 0 UID: 0 PID: 18396 Comm: kworker/u8:6 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 1579.605866][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1579.615944][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1579.622475][ C0] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 1579.629257][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 1579.648875][ C0] RSP: 0018:ffffc90004bff6e0 EFLAGS: 00000293 [ 1579.654961][ C0] RAX: ffffffff81938ebb RBX: 1ffff110170e88b9 RCX: ffff888033178000 [ 1579.662952][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1579.670940][ C0] RBP: ffffc90004bff8e0 R08: ffffffff81938e8a R09: 1ffffffff284e110 [ 1579.678921][ C0] R10: dffffc0000000000 R11: fffffbfff284e111 R12: dffffc0000000000 [ 1579.686917][ C0] R13: ffff8880b87445c8 R14: ffff8880b863f940 R15: 0000000000000001 [ 1579.694906][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1579.703873][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1579.710464][ C0] CR2: 00007fbdcf77a5a0 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1579.718449][ C0] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 1579.726428][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1579.734411][ C0] Call Trace: [ 1579.737709][ C0] [ 1579.740565][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1579.746938][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1579.752599][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1579.758429][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1579.764689][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1579.770089][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1579.775750][ C0] ? update_process_times+0x242/0x2f0 [ 1579.781134][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1579.786355][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1579.791835][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1579.797244][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1579.802986][ C0] ? handle_softirqs+0x7e0/0x9b0 [ 1579.807952][ C0] ? read_tsc+0x9/0x20 [ 1579.812042][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1579.818130][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1579.823286][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1579.829469][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1579.835379][ C0] [ 1579.838320][ C0] [ 1579.841261][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1579.847636][ C0] ? smp_call_function_many_cond+0x19da/0x2c60 [ 1579.853948][ C0] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 1579.860185][ C0] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 1579.866417][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1579.871481][ C0] ? __pfx___text_poke+0x10/0x10 [ 1579.876435][ C0] ? process_scheduled_works+0x976/0x1840 [ 1579.882187][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1579.888540][ C0] ? __pfx___might_resched+0x10/0x10 [ 1579.893846][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1579.899759][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1579.904804][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1579.910195][ C0] text_poke_bp_batch+0x352/0xb30 [ 1579.915241][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1579.921241][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 1579.927418][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1579.932992][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1579.939268][ C0] ? process_scheduled_works+0x976/0x1840 [ 1579.945008][ C0] text_poke_finish+0x30/0x50 [ 1579.949702][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1579.955707][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 1579.961634][ C0] static_key_enable+0x1a/0x20 [ 1579.966674][ C0] toggle_allocation_gate+0xbc/0x260 [ 1579.971998][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1579.977922][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1579.984282][ C0] process_scheduled_works+0xa66/0x1840 [ 1579.989880][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1579.995887][ C0] ? assign_work+0x364/0x3d0 [ 1580.000500][ C0] worker_thread+0x870/0xd30 [ 1580.005115][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1580.010163][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1580.015315][ C0] kthread+0x2f0/0x390 [ 1580.019487][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1580.024606][ C0] ? __pfx_kthread+0x10/0x10 [ 1580.029212][ C0] ret_from_fork+0x4b/0x80 [ 1580.033645][ C0] ? __pfx_kthread+0x10/0x10 [ 1580.038252][ C0] ret_from_fork_asm+0x1a/0x30 [ 1580.043049][ C0]