last executing test programs: 37m5.400295116s ago: executing program 32 (id=129): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f646973636172642c6f726465723d7374726963742c6e6f626172726965722c6e6f7265846f766572792c646973636172642c646973636172642c6e2c6e6f646973636172642c6e6f6261727269650e2c00"], 0x1, 0xa75, &(0x7f0000000ac0)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) semget$private(0x0, 0x3, 0xd5) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0x10, 0x0, 0x16) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x6, 0xf}, {0x3, 0x5}, {0x3, 0x1}, {0x8}], "d9e58b8fb17da966"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) semctl$SEM_STAT(0x0, 0x0, 0x12, 0xfffffffffffffffe) 36m43.075376786s ago: executing program 33 (id=149): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 36m16.436060259s ago: executing program 5 (id=241): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000010000)) r1 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r1}) 36m16.185180831s ago: executing program 5 (id=243): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000006c0), 0x1, 0x509, &(0x7f0000001500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) tee(r0, 0xffffffffffffffff, 0x5, 0xe) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r5, 0x89ed, 0x0) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r7 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_DO_IT(r8, 0xab03) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r3, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x30}}, 0x880) execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) pwritev2(r0, 0x0, 0x0, 0x3, 0x3, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)=@ipv6_newaddrlabel={0x30, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}, 0x1, 0x0, 0x0, 0x8041004}, 0x20048000) 36m14.183619067s ago: executing program 5 (id=249): r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e23}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 36m9.809776465s ago: executing program 5 (id=260): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x4, 0x1, 0x4, 0xb}, {0x4, 0x3, 0x10, 0x8}, {0x3, 0x4, 0x6, 0x4}], 0x10, 0xb, @void, @value}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x2000c000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 36m4.396259641s ago: executing program 34 (id=260): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x1f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xa, 0xc8fe}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x4, 0x1, 0x4, 0xb}, {0x4, 0x3, 0x10, 0x8}, {0x3, 0x4, 0x6, 0x4}], 0x10, 0xb, @void, @value}, 0x94) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x2000c000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 26m8.814303485s ago: executing program 35 (id=1961): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r5}) 26m5.524913025s ago: executing program 36 (id=1975): syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) dup(r1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x17, 0xd0, 0xf5, 0x20, 0x421, 0x6901, 0x2d1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x6a, 0x2, 0x0, 0x2, 0xfe, 0x18}}]}}]}}, 0x0) 22m44.453062509s ago: executing program 37 (id=2479): socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x0, 0x63, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x40000008) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) sendto$inet6(r3, &(0x7f0000000080)="b927db", 0x3, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback}, 0x1c) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/oss_mixer\x00', 0x200000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r5, 0x401, 0x0) 19m1.25335362s ago: executing program 38 (id=2971): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) socket$l2tp(0x2, 0x2, 0x73) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a"], 0x22) 17m5.449188392s ago: executing program 39 (id=3168): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) 16m5.546431213s ago: executing program 4 (id=3300): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b81) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) syz_usb_connect(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xc8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000780)={[{@redirect_dir_off, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000200)={r5, &(0x7f0000000080), 0x0}, 0x20) chown(&(0x7f0000000700)='./file0\x00', 0x0, 0xee00) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 16m3.678126544s ago: executing program 4 (id=3304): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) symlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='./bus\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x1a6}, &(0x7f0000004000), &(0x7f0000000340)) 15m59.107610215s ago: executing program 4 (id=3312): socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x541c, &(0x7f00000000c0)) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x200041) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x200802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x80040) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000f80)={0x1, {0x0, 0x4, 0x182, 0x800002}, {0x20010b, 0x0, 0x100000, 0xa}, {0x6, 0xfffffffc}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x1a0) socket$qrtr(0x2a, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0xa) 15m58.710091941s ago: executing program 4 (id=3315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) 15m56.798237376s ago: executing program 4 (id=3316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 15m55.629827011s ago: executing program 4 (id=3318): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/60, 0x130000, 0x1000}, 0x20) accept4$x25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x50807100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0xa}, 0x10) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x160, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15m40.145254846s ago: executing program 40 (id=3318): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/60, 0x130000, 0x1000}, 0x20) accept4$x25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x12, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x50807100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/meminfo\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0xa}, 0x10) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x160, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x308) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14m8.918986869s ago: executing program 5 (id=2999): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0xff, 0x59d6, &(0x7f0000007200)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod(&(0x7f00000001c0)='./file1\x00', 0x2, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4096}, 0x1008, 0x3, 0x5800) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) memfd_create(0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, &(0x7f0000000240)=[{&(0x7f00000015c0)="94e3eec7e172255ff2dad91d9681194430aa04b6f8a3d9fef0fc4c53a3e55041c0d7843cf81faa0279519447648e882d5187d8a0affd54cff6941c99ac830acd54b2755b328947babb6c515c93307b6a25ae59e4d411a65f8c3d918024df27f70a5d8a89987e18530ba43936b858ec8634c6433cace6ee0318b5320b28e4aab81e9583b6b135d911685567f595925ae6ceaa46227e", 0x95}, {0x0}], 0x2) 14m6.365136409s ago: executing program 5 (id=3524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 13m50.760480497s ago: executing program 41 (id=3524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) 11m44.643798744s ago: executing program 3 (id=3824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x7}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8731}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 11m44.143329353s ago: executing program 3 (id=3827): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032cbd7000fcdbdf25040000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 11m42.173177407s ago: executing program 3 (id=3830): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) 11m40.02187699s ago: executing program 3 (id=3834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 11m38.763923568s ago: executing program 3 (id=3836): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x5c, 0x10, 0x1, 0x70bd27, 0x25dfdbf4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20008}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7, 0x7}}]}]}]}, 0x5c}}, 0x800) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000080)='[\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 11m31.944641314s ago: executing program 3 (id=3854): creat(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x328}}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rxrpc(0x21, 0x2, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getrlimit(0xb, &(0x7f00000000c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0)=0x5, 0x97) 11m15.92182135s ago: executing program 42 (id=3854): creat(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB], 0x328}}, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rxrpc(0x21, 0x2, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) getrlimit(0xb, &(0x7f00000000c0)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) sendfile(r4, 0xffffffffffffffff, &(0x7f00000001c0)=0x5, 0x97) 4m40.191239563s ago: executing program 2 (id=5809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 4m38.988021958s ago: executing program 2 (id=5815): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b3300"/27, 0x1b}], 0x1}, 0x20000000) 4m37.843621553s ago: executing program 2 (id=5817): socket$kcm(0xa, 0x922000000003, 0x11) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) 4m36.647806279s ago: executing program 2 (id=5821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x18, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) 4m35.684083219s ago: executing program 2 (id=5825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, 0x0) close(r4) 4m34.209097629s ago: executing program 2 (id=5831): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000240)={0x2}) socket$kcm(0x11, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="ba4c38af83b760a8f8a149f1f388", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m18.868568283s ago: executing program 43 (id=5831): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x100010, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f0000000240)={0x2}) socket$kcm(0x11, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="ba4c38af83b760a8f8a149f1f388", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 13.283761947s ago: executing program 1 (id=6918): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$pppl2tp(0x18, 0x1, 0x1) openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x3, 0xc301) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x1) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c204008deb4a0678e1a2003200ffffffffffff86dd6001070000111100fc010000000000000000000000000000ff02000000000000000000000000000100000e22001190780100000075a03d97e1"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mmap(&(0x7f00005b1000/0x4000)=nil, 0x4000, 0x0, 0x21011, r0, 0x0) syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) 12.410049687s ago: executing program 1 (id=6925): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x1, 0x0) 12.201710623s ago: executing program 1 (id=6928): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3bc40c7f8fd73d61164fc7d15648a9e0070949687000000000000000000000000000000000000000000000000000000227bf23d3ba4560ebd700000"], 0x34c}}, 0x44) 12.03192169s ago: executing program 1 (id=6932): unshare(0x20040600) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/37, 0x25}], 0x1, &(0x7f00000028c0)=""/227, 0xe3}, 0x8}, {{&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000003000)=""/4103, 0x1007}, 0x200}], 0x2, 0x40002020, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) 10.950254668s ago: executing program 1 (id=6935): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x60100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$pppl2tp(0x18, 0x1, 0x1) openat$drirender128(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x3, 0xc301) r0 = fsopen(&(0x7f0000000080)='sockfs\x00', 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x1) 10.359577403s ago: executing program 1 (id=6938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000200000000000800a00094090000"], 0x48}}, 0x0) 9.963373267s ago: executing program 9 (id=6946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) fspick(0xffffffffffffffff, 0x0, 0x1) 9.719861163s ago: executing program 8 (id=6948): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000006c0)="d6b50c63bb4a", 0x6}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) 9.719230782s ago: executing program 9 (id=6949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) unshare(0x2c020400) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x18, 0x1, 0x7, 0x1, 0x2, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x80, 0x8, 0x47}}}}}]}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="050f05080087"]}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[], 0x80}}, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x4000000000000fc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f0000000740)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x5, 0xfb, 0x6, 0x10, 0x1}, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc09}}, {0x0, 0x0}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc04}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x300a}}, {0x0, 0x0}, {0x2, &(0x7f0000000600)=@string={0x2}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x4ff}}, {0x58, &(0x7f0000000680)=@string={0x58, 0x3, "43a92afcca33d1ac0415f167a143fe54b5bd8c39b0c42bdebee14272108eecea1f6442e94f094f0eb88877b4b4fe4b4621b708832eecd9bcbac27a8817b4b2f20e7b8a668638b635f0eb05980fee19cb0231fae846d6"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x240a}}]}) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000040)=0x68) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0001"], 0x1c}}, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x48c180, 0x0) recvmmsg$unix(r6, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0xff8d}], 0x600, 0x0, 0x0) 8.478017938s ago: executing program 8 (id=6953): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)=""/197, 0xc5}], 0x1}, 0x0, 0x80002080}) io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000200)='~', 0xb7) 8.295058037s ago: executing program 0 (id=6955): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d00)=""/245, 0xf5}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000e40)=""/192, 0xc0}, {&(0x7f0000000f00)=""/132, 0x84}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f0000000b00)=""/200, 0xc8}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x9}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 8.158026868s ago: executing program 8 (id=6957): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x38}}, 0x0) 7.878709283s ago: executing program 8 (id=6958): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r1 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x8008, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000200)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) clock_gettime(0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x800) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 6.565559592s ago: executing program 8 (id=6959): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x731e0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r3, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 6.391509004s ago: executing program 9 (id=6960): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3bc40c7f8fd73d61164fc7d15648a9e0070949687000000000000000000000000000000000000000000000000000000227bf23d3ba4560ebd70000000"], 0x34c}}, 0x44) 6.33996248s ago: executing program 0 (id=6961): unshare(0x20040600) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x4c, &(0x7f0000000000)=0xb, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/37, 0x25}], 0x1, &(0x7f00000028c0)=""/227, 0xe3}, 0x8}, {{&(0x7f0000000280)=@nfc, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000003000)=""/4103, 0x1007}, 0x200}], 0x2, 0x40002020, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) 6.283220878s ago: executing program 6 (id=6962): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 6.055506145s ago: executing program 0 (id=6963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) fspick(0xffffffffffffffff, 0x0, 0x1) 5.939956507s ago: executing program 6 (id=6964): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000200)=[{&(0x7f00000006c0)="d6b50c63bb4a", 0x6}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4) 5.915414516s ago: executing program 7 (id=6965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x6, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x405, 0xca, &(0x7f0000000680)=""/202, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000003c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0xffffffff, {}, {0x0, 0x8, 0xfd, 0x0, 0x0, 0x6, 'y)\x00'}, 0x9, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) close_range(r3, 0xffffffffffffffff, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xbcaf, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000100)={0x1000007, 0x2, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000509645d5cde00800450000280000000000029078000000000000000011e0907800000000000100010000000000000000"], 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 5.726219435s ago: executing program 0 (id=6966): socket$caif_seqpacket(0x25, 0x5, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.823880136s ago: executing program 6 (id=6967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 4.723492969s ago: executing program 7 (id=6968): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 4.347410888s ago: executing program 8 (id=6969): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='9p_client_req\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32=r3, @ANYBLOB="5ab5534596"], 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r4, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5, @ANYBLOB="520200a4ad793a69beeb0d6ee7e1d22ece67b522"], 0x24}}, 0x0) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = gettid() sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 3.922551262s ago: executing program 9 (id=6970): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r1 = syz_io_uring_setup(0x34ff, &(0x7f0000000340)={0x0, 0x8008, 0x10100, 0x0, 0x0, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000200)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0xdf, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) clock_gettime(0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x28, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000880}, 0x800) syz_io_uring_setup(0x1f33, &(0x7f00000002c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) 3.727848622s ago: executing program 7 (id=6971): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$netlink(r1, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r6, r5, r5, 0x0) 3.714621005s ago: executing program 0 (id=6972): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) iopl(0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @remote}, 0x8, {0x2, 0x0, @multicast2}, 'veth1_virt_wifi\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.771513256s ago: executing program 6 (id=6973): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x81, 0x1}, {0x2, 0xa5, 0x2}}}]}}]}]}]}}]}, 0x5c}}, 0x0) 2.770841206s ago: executing program 7 (id=6974): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="8040deff000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.693306519s ago: executing program 9 (id=6975): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="1811f98c00f2a37dd2d4ed84124aca9138bc00", @ANYBLOB="0000000000000000b7080000010000007b8a"], &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x3, 0x6, 0x10000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x2, 0x5, 0x4, 0xa}, {0x0, 0x4, 0x1, 0xc}, {0x5, 0x4, 0x10, 0x4}, {0x2, 0x4, 0x8, 0xb}], 0x10, 0x3, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='timerslack_ns\x00') write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000100)={0x30}, 0x30) 1.591390058s ago: executing program 9 (id=6976): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/fscreate\x00') read$FUSE(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='i2c_read\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000800), 0x0, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x100, 0x2001, 0x0, 0x0}], 0x1}) 1.590262635s ago: executing program 0 (id=6977): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000072009fb300000000fcdbdf2507000000e31a8b4b71a7074483e376b4f597b1b00a21afc9532cc7e106d29730276a3a36b35e6d3a85a9750800000000000000dd6961b1f0a8163ca385f4d5b23936459d87423a43e356c8b910131aebea6061de6824756610ab51e2bd7e42f3444680df8f079c19b01e015f0fa8cf0ef24e761205e8bc3691254bccaa2a0b1840", @ANYRES32=0x0], 0x18}}, 0x8440) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x8007c49, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=2']) chdir(&(0x7f00000006c0)='./file1\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000032000000ac1414aa000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000000000000000000000000000000000000000000000000000000000000100002000000000feffffff0000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYBLOB='B'], 0x144}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioprio_get$pid(0x3, r5) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000d53000/0x1000)=nil, 0x1000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r7, 0x0, 0x0, 'syz1\x00', 0x0}) 1.393812161s ago: executing program 6 (id=6978): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.311641937s ago: executing program 7 (id=6979): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffe, r3, 0x0) 91.291256ms ago: executing program 7 (id=6980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x4001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x731e0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f000000a900)=[{{0x0, 0xa00, 0x0}}], 0x1, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=6981): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e3bc40c7f8fd73d61164fc7d15648a9e0070949687000000000000000000000000000000000000000000000000000000227bf23d3ba4560ebd70000000"], 0x34c}}, 0x44) kernel console output (not intermixed with test programs): man_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2108.387984][T25174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2108.418534][T25174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2108.451414][T25174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2108.499777][T25174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2108.527373][T25598] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5855'. [ 2108.542128][T25174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2108.605005][T25174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.635476][T25174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.656250][T25174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.673934][T25174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2108.700531][T25603] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5854'. [ 2108.724949][T25599] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2109.575914][T17360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.607401][T17360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2109.768044][ T5962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.815138][ T5962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2110.280644][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5867'. [ 2110.406363][T25632] netlink: 56 bytes leftover after parsing attributes in process `syz.6.5868'. [ 2111.290796][T25638] netlink: 'syz.9.5870': attribute type 10 has an invalid length. [ 2111.312167][T25638] batman_adv: batadv0: Adding interface: team0 [ 2111.324855][T25638] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2111.353990][T25638] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2111.370712][T25643] netlink: 'syz.9.5870': attribute type 10 has an invalid length. [ 2111.378557][T25643] netlink: 2 bytes leftover after parsing attributes in process `syz.9.5870'. [ 2111.430712][T25646] netlink: 'syz.6.5871': attribute type 29 has an invalid length. [ 2111.456254][T25646] netlink: 'syz.6.5871': attribute type 29 has an invalid length. [ 2111.481487][T25643] team0: entered promiscuous mode [ 2111.486679][T25643] team_slave_0: entered promiscuous mode [ 2111.498031][T25643] team_slave_1: entered promiscuous mode [ 2111.515424][T25643] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.522860][T25643] batman_adv: batadv0: Interface activated: team0 [ 2111.546386][T25643] batman_adv: batadv0: Interface deactivated: team0 [ 2111.557870][T25643] batman_adv: batadv0: Removing interface: team0 [ 2111.566692][T25643] bridge0: port 3(team0) entered blocking state [ 2111.573514][T25643] bridge0: port 3(team0) entered disabled state [ 2111.580230][T25643] team0: entered allmulticast mode [ 2111.629650][T25643] team_slave_0: entered allmulticast mode [ 2111.651117][T25643] team_slave_1: entered allmulticast mode [ 2111.737186][T25643] bridge0: port 3(team0) entered blocking state [ 2111.743761][T25643] bridge0: port 3(team0) entered forwarding state [ 2111.792876][T25652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5872'. [ 2111.891632][T25651] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2111.901574][T25652] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5872'. [ 2112.907485][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5881'. [ 2114.850822][T25703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5892'. [ 2114.942904][T25709] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2114.965863][T25708] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5896'. [ 2117.539932][T23113] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 2117.762213][T23113] usb 10-1: Using ep0 maxpacket: 32 [ 2117.785214][T23113] usb 10-1: config 0 has no interfaces? [ 2117.815398][T23113] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2117.854026][T23113] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.881515][T23113] usb 10-1: config 0 descriptor?? [ 2118.226089][T23125] usb 10-1: USB disconnect, device number 69 [ 2119.896015][T25789] veth0_to_bond: entered allmulticast mode [ 2120.075771][T18772] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2120.095263][T18772] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2120.104876][T18772] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2120.116631][T18772] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2120.126539][T18772] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2120.181185][T25800] netlink: 'syz.1.5930': attribute type 12 has an invalid length. [ 2120.207460][T25800] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5930'. [ 2120.365232][T25529] bond0: (slave syz_tun): Releasing backup interface [ 2122.201978][T25178] Bluetooth: hci5: command tx timeout [ 2122.479343][T25795] chnl_net:caif_netlink_parms(): no params data found [ 2122.869950][T23110] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2123.871022][T25856] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5952'. [ 2124.102913][T23110] usb 2-1: Using ep0 maxpacket: 32 [ 2124.213473][T23110] usb 2-1: config 0 has no interfaces? [ 2124.218985][T23110] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2124.252153][T25795] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.259496][T25795] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.270098][T23110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.278424][T25795] bridge_slave_0: entered allmulticast mode [ 2124.280252][T25178] Bluetooth: hci5: command tx timeout [ 2124.291884][T25795] bridge_slave_0: entered promiscuous mode [ 2124.305015][T23110] usb 2-1: config 0 descriptor?? [ 2124.317745][T25795] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.345725][T25795] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.353561][T25795] bridge_slave_1: entered allmulticast mode [ 2124.362028][T25795] bridge_slave_1: entered promiscuous mode [ 2124.581661][T23105] usb 2-1: USB disconnect, device number 37 [ 2124.608841][T19578] bridge_slave_1: left allmulticast mode [ 2124.628178][T19578] bridge_slave_1: left promiscuous mode [ 2124.648655][T19578] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.756020][T19578] bridge_slave_0: left allmulticast mode [ 2124.815428][T19578] bridge_slave_0: left promiscuous mode [ 2124.915087][T19578] bridge0: port 1(bridge_slave_0) entered disabled state [ 2125.033089][T25885] fuse: Unknown parameter 'grou00000000000000000000' [ 2126.415016][T25178] Bluetooth: hci5: command tx timeout [ 2126.681917][T19578] team0: Port device geneve0 removed [ 2127.282507][T25909] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5969'. [ 2128.036341][T19578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2128.047202][T19578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2128.056765][T19578] bond0 (unregistering): Released all slaves [ 2128.079172][T25795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2128.317367][T25795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2128.440014][T25178] Bluetooth: hci5: command tx timeout [ 2128.788499][T25931] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 2129.797698][T25948] fuse: Unknown parameter 'grou00000000000000000000' [ 2129.957567][T23125] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 2130.159339][T23125] usb 10-1: Using ep0 maxpacket: 32 [ 2130.179910][T23125] usb 10-1: config 0 has no interfaces? [ 2130.185635][T23125] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2130.227840][T23125] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.275681][T23125] usb 10-1: config 0 descriptor?? [ 2130.345121][T25954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5983'. [ 2130.410035][T25955] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5983'. [ 2130.509683][T23125] usb 10-1: USB disconnect, device number 70 [ 2130.550908][T25957] netlink: 'syz.8.5983': attribute type 10 has an invalid length. [ 2131.473657][T25962] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5984'. [ 2132.241063][T25954] syz_tun: left allmulticast mode [ 2132.246161][T25954] syz_tun: left promiscuous mode [ 2132.257897][T25954] bridge0: port 3(syz_tun) entered disabled state [ 2132.282798][T25954] bridge_slave_1: left allmulticast mode [ 2132.288677][T25954] bridge_slave_1: left promiscuous mode [ 2132.301774][T25954] bridge0: port 2(bridge_slave_1) entered disabled state [ 2132.341200][T25954] bridge_slave_0: left allmulticast mode [ 2132.358803][T25954] bridge_slave_0: left promiscuous mode [ 2132.379288][T25954] bridge0: port 1(bridge_slave_0) entered disabled state [ 2132.534805][T25957] syz_tun: entered promiscuous mode [ 2132.552187][T25957] : (slave syz_tun): Enslaving as an active interface with an up link [ 2132.752220][T25795] team0: Port device team_slave_0 added [ 2132.806211][T25795] team0: Port device team_slave_1 added [ 2133.015355][T25795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2133.051896][T25795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.170619][T25993] fuse: Unknown parameter 'grou00000000000000000000' [ 2133.391919][T25795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2133.442772][T23108] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 2133.502761][T19578] tipc: Left network mode [ 2133.597908][T25795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2133.618677][T25795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2133.692895][T25795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2133.739967][T23108] usb 7-1: Using ep0 maxpacket: 32 [ 2133.767745][T23108] usb 7-1: config 0 has no interfaces? [ 2133.776663][T23108] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2133.860739][T23108] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.901697][T23108] usb 7-1: config 0 descriptor?? [ 2134.152211][T26011] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6002'. [ 2134.515370][T23125] usb 7-1: USB disconnect, device number 43 [ 2134.596600][T25795] hsr_slave_0: entered promiscuous mode [ 2134.607388][T25795] hsr_slave_1: entered promiscuous mode [ 2134.626979][T25795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2134.649980][T25795] Cannot create hsr debugfs directory [ 2135.089282][T19578] hsr_slave_0: left promiscuous mode [ 2135.117731][T19578] hsr_slave_1: left promiscuous mode [ 2135.137887][T19578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2135.177842][T19578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2136.558806][T26038] fuse: Unknown parameter 'group_i00000000000000000000' [ 2137.604869][T26051] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6017'. [ 2139.404288][T19578] team0 (unregistering): Port device team_slave_1 removed [ 2139.404325][T26078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6024'. [ 2139.453825][T19578] team0 (unregistering): Port device team_slave_0 removed [ 2139.477365][T26079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6024'. [ 2139.650160][T23113] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2139.822290][T23113] usb 2-1: Using ep0 maxpacket: 32 [ 2139.830159][T23113] usb 2-1: config 0 has no interfaces? [ 2139.835841][T23113] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2139.845231][T23113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.856240][T23113] usb 2-1: config 0 descriptor?? [ 2140.100144][ T5901] usb 2-1: USB disconnect, device number 38 [ 2141.670680][T26101] fuse: Unknown parameter 'group_i00000000000000000000' [ 2142.913851][T26125] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 2142.986254][T26125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6044'. [ 2143.073390][T26133] netlink: 'syz.0.6042': attribute type 30 has an invalid length. [ 2143.226301][T23113] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 2143.281857][T25795] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2143.307488][T25795] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2143.453319][T26142] fuse: Unknown parameter 'group_i00000000000000000000' [ 2143.555066][T23113] usb 10-1: Using ep0 maxpacket: 32 [ 2143.853637][T23113] usb 10-1: config 0 has no interfaces? [ 2144.058882][T23113] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2144.323501][T25795] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2144.369974][T23113] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2144.405827][T23113] usb 10-1: config 0 descriptor?? [ 2144.411841][T25795] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2144.859800][T23125] usb 10-1: USB disconnect, device number 71 [ 2144.911013][T25795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2144.974306][T25795] 8021q: adding VLAN 0 to HW filter on device team0 [ 2145.017907][T19578] bridge0: port 1(bridge_slave_0) entered blocking state [ 2145.025162][T19578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2145.105241][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.112492][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2146.589080][T26171] netlink: 'syz.1.6061': attribute type 30 has an invalid length. [ 2146.939518][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6066'. [ 2146.973584][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6066'. [ 2146.997260][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6066'. [ 2147.117663][T25795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2148.768853][T25795] veth0_vlan: entered promiscuous mode [ 2148.784976][T25795] veth1_vlan: entered promiscuous mode [ 2148.893587][T23122] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2149.190926][T23122] usb 2-1: Using ep0 maxpacket: 32 [ 2149.325354][T23122] usb 2-1: config 0 has no interfaces? [ 2149.423880][T25795] veth0_macvtap: entered promiscuous mode [ 2149.439938][T23122] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2149.478926][T25795] veth1_macvtap: entered promiscuous mode [ 2149.493022][T23122] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.551177][T23122] usb 2-1: config 0 descriptor?? [ 2149.582752][T25795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2149.634369][T25795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2149.654030][T25795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2149.664750][T25795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2149.676762][T25795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2149.689728][T25795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2149.707848][T25795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2149.729223][T25795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2149.750721][T25795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2149.783171][T25795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2150.254440][T23122] usb 2-1: USB disconnect, device number 39 [ 2150.317354][T25795] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.348864][T25795] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.369920][T25795] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.378683][T25795] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2150.433661][T26245] netlink: 'syz.0.6086': attribute type 1 has an invalid length. [ 2150.536690][T26245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2151.567381][T23122] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 2151.726175][T23122] usb 7-1: device descriptor read/64, error -71 [ 2151.772715][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2151.788455][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2151.861517][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2151.869378][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2152.021360][T23122] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 2152.329940][T23122] usb 7-1: device descriptor read/64, error -71 [ 2153.306302][T26276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6096'. [ 2153.357554][T26276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6096'. [ 2153.415952][T26276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6096'. [ 2153.495577][T23122] usb usb7-port1: attempt power cycle [ 2154.059930][T23125] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 2154.380100][T23125] usb 9-1: Using ep0 maxpacket: 32 [ 2154.390630][T23125] usb 9-1: config 0 has no interfaces? [ 2154.398155][T23125] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2155.134155][T23125] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.152716][T23125] usb 9-1: config 0 descriptor?? [ 2155.346219][T26312] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6110'. [ 2155.556146][T23122] usb 9-1: USB disconnect, device number 67 [ 2157.170848][T26332] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6117'. [ 2157.231228][T26332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6117'. [ 2160.847281][T26384] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6134'. [ 2160.909924][T23113] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2161.033584][T26390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6136'. [ 2161.064688][T26390] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6136'. [ 2161.070074][T23113] usb 2-1: Using ep0 maxpacket: 32 [ 2161.337278][T23113] usb 2-1: config 0 has no interfaces? [ 2161.343741][T23113] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2161.359468][T23113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.373374][T23113] usb 2-1: config 0 descriptor?? [ 2162.407159][T23113] usb 2-1: can't set config #0, error -71 [ 2162.569748][T26403] syzkaller1: entered promiscuous mode [ 2162.585817][T23113] usb 2-1: USB disconnect, device number 40 [ 2162.605928][T26403] syzkaller1: entered allmulticast mode [ 2164.850605][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2167.741705][T26449] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6150'. [ 2167.757315][T26449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6150'. [ 2167.799372][T26448] block nbd0: not configured, cannot reconfigure [ 2167.960659][T26454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6158'. [ 2168.071361][T26454] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6158'. [ 2168.286786][T23110] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2168.843091][T23110] usb 1-1: Using ep0 maxpacket: 32 [ 2168.881019][T23110] usb 1-1: config 0 has no interfaces? [ 2168.887952][T23110] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2168.910289][T23110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2168.942686][T23110] usb 1-1: config 0 descriptor?? [ 2169.595272][T17172] usb 1-1: USB disconnect, device number 47 [ 2170.605752][T25178] Bluetooth: hci5: link tx timeout [ 2170.614185][T25178] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 2173.240947][T18772] Bluetooth: hci5: command 0x0406 tx timeout [ 2173.252574][T26490] netlink: 'syz.8.6169': attribute type 10 has an invalid length. [ 2173.295672][T26488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6167'. [ 2173.304764][T26490] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6169'. [ 2173.319924][T17172] usb 10-1: new low-speed USB device number 72 using dummy_hcd [ 2173.353568][T26488] vlan3: entered promiscuous mode [ 2173.430449][T26488] batadv0: entered promiscuous mode [ 2173.491674][T17172] usb 10-1: device descriptor read/64, error -71 [ 2174.631084][T17172] usb 10-1: new low-speed USB device number 73 using dummy_hcd [ 2174.790046][T17172] usb 10-1: device descriptor read/64, error -71 [ 2175.111045][T17172] usb usb10-port1: attempt power cycle [ 2175.885304][ T1323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2177.582799][ T1323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.735195][ T1323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.976781][ T1323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2181.154637][T26563] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6192'. [ 2182.172874][ T1323] bridge_slave_1: left allmulticast mode [ 2182.189900][ T1323] bridge_slave_1: left promiscuous mode [ 2182.209257][ T1323] bridge0: port 2(bridge_slave_1) entered disabled state [ 2182.651352][ T1323] bridge_slave_0: left allmulticast mode [ 2182.929001][ T1323] bridge_slave_0: left promiscuous mode [ 2182.940226][ T1323] bridge0: port 1(bridge_slave_0) entered disabled state [ 2183.817915][T26581] loop7: detected capacity change from 0 to 7 [ 2183.964209][T26585] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2183.982292][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2183.991625][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.009642][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.018853][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.047113][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.056550][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.140913][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.150269][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.160309][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.169579][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.203294][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.212533][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.223930][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.233126][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.243147][T26581] ldm_validate_partition_table(): Disk read failed. [ 2184.578821][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.588055][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.604062][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.613292][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.645381][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2184.654639][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2184.662704][T26581] Dev loop7: unable to read RDB block 0 [ 2184.700747][T26581] loop7: unable to read partition table [ 2184.706775][T26581] loop7: partition table beyond EOD, truncated [ 2184.713288][T26581] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2185.828872][ T1323] team0: Port device geneve0 removed [ 2186.655427][T23108] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 2186.841472][T23108] usb 7-1: device descriptor read/64, error -71 [ 2186.887555][ T1323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2186.899188][ T1323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2186.908615][ T1323] bond0 (unregistering): Released all slaves [ 2187.100103][T23108] usb 7-1: new low-speed USB device number 48 using dummy_hcd [ 2187.240125][T23108] usb 7-1: device descriptor read/64, error -71 [ 2187.386137][T23108] usb usb7-port1: attempt power cycle [ 2188.270217][T23108] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 2188.330337][T23108] usb 7-1: device descriptor read/8, error -71 [ 2189.719097][ T1323] tipc: Left network mode [ 2190.321965][T26634] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2190.329307][T26634] overlayfs: failed to set xattr on upper [ 2190.335151][T26634] overlayfs: ...falling back to redirect_dir=nofollow. [ 2190.342111][T26634] overlayfs: ...falling back to index=off. [ 2190.348105][T26634] overlayfs: maximum fs stacking depth exceeded [ 2192.074400][T26660] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2192.607001][T26673] tipc: Started in network mode [ 2192.612064][T26673] tipc: Node identity 0011040000000000002e, cluster identity 4711 [ 2192.863416][ T1323] hsr_slave_0: left promiscuous mode [ 2193.003613][ T1323] hsr_slave_1: left promiscuous mode [ 2193.052544][ T1323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2193.106581][ T1323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2193.356318][T26688] netlink: 'syz.1.6227': attribute type 4 has an invalid length. [ 2193.451582][T26689] netlink: 'syz.1.6227': attribute type 4 has an invalid length. [ 2195.250548][ T1323] team0 (unregistering): Port device team_slave_1 removed [ 2195.336581][ T1323] team0 (unregistering): Port device team_slave_0 removed [ 2196.232331][T26710] tipc: Cannot configure node identity twice [ 2197.035870][T21627] Bluetooth: hci5: command 0x0406 tx timeout [ 2197.639924][T18772] Bluetooth: hci6: command 0x0406 tx timeout [ 2197.894108][T26726] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2200.830767][T26748] netlink: 'syz.6.6250': attribute type 10 has an invalid length. [ 2200.857227][T26748] batman_adv: batadv0: Adding interface: team0 [ 2200.889413][T26748] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2200.937418][T26748] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2201.166261][T26756] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6254'. [ 2201.176727][T26756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6254'. [ 2203.180390][T26769] tipc: Started in network mode [ 2203.185311][T26769] tipc: Node identity 0011040000000000002e, cluster identity 4711 [ 2204.294997][T26779] syz.6.6258: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2204.311436][T26779] CPU: 1 UID: 0 PID: 26779 Comm: syz.6.6258 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2204.311477][T26779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2204.311493][T26779] Call Trace: [ 2204.311504][T26779] [ 2204.311515][T26779] dump_stack_lvl+0x241/0x360 [ 2204.311561][T26779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2204.311599][T26779] ? __pfx__printk+0x10/0x10 [ 2204.311635][T26779] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2204.311669][T26779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2204.311699][T26779] ? __rcu_read_unlock+0xa1/0x110 [ 2204.311737][T26779] warn_alloc+0x27c/0x410 [ 2204.311769][T26779] ? preempt_schedule_notrace+0xe1/0x140 [ 2204.311797][T26779] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 2204.311831][T26779] ? __pfx_warn_alloc+0x10/0x10 [ 2204.311865][T26779] ? kasan_save_track+0x3f/0x80 [ 2204.311899][T26779] ? __kasan_kmalloc+0x9d/0xb0 [ 2204.311938][T26779] ? xsk_setsockopt+0x449/0x840 [ 2204.311973][T26779] ? do_sock_setsockopt+0x3b3/0x710 [ 2204.312011][T26779] ? __x64_sys_setsockopt+0x187/0x210 [ 2204.312047][T26779] ? do_syscall_64+0xf3/0x210 [ 2204.312073][T26779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.312111][T26779] __vmalloc_node_range_noprof+0x128/0x1390 [ 2204.312181][T26779] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2204.312219][T26779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2204.312248][T26779] ? __kasan_kmalloc+0x9d/0xb0 [ 2204.312293][T26779] vmalloc_user_noprof+0x74/0x80 [ 2204.312324][T26779] ? xskq_create+0xb6/0x170 [ 2204.312362][T26779] xskq_create+0xb6/0x170 [ 2204.312404][T26779] xsk_init_queue+0xa1/0x100 [ 2204.312446][T26779] xsk_setsockopt+0x449/0x840 [ 2204.312493][T26779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2204.312531][T26779] ? __pfx_aa_sk_perm+0x10/0x10 [ 2204.312567][T26779] ? aa_sock_opt_perm+0x79/0x120 [ 2204.312604][T26779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2204.312636][T26779] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2204.312673][T26779] do_sock_setsockopt+0x3b3/0x710 [ 2204.312719][T26779] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2204.312755][T26779] ? __fget_files+0x2a/0x420 [ 2204.312783][T26779] ? __fget_files+0x39d/0x420 [ 2204.312806][T26779] ? __fget_files+0x2a/0x420 [ 2204.312842][T26779] __x64_sys_setsockopt+0x187/0x210 [ 2204.312889][T26779] do_syscall_64+0xf3/0x210 [ 2204.312917][T26779] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2204.312952][T26779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2204.312977][T26779] RIP: 0033:0x7f3b6e38e969 [ 2204.312999][T26779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2204.313021][T26779] RSP: 002b:00007f3b6f203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2204.313047][T26779] RAX: ffffffffffffffda RBX: 00007f3b6e5b6160 RCX: 00007f3b6e38e969 [ 2204.313067][T26779] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 2204.313083][T26779] RBP: 00007f3b6e410ab1 R08: 0000000000000004 R09: 0000000000000000 [ 2204.313100][T26779] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2204.313117][T26779] R13: 0000000000000000 R14: 00007f3b6e5b6160 R15: 00007ffe5eeb7f38 [ 2204.313157][T26779] [ 2204.313200][T26779] Mem-Info: [ 2204.646047][T26779] active_anon:16359 inactive_anon:0 isolated_anon:0 [ 2204.646047][T26779] active_file:21801 inactive_file:39842 isolated_file:0 [ 2204.646047][T26779] unevictable:768 dirty:57 writeback:0 [ 2204.646047][T26779] slab_reclaimable:11675 slab_unreclaimable:110528 [ 2204.646047][T26779] mapped:45398 shmem:10875 pagetables:896 [ 2204.646047][T26779] sec_pagetables:0 bounce:0 [ 2204.646047][T26779] kernel_misc_reclaimable:0 [ 2204.646047][T26779] free:1275978 free_pcp:1562 free_cma:0 [ 2204.691489][T26779] Node 0 active_anon:67736kB inactive_anon:0kB active_file:87204kB inactive_file:159296kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:183992kB dirty:228kB writeback:0kB shmem:44364kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11428kB pagetables:3584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2204.726161][T26779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2204.757365][T26779] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2204.784520][T26779] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2204.790401][T26779] Node 0 DMA32 free:1170548kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:72928kB inactive_anon:0kB active_file:87204kB inactive_file:159196kB unevictable:1536kB writepending:228kB present:3129332kB managed:2547264kB mlocked:0kB bounce:0kB free_pcp:10772kB local_pcp:4936kB free_cma:0kB [ 2204.821799][T26779] lowmem_reserve[]: 0 0 0 0 0 [ 2204.826576][T26779] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2204.853882][T26779] lowmem_reserve[]: 0 0 0 0 0 [ 2204.858658][T26779] Node 1 Normal free:3905904kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2204.887427][T26779] lowmem_reserve[]: 0 0 0 0 0 [ 2204.892281][T26779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2204.905182][T26779] Node 0 DMA32: 29*4kB (E) 31*8kB (UE) 132*16kB (UME) 381*32kB (UE) 435*64kB (UME) 208*128kB (UME) 174*256kB (UME) 154*512kB (UME) 149*1024kB (UME) 13*2048kB (UME) 195*4096kB (UM) = 1170444kB [ 2204.925533][T26779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2204.937175][T26779] Node 1 Normal: 274*4kB (UM) 55*8kB (UME) 51*16kB (UME) 214*32kB (UME) 100*64kB (UME) 41*128kB (UME) 14*256kB (UME) 7*512kB (UM) 9*1024kB (UME) 5*2048kB (UE) 942*4096kB (M) = 3905904kB [ 2204.955848][T26779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2204.965456][T26779] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2204.974790][T26779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2204.984368][T26779] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2204.993707][T26779] 74418 total pagecache pages [ 2204.998382][T26779] 0 pages in swap cache [ 2205.002558][T26779] Free swap = 124996kB [ 2205.006710][T26779] Total swap = 124996kB [ 2205.010889][T26779] 2097051 pages RAM [ 2205.014693][T26779] 0 pages HighMem/MovableOnly [ 2205.020078][T26779] 428577 pages reserved [ 2205.024236][T26779] 0 pages cma reserved [ 2205.772424][T26794] loop7: detected capacity change from 0 to 7 [ 2206.086533][ C1] blk_print_req_error: 5 callbacks suppressed [ 2206.086557][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.101863][ C1] buffer_io_error: 5 callbacks suppressed [ 2206.101880][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.138513][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.147753][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.157759][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.166956][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.180064][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.189240][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.200273][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.209459][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.219300][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.228494][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.239036][T26794] ldm_validate_partition_table(): Disk read failed. [ 2206.248837][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.258062][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.266211][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.275388][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.283996][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.293163][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.302863][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2206.312040][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2206.320572][T26794] Dev loop7: unable to read RDB block 0 [ 2206.330923][T26794] loop7: unable to read partition table [ 2206.336820][T26794] loop7: partition table beyond EOD, truncated [ 2206.343123][T26794] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2206.424566][T26801] netlink: 'syz.7.6266': attribute type 10 has an invalid length. [ 2206.539662][T26801] batman_adv: batadv0: Adding interface: team0 [ 2206.574275][T26801] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2206.617145][T26801] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2206.829360][T26809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6270'. [ 2206.870287][T26809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6270'. [ 2207.320034][T25178] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 2207.519835][T26783] sp0: Synchronizing with TNC [ 2209.459657][T26831] tipc: Started in network mode [ 2209.489427][T26831] tipc: Node identity 0011040000000000002e, cluster identity 4711 [ 2210.070400][T26849] netlink: 'syz.8.6279': attribute type 4 has an invalid length. [ 2211.593716][T26864] sctp: [Deprecated]: syz.0.6289 (pid 26864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2211.593716][T26864] Use struct sctp_sack_info instead [ 2214.212866][T26894] netlink: 'syz.7.6297': attribute type 29 has an invalid length. [ 2214.554971][T26898] netlink: 'syz.7.6297': attribute type 29 has an invalid length. [ 2215.841281][T26919] ubi31: attaching mtd0 [ 2215.889635][T26919] ubi31: scanning is finished [ 2215.895240][T26919] ubi31: empty MTD device detected [ 2216.529384][T26918] sctp: [Deprecated]: syz.8.6306 (pid 26918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2216.529384][T26918] Use struct sctp_sack_info instead [ 2217.240707][T26919] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 2217.487319][T26939] netlink: 'syz.8.6315': attribute type 29 has an invalid length. [ 2217.640410][T26945] netlink: 'syz.8.6315': attribute type 29 has an invalid length. [ 2220.113297][T26968] sctp: [Deprecated]: syz.1.6322 (pid 26968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2220.113297][T26968] Use struct sctp_sack_info instead [ 2220.233072][T26980] loop7: detected capacity change from 0 to 7 [ 2220.242430][ C1] blk_print_req_error: 5 callbacks suppressed [ 2220.242451][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2220.257718][ C1] buffer_io_error: 5 callbacks suppressed [ 2220.257745][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2220.280759][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2220.289996][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2220.310418][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2220.319643][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2220.355219][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2220.364457][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2220.374836][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2220.384024][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2220.408162][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2220.417391][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2220.425413][T26980] ldm_validate_partition_table(): Disk read failed. [ 2220.432073][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2220.432107][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2220.455619][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2220.464806][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2220.693515][T26983] random: crng reseeded on system resumption [ 2221.136580][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2221.145827][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2221.158874][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2221.168089][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2221.176153][T26980] Dev loop7: unable to read RDB block 0 [ 2221.190898][T26980] loop7: unable to read partition table [ 2221.197904][T26980] loop7: partition table beyond EOD, truncated [ 2221.204143][T26980] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2221.586260][T26995] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6329'. [ 2221.674125][T26997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6332'. [ 2221.701681][T26997] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6332'. [ 2222.399664][T26995] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2223.243565][T18772] Bluetooth: hci2: command 0x0406 tx timeout [ 2225.607637][T27036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6347'. [ 2225.633036][T27036] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6347'. [ 2225.755629][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6348'. [ 2225.796887][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6348'. [ 2225.816446][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6348'. [ 2226.063015][T17172] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2226.098616][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6353'. [ 2226.287887][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2226.314430][T17172] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2226.392493][T27054] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2226.401592][T27054] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2226.410343][T27054] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2226.419981][T27054] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2226.552418][T17172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.842916][T17172] usb 2-1: config 0 descriptor?? [ 2226.852864][T17172] cp210x 2-1:0.0: cp210x converter detected [ 2226.869117][T27054] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2226.878496][T27054] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2226.887839][T27054] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2226.897235][T27054] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2227.259642][T17172] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2227.287646][T17172] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2227.430821][T27073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6362'. [ 2227.986127][T23122] usb 2-1: USB disconnect, device number 41 [ 2228.006366][T23122] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2228.062239][T23122] cp210x 2-1:0.0: device disconnected [ 2228.432120][T27091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6369'. [ 2228.460108][T27091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6369'. [ 2231.276371][T27123] netlink: 'syz.9.6380': attribute type 29 has an invalid length. [ 2232.130891][T27123] netlink: 'syz.9.6380': attribute type 29 has an invalid length. [ 2232.785599][T27142] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6384'. [ 2232.835726][T27142] netlink: 44 bytes leftover after parsing attributes in process `syz.8.6384'. [ 2233.010031][T23123] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 2233.360006][T23122] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 2233.381453][T23123] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2233.402975][T23123] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.251129][T27161] netlink: 'syz.8.6395': attribute type 29 has an invalid length. [ 2234.299116][T23123] usb 10-1: config 0 descriptor?? [ 2234.316174][T27161] netlink: 'syz.8.6395': attribute type 29 has an invalid length. [ 2234.323146][T23123] cp210x 10-1:0.0: cp210x converter detected [ 2234.330791][T23122] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2234.359937][T23122] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2234.382248][T23122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 2234.393287][T23122] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2234.403241][T23122] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2234.424341][T23122] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2234.439873][T23122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2234.458999][T23122] usb 2-1: Product: syz [ 2234.463340][T23122] usb 2-1: Manufacturer: syz [ 2234.467999][T23122] usb 2-1: SerialNumber: syz [ 2234.480006][T23122] usb 2-1: config 0 descriptor?? [ 2234.828291][T23123] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2234.836827][T23122] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 2234.844029][T23122] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2234.856589][T23123] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2234.864604][T23123] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 2234.876397][T23123] usb 10-1: cp210x converter now attached to ttyUSB0 [ 2234.895071][T23123] usb 10-1: USB disconnect, device number 75 [ 2234.927409][T23123] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2234.976759][T27171] loop7: detected capacity change from 0 to 7 [ 2235.057288][T23123] cp210x 10-1:0.0: device disconnected [ 2235.111250][T23122] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 2235.211517][ C1] blk_print_req_error: 5 callbacks suppressed [ 2235.211540][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.226881][ C1] buffer_io_error: 5 callbacks suppressed [ 2235.226897][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.244295][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.253481][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.297052][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.306282][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.342151][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.351378][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.453582][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.462782][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.473205][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.482391][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.490374][T27171] ldm_validate_partition_table(): Disk read failed. [ 2235.499199][T23122] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 2235.511540][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.511578][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.528847][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.538024][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.546066][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.555229][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.557790][T23122] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2235.581233][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2235.590430][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2235.598427][T27171] Dev loop7: unable to read RDB block 0 [ 2235.626018][T27171] loop7: unable to read partition table [ 2235.634854][T27171] loop7: partition table beyond EOD, truncated [ 2235.644870][T27171] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2235.774783][T23122] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 2236.365171][T27186] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6403'. [ 2236.659506][T23122] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 2236.680202][T23122] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 2236.712265][T23122] usb 2-1: USB disconnect, device number 42 [ 2238.143477][T27204] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6410'. [ 2239.119947][T17172] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2239.291936][T27219] loop7: detected capacity change from 0 to 7 [ 2240.132013][T17172] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2240.205233][T27219] ldm_validate_partition_table(): Disk read failed. [ 2240.215468][T27219] Dev loop7: unable to read RDB block 0 [ 2240.221186][ C1] blk_print_req_error: 16 callbacks suppressed [ 2240.221205][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2240.236514][ C1] buffer_io_error: 16 callbacks suppressed [ 2240.236531][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2240.251335][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2240.260534][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2240.289856][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2240.299046][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2240.307753][T27219] loop7: unable to read partition table [ 2240.315945][T27219] loop7: partition table beyond EOD, truncated [ 2240.322650][T27219] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2240.385651][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2240.394863][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2240.949563][T17172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2240.989766][T17172] usb 2-1: config 0 descriptor?? [ 2241.011360][T17172] cp210x 2-1:0.0: cp210x converter detected [ 2241.406371][T17172] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2241.414567][T17172] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2241.886836][T17172] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 2241.937285][T17172] usb 2-1: cp210x converter now attached to ttyUSB0 [ 2241.951154][T17172] usb 2-1: USB disconnect, device number 43 [ 2241.960855][T17172] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2241.988444][T17172] cp210x 2-1:0.0: device disconnected [ 2242.000279][T27240] program syz.6.6421 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2242.207414][T27242] netlink: 'syz.9.6425': attribute type 4 has an invalid length. [ 2242.421284][T27248] netlink: 'syz.9.6425': attribute type 4 has an invalid length. [ 2242.435648][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6427'. [ 2243.372765][T27256] fuse: Bad value for 'rootmode' [ 2243.739079][T27264] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6430'. [ 2243.781477][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6430'. [ 2244.982767][T17172] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2245.821081][T17172] usb 1-1: device descriptor read/64, error -71 [ 2246.343108][T27293] loop7: detected capacity change from 0 to 7 [ 2246.952999][T17172] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2247.030663][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.039870][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.048852][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.058018][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.067000][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.076195][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.084875][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.094062][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.102646][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.111838][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.143977][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.153176][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.161171][T27293] ldm_validate_partition_table(): Disk read failed. [ 2247.168463][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.177674][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.189000][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.198176][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.211138][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.220316][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.228836][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2247.238010][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2247.246056][T27293] Dev loop7: unable to read RDB block 0 [ 2247.264288][T27293] loop7: unable to read partition table [ 2247.270208][T27293] loop7: partition table beyond EOD, truncated [ 2247.276394][T27293] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2247.624599][T27299] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6442'. [ 2247.644683][T27305] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6444'. [ 2248.484562][T27322] fuse: Bad value for 'rootmode' [ 2249.070777][T27326] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6449'. [ 2250.621819][T27354] netlink: 'syz.6.6460': attribute type 4 has an invalid length. [ 2250.717913][T27355] netlink: 'syz.6.6460': attribute type 4 has an invalid length. [ 2253.778470][T27361] netlink: 'syz.6.6462': attribute type 10 has an invalid length. [ 2253.784938][T27366] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6463'. [ 2255.391192][T27383] program syz.7.6470 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2256.148319][T27403] netlink: 'syz.7.6475': attribute type 4 has an invalid length. [ 2256.198293][T27403] netlink: 'syz.7.6475': attribute type 4 has an invalid length. [ 2257.668868][T27416] netlink: 'syz.0.6482': attribute type 10 has an invalid length. [ 2257.745246][T27416] batman_adv: batadv0: Adding interface: team0 [ 2257.774259][T27416] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2257.910844][T27416] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2257.932297][T27425] netlink: 'syz.1.6483': attribute type 30 has an invalid length. [ 2258.117132][T27428] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2258.239487][T25178] Bluetooth: hci5: unexpected event for opcode 0x0c2d [ 2258.784684][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6493'. [ 2258.887123][T27447] program syz.1.6491 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2259.931647][T27459] netlink: 'syz.6.6495': attribute type 4 has an invalid length. [ 2262.580215][T18772] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2262.588908][T18772] Bluetooth: hci5: Injecting HCI hardware error event [ 2262.602086][T21627] Bluetooth: hci5: hardware error 0x00 [ 2262.628837][T27475] ªªªªªª: renamed from lo [ 2263.108978][T27489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6508'. [ 2263.125729][T27489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6508'. [ 2263.682188][T27493] program syz.9.6510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2264.050078][ T5901] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2264.610005][T18772] Bluetooth: hci3: command 0xfc11 tx timeout [ 2264.619033][T25178] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 2264.742171][T27476] sp0: Synchronizing with TNC [ 2264.867851][T21627] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2265.017037][T27514] ªªªªªª: renamed from lo (while UP) [ 2265.163707][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 2265.173964][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2265.186188][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2265.199060][ T5901] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2265.215444][ T5901] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2265.224594][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.245537][ T5901] usb 2-1: config 0 descriptor?? [ 2265.441510][T27523] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6523'. [ 2265.452962][T27523] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6523'. [ 2265.798349][ T5901] microsoft 0003:045E:07DA.0020: unbalanced collection at end of report description [ 2265.809108][ T5901] microsoft 0003:045E:07DA.0020: parse failed [ 2265.815369][ T5901] microsoft 0003:045E:07DA.0020: probe with driver microsoft failed with error -22 [ 2266.660253][ T5901] usb 2-1: USB disconnect, device number 44 [ 2267.219875][T23122] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 2267.300138][T27552] overlayfs: missing 'lowerdir' [ 2267.461511][T23122] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2267.625348][T23122] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2267.831206][T23122] usb 10-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00 [ 2268.037064][T23122] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.048072][T23122] usb 10-1: config 0 descriptor?? [ 2268.218812][T27566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6539'. [ 2269.302864][T27571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6539'. [ 2270.365810][T27570] syz.9.6528 (27570): drop_caches: 2 [ 2270.376697][T27570] syz.9.6528 (27570): drop_caches: 2 [ 2270.421258][T23122] usbhid 10-1:0.0: can't add hid device: -71 [ 2270.427384][T23122] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2271.689614][T23122] usb 10-1: USB disconnect, device number 76 [ 2272.264770][T27585] block nbd0: not configured, cannot reconfigure [ 2272.337304][T27589] netlink: 'syz.9.6546': attribute type 10 has an invalid length. [ 2272.489409][T27594] netlink: 'syz.0.6547': attribute type 30 has an invalid length. [ 2273.802504][T27589] bridge0: port 3(team0) entered disabled state [ 2273.818435][T27589] team0: left allmulticast mode [ 2273.838053][T27589] team_slave_0: left allmulticast mode [ 2273.852878][T27589] team_slave_1: left allmulticast mode [ 2273.869601][T27589] team0: left promiscuous mode [ 2273.876093][T27589] team_slave_0: left promiscuous mode [ 2273.886701][T27589] team_slave_1: left promiscuous mode [ 2273.893525][T27589] bridge0: port 3(team0) entered disabled state [ 2273.917969][T27589] batman_adv: batadv0: Adding interface: team0 [ 2273.934319][T27589] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2273.979957][T27589] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2274.865690][T27614] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6555'. [ 2275.940770][T27625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6559'. [ 2275.950001][T27625] nbd: must specify a device to reconfigure [ 2276.659349][T27629] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6562'. [ 2276.773302][T27636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6563'. [ 2276.804978][T27640] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6565'. [ 2276.823471][T27641] netlink: 'syz.8.6566': attribute type 10 has an invalid length. [ 2276.864595][T27642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6565'. [ 2276.874544][T27643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6563'. [ 2276.918060][T27641] batman_adv: batadv0: Adding interface: team0 [ 2276.927642][T27641] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2276.975246][T27641] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2279.809306][T27677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6577'. [ 2279.821107][T27677] nbd: must specify a device to reconfigure [ 2280.349898][T27684] program syz.7.6581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2281.504854][T27710] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6585'. [ 2281.556036][T27702] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.792187][T27725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6592'. [ 2281.829244][T27702] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.844343][T27728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6592'. [ 2282.142612][T23110] IPVS: starting estimator thread 0... [ 2282.589916][T27734] IPVS: using max 23 ests per chain, 55200 per kthread [ 2282.639579][T27702] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2283.349565][T27750] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6601'. [ 2283.409303][T27702] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2285.289576][T27702] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.330596][T27772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6609'. [ 2285.359707][T27702] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.413065][T27772] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6609'. [ 2285.461466][T27702] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.480399][T23123] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2285.538634][T27702] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.666402][T27785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6614'. [ 2285.675764][T23123] usb 2-1: Using ep0 maxpacket: 16 [ 2285.680585][T27785] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2285.746111][T23123] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2285.898384][T23123] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2286.106683][T23123] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2286.218664][T23123] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.289935][T23123] usb 2-1: Product: syz [ 2286.294620][T23123] usb 2-1: Manufacturer: syz [ 2286.358056][T23123] usb 2-1: SerialNumber: syz [ 2286.377898][T23123] usb 2-1: config 0 descriptor?? [ 2286.387079][T23123] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2286.397028][T23123] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2287.025856][T23123] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2287.039001][T23123] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 2287.741275][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.615969][T23123] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 2289.200361][T23123] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 2289.230192][T27817] program syz.9.6624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2289.340518][T23123] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 2289.554932][T23123] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 2289.576242][T23123] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 2289.640239][T23123] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 2289.652063][T23123] usb 2-1: USB disconnect, device number 45 [ 2291.096777][T27841] sctp: [Deprecated]: syz.6.6632 (pid 27841) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2291.096777][T27841] Use struct sctp_sack_info instead [ 2292.646229][ T5901] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2292.891521][ T5901] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2292.900727][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2292.946392][ T5901] usb 7-1: config 0 descriptor?? [ 2293.431488][T23122] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 2293.475242][ T5901] cp210x 7-1:0.0: cp210x converter detected [ 2293.680110][T23122] usb 1-1: device descriptor read/64, error -71 [ 2293.712897][ T5901] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2293.795302][ T5901] cp210x 7-1:0.0: querying part number failed [ 2293.981321][T23122] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 2293.992786][ T5901] usb 7-1: cp210x converter now attached to ttyUSB0 [ 2294.178743][T27877] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6643'. [ 2294.402080][T23122] usb 1-1: device descriptor read/64, error -71 [ 2294.576851][T23122] usb usb1-port1: attempt power cycle [ 2295.276378][T23110] usb 7-1: USB disconnect, device number 51 [ 2295.313676][T23110] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2295.366551][T23110] cp210x 7-1:0.0: device disconnected [ 2295.449896][T27898] sctp: [Deprecated]: syz.6.6650 (pid 27898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2295.449896][T27898] Use struct sctp_sack_info instead [ 2299.093922][T27932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6661'. [ 2299.135260][T27932] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6661'. [ 2299.595750][T27935] syzkaller1: entered promiscuous mode [ 2299.601458][T27935] syzkaller1: entered allmulticast mode [ 2300.746651][T27949] netlink: 'syz.9.6666': attribute type 4 has an invalid length. [ 2300.852016][T27950] netlink: 'syz.9.6666': attribute type 4 has an invalid length. [ 2301.568844][T27955] sctp: [Deprecated]: syz.1.6668 (pid 27955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2301.568844][T27955] Use struct sctp_sack_info instead [ 2302.541075][T27965] nbd: must specify a device to reconfigure [ 2302.987250][T27974] syz.9.6672: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2303.002112][T27974] CPU: 0 UID: 0 PID: 27974 Comm: syz.9.6672 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2303.002146][T27974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2303.002162][T27974] Call Trace: [ 2303.002173][T27974] [ 2303.002184][T27974] dump_stack_lvl+0x241/0x360 [ 2303.002230][T27974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2303.002268][T27974] ? __pfx__printk+0x10/0x10 [ 2303.002304][T27974] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2303.002337][T27974] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2303.002365][T27974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2303.002395][T27974] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 2303.002428][T27974] warn_alloc+0x27c/0x410 [ 2303.002466][T27974] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 2303.002500][T27974] ? __pfx_warn_alloc+0x10/0x10 [ 2303.002535][T27974] ? kasan_save_track+0x3f/0x80 [ 2303.002577][T27974] ? __kasan_kmalloc+0x9d/0xb0 [ 2303.002616][T27974] ? xsk_setsockopt+0x449/0x840 [ 2303.002653][T27974] ? do_sock_setsockopt+0x3b3/0x710 [ 2303.002690][T27974] ? __x64_sys_setsockopt+0x187/0x210 [ 2303.002726][T27974] ? do_syscall_64+0xf3/0x210 [ 2303.002753][T27974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.002791][T27974] __vmalloc_node_range_noprof+0x128/0x1390 [ 2303.002861][T27974] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2303.002900][T27974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2303.002928][T27974] ? __kasan_kmalloc+0x9d/0xb0 [ 2303.002974][T27974] vmalloc_user_noprof+0x74/0x80 [ 2303.003007][T27974] ? xskq_create+0xb6/0x170 [ 2303.003044][T27974] xskq_create+0xb6/0x170 [ 2303.003086][T27974] xsk_init_queue+0xa1/0x100 [ 2303.003129][T27974] xsk_setsockopt+0x449/0x840 [ 2303.003171][T27974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2303.003209][T27974] ? __pfx_aa_sk_perm+0x10/0x10 [ 2303.003246][T27974] ? aa_sock_opt_perm+0x79/0x120 [ 2303.003282][T27974] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2303.003315][T27974] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2303.003351][T27974] do_sock_setsockopt+0x3b3/0x710 [ 2303.003398][T27974] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2303.003434][T27974] ? __fget_files+0x2a/0x420 [ 2303.003462][T27974] ? __fget_files+0x39d/0x420 [ 2303.003485][T27974] ? __fget_files+0x2a/0x420 [ 2303.003522][T27974] __x64_sys_setsockopt+0x187/0x210 [ 2303.003575][T27974] do_syscall_64+0xf3/0x210 [ 2303.003610][T27974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2303.003636][T27974] RIP: 0033:0x7faf9698e969 [ 2303.003657][T27974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2303.003680][T27974] RSP: 002b:00007faf97732038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2303.003706][T27974] RAX: ffffffffffffffda RBX: 00007faf96bb6160 RCX: 00007faf9698e969 [ 2303.003726][T27974] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 2303.003743][T27974] RBP: 00007faf96a10ab1 R08: 0000000000000004 R09: 0000000000000000 [ 2303.003760][T27974] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2303.003778][T27974] R13: 0000000000000000 R14: 00007faf96bb6160 R15: 00007ffce31dea68 [ 2303.003818][T27974] [ 2303.003828][T27974] Mem-Info: [ 2303.331520][T27974] active_anon:12543 inactive_anon:0 isolated_anon:0 [ 2303.331520][T27974] active_file:21801 inactive_file:39884 isolated_file:0 [ 2303.331520][T27974] unevictable:768 dirty:117 writeback:0 [ 2303.331520][T27974] slab_reclaimable:7237 slab_unreclaimable:109782 [ 2303.331520][T27974] mapped:39956 shmem:7155 pagetables:858 [ 2303.331520][T27974] sec_pagetables:0 bounce:0 [ 2303.331520][T27974] kernel_misc_reclaimable:0 [ 2303.331520][T27974] free:1281947 free_pcp:5477 free_cma:0 [ 2303.376925][T27974] Node 0 active_anon:50172kB inactive_anon:0kB active_file:87204kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159824kB dirty:468kB writeback:0kB shmem:27084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10780kB pagetables:3432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2304.160236][T27974] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2304.191652][T27974] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2304.219057][T27974] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2304.225133][T27974] Node 0 DMA32 free:1206164kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:50012kB inactive_anon:0kB active_file:87204kB inactive_file:159364kB unevictable:1536kB writepending:492kB present:3129332kB managed:2547264kB mlocked:0kB bounce:0kB free_pcp:22252kB local_pcp:15040kB free_cma:0kB [ 2304.259365][T27974] lowmem_reserve[]: 0 0 0 0 0 [ 2304.285332][T27974] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2304.312056][T27974] lowmem_reserve[]: 0 0 0 0 0 [ 2304.317085][T27974] Node 1 Normal free:3905940kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2304.347199][T27974] lowmem_reserve[]: 0 0 0 0 0 [ 2304.352020][T27974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2304.364843][T27974] Node 0 DMA32: 1007*4kB (UE) 545*8kB (UME) 437*16kB (UE) 368*32kB (UME) 610*64kB (UME) 230*128kB (UME) 184*256kB (UME) 159*512kB (UME) 149*1024kB (UME) 15*2048kB (UME) 195*4096kB (UM) = 1206164kB [ 2304.384478][T27974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2304.396095][T27974] Node 1 Normal: 273*4kB (UM) 56*8kB (UME) 51*16kB (UME) 213*32kB (UME) 101*64kB (UME) 41*128kB (UME) 14*256kB (UME) 7*512kB (UM) 9*1024kB (UME) 5*2048kB (UE) 942*4096kB (M) = 3905940kB [ 2304.414885][T27974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2304.424468][T27974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2304.433822][T27974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2304.443551][T27974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2304.458574][T27974] 68760 total pagecache pages [ 2304.463294][T27974] 0 pages in swap cache [ 2304.467449][T27974] Free swap = 124996kB [ 2304.471654][T27974] Total swap = 124996kB [ 2304.475817][T27974] 2097051 pages RAM [ 2304.479621][T27974] 0 pages HighMem/MovableOnly [ 2304.484352][T27974] 428577 pages reserved [ 2304.488507][T27974] 0 pages cma reserved [ 2304.942551][T27990] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6680'. [ 2305.013315][T27991] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6680'. [ 2305.100795][T27992] bridge0: port 3(syz_tun) entered blocking state [ 2305.148643][T27992] bridge0: port 3(syz_tun) entered disabled state [ 2305.204426][T27992] syz_tun: entered allmulticast mode [ 2305.307659][T27992] syz_tun: entered promiscuous mode [ 2305.669949][T27992] bridge0: port 3(syz_tun) entered blocking state [ 2305.676589][T27992] bridge0: port 3(syz_tun) entered forwarding state [ 2305.958569][T27994] netlink: 'syz.0.6681': attribute type 29 has an invalid length. [ 2305.982474][T27999] sctp: [Deprecated]: syz.1.6682 (pid 27999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2305.982474][T27999] Use struct sctp_sack_info instead [ 2306.340213][T23108] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2306.609348][T28019] netlink: 'syz.6.6684': attribute type 4 has an invalid length. [ 2306.620211][T28019] netlink: 'syz.6.6684': attribute type 4 has an invalid length. [ 2308.061394][T23108] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2308.153875][T23108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2308.468375][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6693'. [ 2308.478575][T23108] usb 1-1: config 0 descriptor?? [ 2308.663706][T23108] cp210x 1-1:0.0: cp210x converter detected [ 2308.896131][T23108] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 2309.518138][T23108] cp210x 1-1:0.0: querying part number failed [ 2309.540152][T23108] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2310.531628][T28038] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6695'. [ 2310.573412][T28038] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2311.147036][T23122] usb 1-1: USB disconnect, device number 53 [ 2311.304695][T23122] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2311.370763][T23122] cp210x 1-1:0.0: device disconnected [ 2311.391402][T28055] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6703'. [ 2311.445973][T28055] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6703'. [ 2312.820381][T28073] loop7: detected capacity change from 0 to 7 [ 2312.945628][ C0] blk_print_req_error: 5 callbacks suppressed [ 2312.945650][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.945686][ C0] buffer_io_error: 5 callbacks suppressed [ 2312.945700][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.959898][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.959937][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.960326][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.960360][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.960732][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.960766][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.961678][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.961711][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.962480][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.962514][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.962629][T28073] ldm_validate_partition_table(): Disk read failed. [ 2312.962649][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.962679][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.970182][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.970216][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.970592][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.970625][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.971471][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2312.971505][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2312.971628][T28073] Dev loop7: unable to read RDB block 0 [ 2312.972272][T28073] loop7: unable to read partition table [ 2312.972505][T28073] loop7: partition table beyond EOD, truncated [ 2312.972530][T28073] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2313.210613][T23105] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 2313.530038][T23105] usb 1-1: device descriptor read/64, error -71 [ 2314.770809][T23105] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 2315.337313][T28092] netlink: 112 bytes leftover after parsing attributes in process `syz.0.6714'. [ 2315.687480][ C0] Unknown status report in ack skb [ 2316.538928][T28110] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6720'. [ 2316.566298][T28110] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6720'. [ 2317.074887][T18772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2317.259997][T23108] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2317.450440][T23108] usb 1-1: Using ep0 maxpacket: 16 [ 2317.460182][T18772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2317.475688][T18772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2317.492438][T18772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2317.500669][T18772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2317.511369][T23108] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2317.528421][T23108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2317.548070][ T1323] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.566186][T23108] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2317.815551][T23108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.823625][T23108] usb 1-1: Product: syz [ 2317.827786][T23108] usb 1-1: Manufacturer: syz [ 2317.832574][T23108] usb 1-1: SerialNumber: syz [ 2317.850761][T23108] usb 1-1: config 0 descriptor?? [ 2317.881355][T23108] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2317.912720][T23108] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 2317.964776][T28133] sd 0:0:1:0: device reset [ 2318.541779][ T1323] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.833077][T23108] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 2318.850422][T23108] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 2319.671587][T18772] Bluetooth: hci1: command tx timeout [ 2320.137280][T23108] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 2320.159892][T23108] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 2320.167893][T23108] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 2320.209162][ T1323] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2320.338377][T23108] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 2320.360290][T23108] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 2320.374776][ T1323] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2320.410601][T23108] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 2320.430171][T23108] usb 1-1: USB disconnect, device number 56 [ 2320.625235][T28161] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6734'. [ 2320.650971][T28161] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6734'. [ 2321.780125][T18772] Bluetooth: hci1: command tx timeout [ 2323.800257][T18772] Bluetooth: hci1: command tx timeout [ 2324.224769][ T1323] bond0 (unregistering): Released all slaves [ 2324.414142][T28207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 2324.436292][T28207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 2324.456112][T28207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 2324.469421][T28207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 2324.497634][T28207] batman_adv: batadv0: Adding interface: geneve2 [ 2324.519742][T28207] batman_adv: batadv0: Interface activated: geneve2 [ 2324.545560][ T1323] tipc: Left network mode [ 2325.074951][T28218] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6751'. [ 2325.092325][T28218] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6751'. [ 2325.114164][T28119] chnl_net:caif_netlink_parms(): no params data found [ 2326.113614][T21627] Bluetooth: hci1: command tx timeout [ 2326.895791][T23105] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2327.109690][T23105] usb 2-1: Using ep0 maxpacket: 16 [ 2327.137755][T23105] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2327.258456][T23105] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2327.428368][T23105] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2327.501585][T23105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.730953][T23105] usb 2-1: Product: syz [ 2327.735156][T23105] usb 2-1: Manufacturer: syz [ 2327.780377][T23105] usb 2-1: SerialNumber: syz [ 2327.821210][T23105] usb 2-1: config 0 descriptor?? [ 2327.976752][T23105] usb 2-1: can't set config #0, error -71 [ 2327.988597][T23105] usb 2-1: USB disconnect, device number 46 [ 2328.283004][T28252] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6760'. [ 2328.982708][T23110] IPVS: starting estimator thread 0... [ 2329.025483][T28258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6759'. [ 2329.170414][T28257] IPVS: using max 23 ests per chain, 55200 per kthread [ 2329.355496][ T1323] hsr_slave_0: left promiscuous mode [ 2329.368770][ T1323] hsr_slave_1: left promiscuous mode [ 2329.410215][ T1323] batman_adv: batadv0: Removing interface: team0 [ 2329.530707][ T1323] veth1_macvtap: left promiscuous mode [ 2329.720968][ T1323] veth0_macvtap: left promiscuous mode [ 2329.729059][ T1323] veth1_vlan: left promiscuous mode [ 2329.739468][ T1323] veth0_vlan: left promiscuous mode [ 2331.949579][T28297] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6772'. [ 2332.699947][T23108] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2332.864208][T23108] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 2332.872740][T23108] usb 1-1: config 0 has no interface number 0 [ 2332.878856][T23108] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2332.888119][T23108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2332.951230][T23108] usb 1-1: config 0 descriptor?? [ 2333.107063][T23108] cp210x 1-1:0.32: cp210x converter detected [ 2333.141166][T28119] bridge0: port 1(bridge_slave_0) entered blocking state [ 2333.148383][T28119] bridge0: port 1(bridge_slave_0) entered disabled state [ 2333.156462][T28119] bridge_slave_0: entered allmulticast mode [ 2333.171884][T28119] bridge_slave_0: entered promiscuous mode [ 2333.265892][T28119] bridge0: port 2(bridge_slave_1) entered blocking state [ 2333.267898][T28119] bridge0: port 2(bridge_slave_1) entered disabled state [ 2333.270303][T28119] bridge_slave_1: entered allmulticast mode [ 2333.679960][T23123] usb 10-1: new low-speed USB device number 77 using dummy_hcd [ 2334.006956][T23123] usb 10-1: device descriptor read/64, error -71 [ 2334.037348][T28119] bridge_slave_1: entered promiscuous mode [ 2334.058529][T23108] cp210x 1-1:0.32: failed to get vendor val 0x370b size 1: -32 [ 2334.089943][T23108] cp210x 1-1:0.32: querying part number failed [ 2334.106684][T23108] usb 1-1: cp210x converter now attached to ttyUSB0 [ 2334.238163][T28119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2334.318638][T28119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2334.339250][T23123] usb 10-1: new low-speed USB device number 78 using dummy_hcd [ 2334.384985][T23108] IPVS: starting estimator thread 0... [ 2334.499895][T28316] IPVS: using max 24 ests per chain, 57600 per kthread [ 2334.670664][T23123] usb 10-1: device descriptor read/64, error -71 [ 2334.835749][T23123] usb usb10-port1: attempt power cycle [ 2334.859030][T28119] team0: Port device team_slave_0 added [ 2334.885373][T28119] team0: Port device team_slave_1 added [ 2335.076427][T23108] usb 1-1: USB disconnect, device number 57 [ 2335.109057][T23108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2335.339902][T23123] usb 10-1: new low-speed USB device number 79 using dummy_hcd [ 2335.484848][T23108] cp210x 1-1:0.32: device disconnected [ 2335.951790][T28329] netlink: 'syz.1.6780': attribute type 4 has an invalid length. [ 2335.952230][T23123] usb 10-1: device descriptor read/8, error -71 [ 2336.002864][T28331] netlink: 'syz.1.6780': attribute type 4 has an invalid length. [ 2336.072565][T28119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2336.093367][T28119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2336.125075][T28119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2336.163802][T28119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2336.171912][T28119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2336.208117][T28119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2336.242947][ T1323] IPVS: stop unused estimator thread 0... [ 2336.324909][T28119] hsr_slave_0: entered promiscuous mode [ 2336.340892][T28119] hsr_slave_1: entered promiscuous mode [ 2336.756142][T28344] loop7: detected capacity change from 0 to 7 [ 2336.763194][ C0] blk_print_req_error: 5 callbacks suppressed [ 2336.763214][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2336.778509][ C0] buffer_io_error: 5 callbacks suppressed [ 2336.778522][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2336.793883][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2336.803057][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2336.824316][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2336.833512][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2336.852156][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2336.861329][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2337.229242][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2337.238617][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2337.247878][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2337.257154][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2337.265635][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2337.274813][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2337.282921][T28344] ldm_validate_partition_table(): Disk read failed. [ 2337.296722][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2337.305926][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2337.328389][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2337.337563][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2337.357378][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2337.366674][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2337.375026][T28344] Dev loop7: unable to read RDB block 0 [ 2337.386774][T28344] loop7: unable to read partition table [ 2337.392696][T28344] loop7: partition table beyond EOD, truncated [ 2337.398854][T28344] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2340.100258][T23122] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 2340.229710][T28382] sctp: [Deprecated]: syz.1.6797 (pid 28382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2340.229710][T28382] Use struct sctp_sack_info instead [ 2340.274183][T23122] usb 1-1: device descriptor read/64, error -71 [ 2340.519996][T23122] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 2340.597848][T28119] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2340.627734][T28119] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2340.650277][T23122] usb 1-1: device descriptor read/64, error -71 [ 2340.651710][T28119] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2340.686044][T28119] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2340.755952][T28390] loop7: detected capacity change from 0 to 7 [ 2340.772202][T23122] usb usb1-port1: attempt power cycle [ 2340.782619][T28390] ldm_validate_partition_table(): Disk read failed. [ 2340.792256][T28390] Dev loop7: unable to read RDB block 0 [ 2340.798561][T28390] loop7: unable to read partition table [ 2340.805496][T28390] loop7: partition table beyond EOD, truncated [ 2340.811719][T28390] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2340.946730][T28119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2341.002356][T28119] 8021q: adding VLAN 0 to HW filter on device team0 [ 2341.032667][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state [ 2341.039900][ T9572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2341.085892][T17664] bridge0: port 2(bridge_slave_1) entered blocking state [ 2341.093143][T17664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2341.160612][T23122] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 2341.190857][T23122] usb 1-1: device descriptor read/8, error -71 [ 2341.435805][T23122] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 2341.554498][T23122] usb 1-1: device descriptor read/8, error -71 [ 2341.693810][T23122] usb usb1-port1: unable to enumerate USB device [ 2342.189184][T23122] IPVS: starting estimator thread 0... [ 2342.279985][T28409] IPVS: using max 25 ests per chain, 60000 per kthread [ 2342.412178][T28119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2343.314622][T28422] sctp: [Deprecated]: syz.0.6810 (pid 28422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2343.314622][T28422] Use struct sctp_sack_info instead [ 2343.913678][T28119] veth0_vlan: entered promiscuous mode [ 2343.948687][T28119] veth1_vlan: entered promiscuous mode [ 2344.056115][T28119] veth0_macvtap: entered promiscuous mode [ 2344.098237][T28119] veth1_macvtap: entered promiscuous mode [ 2344.154275][T28119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.165249][T28119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.175624][T28119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.188566][T28119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.198793][T28119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2344.210098][T28119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.231538][T28119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2344.258376][T28119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2344.269630][T28119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.301967][T28119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2344.317706][T28119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.327877][T28119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2344.449858][T28119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2344.477314][T28119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2344.523211][T28119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2344.550395][T28119] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2344.561021][T28119] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2344.570231][T28119] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2344.615154][T28443] loop7: detected capacity change from 0 to 7 [ 2344.629583][ C0] blk_print_req_error: 20 callbacks suppressed [ 2344.629604][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.644967][ C0] buffer_io_error: 20 callbacks suppressed [ 2344.644980][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.669278][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.678474][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.701352][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.710663][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.721528][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.730702][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.738825][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.748008][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.756145][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.765310][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.773534][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.782718][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.790574][T28443] ldm_validate_partition_table(): Disk read failed. [ 2344.798426][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.807593][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.816689][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.825855][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.838053][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2344.847217][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2344.855533][T28443] Dev loop7: unable to read RDB block 0 [ 2344.871911][T28443] loop7: unable to read partition table [ 2344.877776][T28443] loop7: partition table beyond EOD, truncated [ 2344.884025][T28443] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2345.111329][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2345.127712][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2345.144273][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2345.156517][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2346.079077][T23108] IPVS: starting estimator thread 0... [ 2346.183520][T28465] IPVS: using max 24 ests per chain, 57600 per kthread [ 2346.191954][T28469] sctp: [Deprecated]: syz.6.6824 (pid 28469) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2346.191954][T28469] Use struct sctp_sack_info instead [ 2346.745118][T28487] loop7: detected capacity change from 0 to 7 [ 2346.782180][T28487] ldm_validate_partition_table(): Disk read failed. [ 2346.790968][T28487] Dev loop7: unable to read RDB block 0 [ 2346.797801][T28487] loop7: unable to read partition table [ 2346.804162][T28487] loop7: partition table beyond EOD, truncated [ 2346.810716][T28487] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2347.615739][T28497] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6833'. [ 2348.896303][T28513] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6838'. [ 2349.079218][T28519] sctp: [Deprecated]: syz.6.6841 (pid 28519) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2349.079218][T28519] Use struct sctp_sack_info instead [ 2349.165422][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2349.998306][T28538] netlink: 'syz.1.6849': attribute type 29 has an invalid length. [ 2350.033098][T28538] netlink: 'syz.1.6849': attribute type 29 has an invalid length. [ 2350.061077][T28539] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6850'. [ 2350.571352][T28547] loop7: detected capacity change from 0 to 7 [ 2350.639067][ C0] blk_print_req_error: 20 callbacks suppressed [ 2350.639090][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2350.654526][ C0] buffer_io_error: 20 callbacks suppressed [ 2350.654540][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2350.701877][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2350.711110][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2350.792283][T28550] netlink: 'syz.9.6852': attribute type 4 has an invalid length. [ 2350.888415][T28551] netlink: 'syz.9.6852': attribute type 4 has an invalid length. [ 2351.016748][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.025954][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2351.519189][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.528380][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2351.556381][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.565565][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2351.576331][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.586039][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2351.594013][T28547] ldm_validate_partition_table(): Disk read failed. [ 2351.601067][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.610256][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2351.625506][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2351.634718][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2352.022774][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.031967][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2352.053258][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2352.062486][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2352.076054][T28547] Dev loop7: unable to read RDB block 0 [ 2352.098124][T28547] loop7: unable to read partition table [ 2352.104247][T28547] loop7: partition table beyond EOD, truncated [ 2352.118742][T28547] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2352.446302][T28561] sctp: [Deprecated]: syz.6.6857 (pid 28561) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2352.446302][T28561] Use struct sctp_sack_info instead [ 2352.723496][T28564] netlink: 'syz.9.6858': attribute type 29 has an invalid length. [ 2352.823484][T28567] netlink: 'syz.9.6858': attribute type 29 has an invalid length. [ 2352.888088][T28568] netlink: 'syz.9.6858': attribute type 29 has an invalid length. [ 2352.950236][T28572] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6861'. [ 2353.939417][T28585] netlink: 'syz.7.6864': attribute type 29 has an invalid length. [ 2354.264322][T28578] fuse: Unknown parameter '0x000000000000000a' [ 2354.307288][T28592] netlink: 'syz.7.6864': attribute type 29 has an invalid length. [ 2355.295495][T28602] netlink: 'syz.7.6868': attribute type 4 has an invalid length. [ 2355.327758][T28602] netlink: 'syz.7.6868': attribute type 4 has an invalid length. [ 2356.305858][T28609] sctp: [Deprecated]: syz.6.6871 (pid 28609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2356.305858][T28609] Use struct sctp_sack_info instead [ 2356.425830][T28615] netlink: 'syz.0.6875': attribute type 29 has an invalid length. [ 2356.475030][T28616] netlink: 'syz.0.6875': attribute type 29 has an invalid length. [ 2356.520221][T28615] netlink: 'syz.0.6875': attribute type 29 has an invalid length. [ 2356.570208][T28620] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6877'. [ 2356.674676][T28627] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6880'. [ 2356.711301][T28627] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6880'. [ 2356.715508][T28628] syzkaller1: entered promiscuous mode [ 2356.743108][T28628] syzkaller1: entered allmulticast mode [ 2356.776613][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6879'. [ 2356.838595][T28635] netlink: 'syz.0.6882': attribute type 29 has an invalid length. [ 2356.976308][T28635] netlink: 'syz.0.6882': attribute type 29 has an invalid length. [ 2357.023975][T28635] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6882'. [ 2357.355369][T28644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6885'. [ 2357.696796][T28654] sctp: [Deprecated]: syz.0.6889 (pid 28654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2357.696796][T28654] Use struct sctp_sack_info instead [ 2357.908405][T28650] loop7: detected capacity change from 0 to 7 [ 2358.413373][T28662] syz.0.6890: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2358.428328][T28662] CPU: 1 UID: 0 PID: 28662 Comm: syz.0.6890 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2358.428362][T28662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2358.428379][T28662] Call Trace: [ 2358.428389][T28662] [ 2358.428400][T28662] dump_stack_lvl+0x241/0x360 [ 2358.428447][T28662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2358.428486][T28662] ? __pfx__printk+0x10/0x10 [ 2358.428521][T28662] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2358.428557][T28662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2358.428587][T28662] ? __rcu_read_unlock+0xa1/0x110 [ 2358.428626][T28662] warn_alloc+0x27c/0x410 [ 2358.428663][T28662] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 2358.428698][T28662] ? __pfx_warn_alloc+0x10/0x10 [ 2358.428732][T28662] ? kasan_save_track+0x3f/0x80 [ 2358.428767][T28662] ? __kasan_kmalloc+0x9d/0xb0 [ 2358.428806][T28662] ? xsk_setsockopt+0x449/0x840 [ 2358.428842][T28662] ? do_sock_setsockopt+0x3b3/0x710 [ 2358.428885][T28662] ? __x64_sys_setsockopt+0x187/0x210 [ 2358.428922][T28662] ? do_syscall_64+0xf3/0x210 [ 2358.428949][T28662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2358.428987][T28662] __vmalloc_node_range_noprof+0x128/0x1390 [ 2358.429057][T28662] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2358.429096][T28662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2358.429125][T28662] ? __kasan_kmalloc+0x9d/0xb0 [ 2358.429171][T28662] vmalloc_user_noprof+0x74/0x80 [ 2358.429203][T28662] ? xskq_create+0xb6/0x170 [ 2358.429241][T28662] xskq_create+0xb6/0x170 [ 2358.429284][T28662] xsk_init_queue+0xa1/0x100 [ 2358.429327][T28662] xsk_setsockopt+0x449/0x840 [ 2358.429369][T28662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2358.429407][T28662] ? __pfx_aa_sk_perm+0x10/0x10 [ 2358.429437][T28662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2358.429465][T28662] ? __lock_acquire+0xad5/0xd80 [ 2358.429505][T28662] ? aa_sock_opt_perm+0x79/0x120 [ 2358.429540][T28662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2358.429573][T28662] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2358.429610][T28662] do_sock_setsockopt+0x3b3/0x710 [ 2358.429656][T28662] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2358.429693][T28662] ? __fget_files+0x2a/0x420 [ 2358.429721][T28662] ? __fget_files+0x39d/0x420 [ 2358.429743][T28662] ? __fget_files+0x2a/0x420 [ 2358.429784][T28662] __x64_sys_setsockopt+0x187/0x210 [ 2358.429832][T28662] do_syscall_64+0xf3/0x210 [ 2358.429861][T28662] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2358.429900][T28662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2358.429926][T28662] RIP: 0033:0x7f0bccf8e969 [ 2358.429948][T28662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2358.429970][T28662] RSP: 002b:00007f0bcde21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2358.429996][T28662] RAX: ffffffffffffffda RBX: 00007f0bcd1b6160 RCX: 00007f0bccf8e969 [ 2358.430016][T28662] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 2358.430032][T28662] RBP: 00007f0bcd010ab1 R08: 0000000000000004 R09: 0000000000000000 [ 2358.430049][T28662] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2358.430066][T28662] R13: 0000000000000000 R14: 00007f0bcd1b6160 R15: 00007fffcf6eba38 [ 2358.430106][T28662] [ 2358.753271][T28662] Mem-Info: [ 2358.756406][T28662] active_anon:18355 inactive_anon:0 isolated_anon:0 [ 2358.756406][T28662] active_file:21801 inactive_file:39906 isolated_file:0 [ 2358.756406][T28662] unevictable:768 dirty:209 writeback:0 [ 2358.756406][T28662] slab_reclaimable:7274 slab_unreclaimable:109032 [ 2358.756406][T28662] mapped:45351 shmem:12854 pagetables:892 [ 2358.756406][T28662] sec_pagetables:0 bounce:0 [ 2358.756406][T28662] kernel_misc_reclaimable:0 [ 2358.756406][T28662] free:1280764 free_pcp:1485 free_cma:0 [ 2358.818028][ C0] blk_print_req_error: 5 callbacks suppressed [ 2358.818048][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2358.833385][ C0] buffer_io_error: 5 callbacks suppressed [ 2358.833401][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2358.839451][T28662] Node 0 active_anon:73500kB inactive_anon:0kB active_file:87204kB inactive_file:159560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:181480kB dirty:700kB writeback:152kB shmem:49972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11084kB pagetables:3608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2358.891847][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2358.901078][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2358.916777][T28662] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2358.916899][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2358.947949][ C0] vkms_vblank_simulate: vblank timer overrun [ 2358.957046][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2358.964869][T28662] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2358.978117][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2358.998038][T28662] lowmem_reserve[]: [ 2359.007000][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2359.010851][T28662] 0 2487 2487 2487 2487 [ 2359.023161][T28662] Node 0 DMA32 free:1201368kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:73492kB inactive_anon:0kB active_file:87204kB inactive_file:159460kB unevictable:1536kB writepending:452kB present:3129332kB managed:2547264kB mlocked:0kB bounce:0kB free_pcp:6300kB local_pcp:2772kB free_cma:0kB [ 2359.024688][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2359.053533][ C0] vkms_vblank_simulate: vblank timer overrun [ 2359.062632][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2359.070778][T28662] lowmem_reserve[]: 0 0 0 0 0 [ 2359.081281][T28662] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2359.107896][ C0] vkms_vblank_simulate: vblank timer overrun [ 2359.114031][T28662] lowmem_reserve[]: 0 0 0 0 0 [ 2359.118789][T28662] Node 1 Normal free:3905944kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2359.147479][ C0] vkms_vblank_simulate: vblank timer overrun [ 2359.154779][T28662] lowmem_reserve[]: 0 0 0 0 0 [ 2359.159499][T28662] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2359.172311][T28662] Node 0 DMA32: 28*4kB (E) 85*8kB (UE) 186*16kB (UE) 328*32kB (UME) 614*64kB (UME) 302*128kB (UME) 190*256kB (UME) 163*512kB (UME) 152*1024kB (UME) 11*2048kB (ME) 195*4096kB (UM) = 1201208kB [ 2359.191290][T28662] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2359.202846][T28662] Node 1 Normal: 274*4kB (UM) 56*8kB (UME) 51*16kB (UME) 213*32kB (UME) 101*64kB (UME) 41*128kB (UME) 14*256kB (UME) 7*512kB (UM) 9*1024kB (UME) 5*2048kB (UE) 942*4096kB (M) = 3905944kB [ 2359.221424][T28662] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2359.231000][T28662] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2359.241507][T28662] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2359.251077][T28662] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2359.260441][T28662] 74511 total pagecache pages [ 2359.265101][T28662] 0 pages in swap cache [ 2359.269237][T28662] Free swap = 124996kB [ 2359.273445][T28662] Total swap = 124996kB [ 2359.277585][T28662] 2097051 pages RAM [ 2359.281416][T28662] 0 pages HighMem/MovableOnly [ 2359.286074][T28662] 428577 pages reserved [ 2359.290264][T28662] 0 pages cma reserved [ 2359.403670][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2359.412952][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2359.433773][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2359.442972][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2359.450911][T28650] ldm_validate_partition_table(): Disk read failed. [ 2359.458415][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2359.467635][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2359.476118][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2359.485322][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 2359.493381][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2359.502600][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 2359.510593][T28650] Dev loop7: unable to read RDB block 0 [ 2359.517601][T28663] netlink: 'syz.1.6886': attribute type 4 has an invalid length. [ 2359.518309][T28650] loop7: unable to read partition table [ 2359.531518][T28650] loop7: partition table beyond EOD, truncated [ 2359.537702][T28650] loop_reread_partitions: partition scan of loop7 (þ被xü—ŸÑà– ) failed (rc=-5) [ 2359.548815][T28663] netlink: 'syz.1.6886': attribute type 4 has an invalid length. [ 2359.635547][T28667] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6893'. [ 2359.975761][T28675] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6896'. [ 2360.021006][T28680] netlink: 'syz.0.6897': attribute type 29 has an invalid length. [ 2360.021118][T28675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6896'. [ 2360.068012][T28680] netlink: 500 bytes leftover after parsing attributes in process `syz.0.6897'. [ 2360.434007][T28689] syzkaller1: entered promiscuous mode [ 2360.465591][T28689] syzkaller1: entered allmulticast mode [ 2360.554454][T28692] sctp: [Deprecated]: syz.1.6902 (pid 28692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2360.554454][T28692] Use struct sctp_sack_info instead [ 2360.935182][T28704] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6907'. [ 2362.083860][T28715] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6912'. [ 2362.130077][T28715] bridge_slave_1: left allmulticast mode [ 2362.135759][T28715] bridge_slave_1: left promiscuous mode [ 2362.153700][T28715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2362.258578][T28727] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6912'. [ 2362.308466][T28728] validate_nla: 1 callbacks suppressed [ 2362.308506][T28728] netlink: 'syz.0.6909': attribute type 4 has an invalid length. [ 2362.401563][T28729] netlink: 'syz.0.6909': attribute type 4 has an invalid length. [ 2362.634974][T28727] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6912'. [ 2362.741037][T28734] netlink: 'syz.6.6912': attribute type 10 has an invalid length. [ 2362.768063][T28735] netlink: 596 bytes leftover after parsing attributes in process `syz.8.6913'. [ 2362.789326][T28715] bridge_slave_0: left allmulticast mode [ 2362.827261][T28715] bridge_slave_0: left promiscuous mode [ 2362.834006][T28715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2362.923721][T28722] netlink: 'syz.8.6913': attribute type 29 has an invalid length. [ 2362.932323][T28732] netlink: 'syz.8.6913': attribute type 29 has an invalid length. [ 2363.086161][T28734] syz_tun: entered promiscuous mode [ 2363.125160][T28734] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2363.172074][T28744] sctp: [Deprecated]: syz.0.6917 (pid 28744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2363.172074][T28744] Use struct sctp_sack_info instead [ 2363.932827][T28755] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6921'. [ 2364.376376][T28773] netlink: 'syz.1.6928': attribute type 29 has an invalid length. [ 2364.388294][T28773] netlink: 'syz.1.6928': attribute type 29 has an invalid length. [ 2364.866846][T28781] netlink: 'syz.8.6930': attribute type 4 has an invalid length. [ 2364.878663][T28781] netlink: 'syz.8.6930': attribute type 4 has an invalid length. [ 2365.366583][T28782] program syz.9.6931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2365.919584][T28798] __nla_validate_parse: 6 callbacks suppressed [ 2365.919607][T28798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6938'. [ 2365.933525][T28799] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6937'. [ 2366.002331][T28799] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6937'. [ 2366.030570][T28799] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6937'. [ 2366.119157][T28805] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6939'. [ 2366.218149][T28809] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6941'. [ 2366.261566][T28809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6941'. [ 2366.320050][T28810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6941'. [ 2366.364965][T28810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6941'. [ 2366.460565][T28814] netlink: 'syz.7.6944': attribute type 29 has an invalid length. [ 2366.515181][T28814] netlink: 596 bytes leftover after parsing attributes in process `syz.7.6944'. [ 2367.021315][T18510] bond0: (slave syz_tun): Releasing backup interface [ 2367.078748][T18772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2367.095489][T18772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2367.104049][T18772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2367.142722][T18772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2367.154272][T18772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2367.197767][T26826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2367.209891][T23108] usb 10-1: new full-speed USB device number 81 using dummy_hcd [ 2367.288798][T26826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2367.372259][T23108] usb 10-1: unable to get BOS descriptor set [ 2367.381087][T23108] usb 10-1: not running at top speed; connect to a high speed hub [ 2367.400530][T23108] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2367.411529][T23108] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 2367.427419][T23108] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2367.444850][T23108] usb 10-1: Product: syz [ 2367.450819][T23108] usb 10-1: Manufacturer: syz [ 2367.455985][T23108] usb 10-1: SerialNumber: syz [ 2367.462064][T26826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2368.114124][T26826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 2368.420883][T28845] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2369.869122][T21627] Bluetooth: hci3: command tx timeout [ 2370.031996][T23108] usb 10-1: USB disconnect, device number 81 [ 2370.133494][T26826] batman_adv: batadv0: Interface deactivated: geneve2 [ 2371.742206][T26826] batman_adv: batadv0: Removing interface: geneve2 [ 2371.838626][T28891] __nla_validate_parse: 1 callbacks suppressed [ 2371.838650][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6968'. [ 2371.882673][T21627] Bluetooth: hci3: command tx timeout [ 2371.892641][T28893] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6968'. [ 2372.456571][T26826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2372.474190][T26826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2372.489076][T26826] bond0 (unregistering): Released all slaves [ 2372.507534][T28864] validate_nla: 1 callbacks suppressed [ 2372.507553][T28864] netlink: 'syz.9.6960': attribute type 29 has an invalid length. [ 2372.728318][T28830] chnl_net:caif_netlink_parms(): no params data found [ 2372.775982][T26826] tipc: Left network mode [ 2374.669983][T21627] Bluetooth: hci3: command tx timeout [ 2374.922127][T28914] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2375.556224][T28926] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 2376.689888][T21627] Bluetooth: hci3: command tx timeout [ 2376.853391][T28944] netlink: 596 bytes leftover after parsing attributes in process `syz.6.6981'. [ 2376.899193][T26826] hsr_slave_0: left promiscuous mode [ 2376.936720][T26826] hsr_slave_1: left promiscuous mode [ 2376.967620][T26826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2376.991901][T26826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2377.006965][T26826] [ 2377.009297][T26826] ====================================================== [ 2377.016309][T26826] WARNING: possible circular locking dependency detected [ 2377.023326][T26826] 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 Not tainted [ 2377.030448][T26826] ------------------------------------------------------ [ 2377.037473][T26826] kworker/u8:3/26826 is trying to acquire lock: [ 2377.043715][T26826] ffff88803ccb8e00 (team->team_lock_key#23){+.+.}-{4:4}, at: team_port_change_check+0x51/0x1e0 [ 2377.054123][T26826] [ 2377.054123][T26826] but task is already holding lock: [ 2377.061477][T26826] ffff888079456d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5ac/0x2640 [ 2377.073080][T26826] [ 2377.073080][T26826] which lock already depends on the new lock. [ 2377.073080][T26826] [ 2377.083470][T26826] [ 2377.083470][T26826] the existing dependency chain (in reverse order) is: [ 2377.092480][T26826] [ 2377.092480][T26826] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 2377.100931][T26826] lock_acquire+0x116/0x2f0 [ 2377.105962][T26826] __mutex_lock+0x1a5/0x10c0 [ 2377.111080][T26826] dev_set_mtu+0x11c/0x270 [ 2377.116022][T26826] team_add_slave+0x83b/0x28b0 [ 2377.121315][T26826] do_set_master+0x57b/0x730 [ 2377.126429][T26826] do_setlink+0xf76/0x4390 [ 2377.131366][T26826] rtnl_newlink+0x17e2/0x1fe0 [ 2377.136562][T26826] rtnetlink_rcv_msg+0x811/0xd70 [ 2377.142018][T26826] netlink_rcv_skb+0x20a/0x480 [ 2377.147297][T26826] netlink_unicast+0x7fa/0x9a0 [ 2377.152578][T26826] netlink_sendmsg+0x8c3/0xcd0 [ 2377.157864][T26826] __sock_sendmsg+0x223/0x270 [ 2377.163060][T26826] ____sys_sendmsg+0x523/0x860 [ 2377.168351][T26826] __sys_sendmsg+0x271/0x360 [ 2377.173464][T26826] do_syscall_64+0xf3/0x210 [ 2377.178483][T26826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2377.184890][T26826] [ 2377.184890][T26826] -> #0 (team->team_lock_key#23){+.+.}-{4:4}: [ 2377.193167][T26826] validate_chain+0xa69/0x24e0 [ 2377.198443][T26826] __lock_acquire+0xad5/0xd80 [ 2377.203642][T26826] lock_acquire+0x116/0x2f0 [ 2377.208666][T26826] __mutex_lock+0x1a5/0x10c0 [ 2377.213772][T26826] team_port_change_check+0x51/0x1e0 [ 2377.219571][T26826] team_device_event+0x161/0x5b0 [ 2377.225024][T26826] notifier_call_chain+0x1a7/0x3f0 [ 2377.230648][T26826] dev_close_many+0x33e/0x4c0 [ 2377.235842][T26826] unregister_netdevice_many_notify+0x631/0x2640 [ 2377.242685][T26826] default_device_exit_batch+0x7ff/0x880 [ 2377.248840][T26826] cleanup_net+0x8b1/0xd60 [ 2377.253782][T26826] process_scheduled_works+0xac5/0x18e0 [ 2377.259865][T26826] worker_thread+0x870/0xd50 [ 2377.264973][T26826] kthread+0x7b9/0x940 [ 2377.269565][T26826] ret_from_fork+0x4d/0x80 [ 2377.274493][T26826] ret_from_fork_asm+0x1a/0x30 [ 2377.279774][T26826] [ 2377.279774][T26826] other info that might help us debug this: [ 2377.279774][T26826] [ 2377.289990][T26826] Possible unsafe locking scenario: [ 2377.289990][T26826] [ 2377.297423][T26826] CPU0 CPU1 [ 2377.302769][T26826] ---- ---- [ 2377.308116][T26826] lock(&dev_instance_lock_key#3); [ 2377.313321][T26826] lock(team->team_lock_key#23); [ 2377.320873][T26826] lock(&dev_instance_lock_key#3); [ 2377.328599][T26826] lock(team->team_lock_key#23); [ 2377.333632][T26826] [ 2377.333632][T26826] *** DEADLOCK *** [ 2377.333632][T26826] [ 2377.341760][T26826] 5 locks held by kworker/u8:3/26826: [ 2377.347115][T26826] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 2377.358020][T26826] #1: ffffc9000dd67c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 2377.368579][T26826] #2: ffffffff900f0d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17c/0xd60 [ 2377.378006][T26826] #3: ffffffff900fd848 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 2377.388037][T26826] #4: ffff888079456d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5ac/0x2640 [ 2377.400073][T26826] [ 2377.400073][T26826] stack backtrace: [ 2377.405951][T26826] CPU: 1 UID: 0 PID: 26826 Comm: kworker/u8:3 Not tainted 6.15.0-rc3-syzkaller-00032-ga79be02bba5c #0 PREEMPT(full) [ 2377.405981][T26826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2377.405998][T26826] Workqueue: netns cleanup_net [ 2377.406029][T26826] Call Trace: [ 2377.406038][T26826] [ 2377.406049][T26826] dump_stack_lvl+0x241/0x360 [ 2377.406085][T26826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2377.406118][T26826] ? __pfx__printk+0x10/0x10 [ 2377.406150][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.406176][T26826] ? print_lock+0x171/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2377.406214][T26826] print_circular_bug+0x2e1/0x300 [ 2377.406240][T26826] check_noncircular+0x142/0x160 [ 2377.406268][T26826] validate_chain+0xa69/0x24e0 [ 2377.406300][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.406330][T26826] __lock_acquire+0xad5/0xd80 [ 2377.406367][T26826] lock_acquire+0x116/0x2f0 [ 2377.406397][T26826] ? team_port_change_check+0x51/0x1e0 [ 2377.406430][T26826] __mutex_lock+0x1a5/0x10c0 [ 2377.406454][T26826] ? team_port_change_check+0x51/0x1e0 [ 2377.406486][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.406512][T26826] ? team_port_change_check+0x51/0x1e0 [ 2377.406536][T26826] ? bond_netdev_event+0xe0/0xfb0 [ 2377.406559][T26826] ? __pfx___mutex_lock+0x10/0x10 [ 2377.406583][T26826] ? __timer_delete_sync+0x25f/0x310 [ 2377.406615][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.406641][T26826] ? __asan_memset+0x23/0x50 [ 2377.406674][T26826] team_port_change_check+0x51/0x1e0 [ 2377.406703][T26826] team_device_event+0x161/0x5b0 [ 2377.406727][T26826] ? notifier_call_chain+0x15a/0x3f0 [ 2377.406751][T26826] notifier_call_chain+0x1a7/0x3f0 [ 2377.406776][T26826] dev_close_many+0x33e/0x4c0 [ 2377.406807][T26826] ? __pfx_dev_close_many+0x10/0x10 [ 2377.406834][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.406866][T26826] unregister_netdevice_many_notify+0x631/0x2640 [ 2377.406896][T26826] ? lockdep_hardirqs_on+0x9d/0x150 [ 2377.406919][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.406948][T26826] ? __local_bh_enable_ip+0x168/0x200 [ 2377.406985][T26826] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2377.407020][T26826] ? batadv_tt_local_remove+0x119/0x230 [ 2377.407054][T26826] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2377.407086][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.407111][T26826] ? unregister_netdevice_queue+0x2c4/0x400 [ 2377.407139][T26826] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 2377.407166][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.407195][T26826] default_device_exit_batch+0x7ff/0x880 [ 2377.407232][T26826] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2377.407264][T26826] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 2377.407293][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.407319][T26826] ? cfg802154_pernet_exit+0xc3/0xe0 [ 2377.407350][T26826] ? __pfx_default_device_exit_batch+0x10/0x10 [ 2377.407383][T26826] cleanup_net+0x8b1/0xd60 [ 2377.407417][T26826] ? __pfx_cleanup_net+0x10/0x10 [ 2377.407447][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.407479][T26826] ? process_scheduled_works+0x9cb/0x18e0 [ 2377.407514][T26826] process_scheduled_works+0xac5/0x18e0 [ 2377.407565][T26826] ? __pfx_process_scheduled_works+0x10/0x10 [ 2377.407604][T26826] ? assign_work+0x367/0x3d0 [ 2377.407641][T26826] worker_thread+0x870/0xd50 [ 2377.407670][T26826] ? __kthread_parkme+0x1a8/0x200 [ 2377.407694][T26826] ? __pfx_worker_thread+0x10/0x10 [ 2377.407715][T26826] kthread+0x7b9/0x940 [ 2377.407742][T26826] ? __pfx_worker_thread+0x10/0x10 [ 2377.407764][T26826] ? __pfx_kthread+0x10/0x10 [ 2377.407788][T26826] ? __pfx_kthread+0x10/0x10 [ 2377.407813][T26826] ? __pfx_kthread+0x10/0x10 [ 2377.407838][T26826] ? __pfx_kthread+0x10/0x10 [ 2377.407863][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2377.407888][T26826] ? lockdep_hardirqs_on+0x9d/0x150 [ 2377.407910][T26826] ? __pfx_kthread+0x10/0x10 [ 2377.407939][T26826] ret_from_fork+0x4d/0x80 [ 2377.407961][T26826] ? __pfx_kthread+0x10/0x10 [ 2377.407987][T26826] ret_from_fork_asm+0x1a/0x30 [ 2377.408016][T26826] [ 2377.791140][ C1] vkms_vblank_simulate: vblank timer overrun [ 2378.676791][T26826] team0 (unregistering): Port device team_slave_1 removed [ 2378.708734][T26826] team0 (unregistering): Port device team_slave_0 removed [ 2378.896902][T26826] team0 (unregistering): Port device dummy0 removed [ 2378.988092][T26826] vcan0 (unregistering): left allmulticast mode [ 2379.004559][T28942] netlink: 'syz.6.6981': attribute type 29 has an invalid length. [ 2379.015424][T28830] bridge0: port 1(bridge_slave_0) entered blocking state [ 2379.030206][T28830] bridge0: port 1(bridge_slave_0) entered disabled state [ 2379.047834][T28830] bridge_slave_0: entered allmulticast mode [ 2379.056316][T28830] bridge_slave_0: entered promiscuous mode [ 2379.092967][T24293] bridge0: port 3(syz_tun) entered disabled state [ 2379.112595][T24293] syz_tun (unregistering): left allmulticast mode [ 2379.119025][T24293] syz_tun (unregistering): left promiscuous mode [ 2379.150227][T24293] bridge0: port 3(syz_tun) entered disabled state [ 2379.329618][T28942] bond0: (slave syz_tun): Releasing backup interface [ 2379.591182][T26826] IPVS: stop unused estimator thread 0... [ 2379.645063][T28897] : (slave syz_tun): Releasing backup interface [ 2379.664087][T26826] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.715675][T26826] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.774880][T26826] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.837346][T26826] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.950908][T26826] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.994585][T26826] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.043871][T26826] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.094115][T26826] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.151985][T26826] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.213203][T26826] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.272916][T26826] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.322768][T26826] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.383100][T26826] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.434006][T26826] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.484888][T26826] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.535509][T26826] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.602785][T26826] bridge_slave_0: left allmulticast mode [ 2380.608434][T26826] bridge_slave_0: left promiscuous mode [ 2380.614124][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2380.624915][T26826] bridge_slave_1: left allmulticast mode [ 2380.630586][T26826] bridge_slave_1: left promiscuous mode [ 2380.636767][T26826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2380.645264][T26826] bridge_slave_0: left allmulticast mode [ 2380.651112][T26826] bridge_slave_0: left promiscuous mode [ 2380.656736][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2380.667612][T26826] bridge_slave_1: left allmulticast mode [ 2380.673476][T26826] bridge_slave_1: left promiscuous mode [ 2380.679110][T26826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2380.688587][T26826] bridge_slave_0: left allmulticast mode [ 2380.694497][T26826] bridge_slave_0: left promiscuous mode [ 2380.700464][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2380.710617][T26826] bridge_slave_1: left allmulticast mode [ 2380.716239][T26826] bridge_slave_1: left promiscuous mode [ 2380.722046][T26826] bridge0: port 2(bridge_slave_1) entered disabled state [ 2380.730246][T26826] bridge_slave_0: left allmulticast mode [ 2380.736759][T26826] bridge_slave_0: left promiscuous mode [ 2380.742642][T26826] bridge0: port 1(bridge_slave_0) entered disabled state [ 2381.523074][T26826] bond0 (unregistering): Released all slaves [ 2381.535505][T26826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2381.546038][T26826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2381.556639][T26826] bond0 (unregistering): Released all slaves [ 2381.573692][T26826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2381.586647][T26826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2381.598061][T26826] bond0 (unregistering): Released all slaves [ 2381.611782][T26826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2381.621920][T26826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2381.633200][T26826] bond0 (unregistering): Released all slaves [ 2381.646112][T26826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2381.658485][T26826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2381.668330][T26826] bond0 (unregistering): Released all slaves [ 2381.754059][T26826] bond1 (unregistering): Released all slaves [ 2381.869296][T26826] tipc: Left network mode [ 2382.397665][T26826] hsr_slave_0: left promiscuous mode [ 2382.403449][T26826] hsr_slave_1: left promiscuous mode [ 2382.409094][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2382.416565][T26826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2382.427412][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2382.436603][T26826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2382.447518][T26826] hsr_slave_0: left promiscuous mode [ 2382.453294][T26826] hsr_slave_1: left promiscuous mode [ 2382.458992][T26826] batman_adv: batadv0: Removing interface: team0 [ 2382.466130][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2382.473626][T26826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2382.481808][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2382.489184][T26826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2382.499309][T26826] hsr_slave_0: left promiscuous mode [ 2382.505225][T26826] hsr_slave_1: left promiscuous mode [ 2382.510994][T26826] batman_adv: batadv0: Removing interface: team0 [ 2382.517740][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2382.525256][T26826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2382.532849][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2382.540767][T26826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2382.551597][T26826] hsr_slave_0: left promiscuous mode [ 2382.557290][T26826] hsr_slave_1: left promiscuous mode [ 2382.563025][T26826] batman_adv: batadv0: Removing interface: team0 [ 2382.569889][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2382.577284][T26826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2382.587231][T26826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2382.594698][T26826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2382.613632][T26826] veth1_macvtap: left promiscuous mode [ 2382.619120][T26826] veth0_macvtap: left promiscuous mode [ 2382.624764][T26826] veth1_vlan: left promiscuous mode [ 2382.630186][T26826] veth0_vlan: left promiscuous mode [ 2382.636206][T26826] veth1_macvtap: left promiscuous mode [ 2382.641743][T26826] veth0_macvtap: left promiscuous mode [ 2382.647279][T26826] veth1_vlan: left promiscuous mode [ 2382.652541][T26826] veth0_vlan: left promiscuous mode [ 2382.658882][T26826] veth1_macvtap: left promiscuous mode [ 2382.664451][T26826] veth0_macvtap: left promiscuous mode [ 2382.670070][T26826] veth1_vlan: left promiscuous mode [ 2382.675303][T26826] veth0_vlan: left promiscuous mode [ 2382.682156][T26826] veth1_macvtap: left promiscuous mode [ 2382.687631][T26826] veth0_macvtap: left promiscuous mode [ 2382.693293][T26826] veth1_vlan: left promiscuous mode [ 2382.698525][T26826] veth0_vlan: left promiscuous mode [ 2383.049664][T26826] team0 (unregistering): Port device team_slave_1 removed [ 2383.075022][T26826] team0 (unregistering): Port device team_slave_0 removed [ 2383.268828][T26826] team0 (unregistering): Port device team_slave_1 removed [ 2383.280795][T26826] team0 (unregistering): Port device team_slave_0 removed [ 2383.536310][T26826] team0 (unregistering): Port device team_slave_1 removed [ 2383.558209][T26826] team0 (unregistering): Port device team_slave_0 removed [ 2383.838808][T26826] team0 (unregistering): Port device team_slave_1 removed [ 2383.869025][T26826] team0 (unregistering): Port device team_slave_0 removed [ 2385.134027][T26826] IPVS: stop unused estimator thread 0... [ 2385.142050][T26826] IPVS: stop unused estimator thread 0... [ 2385.912274][T26826]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2385.921548][T26826]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2385.930448][T26826]  (unregistering): Released all slaves [ 2385.973162][T26826] tipc: Left network mode [ 2386.133753][T26826] hsr_slave_0: left promiscuous mode [ 2386.139449][T26826] hsr_slave_1: left promiscuous mode [ 2386.145298][T26826] batman_adv: batadv0: Removing interface: team0 [ 2386.152302][T26826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2386.353622][T26826] team0 (unregistering): Port device team_slave_1 removed [ 2386.387782][T26826] team0 (unregistering): Port device team_slave_0 removed