last executing test programs: 27m32.043249366s ago: executing program 32 (id=22): openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/wakeup_count', 0x80800, 0x108) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$char_usb(r1, &(0x7f0000001980)=""/179, 0xb3) 26m19.716961315s ago: executing program 33 (id=135): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$isdn(0x22, 0x2, 0x11) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000000009040000030300000009"], 0x0) syz_open_dev$loop(&(0x7f0000000d80), 0x3, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f0000000140)={0x0, 0x0, 0xffffffff, 0x7, 0x2}) io_uring_setup(0x3454, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 26m19.266113605s ago: executing program 34 (id=136): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) keyctl$read(0x2, r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000780), 0x0, 0x4) removexattr(0x0, &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00000004c0)="ab", 0x1, 0xc0, 0x0, 0x0) 22m44.183412495s ago: executing program 35 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) read(r1, 0x0, 0x0) 22m7.272390368s ago: executing program 36 (id=550): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x240) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0x125f) 19m17.060617327s ago: executing program 37 (id=1031): setns(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="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", &(0x7f0000000040)=@udp=r2, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) epoll_create(0x1) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 19m6.225384138s ago: executing program 38 (id=1069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x5f8, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000005c0)='task_rename\x00', r6}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r8, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) 17m32.219013571s ago: executing program 2 (id=1258): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x7ff, 0x100) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)="240000001e005f0214fffffffffffff80700000001000000000000001200092202000000c50b2c536f50acdb9e180add1925ec83cd6b9d373fc37e72295a58d2e6acd3e6df5c", 0x46) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) timer_gettime(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m30.876848403s ago: executing program 2 (id=1259): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$vim2m(0x0, 0x80020001, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r5 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040), &(0x7f0000000280)) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000007c0)=0x1) close(r0) 17m29.186260799s ago: executing program 2 (id=1261): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r7, r7, 0x0) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 17m28.691691416s ago: executing program 2 (id=1263): socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x200000000000) socket$inet6(0xa, 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) getresuid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) sendfile(0xffffffffffffffff, r2, &(0x7f0000000000), 0xfffb) fcntl$addseals(r2, 0x409, 0x8) 17m27.311394302s ago: executing program 2 (id=1265): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x7, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @typedef={0x5}]}, {0x0, [0x71, 0x2e, 0x5f, 0x5f, 0x6f]}}, 0x0, 0x3f, 0x0, 0x1, 0x79a, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x2, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x1, 0x5, 0x0, 0xe}], &(0x7f0000000080)='GPL\x00', 0xfffffff8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x1], &(0x7f0000000180)=[{0x4, 0x5, 0xb, 0x3}, {0x5, 0x2, 0xb, 0x5}, {0x3, 0x3, 0x1, 0x5}], 0x10, 0x6, @void, @value}, 0x94) socket$kcm(0x2, 0x5, 0x84) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x10000, 0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}], '\x00', 0x1000}) sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000004240)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r7 = dup(r6) write$FUSE_INIT(r7, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x2, 0x0, 0xfff9, 0x0, 0xa, 0x80, 0x0, 0x0, 0x2}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',ac', @ANYBLOB='Mcachetag=,aname=']) unlinkat(r7, &(0x7f0000000300)='./file0\x00', 0x200) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x4008094) r9 = mq_open(&(0x7f0000000340)='\x16\xbc\xec\x00o\x18\x0f\x8c\x9b\x14\xbb\xd8@\b\x96f\x9c\x1e\x95\x11Z*\xd1\x826\xff\xcd\r\xc0\xc6|p\x00/\xf26\x03\xbc03\xd79J\"\x87\x97aT\xb3Q\xdfwhg\xec\xf6^\xbd\xc1\x11', 0x41, 0x4, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) mq_notify(r9, &(0x7f0000001200)={0x0, 0x3f, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kvm_set_spte_hva\x00', r1, 0x0, 0x8}, 0x18) 17m26.182785322s ago: executing program 2 (id=1267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 17m10.549136313s ago: executing program 39 (id=1267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 13m22.831619732s ago: executing program 3 (id=1696): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000780)={&(0x7f0000000740)=[{0x4, 0xb001, 0x0, 0x0}], 0x1}) 13m17.511124072s ago: executing program 3 (id=1713): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0xfffffeb7) r0 = io_uring_setup(0x4e75, &(0x7f0000001300)={0x0, 0x0, 0x2, 0xffffffed, 0x10003bd}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ct={0x48, 0x1, 0x0, 0x0, {{0x7}, {0x20, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x401}, @TCA_CT_LABELS={0x14, 0x7, "5033a44a9bc53b0149979c0db12f7a74"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r5}, &(0x7f00000001c0), &(0x7f0000001200)='%pI4 \x00'}, 0x20) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000000200), 0x0, 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, r3, r4, 0x0, 0x3, 0xddffffff}) close_range(r0, 0xffffffffffffffff, 0x0) 13m13.38720427s ago: executing program 3 (id=1718): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000440)={'gretap0\x00', 0x700}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) 13m4.60031259s ago: executing program 3 (id=1737): r0 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00'}, 0x10) sendmsg$SMC_PNETID_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r8, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2006c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb70067", 0x5c) shmat(r0, &(0x7f0000ff7000/0x3000)=nil, 0x400c) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13m2.298078844s ago: executing program 3 (id=1741): syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, 0x0, 0x0) munmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000) 13m0.537948511s ago: executing program 3 (id=1744): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x44080) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000440)={'gretap0\x00', 0x700}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) 12m45.190148448s ago: executing program 40 (id=1744): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x8000) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x44080) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000440)={'gretap0\x00', 0x700}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xfff2, 0xa}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x1}]}}]}, 0x40}}, 0x4000) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) socket$netlink(0x10, 0x3, 0x0) 12m29.398724613s ago: executing program 8 (id=1798): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = io_uring_setup(0x2471, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x24}}, 0x0) setns(0xffffffffffffffff, 0x24020000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x0, 0xffe2}, {0x5, 0xffe0}}}, 0x24}}, 0x20000000) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x2000, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x48004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000080)={0x9, 0x0, {0xfffffffffffffffc, 0x0, 0x8e4, 0x2, 0x7fffffff}, 0xa5f2}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x40, 0x7, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x707, 0x10, 0x4, 0xffff}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0xc040) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) 12m27.877126283s ago: executing program 8 (id=1802): io_setup(0x3ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00004a9170"], 0x50) pipe2(0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x40, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3e}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000900)="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", 0x3a3}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 12m27.326588654s ago: executing program 8 (id=1803): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) tgkill(0xffffffffffffffff, 0x0, 0x22) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x693, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x7ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000046c0)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 12m25.927455734s ago: executing program 8 (id=1805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000005000000150000b900000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) 12m15.896026201s ago: executing program 8 (id=1822): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) accept(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 12m14.846827728s ago: executing program 8 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 12m6.603754319s ago: executing program 5 (id=1840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 12m4.271918072s ago: executing program 5 (id=1842): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) sched_setscheduler(0xffffffffffffffff, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r4}) 12m0.42777209s ago: executing program 5 (id=1849): setns(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000880)="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", &(0x7f0000000040)=@udp=r1, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) epoll_create(0x1) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="24001533200001002bbd70000000000002002000000000000000000008000200e000000108c67a85b28b0efa851f53bc538dcb1d200b91f9368de48c728111fb8c889ef612db0964846153563e5509c6cc1721519fb6de6d50c1ba752a7366ae686867ff9f87b5944de40652279ea7cc1468b14e43c129bd3bedd1cc1f23c32e1cdc485bffc37c01111e76c60d0c23cbcdd314707d766cc7cdd6c09f4049cc083e32a72d754a27cb57"], 0x24}, 0x1, 0x0, 0x0, 0x20048055}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) 11m59.252330705s ago: executing program 41 (id=1824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000006080)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 11m59.23025599s ago: executing program 5 (id=1851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x802, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet6(0xa, 0x2, 0x3a) r4 = dup(r3) bind$unix(r4, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 11m58.147474685s ago: executing program 5 (id=1853): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) capset(0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffc93, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/xfrm_stat\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 11m55.361724303s ago: executing program 5 (id=1856): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) gettid() 11m39.394654568s ago: executing program 42 (id=1856): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000340)=""/187, 0xbb}], 0x1, 0x33, 0xf00) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x2, &(0x7f0000000040)=""/36, 0x24) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) gettid() 2m57.445231036s ago: executing program 7 (id=2876): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffff0, 0x6, 0x6, 0x1000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0xf, @void, @value, @void, @value}, 0x50) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x668, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m56.588068716s ago: executing program 7 (id=2878): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x28f0, &(0x7f0000000340)={0x0, 0x7695, 0x2, 0x0, 0x260}) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:'], 0x47) clock_settime(0x5, &(0x7f0000000300)={0x0, 0x3938700}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r1, 0x0, r4, 0x0, 0x8, 0x0) 26.088514873s ago: executing program 4 (id=3198): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000001c0)=0x1, 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) 20.833224311s ago: executing program 4 (id=3211): mkdir(0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0xffffffffffffff6a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8818) r2 = syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0xc0085666, &(0x7f0000000080)={0x2, 0x3}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000180)={0x0, {0x9, 0x4}}) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x6, 0x1, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x15}, 0x1, 0x700, 0xffffffff, 0x5}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x4d) getdents(r6, &(0x7f0000000200)=""/223, 0xdf) lseek(r6, 0x101, 0x1) getdents64(r6, &(0x7f0000003340)=""/48, 0x30) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB], 0x2c}}, 0x0) 16.860372846s ago: executing program 6 (id=3214): listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup(0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x1}, &(0x7f00000004c0)="d25a9850a9726be16838807cc61ed582f1e1dd983ba54758342b615d7a36ce462db6495d16c821c4411a9e15dd606b2812942db68742157ec9a6e00e05899749e9a3fe062f9be4f34fe28714e5d851233444ea11f8a5bb5b5eef3a64d54971d00d1b5842e1879d4c57fe4bf5a2b3fcd76c2ae622b9755a56605a90bc1b7d", 0x7e, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 16.141926366s ago: executing program 4 (id=3217): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0xfffffeb7) r1 = io_uring_setup(0x4e75, &(0x7f0000001300)={0x0, 0x0, 0x2, 0xffffffed, 0x10003bd}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r5}, &(0x7f00000001c0), 0x0}, 0x20) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r8, &(0x7f0000000200), 0x0, 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000100)="e9000010", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.486031527s ago: executing program 0 (id=3219): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc044) r4 = socket$kcm(0x10, 0x2, 0x0) move_pages(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 13.740311779s ago: executing program 6 (id=3222): socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0xd931d3864d39ddd8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000200), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000001c0)=0x1, 0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) 13.560602678s ago: executing program 4 (id=3223): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 12.812319331s ago: executing program 4 (id=3226): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioprio_set$uid(0x3, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 12.741603473s ago: executing program 1 (id=3227): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0xfffffeb7) r1 = io_uring_setup(0x4e75, &(0x7f0000001300)={0x0, 0x0, 0x2, 0xffffffed, 0x10003bd}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r6}, &(0x7f00000001c0), 0x0}, 0x20) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f0000000200), 0x0, 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000040)={0x0, r4, r5, 0x0, 0x3, 0xddffffff}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="e900001029cf6e16dbb9048dc48f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.479287764s ago: executing program 1 (id=3228): syz_io_uring_setup(0x49c, 0x0, &(0x7f0000000340), &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) socket$kcm(0x10, 0x8, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaa4429aaaaaaaaaaaaaa0800450200140076000002299078ac1414bbac141425e9757a3edb0475c8131163096fadef42a03ce0c80efdb51f8f05bf0aef824506218823bc81"], 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13b70fa166031fa2141704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x150}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6d1, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x5, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x7, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x6c7, 0x9, 0xa, 0x3, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x3, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x10000000, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x0, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x55, 0x5, 0x3, 0x101, 0x10000, 0x4, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0x4, 0x2, 0x8, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xffffffff, 0xffff3441, 0xfff]}, 0x45c) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000ec0)=""/177, &(0x7f0000000f80)=0xb1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r6, r6, 0x0, 0x40008) 12.366562422s ago: executing program 9 (id=3229): syz_io_uring_setup(0x49c, 0x0, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newsa={0x14c, 0x10, 0x633, 0x0, 0x10, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@multicast2, 0x4d5, 0x32}, @in=@private=0xa010101, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x3501, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @coaddr={0x14, 0xe, @in=@multicast1}]}, 0x14c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) socket$kcm(0x10, 0x8, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaa4429aaaaaaaaaaaaaa0800450200140076000002299078ac1414bbac141425e9757a3edb0475c8131163096fadef42a03ce0c80efdb51f8f05bf0aef824506218823bc81"], 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13b70fa166031fa2141704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x150}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6d1, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x5, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x7, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x6c7, 0x9, 0xa, 0x3, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x3, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x10000000, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x0, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x55, 0x5, 0x3, 0x101, 0x10000, 0x4, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0x4, 0x2, 0x8, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xffffffff, 0xffff3441, 0xfff]}, 0x45c) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000ec0)=""/177, &(0x7f0000000f80)=0xb1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r7, r7, 0x0, 0x40008) 12.142933465s ago: executing program 1 (id=3230): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 11.684114413s ago: executing program 1 (id=3231): syz_io_uring_setup(0x49c, 0x0, &(0x7f0000000340), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newsa={0x14c, 0x10, 0x633, 0x0, 0x10, {{@in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@multicast2, 0x4d5, 0x32}, @in=@private=0xa010101, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5}, {}, 0x2, 0x3501, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @coaddr={0x14, 0xe, @in=@multicast1}]}, 0x14c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) socket$kcm(0x10, 0x8, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaa4429aaaaaaaaaaaaaa0800450200140076000002299078ac1414bbac141425e9757a3edb0475c8131163096fadef42a03ce0c80efdb51f8f05bf0aef824506218823bc81"], 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13b70fa166031fa2141704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x150}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x20000000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x6fba950d, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6d1, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3f, 0x8f, 0x4006, 0x6, 0x0, 0xffffffff, 0x5, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x7, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xb, 0x2bf, 0x6c7, 0x9, 0xa, 0x3, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x3, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x10000000, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x2, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x8], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x3, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x4, 0x1ef, 0x8, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x0, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x1ff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x55, 0x5, 0x3, 0x101, 0x10000, 0x4, 0xfffffff9, 0xffff, 0x2000a620, 0x2, 0x5, 0x4, 0x2, 0x8, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0xa, 0x3, 0x10000, 0x7, 0x7e, 0x100, 0x7f, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xffffffff, 0xffff3441, 0xfff]}, 0x45c) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000ec0)=""/177, &(0x7f0000000f80)=0xb1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r7, r7, 0x0, 0x40008) 11.05770373s ago: executing program 1 (id=3232): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x3a, 0x481, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 10.241176006s ago: executing program 6 (id=3233): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x101041, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x1c, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x104c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x87, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0xb589, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x6, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4080009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x50, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x1, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfeff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x3, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 9.971395533s ago: executing program 1 (id=3234): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f00000027c0)={0x0, 0x0, 0x40, 0x0, 0x3}) listen(0xffffffffffffffff, 0xf5db) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000140)=0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0xc0) 9.901998542s ago: executing program 9 (id=3235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f00000095c0)='./file1\x00', 0x4, &(0x7f0000000200)={[{@noalign}, {@grpquota}, {@inode64}, {@pquota}, {@filestreams}]}, 0x1, 0x976f, &(0x7f000001c440)="$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") syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000080)={[{@abort}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") open(&(0x7f0000000600)='.\x00', 0x0, 0x65) 9.843946169s ago: executing program 0 (id=3236): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x4000) 9.814962415s ago: executing program 6 (id=3237): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000080)=0xffffe, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r1, 0x20}], 0x1, &(0x7f0000000100)={0x0, 0x3938700}, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000380000000000019078ac1e0001ac141407030490781200183f2500000000680000000100007f0000017f00000100186371ae9b1c03"], 0x0) keyctl$revoke(0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x9) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\xb2-\x00', 0xfffffffffffffff9) 8.335939364s ago: executing program 0 (id=3238): creat(0x0, 0xd931d3864d39ddd8) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0xfbf1a000], [0x8002]], '\x00', [{0x0, 0x9}, {0x0, 0xc}, {0x0, 0x1efb660a}, {}, {}, {0x0, 0x2000}, {0x0, 0x8000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300), 0x0, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0}) 7.999667969s ago: executing program 9 (id=3239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e334185850000007300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0xfffffeb7) r1 = io_uring_setup(0x4e75, &(0x7f0000001300)={0x0, 0x0, 0x2, 0xffffffed, 0x10003bd}) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$vsock_stream(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x4, 0x0, 0x0, {0x8001, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) keyctl$join(0x1, &(0x7f0000000340)={'syz', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001240)={{r6}, &(0x7f00000001c0), 0x0}, 0x20) r8 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r9, &(0x7f0000000200), 0x0, 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000040)={0x0, r4, r5, 0x0, 0x3, 0xddffffff}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="e900001029cf6e16dbb9048dc48f", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.906503654s ago: executing program 0 (id=3240): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0xaa940) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 7.754198455s ago: executing program 6 (id=3241): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r1, &(0x7f0000000cc0), 0x0}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'}) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x75, 0x301601) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000c00)=@usbdevfs_driver={0x8, 0x28000000, &(0x7f0000000bc0)}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x5, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8, 0x50001}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.461059119s ago: executing program 7 (id=2884): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xfffffff0, 0x6, 0x6, 0x1000, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0xf, @void, @value, @void, @value}, 0x50) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x7, &(0x7f0000000440)=[{0x9, 0xde, 0x7, 0x9}, {0x55, 0x8, 0xf2, 0x8001}, {0xfffa, 0x8f, 0xc, 0x4}, {0xbe, 0x7, 0x2, 0xe}, {0x8, 0x2, 0x6, 0x6}, {0x3, 0x7, 0x6, 0x4}, {0x4, 0xa4, 0x7f, 0x8}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000300), 0x0, 0x0) r2 = io_uring_setup(0x668, &(0x7f0000000540)={0x0, 0x69b5, 0x800, 0x1, 0x2b4, 0x0, r1}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000040)="5a3bd1", 0x3}], 0x2) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14}, &(0x7f0000002300), 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x22140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) 5.632788911s ago: executing program 0 (id=3242): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x21041, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x3a, 0x481, 0x0, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x2, 'dh\x00', 0x1, 0x5, 0x4a}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000100)=ANY=[@ANYBLOB], 0x36) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, &(0x7f0000000100)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 5.572225103s ago: executing program 6 (id=3243): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001840)=""/102390, 0x18ff6}], 0x1, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="e9a4ea8d246a02fb3d7b6d068c4bd0e238a86b018e04", 0x16}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x2, 0x4008) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) read$FUSE(r0, 0x0, 0x0) chdir(&(0x7f0000000340)='./cgroup\x00') syz_clone(0x680a8000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.568150227s ago: executing program 9 (id=3244): sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x320}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xffff) syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x40002) r6 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 5.449783827s ago: executing program 7 (id=3245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(0x0, 0x80080) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r3, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=@newsa={0xf8, 0x10, 0x633, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x4d6, 0x32}, @in6=@empty, {0xfffffffffffbfffd, 0x0, 0x0, 0x2dcd}, {}, {0x0, 0x1000000}, 0x0, 0x0, 0x2}, [@etimer_thresh={0x8, 0xc, 0xc6c}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) 3.900351555s ago: executing program 9 (id=3246): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000180)={0xa0000008}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000d00), 0x4000) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x40) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) unlink(&(0x7f0000000180)='./file0\x00') mount(&(0x7f0000000900)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./file0\x00', 0x0, 0x1000010, 0x0) sendfile(r0, r0, 0x0, 0x200000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000007000000000000000100010018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000004704000000000000000085200000010000004900000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x297b, 0x3a, &(0x7f0000000340)=""/58, 0x41000, 0x65, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000540)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0xd, 0xa859, 0x5}, 0x10, 0x276c4, 0xffffffffffffffff, 0x2, &(0x7f0000000ac0)=[r5, r5, r5, r5, r5], &(0x7f0000000b00)=[{0x2, 0x5, 0x9, 0xa}, {0x0, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) 2.125265583s ago: executing program 0 (id=3247): socket$nl_xfrm(0x10, 0x3, 0x6) pipe2$9p(&(0x7f0000000000), 0x80080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240), 0x0}) syz_open_procfs(0x0, &(0x7f0000000100)='attr/exec\x00') r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r3, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r3, r3, 0x3, 0xfffffffffefffff8, 0x3fff}) 1.932898355s ago: executing program 9 (id=3248): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x401}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f00000027c0)={0x0, 0x0, 0x40, 0x0, 0x3}) listen(0xffffffffffffffff, 0xf5db) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000140)=0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0), 0x0, 0xc0) 1.882578349s ago: executing program 4 (id=3249): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.854432691s ago: executing program 7 (id=3250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003800), 0x2, 0x0) writev(r3, &(0x7f0000001000)=[{&(0x7f0000000000)="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", 0x28d}], 0x1) 0s ago: executing program 7 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r2, @ANYBLOB="25003300d0000000080211000001080211000000505050505050d00003"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): ted on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1335.021154][T15803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.272264][T11698] Bluetooth: hci5: command tx timeout [ 1335.282067][T11698] Bluetooth: hci2: command tx timeout [ 1335.359856][T15803] hsr_slave_0: entered promiscuous mode [ 1335.418209][T15803] hsr_slave_1: entered promiscuous mode [ 1335.469208][T15803] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1335.484129][T15803] Cannot create hsr debugfs directory [ 1336.806627][T16017] netlink: 'syz.7.2274': attribute type 4 has an invalid length. [ 1337.393904][T11698] Bluetooth: hci2: command tx timeout [ 1337.394035][ T5831] Bluetooth: hci5: command tx timeout [ 1337.614983][ T5912] bridge_slave_1: left allmulticast mode [ 1337.832334][ T5912] bridge_slave_1: left promiscuous mode [ 1337.872242][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.956375][ T5912] bridge_slave_0: left allmulticast mode [ 1338.013459][ T5912] bridge_slave_0: left promiscuous mode [ 1338.042500][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.432112][ T5831] Bluetooth: hci2: command tx timeout [ 1339.437642][T11698] Bluetooth: hci5: command tx timeout [ 1339.977585][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.995132][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.031605][ T5912] bond0 (unregistering): Released all slaves [ 1341.274262][ T5912] hsr_slave_0: left promiscuous mode [ 1341.301793][ T5912] hsr_slave_1: left promiscuous mode [ 1341.343026][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.418316][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.512186][ T5831] Bluetooth: hci5: command tx timeout [ 1344.002112][T16096] new mount options do not match the existing superblock, will be ignored [ 1345.111391][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 1345.243749][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 1347.531588][T15947] chnl_net:caif_netlink_parms(): no params data found [ 1348.883104][T15960] chnl_net:caif_netlink_parms(): no params data found [ 1350.187326][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.195056][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1350.212287][T15947] bridge_slave_0: entered allmulticast mode [ 1350.253016][T15947] bridge_slave_0: entered promiscuous mode [ 1350.946477][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.982580][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.989924][T15947] bridge_slave_1: entered allmulticast mode [ 1351.023045][T15947] bridge_slave_1: entered promiscuous mode [ 1351.066276][T16158] netlink: 'syz.0.2303': attribute type 4 has an invalid length. [ 1351.450858][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.490181][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1351.617183][T15803] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1351.685285][T15960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.740392][T15960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.786211][T15960] bridge_slave_0: entered allmulticast mode [ 1351.820313][T15960] bridge_slave_0: entered promiscuous mode [ 1351.841645][T15960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.862168][T15960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.869541][T15960] bridge_slave_1: entered allmulticast mode [ 1351.917109][T15960] bridge_slave_1: entered promiscuous mode [ 1352.090664][T15803] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1352.183079][T15803] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1352.415243][T15947] team0: Port device team_slave_0 added [ 1352.460561][T15803] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1353.481698][T15960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.605154][T15947] team0: Port device team_slave_1 added [ 1353.688888][T15960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.890195][ T5815] lo speed is unknown, defaulting to 1000 [ 1354.022954][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.078111][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.121605][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.280268][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.380751][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1354.547628][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.820909][T15960] team0: Port device team_slave_0 added [ 1354.932036][T15960] team0: Port device team_slave_1 added [ 1355.290430][T15947] hsr_slave_0: entered promiscuous mode [ 1355.363331][T15947] hsr_slave_1: entered promiscuous mode [ 1355.369701][T15947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1355.424745][T15947] Cannot create hsr debugfs directory [ 1355.662359][ T5833] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1355.844591][ T5833] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1355.860945][ T5833] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1355.882371][T15960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.889345][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1355.934115][ T5833] usb 1-1: config 0 has no interface number 0 [ 1355.975143][ T5833] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1355.984817][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.015854][ T5833] usb 1-1: Product: syz [ 1356.020014][ T5833] usb 1-1: Manufacturer: syz [ 1356.032013][T15960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.058049][ T5833] usb 1-1: SerialNumber: syz [ 1356.068385][T15960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.082984][ T5833] usb 1-1: config 0 descriptor?? [ 1356.115061][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1356.162521][ T5833] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 1356.359761][T15960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.402449][ T5833] usb 1-1: No valid video chain found. [ 1357.625726][ T8293] usb 1-1: USB disconnect, device number 14 [ 1358.669557][T16259] overlayfs: failed to resolve './file1': -2 [ 1359.484131][T15960] hsr_slave_0: entered promiscuous mode [ 1359.529068][T15960] hsr_slave_1: entered promiscuous mode [ 1359.553291][T15960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1359.560952][T15960] Cannot create hsr debugfs directory [ 1362.698176][T15803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.827085][T15803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.212645][ T8899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.219956][ T8899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1364.351187][ T5912] bridge_slave_1: left allmulticast mode [ 1364.381525][ T5912] bridge_slave_1: left promiscuous mode [ 1364.423286][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.477931][ T5912] bridge_slave_0: left allmulticast mode [ 1364.546346][ T5912] bridge_slave_0: left promiscuous mode [ 1364.558572][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.685130][ T5912] bridge_slave_1: left allmulticast mode [ 1364.690878][ T5912] bridge_slave_1: left promiscuous mode [ 1365.578859][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.598211][ T5912] bridge_slave_0: left allmulticast mode [ 1365.606977][ T5912] bridge_slave_0: left promiscuous mode [ 1365.653645][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.529111][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.920551][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.985044][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.179869][ T5912] bond0 (unregistering): Released all slaves [ 1368.312766][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.464479][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.495357][ T5912] bond0 (unregistering): Released all slaves [ 1368.557904][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.565539][ T8897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.304136][ T5912] hsr_slave_0: left promiscuous mode [ 1369.406887][ T5912] hsr_slave_1: left promiscuous mode [ 1369.437626][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.518577][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.794791][ T5912] hsr_slave_0: left promiscuous mode [ 1369.892496][ T5912] hsr_slave_1: left promiscuous mode [ 1369.898723][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1370.013887][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1370.767802][T16363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1370.889293][T11698] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1370.899164][T11698] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1370.907288][T11698] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1370.915856][T11698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1370.923605][T11698] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1371.009355][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 1371.087395][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 1372.398859][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 1372.433831][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 1372.914306][T16365] lo speed is unknown, defaulting to 1000 [ 1373.032265][T11698] Bluetooth: hci0: command tx timeout [ 1373.049159][T16382] netlink: 'syz.1.2348': attribute type 4 has an invalid length. [ 1375.151101][T11698] Bluetooth: hci0: command tx timeout [ 1375.295520][T16365] chnl_net:caif_netlink_parms(): no params data found [ 1376.302070][T15947] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1377.229948][T11698] Bluetooth: hci0: command tx timeout [ 1377.342454][T16433] overlay: Unknown parameter '\' [ 1377.720934][T15947] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1379.273600][T11698] Bluetooth: hci0: command tx timeout [ 1379.644019][T15947] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1379.697475][T15947] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1379.996756][T16450] netlink: 'syz.1.2360': attribute type 4 has an invalid length. [ 1380.652732][T16365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.665889][T16365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.673545][T16365] bridge_slave_0: entered allmulticast mode [ 1381.318280][T16365] bridge_slave_0: entered promiscuous mode [ 1381.499355][T16365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.522128][T16365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.529497][T16365] bridge_slave_1: entered allmulticast mode [ 1381.588279][T16365] bridge_slave_1: entered promiscuous mode [ 1381.807748][T16365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1381.874519][T16365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.910611][T16476] binder: BINDER_SET_CONTEXT_MGR already set [ 1381.916904][T16476] binder: 16474:16476 ioctl 4018620d 200000000040 returned -16 [ 1381.929392][T16476] binder: 16474:16476 ioctl c02c5625 200000000100 returned -22 [ 1384.992292][T16493] overlay: Unknown parameter '\' [ 1385.182243][T16365] team0: Port device team_slave_0 added [ 1385.220835][T16365] team0: Port device team_slave_1 added [ 1385.806536][T16365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1385.818618][T16365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.866801][T16365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1385.917212][T16365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1385.926352][T16365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1385.982079][T16365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.644400][T16365] hsr_slave_0: entered promiscuous mode [ 1387.820483][T16365] hsr_slave_1: entered promiscuous mode [ 1387.852023][T16365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1387.921667][T16365] Cannot create hsr debugfs directory [ 1389.799940][T15960] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1389.941966][T15960] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1389.988485][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 1390.032243][ T30] audit: type=1800 audit(1748136237.423:20): pid=16525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2377" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1390.063307][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1390.077316][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1390.086312][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1390.119396][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1390.129920][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1390.968665][T15960] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1391.248444][T16527] lo speed is unknown, defaulting to 1000 [ 1391.382277][ T5912] bridge_slave_1: left allmulticast mode [ 1391.388001][ T5912] bridge_slave_1: left promiscuous mode [ 1391.442388][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.455988][ T5912] bridge_slave_0: left allmulticast mode [ 1391.461752][ T5912] bridge_slave_0: left promiscuous mode [ 1391.499675][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.262296][ T5831] Bluetooth: hci2: command tx timeout [ 1392.489680][T16553] overlay: Unknown parameter '\' [ 1393.004864][T16557] Cannot find set identified by id 0 to match [ 1393.807927][T11698] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1393.817955][T11698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1393.826527][T11698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1393.834551][T11698] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1393.843350][T11698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1394.003501][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1394.312175][T11698] Bluetooth: hci2: command tx timeout [ 1394.497888][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1394.552889][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1394.595136][ T5912] bond0 (unregistering): Released all slaves [ 1395.094834][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2387'. [ 1395.509898][ T5912] hsr_slave_0: left promiscuous mode [ 1395.595771][ T5912] hsr_slave_1: left promiscuous mode [ 1395.635825][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.695233][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1395.912412][T11698] Bluetooth: hci4: command tx timeout [ 1396.392004][T11698] Bluetooth: hci2: command tx timeout [ 1397.992011][T11698] Bluetooth: hci4: command tx timeout [ 1399.102060][T11698] Bluetooth: hci2: command tx timeout [ 1399.444150][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 1400.211036][T11698] Bluetooth: hci4: command tx timeout [ 1400.448009][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 1402.264164][T11698] Bluetooth: hci4: command tx timeout [ 1403.068958][T16612] overlay: Unknown parameter '\' [ 1403.121402][T16558] lo speed is unknown, defaulting to 1000 [ 1404.059971][T16622] netlink: 'syz.1.2402': attribute type 4 has an invalid length. [ 1407.478424][T16643] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2407'. [ 1407.816618][T16527] chnl_net:caif_netlink_parms(): no params data found [ 1408.281828][T16651] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1409.130027][T16653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'. [ 1410.331095][T16558] chnl_net:caif_netlink_parms(): no params data found [ 1410.348617][T16527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.359517][T16527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.367984][T16527] bridge_slave_0: entered allmulticast mode [ 1410.492208][T16675] overlay: Unknown parameter '\' [ 1410.764678][T16527] bridge_slave_0: entered promiscuous mode [ 1411.099074][T16527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.156190][T16527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.168603][T16527] bridge_slave_1: entered allmulticast mode [ 1411.355112][T16527] bridge_slave_1: entered promiscuous mode [ 1411.483944][T16365] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1411.705863][T16365] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1411.826598][T16527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.839101][T16365] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1411.917695][T16687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 1412.053995][T16365] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1412.454799][T16527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.272761][T16527] team0: Port device team_slave_0 added [ 1413.741286][T16558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1413.748608][T16558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1413.755992][T16558] bridge_slave_0: entered allmulticast mode [ 1413.763496][T16558] bridge_slave_0: entered promiscuous mode [ 1413.771819][T16558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1413.779065][T16558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.786248][T16558] bridge_slave_1: entered allmulticast mode [ 1413.793987][T16558] bridge_slave_1: entered promiscuous mode [ 1413.958381][T16527] team0: Port device team_slave_1 added [ 1415.028471][T16714] CIFS: Unable to determine destination address [ 1415.668070][T16558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.563014][T16527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.570021][T16527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.624063][T16527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.820089][T16558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1417.384711][T16527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1417.418029][T16527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1417.893674][T16527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.387908][T16558] team0: Port device team_slave_0 added [ 1419.570275][T16558] team0: Port device team_slave_1 added [ 1420.272512][T16745] overlay: Unknown parameter '\' [ 1420.273395][T16746] netlink: 'syz.1.2436': attribute type 10 has an invalid length. [ 1421.012454][T16527] hsr_slave_0: entered promiscuous mode [ 1421.025953][T16527] hsr_slave_1: entered promiscuous mode [ 1421.041195][T16527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1421.058642][T16527] Cannot create hsr debugfs directory [ 1421.128462][T16558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.166177][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.217533][T16558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.254599][T16558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.261585][T16558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1421.350923][T16558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.781801][T16558] hsr_slave_0: entered promiscuous mode [ 1422.803097][T16558] hsr_slave_1: entered promiscuous mode [ 1422.819697][T16558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1422.831925][T16558] Cannot create hsr debugfs directory [ 1423.791555][T16365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.107110][T16777] netlink: 'syz.7.2444': attribute type 4 has an invalid length. [ 1425.167681][ T5912] bridge_slave_1: left allmulticast mode [ 1425.174373][ T5912] bridge_slave_1: left promiscuous mode [ 1425.180161][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.199178][ T5912] bridge_slave_0: left allmulticast mode [ 1425.208238][ T5912] bridge_slave_0: left promiscuous mode [ 1425.214456][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.228725][ T5912] bridge_slave_1: left allmulticast mode [ 1425.234408][ T5912] bridge_slave_1: left promiscuous mode [ 1425.240091][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.245087][T16790] netlink: 'syz.1.2447': attribute type 4 has an invalid length. [ 1425.275710][ T5912] bridge_slave_0: left allmulticast mode [ 1425.281498][ T5912] bridge_slave_0: left promiscuous mode [ 1425.290334][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1426.077876][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2449'. [ 1426.269504][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.284909][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.296715][ T5912] bond0 (unregistering): Released all slaves [ 1426.319279][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1426.330298][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1426.345317][ T5912] bond0 (unregistering): Released all slaves [ 1426.375618][T16365] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.441508][T16792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 1426.558334][ T5833] lo speed is unknown, defaulting to 1000 [ 1426.596633][ T5833] syz0: Port: 1 Link DOWN [ 1426.754798][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.762049][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.810176][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.817442][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.942025][ T5912] hsr_slave_0: left promiscuous mode [ 1426.978476][ T5912] hsr_slave_1: left promiscuous mode [ 1427.002542][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.031338][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.069773][ T5912] hsr_slave_0: left promiscuous mode [ 1427.081509][ T5912] hsr_slave_1: left promiscuous mode [ 1427.124070][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.148343][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.596607][T16820] overlay: Unknown parameter '\' [ 1428.044427][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 1428.078386][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 1428.842344][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.488858][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 1429.619550][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 1431.332284][T16838] netlink: 'syz.0.2462': attribute type 4 has an invalid length. [ 1431.509850][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1431.544500][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1431.572359][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1431.590211][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1431.614449][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1431.781771][T16846] lo speed is unknown, defaulting to 1000 [ 1432.804787][T16846] chnl_net:caif_netlink_parms(): no params data found [ 1433.530990][T16527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1433.682117][T11698] Bluetooth: hci5: command tx timeout [ 1433.975770][T16527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1434.784458][T16527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1435.471383][T16846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.492134][T16846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.565928][T16846] bridge_slave_0: entered allmulticast mode [ 1435.576342][T16846] bridge_slave_0: entered promiscuous mode [ 1435.584733][T16527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1435.686332][T16884] overlay: Unknown parameter '\' [ 1435.753150][T11698] Bluetooth: hci5: command tx timeout [ 1435.760581][T16846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.770064][T16846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.782578][T16846] bridge_slave_1: entered allmulticast mode [ 1435.790622][T16846] bridge_slave_1: entered promiscuous mode [ 1436.002392][T16888] netlink: 'syz.7.2472': attribute type 4 has an invalid length. [ 1436.059308][T16846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.149116][T16846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.278046][T16527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1437.459589][T16895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2474'. [ 1437.777142][T16846] team0: Port device team_slave_0 added [ 1437.852700][T11698] Bluetooth: hci5: command tx timeout [ 1438.404495][T16903] Cannot find set identified by id 0 to match [ 1438.653370][T16846] team0: Port device team_slave_1 added [ 1438.659576][T16558] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1438.875742][T16527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1439.287074][T16558] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1440.011438][T11698] Bluetooth: hci5: command tx timeout [ 1440.382360][T16558] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1440.887157][T16558] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1440.996466][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.003690][ T8901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.018788][T16846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.027835][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.054655][T16846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.150755][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.158000][ T8901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1441.203241][T16846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.210307][T16846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1441.276311][T16846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.350960][T16920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2483'. [ 1441.399196][ T30] audit: type=1800 audit(1748136288.803:21): pid=16920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2483" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1441.580783][ T5912] bridge_slave_1: left allmulticast mode [ 1441.601382][ T5912] bridge_slave_1: left promiscuous mode [ 1441.601420][ T5898] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1441.612697][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.656025][ T5912] bridge_slave_0: left allmulticast mode [ 1441.661752][ T5912] bridge_slave_0: left promiscuous mode [ 1441.675997][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.772641][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 1441.784235][ T5898] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1441.812687][ T5898] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1441.859451][ T5898] usb 1-1: config 1 has an invalid descriptor of length 244, skipping remainder of the config [ 1441.921031][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1441.952095][ T5898] usb 1-1: config 1 has no interface number 0 [ 1441.966607][ T5898] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1441.985931][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'. [ 1442.067634][ T5898] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1442.087037][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.328431][ T5898] usb 1-1: string descriptor 0 read error: -71 [ 1443.284901][ T5898] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1443.294733][ T5898] snd_usb_pod 1-1:1.1: set_interface failed [ 1443.300992][ T5898] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1443.308723][ T5898] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1443.320076][ T5898] usb 1-1: USB disconnect, device number 15 [ 1443.837567][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1443.879567][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1443.907453][ T5912] bond0 (unregistering): Released all slaves [ 1444.011955][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2493'. [ 1444.640751][T16846] hsr_slave_0: entered promiscuous mode [ 1444.666995][T16846] hsr_slave_1: entered promiscuous mode [ 1444.752692][T16846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1444.790765][T16846] Cannot create hsr debugfs directory [ 1445.100220][T16950] overlay: Unknown parameter '\' [ 1446.437111][ T5912] hsr_slave_0: left promiscuous mode [ 1446.529856][ T5912] hsr_slave_1: left promiscuous mode [ 1446.538866][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.573590][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.120980][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 1447.271834][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 1447.856272][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2499'. [ 1447.876254][ T30] audit: type=1800 audit(1748136295.293:22): pid=16969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2499" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1448.419508][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1448.430024][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1448.438220][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1448.447598][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1448.455471][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1449.199376][T16974] lo speed is unknown, defaulting to 1000 [ 1449.321533][T16983] ptrace attach of "./syz-executor exec"[7809] was attempted by "./syz-executor exec"[16983] [ 1450.476724][ T30] audit: type=1800 audit(1748136297.863:23): pid=16989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2505" name="nullb0" dev="tmpfs" ino=3173 res=0 errno=0 [ 1450.552919][ T5831] Bluetooth: hci0: command tx timeout [ 1451.784797][T16974] chnl_net:caif_netlink_parms(): no params data found [ 1451.812179][ T5898] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1452.004678][ T5898] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1452.025924][ T5898] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1452.043188][ T5898] usb 1-1: config 0 has no interface number 0 [ 1452.060341][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1452.077979][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.109158][ T5898] usb 1-1: Product: syz [ 1452.127856][ T5898] usb 1-1: Manufacturer: syz [ 1452.135550][ T5898] usb 1-1: SerialNumber: syz [ 1452.164822][ T5898] usb 1-1: config 0 descriptor?? [ 1452.185190][ T5898] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 1452.202966][ T5898] usb 1-1: No valid video chain found. [ 1452.632019][ T5831] Bluetooth: hci0: command tx timeout [ 1454.717041][ T5831] Bluetooth: hci0: command tx timeout [ 1454.797279][T11698] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1454.811210][T11698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1454.821662][T11698] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1454.846820][T11698] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1454.855688][ T5898] usb 1-1: USB disconnect, device number 16 [ 1454.880052][T11698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1454.886361][T16974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.918629][T16974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.934719][T16974] bridge_slave_0: entered allmulticast mode [ 1454.947312][T16974] bridge_slave_0: entered promiscuous mode [ 1455.070608][T16974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.118231][T16974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.126481][T16974] bridge_slave_1: entered allmulticast mode [ 1455.146969][T16974] bridge_slave_1: entered promiscuous mode [ 1455.573175][T16974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.616688][T16974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.749540][T16846] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1455.808508][T16846] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1455.891342][T17032] lo speed is unknown, defaulting to 1000 [ 1455.900913][ T5912] bridge_slave_1: left allmulticast mode [ 1455.915209][ T5912] bridge_slave_1: left promiscuous mode [ 1455.921153][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.208393][T17055] overlayfs: failed to clone upperpath [ 1456.873529][ T5831] Bluetooth: hci0: command tx timeout [ 1456.952405][ T5831] Bluetooth: hci2: command tx timeout [ 1456.993513][T17053] ubi: mtd0 is already attached to ubi31 [ 1457.178499][ T5912] bridge_slave_0: left allmulticast mode [ 1457.224367][ T5912] bridge_slave_0: left promiscuous mode [ 1457.255691][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.023068][ T5912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.042337][ T5831] Bluetooth: hci2: command tx timeout [ 1459.514111][ T5912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1459.537764][ T5912] bond0 (unregistering): Released all slaves [ 1459.566051][T16846] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1459.686369][T16974] team0: Port device team_slave_0 added [ 1459.710552][T17058] netlink: 'syz.1.2524': attribute type 4 has an invalid length. [ 1459.725455][T16846] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1459.777866][T16974] team0: Port device team_slave_1 added [ 1459.805043][ T5912] hsr_slave_0: left promiscuous mode [ 1459.834473][ T5912] hsr_slave_1: left promiscuous mode [ 1459.854406][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1459.877048][ T5912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.192081][ T5831] Bluetooth: hci2: command tx timeout [ 1461.828178][ T5912] team0 (unregistering): Port device team_slave_1 removed [ 1463.302134][ T5831] Bluetooth: hci2: command tx timeout [ 1463.540610][ T5912] team0 (unregistering): Port device team_slave_0 removed [ 1463.555957][T17092] ptrace attach of "./syz-executor exec"[7809] was attempted by "./syz-executor exec"[17092] [ 1464.993436][T17102] Bluetooth: MGMT ver 1.23 [ 1466.363204][T16974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.381883][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.437662][T16974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.465815][T16974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.481116][T16974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.543886][T16974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1466.951135][T16974] hsr_slave_0: entered promiscuous mode [ 1467.082160][T16974] hsr_slave_1: entered promiscuous mode [ 1467.101051][T16974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1468.091898][T16974] Cannot create hsr debugfs directory [ 1468.158346][T17126] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1468.973181][T17134] Cannot find add_set index 0 as target [ 1470.260482][T17144] netlink: 'syz.0.2546': attribute type 4 has an invalid length. [ 1470.295263][T17032] chnl_net:caif_netlink_parms(): no params data found [ 1472.733262][T17032] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.740902][T17032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.748739][T17032] bridge_slave_0: entered allmulticast mode [ 1472.765077][T17032] bridge_slave_0: entered promiscuous mode [ 1472.880506][T17032] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.895900][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.911064][T17032] bridge_slave_1: entered allmulticast mode [ 1472.933284][T17032] bridge_slave_1: entered promiscuous mode [ 1473.198065][T16846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1473.247459][T17032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1473.773681][T17032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1474.449937][T17032] team0: Port device team_slave_0 added [ 1474.767084][T17032] team0: Port device team_slave_1 added [ 1475.777205][T17032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.791997][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1475.850452][T17032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.885863][T16846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.012329][T17032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1476.062954][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1476.321252][T17032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.452783][T12410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.459994][T12410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.828831][ T8899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.836051][ T8899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.934427][T17216] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1479.880617][T17032] hsr_slave_0: entered promiscuous mode [ 1479.890082][T17032] hsr_slave_1: entered promiscuous mode [ 1479.902754][T17032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.910322][T17032] Cannot create hsr debugfs directory [ 1480.483874][T17224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1481.597199][ T8908] bridge_slave_1: left allmulticast mode [ 1481.781939][ T8908] bridge_slave_1: left promiscuous mode [ 1481.787933][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.841718][ T8908] bridge_slave_0: left allmulticast mode [ 1481.852006][ T8908] bridge_slave_0: left promiscuous mode [ 1481.857802][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.955173][T17246] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1486.218882][T17262] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1486.989544][ T8908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.023175][ T8908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1487.211665][ T8908] bond0 (unregistering): Released all slaves [ 1487.240218][T16974] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1487.385053][T17269] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1488.104178][T16974] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1488.503936][T16974] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1488.586487][T17277] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1489.382191][ T8908] hsr_slave_0: left promiscuous mode [ 1489.396695][ T8908] hsr_slave_1: left promiscuous mode [ 1489.409472][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.434192][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.585141][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.966881][T17284] siw: device registration error -23 [ 1492.165787][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 1493.066566][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 1494.122838][T11698] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1494.133496][T11698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1494.141504][T11698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1494.150396][T11698] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1494.172457][T11698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1494.549953][T16974] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1496.232100][ T5831] Bluetooth: hci4: command tx timeout [ 1497.490065][T17305] lo speed is unknown, defaulting to 1000 [ 1498.314048][ T5831] Bluetooth: hci4: command tx timeout [ 1499.390472][T16974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1499.628784][T16974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1499.767891][T17032] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1500.030085][T16599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.037329][T16599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.252338][T17373] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1500.392517][ T5831] Bluetooth: hci4: command tx timeout [ 1500.872052][T17032] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1501.407434][T17032] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1501.524761][T16599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.531995][T16599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.826715][T17305] chnl_net:caif_netlink_parms(): no params data found [ 1501.920789][T17383] overlayfs: failed to clone upperpath [ 1502.249074][T17032] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1502.547987][ T5831] Bluetooth: hci4: command tx timeout [ 1503.178973][T17396] siw: device registration error -23 [ 1505.097384][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.711707][T17032] 8021q: adding VLAN 0 to HW filter on device team0 [ 1507.681117][T17305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.699787][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.740626][T17305] bridge_slave_0: entered allmulticast mode [ 1507.785572][T17305] bridge_slave_0: entered promiscuous mode [ 1507.816514][T17305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1507.847250][T17305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.865599][T17305] bridge_slave_1: entered allmulticast mode [ 1507.895063][T17305] bridge_slave_1: entered promiscuous mode [ 1507.931038][T12816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1507.938334][T12816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1507.996324][T12816] bridge0: port 2(bridge_slave_1) entered blocking state [ 1508.003541][T12816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1508.195688][T17305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1508.235877][T17305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1508.510987][T17305] team0: Port device team_slave_0 added [ 1509.732851][T17305] team0: Port device team_slave_1 added [ 1509.748030][T17032] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1509.794301][T17032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1510.489308][T17305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1510.545951][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1510.655741][T17305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1510.813501][ T8908] bridge_slave_1: left allmulticast mode [ 1510.896448][T11698] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1510.924602][ T8908] bridge_slave_1: left promiscuous mode [ 1511.003525][T11698] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1511.017166][T11698] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1511.031722][T11698] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1511.043817][T11698] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1511.422545][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.521953][ T8908] bridge_slave_0: left allmulticast mode [ 1511.527708][ T8908] bridge_slave_0: left promiscuous mode [ 1511.535855][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.546945][ T8908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1512.598792][ T8908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1512.630255][ T8908] bond0 (unregistering): Released all slaves [ 1512.706858][T17305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1512.717125][T17305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1512.791701][T17305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1513.029864][T17305] hsr_slave_0: entered promiscuous mode [ 1513.036843][T17305] hsr_slave_1: entered promiscuous mode [ 1513.045146][T17305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1513.057445][T17305] Cannot create hsr debugfs directory [ 1513.193355][ T5831] Bluetooth: hci0: command tx timeout [ 1513.962255][ T8908] hsr_slave_0: left promiscuous mode [ 1514.060041][ T8908] hsr_slave_1: left promiscuous mode [ 1514.067895][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1514.147001][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.293785][ T5831] Bluetooth: hci0: command tx timeout [ 1517.362205][ T5831] Bluetooth: hci0: command tx timeout [ 1519.261191][T15967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1519.271980][T15967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1519.286961][T15967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1519.342108][T15967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1519.382183][T15967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1519.431980][ T5831] Bluetooth: hci0: command tx timeout [ 1519.931576][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 1520.158879][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 1521.062896][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2628'. [ 1521.170865][T17469] lo speed is unknown, defaulting to 1000 [ 1521.435204][ T5831] Bluetooth: hci2: command tx timeout [ 1521.593165][T17564] new mount options do not match the existing superblock, will be ignored [ 1522.070772][T17535] lo speed is unknown, defaulting to 1000 [ 1523.262692][T17575] Bluetooth: MGMT ver 1.23 [ 1523.532065][ T5831] Bluetooth: hci2: command tx timeout [ 1525.621920][ T5831] Bluetooth: hci2: command tx timeout [ 1525.725002][T17601] siw: device registration error -23 [ 1527.678222][ T5831] Bluetooth: hci2: command tx timeout [ 1529.493358][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2646'. [ 1529.503699][T17638] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2646'. [ 1529.593798][T17469] chnl_net:caif_netlink_parms(): no params data found [ 1529.659410][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2645'. [ 1529.703134][T17638] dummy0: entered promiscuous mode [ 1529.725392][T17638] team0: entered promiscuous mode [ 1529.736178][T17638] team_slave_0: entered promiscuous mode [ 1529.759764][T17638] team_slave_1: entered promiscuous mode [ 1529.991416][T17535] chnl_net:caif_netlink_parms(): no params data found [ 1531.068651][T17652] new mount options do not match the existing superblock, will be ignored [ 1532.114903][T17671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1532.402247][T17675] geneve1: entered promiscuous mode [ 1532.407549][T17675] geneve1: entered allmulticast mode [ 1533.163066][T17469] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.170460][T17469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.262279][T17469] bridge_slave_0: entered allmulticast mode [ 1533.309662][T17469] bridge_slave_0: entered promiscuous mode [ 1533.495779][T17469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.529749][T17469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.552086][T17469] bridge_slave_1: entered allmulticast mode [ 1533.560529][T17469] bridge_slave_1: entered promiscuous mode [ 1534.184677][T17535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.382833][T17535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1534.390212][T17535] bridge_slave_0: entered allmulticast mode [ 1534.416913][T17535] bridge_slave_0: entered promiscuous mode [ 1534.439215][T17305] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1535.359070][T17702] fuse: Unknown parameter 'use00000000000000000000' [ 1535.397568][T17469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1535.442975][T17535] bridge0: port 2(bridge_slave_1) entered blocking state [ 1535.450136][T17535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.491967][T17535] bridge_slave_1: entered allmulticast mode [ 1535.499833][T17535] bridge_slave_1: entered promiscuous mode [ 1536.893631][T17305] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1536.917302][T17305] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1536.987949][T17305] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1537.018199][T17469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.176946][T17727] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1537.665016][T17727] geneve1: entered promiscuous mode [ 1537.670636][T17727] geneve1: entered allmulticast mode [ 1537.690684][T17535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.753798][T17535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.537413][T17469] team0: Port device team_slave_0 added [ 1538.787717][T17535] team0: Port device team_slave_0 added [ 1538.826253][T17535] team0: Port device team_slave_1 added [ 1539.002858][T17469] team0: Port device team_slave_1 added [ 1539.778203][T17469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.788126][T17469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.887948][T17469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.921102][T17535] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.946453][T17535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.972347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1539.997256][T17535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.130294][T17469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.149021][T17469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.188437][T17469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.213886][T17764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2671'. [ 1540.271328][T17535] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.305613][T17535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.394400][T17535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1541.258106][T17469] hsr_slave_0: entered promiscuous mode [ 1541.289188][T17469] hsr_slave_1: entered promiscuous mode [ 1541.355843][T17469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1541.384549][T17469] Cannot create hsr debugfs directory [ 1542.367317][T17535] hsr_slave_0: entered promiscuous mode [ 1542.410316][T17535] hsr_slave_1: entered promiscuous mode [ 1542.437355][T17535] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1542.481897][T17535] Cannot create hsr debugfs directory [ 1544.585174][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2681'. [ 1545.425932][T17831] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1546.009291][T17305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1546.317083][T17305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.654909][ T8908] bridge_slave_1: left allmulticast mode [ 1546.712962][ T8908] bridge_slave_1: left promiscuous mode [ 1546.744472][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.976737][ T8908] bridge_slave_0: left allmulticast mode [ 1547.038262][ T8908] bridge_slave_0: left promiscuous mode [ 1547.116094][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.276466][ T8908] bridge_slave_1: left allmulticast mode [ 1547.282829][ T8908] bridge_slave_1: left promiscuous mode [ 1547.288517][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.317909][ T8908] bridge_slave_0: left allmulticast mode [ 1547.323822][ T8908] bridge_slave_0: left promiscuous mode [ 1547.329595][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.084452][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.583907][ T8908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.599657][ T8908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.611542][ T8908] bond0 (unregistering): Released all slaves [ 1552.707327][ T8908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.724940][ T8908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.738044][ T8908] bond0 (unregistering): Released all slaves [ 1553.149382][ T8908] hsr_slave_0: left promiscuous mode [ 1553.208179][ T8908] hsr_slave_1: left promiscuous mode [ 1553.232384][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.308628][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.441569][ T8908] hsr_slave_0: left promiscuous mode [ 1553.643953][ T8908] hsr_slave_1: left promiscuous mode [ 1553.650058][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1553.673555][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.344196][ T30] audit: type=1800 audit(1748136402.743:24): pid=17938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2715" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1555.411675][T15967] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1555.424748][T15967] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1555.433174][T15967] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1555.442158][T15967] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1555.450261][T15967] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1556.053991][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 1556.582973][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 1557.535269][T15967] Bluetooth: hci4: command tx timeout [ 1558.771645][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 1558.823217][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 1559.283847][T17936] geneve1: entered promiscuous mode [ 1559.289103][T17936] geneve1: entered allmulticast mode [ 1559.438365][T17939] lo speed is unknown, defaulting to 1000 [ 1559.652046][T15967] Bluetooth: hci4: command tx timeout [ 1560.446250][T17976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1561.642152][T17469] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1561.672084][T15967] Bluetooth: hci4: command tx timeout [ 1561.681309][T17469] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1561.814206][T17469] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1562.436831][T17469] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1563.679409][T17939] chnl_net:caif_netlink_parms(): no params data found [ 1563.761914][T15967] Bluetooth: hci4: command tx timeout [ 1567.718764][T17939] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.726154][T17939] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.734037][T17939] bridge_slave_0: entered allmulticast mode [ 1567.743082][T17939] bridge_slave_0: entered promiscuous mode [ 1567.808102][T17939] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.826689][T17939] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.845797][T17939] bridge_slave_1: entered allmulticast mode [ 1567.854577][T17939] bridge_slave_1: entered promiscuous mode [ 1567.887809][ T30] audit: type=1800 audit(1748136415.303:25): pid=18034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2741" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1569.311598][T17939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.340000][T17939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1569.548977][T17939] team0: Port device team_slave_0 added [ 1569.558928][T17939] team0: Port device team_slave_1 added [ 1569.603769][T17535] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1569.646676][T17939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.653726][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.680132][T17939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1569.694041][T17535] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1569.747448][T17939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.759383][T17939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1569.786659][T17939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.797842][T17535] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1569.840018][T17535] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1569.907714][T17939] hsr_slave_0: entered promiscuous mode [ 1569.917393][T17939] hsr_slave_1: entered promiscuous mode [ 1569.924222][T17939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1569.931772][T17939] Cannot create hsr debugfs directory [ 1570.150011][ T8908] bridge_slave_1: left allmulticast mode [ 1570.170118][ T8908] bridge_slave_1: left promiscuous mode [ 1570.249269][T18046] netlink: 'syz.7.2743': attribute type 9 has an invalid length. [ 1570.301322][T18048] netlink: 'syz.7.2743': attribute type 9 has an invalid length. [ 1570.349878][T18049] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1570.410465][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1570.453619][ T8908] bridge_slave_0: left allmulticast mode [ 1570.469512][ T8908] bridge_slave_0: left promiscuous mode [ 1570.488736][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.509891][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1571.519257][T18053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1571.528404][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1571.537429][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1571.799805][T18058] ptrace attach of "./syz-executor exec"[12319] was attempted by "./syz-executor exec"[18058] [ 1571.855203][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1571.866242][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1571.874811][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1571.883677][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1571.893774][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1572.116792][ T8908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1572.128007][ T8908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1572.138305][ T8908] bond0 (unregistering): Released all slaves [ 1573.399664][T18075] Cannot find set identified by id 0 to match [ 1573.457999][T18059] lo speed is unknown, defaulting to 1000 [ 1573.803928][ T8908] hsr_slave_0: left promiscuous mode [ 1573.840412][ T8908] hsr_slave_1: left promiscuous mode [ 1573.859611][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.877589][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1573.991967][T15967] Bluetooth: hci0: command tx timeout [ 1574.148410][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 1574.187100][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 1576.070411][T18090] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2756'. [ 1576.086040][T15967] Bluetooth: hci0: command tx timeout [ 1576.446868][ T30] audit: type=1800 audit(1748136423.853:26): pid=18101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2760" name="nullb0" dev="tmpfs" ino=3173 res=0 errno=0 [ 1576.519955][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1576.529998][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1576.543337][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1576.551475][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1576.561081][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1576.945969][T18059] chnl_net:caif_netlink_parms(): no params data found [ 1576.986378][T18104] lo speed is unknown, defaulting to 1000 [ 1577.038669][T18117] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2766'. [ 1577.515145][T17939] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1577.548045][ T30] audit: type=1800 audit(1748136424.953:27): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2769" name="nullb0" dev="tmpfs" ino=3173 res=0 errno=0 [ 1577.568744][ C0] vkms_vblank_simulate: vblank timer overrun [ 1577.785330][T17939] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1577.851995][ T30] audit: type=1800 audit(1748136425.243:28): pid=18131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2770" name="nullb0" dev="tmpfs" ino=3173 res=0 errno=0 [ 1577.907963][T17939] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1577.987275][T17939] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1578.157169][T15967] Bluetooth: hci0: command tx timeout [ 1578.164903][T18059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1578.193207][T18059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1578.228265][T18059] bridge_slave_0: entered allmulticast mode [ 1578.253969][T18059] bridge_slave_0: entered promiscuous mode [ 1578.282038][T18059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.349709][T18059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.382865][T18059] bridge_slave_1: entered allmulticast mode [ 1578.413683][T18059] bridge_slave_1: entered promiscuous mode [ 1578.632079][T15967] Bluetooth: hci5: command tx timeout [ 1579.622467][T18059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1579.746476][T18059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1580.232249][T15967] Bluetooth: hci0: command tx timeout [ 1580.716367][T15967] Bluetooth: hci5: command tx timeout [ 1580.829135][T18151] netlink: 'syz.0.2777': attribute type 9 has an invalid length. [ 1580.848721][T18059] team0: Port device team_slave_0 added [ 1580.891476][T18153] netlink: 'syz.0.2777': attribute type 9 has an invalid length. [ 1581.001745][T18059] team0: Port device team_slave_1 added [ 1581.450018][T18104] chnl_net:caif_netlink_parms(): no params data found [ 1582.274937][T18169] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1582.572608][T18059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1582.579603][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1582.839498][T15967] Bluetooth: hci5: command tx timeout [ 1582.845946][T18059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1582.994138][T18059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1583.001175][T18059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1583.037572][T18059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1583.624762][T17939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1583.792123][ T30] audit: type=1800 audit(1748136431.203:29): pid=18178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2786" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1583.941481][T17939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.023744][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.030942][ T8901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1584.309913][T16014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1584.317118][T16014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1585.342123][T15967] Bluetooth: hci5: command tx timeout [ 1585.456930][T18059] hsr_slave_0: entered promiscuous mode [ 1585.518446][T18059] hsr_slave_1: entered promiscuous mode [ 1585.528475][T18059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.536796][T18059] Cannot create hsr debugfs directory [ 1585.552423][T18104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.559592][T18104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.579777][T18104] bridge_slave_0: entered allmulticast mode [ 1585.588774][T18104] bridge_slave_0: entered promiscuous mode [ 1585.734387][T18104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.746422][T18104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.767043][T18104] bridge_slave_1: entered allmulticast mode [ 1585.785059][T18104] bridge_slave_1: entered promiscuous mode [ 1586.062281][T18104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1586.085738][T18104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.563066][T18104] team0: Port device team_slave_0 added [ 1586.585736][T18104] team0: Port device team_slave_1 added [ 1586.837286][T18104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.861836][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1586.939711][T18104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.964954][T18104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.997342][T18104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1587.033176][T18104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1587.453426][T18104] hsr_slave_0: entered promiscuous mode [ 1587.469249][T18104] hsr_slave_1: entered promiscuous mode [ 1587.494771][T18104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1587.513460][T18104] Cannot create hsr debugfs directory [ 1587.812032][ T8908] bridge_slave_1: left allmulticast mode [ 1587.822742][ T8908] bridge_slave_1: left promiscuous mode [ 1587.829627][T18244] fuse: Bad value for 'group_id' [ 1587.843938][T18244] fuse: Bad value for 'group_id' [ 1587.849198][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.897586][ T8908] bridge_slave_0: left allmulticast mode [ 1587.920508][ T8908] bridge_slave_0: left promiscuous mode [ 1587.939995][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.030413][ T8908] bridge_slave_1: left allmulticast mode [ 1588.050341][ T8908] bridge_slave_1: left promiscuous mode [ 1588.073544][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.098299][ T8908] bridge_slave_0: left allmulticast mode [ 1588.118044][ T8908] bridge_slave_0: left promiscuous mode [ 1588.130737][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.599299][ T8908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.648925][ T8908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.692592][ T8908] bond0 (unregistering): Released all slaves [ 1590.743889][ T8908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.769333][ T8908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.801192][ T8908] bond0 (unregistering): Released all slaves [ 1590.983647][T17939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1591.410238][ T8908] hsr_slave_0: left promiscuous mode [ 1591.442393][ T8908] hsr_slave_1: left promiscuous mode [ 1591.459411][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.513195][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.582087][ T8908] hsr_slave_0: left promiscuous mode [ 1591.615627][ T8908] hsr_slave_1: left promiscuous mode [ 1591.645404][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1591.680443][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.398398][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 1592.456731][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 1594.294102][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 1594.335234][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 1594.988477][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 1595.273830][ T30] audit: type=1800 audit(1748136442.683:30): pid=18311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2830" name="nullb0" dev="tmpfs" ino=3173 res=0 errno=0 [ 1596.716718][T18059] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1596.773381][T18059] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1596.803982][T18059] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1596.835644][T18059] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1597.483673][T17939] veth0_vlan: entered promiscuous mode [ 1597.801050][T17939] veth1_vlan: entered promiscuous mode [ 1598.048197][T18059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.184686][T17939] veth0_macvtap: entered promiscuous mode [ 1598.254741][T17939] veth1_macvtap: entered promiscuous mode [ 1598.296398][T18059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1598.406578][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.413817][ T8897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1598.425952][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.433160][ T8897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1598.669871][T18104] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1599.036901][T18104] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1599.423177][T18059] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1599.441917][T18059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1599.484429][T17939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.501928][T18104] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1599.526828][T18104] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1599.700556][T17939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.785602][T17939] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.818158][T17939] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.852066][T17939] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.860900][T17939] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1600.527648][ T30] audit: type=1800 audit(1748136447.943:31): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2845" name="nullb0" dev="tmpfs" ino=3173 res=0 errno=0 [ 1601.069735][T18059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.094176][T16599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.123219][T16599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.786003][T12429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1601.800075][T18104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.875436][T18104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.898968][T12429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1601.956714][T16599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.963918][T16599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1602.096935][T18381] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2852'. [ 1602.175693][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1602.182932][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.307603][T18104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1602.614095][T18059] veth0_vlan: entered promiscuous mode [ 1602.686397][T18059] veth1_vlan: entered promiscuous mode [ 1602.915192][T18059] veth0_macvtap: entered promiscuous mode [ 1602.989707][T18059] veth1_macvtap: entered promiscuous mode [ 1603.087043][T18059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.141592][T18059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.189273][T18059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.224688][T18059] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.254105][T18059] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.297646][T18059] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.677437][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2859'. [ 1603.903053][T16599] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.954078][T16599] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.397415][T18104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.663414][T12816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.698887][T12816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1606.727903][ T8293] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1606.934964][T18104] veth0_vlan: entered promiscuous mode [ 1607.116778][ T8293] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1607.130626][T18104] veth1_vlan: entered promiscuous mode [ 1607.137804][ T8293] usb 5-1: config 0 has no interfaces? [ 1607.162037][ T8293] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1607.901896][ T8293] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.932280][ T8293] usb 5-1: config 0 descriptor?? [ 1608.066204][T18104] veth0_macvtap: entered promiscuous mode [ 1608.136550][T18104] veth1_macvtap: entered promiscuous mode [ 1608.222216][T18463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.792829][T18463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.859885][T18104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1608.976778][ T5937] usb 5-1: USB disconnect, device number 14 [ 1609.002752][T18104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.117715][T18104] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.161697][T18104] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.205341][T18104] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.233557][T18104] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.609437][ T8908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.691846][ T8908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.919144][ T5912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.949783][ T5912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.354330][T18516] usb usb1: usbfs: process 18516 (syz.6.2883) did not claim interface 0 before use [ 1611.010197][T18501] overlay: Unknown parameter '\' [ 1611.153522][T18529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2886'. [ 1611.211453][T18529] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2886'. [ 1611.445187][T18530] input: syz1 as /devices/virtual/input/input11 [ 1611.546619][T18529] bond0: entered promiscuous mode [ 1611.561969][T18529] bond_slave_0: entered promiscuous mode [ 1611.599971][T18529] bond_slave_1: entered promiscuous mode [ 1611.681293][T18529] bond0: left promiscuous mode [ 1611.688148][T18529] bond_slave_0: left promiscuous mode [ 1611.704285][T18529] bond_slave_1: left promiscuous mode [ 1612.628600][T18548] usb usb1: usbfs: process 18548 (syz.0.2890) did not claim interface 0 before use [ 1613.641416][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.359009][T18548] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1614.883135][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1614.891657][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1614.899734][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1614.909451][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1614.923940][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1615.151140][T18556] fuse: Bad value for 'user_id' [ 1615.167238][T18556] fuse: Bad value for 'user_id' [ 1615.482948][T18551] lo speed is unknown, defaulting to 1000 [ 1615.932148][ T8897] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1615.992678][ T8897] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1616.034510][ T30] audit: type=1800 audit(1748136463.453:32): pid=18570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2897" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1617.044693][ T5831] Bluetooth: hci2: command tx timeout [ 1617.248291][ T8897] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.442042][ T8897] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1617.702864][T18583] netlink: 'syz.0.2900': attribute type 4 has an invalid length. [ 1617.795883][T18594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2903'. [ 1617.805016][T18594] netlink: 'syz.4.2903': attribute type 7 has an invalid length. [ 1617.813213][T18594] netlink: 'syz.4.2903': attribute type 8 has an invalid length. [ 1617.851312][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2903'. [ 1617.946744][ T8897] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.191872][ T8897] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1619.222270][T18600] usb usb1: usbfs: process 18600 (syz.9.2905) did not claim interface 0 before use [ 1619.232546][ T5831] Bluetooth: hci2: command tx timeout [ 1619.260974][T18600] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1619.565553][T18594] bridge0: entered promiscuous mode [ 1619.616398][T18594] ip6gretap0: entered promiscuous mode [ 1619.961466][T18594] gretap0: entered promiscuous mode [ 1619.990885][T18594] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1620.008579][T18594] Cannot create hsr debugfs directory [ 1620.360585][T18612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2907'. [ 1620.433162][T18613] overlay: Unknown parameter '\' [ 1620.460817][T18612] netlink: 'syz.0.2907': attribute type 7 has an invalid length. [ 1620.468542][T18615] fuse: Bad value for 'fd' [ 1620.552653][T18612] netlink: 'syz.0.2907': attribute type 8 has an invalid length. [ 1620.591742][T18612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2907'. [ 1620.747277][ T8897] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.869109][ T8897] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1621.272244][ T5831] Bluetooth: hci2: command tx timeout [ 1622.275583][T18612] bridge0: entered promiscuous mode [ 1622.409485][T18612] ip6gretap0: entered promiscuous mode [ 1622.507368][T18612] gretap0: entered promiscuous mode [ 1623.353453][ T5831] Bluetooth: hci2: command tx timeout [ 1625.706300][T18551] chnl_net:caif_netlink_parms(): no params data found [ 1625.934486][ T8897] bridge_slave_1: left allmulticast mode [ 1625.965883][ T8897] bridge_slave_1: left promiscuous mode [ 1625.971837][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.030804][ T8897] bridge_slave_0: left allmulticast mode [ 1626.077770][ T8897] bridge_slave_0: left promiscuous mode [ 1626.111049][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1627.709544][T18672] fuse: Bad value for 'fd' [ 1633.102455][ T8897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1633.148360][ T8897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1633.214228][ T8897] bond0 (unregistering): Released all slaves [ 1634.163174][ T8897] tipc: Left network mode [ 1634.200158][T18724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2935'. [ 1634.294617][T18724] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2935'. [ 1634.562556][T18724] team0: entered promiscuous mode [ 1634.589122][T18724] team_slave_0: entered promiscuous mode [ 1634.612920][T18724] team_slave_1: entered promiscuous mode [ 1634.652277][T18724] bond0: entered promiscuous mode [ 1634.657567][T18724] bond_slave_0: entered promiscuous mode [ 1634.668131][T18724] bond_slave_1: entered promiscuous mode [ 1634.688058][T18724] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 1634.699397][T18724] Cannot create hsr debugfs directory [ 1634.736161][T18724] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 1634.909883][T18551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1634.932549][T18551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.998725][T18551] bridge_slave_0: entered allmulticast mode [ 1635.043012][T18551] bridge_slave_0: entered promiscuous mode [ 1635.086073][T18551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.166119][T18551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.215530][T18551] bridge_slave_1: entered allmulticast mode [ 1635.235747][T18551] bridge_slave_1: entered promiscuous mode [ 1635.415995][T18746] usb usb1: usbfs: process 18746 (syz.4.2938) did not claim interface 0 before use [ 1635.431016][T18746] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1635.774338][T18747] overlay: Unknown parameter '\' [ 1635.920243][T18746] geneve1: entered promiscuous mode [ 1635.942280][T18746] geneve1: entered allmulticast mode [ 1636.158048][T18551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.287497][ T8897] hsr_slave_0: left promiscuous mode [ 1636.492881][ T8897] hsr_slave_1: left promiscuous mode [ 1636.574304][ T8897] veth1_macvtap: left promiscuous mode [ 1636.598730][ T8897] veth1_vlan: left promiscuous mode [ 1636.625015][ T8897] veth0_vlan: left promiscuous mode [ 1636.859597][T18758] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1643.515221][ T8897] team0 (unregistering): Port device team_slave_1 removed [ 1643.867823][ T8897] team0 (unregistering): Port device team_slave_0 removed [ 1646.127013][T18551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.177808][T18551] team0: Port device team_slave_0 added [ 1647.205520][T18551] team0: Port device team_slave_1 added [ 1647.518312][T18839] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2963'. [ 1647.527512][T18839] netlink: 'syz.6.2963': attribute type 7 has an invalid length. [ 1647.555691][T18839] netlink: 'syz.6.2963': attribute type 8 has an invalid length. [ 1647.596323][T18839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2963'. [ 1647.631408][T18551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.823762][T18551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1648.058000][T18551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1648.130622][T18839] ip6gretap0: entered promiscuous mode [ 1648.137591][T18839] syz_tun: entered promiscuous mode [ 1648.144105][T18839] gretap0: entered promiscuous mode [ 1648.165683][T18839] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1648.283693][T18839] Cannot create hsr debugfs directory [ 1648.324399][T18848] usb usb1: usbfs: process 18848 (syz.4.2965) did not claim interface 0 before use [ 1648.342816][T18848] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1648.914232][T18551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1648.998307][T18551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1649.123241][T18551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1650.718391][ T8897] IPVS: stop unused estimator thread 0... [ 1650.757516][T18551] hsr_slave_0: entered promiscuous mode [ 1651.036862][T18551] hsr_slave_1: entered promiscuous mode [ 1651.411321][T18881] usb usb1: usbfs: process 18881 (syz.4.2972) did not claim interface 0 before use [ 1651.422720][T18551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1651.435625][T18881] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1651.512221][T18551] Cannot create hsr debugfs directory [ 1652.026200][T18889] overlayfs: failed to clone upperpath [ 1654.529788][T18901] geneve1: entered promiscuous mode [ 1654.577091][T18901] geneve1: entered allmulticast mode [ 1657.101519][T18917] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2984'. [ 1657.111140][T18917] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2984'. [ 1657.120462][T18917] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2984'. [ 1657.130618][T18917] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2984'. [ 1658.165795][T18933] No memory to map [ 1658.290437][T18934] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1658.900477][T18934] geneve1: entered promiscuous mode [ 1658.957092][T18934] geneve1: entered allmulticast mode [ 1660.326940][T18945] usb usb1: usbfs: process 18945 (syz.6.2991) did not claim interface 0 before use [ 1660.336538][T18945] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1661.216882][T18551] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1661.646915][T18551] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1661.754522][T18551] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1661.812426][T18551] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1661.910290][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2996'. [ 1662.000271][ T30] audit: type=1800 audit(1748136509.413:33): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2996" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1662.063154][T18968] CIFS: VFS: Malformed UNC in devname [ 1663.700202][T18551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.225504][T18551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.340046][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.347296][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1664.523565][T12429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.530767][T12429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1664.715703][T19003] usb usb1: usbfs: process 19003 (syz.4.3003) did not claim interface 0 before use [ 1664.725445][T19003] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1667.129095][T18551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1667.734003][T19027] overlayfs: failed to clone upperpath [ 1670.752151][T19049] input: syz1 as /devices/virtual/input/input12 [ 1672.951902][T19066] usb usb1: usbfs: process 19066 (syz.4.3016) did not claim interface 0 before use [ 1672.962765][T19066] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1674.592934][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1675.625203][ T971] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1675.849840][ T971] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1675.919659][ T971] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1676.423905][ T971] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1676.478704][ T971] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.537353][T19083] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1676.549918][T15967] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1676.608209][T15967] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1676.643854][ T971] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1676.652798][T15967] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1676.676509][T15967] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1676.684414][T15967] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1677.101372][T17219] usb 10-1: USB disconnect, device number 2 [ 1677.123107][T19091] lo speed is unknown, defaulting to 1000 [ 1678.410120][T19116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1678.419361][T19116] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1678.712001][ T5831] Bluetooth: hci2: command tx timeout [ 1678.966405][T19131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3028'. [ 1679.392253][T17339] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1679.620022][T19116] bond0: entered promiscuous mode [ 1679.627839][T19116] bond_slave_0: entered promiscuous mode [ 1679.673776][T19116] bond_slave_1: entered promiscuous mode [ 1679.703756][T19116] bond0: left promiscuous mode [ 1679.710427][T19116] bond_slave_0: left promiscuous mode [ 1679.716950][T19116] bond_slave_1: left promiscuous mode [ 1679.736941][T17339] usb 10-1: config 0 has an invalid interface number: 9 but max is 0 [ 1679.745182][T17339] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.755916][T17339] usb 10-1: config 0 has no interface number 0 [ 1679.766019][T17339] usb 10-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8 [ 1679.775396][T17339] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.813479][T17339] usb 10-1: config 0 descriptor?? [ 1679.869347][T17339] rndis_host 10-1:0.9: More than one union descriptor, skipping ... [ 1679.917079][T17339] usb 10-1: bad CDC descriptors [ 1679.952832][T17339] cdc_acm 10-1:0.9: More than one union descriptor, skipping ... [ 1680.363975][T19142] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3029'. [ 1680.475373][T19142] netlink: 'syz.6.3029': attribute type 7 has an invalid length. [ 1680.526338][T19142] netlink: 'syz.6.3029': attribute type 8 has an invalid length. [ 1680.692587][T19142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3029'. [ 1680.811916][T15967] Bluetooth: hci2: command tx timeout [ 1681.799339][T15967] Bluetooth: hci4: command 0x0406 tx timeout [ 1681.876667][T19148] sctp: failed to load transform for md5: -2 [ 1682.872148][ T5831] Bluetooth: hci2: command tx timeout [ 1683.810870][T19172] input: syz1 as /devices/virtual/input/input13 [ 1684.277608][T19091] chnl_net:caif_netlink_parms(): no params data found [ 1684.574481][ T971] IPVS: starting estimator thread 0... [ 1684.671887][T19179] IPVS: using max 24 ests per chain, 57600 per kthread [ 1684.746778][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1684.954431][ T5831] Bluetooth: hci2: command tx timeout [ 1684.985468][ T8908] bridge_slave_1: left allmulticast mode [ 1684.991208][ T8908] bridge_slave_1: left promiscuous mode [ 1685.142239][ T8908] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.267975][ T8908] bridge_slave_0: left allmulticast mode [ 1685.359921][ T8908] bridge_slave_0: left promiscuous mode [ 1685.454237][ T8908] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.624275][T19189] overlay: Unknown parameter '\' [ 1685.862356][ T8821] usb 10-1: USB disconnect, device number 3 [ 1687.261195][T19202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1687.749346][T17219] IPVS: starting estimator thread 0... [ 1688.137412][T19210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1688.291920][T19208] IPVS: using max 33 ests per chain, 79200 per kthread [ 1690.885764][T19229] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1692.649891][ T8908] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1692.698796][ T8908] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1692.732195][ T8908] bond0 (unregistering): Released all slaves [ 1693.141970][ T30] audit: type=1800 audit(1748136540.533:34): pid=19247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3048" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1693.273419][ T8908] hsr_slave_0: left promiscuous mode [ 1693.452576][ T8908] hsr_slave_1: left promiscuous mode [ 1694.365742][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.553602][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.811879][T19266] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1698.394296][T19290] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1699.010217][ T8908] team0 (unregistering): Port device team_slave_1 removed [ 1699.253767][ T8908] team0 (unregistering): Port device team_slave_0 removed [ 1699.391842][ T8821] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1699.586551][ T8821] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1699.598818][ T8821] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1699.611808][ T8821] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1699.629932][ T8821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1699.653591][T19292] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1699.665555][ T8821] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1699.902822][T13038] usb 5-1: USB disconnect, device number 15 [ 1700.309996][T19091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.341906][T19091] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.349064][T19091] bridge_slave_0: entered allmulticast mode [ 1700.377076][T19091] bridge_slave_0: entered promiscuous mode [ 1700.392364][T19255] 8021q: VLANs not supported on gre0 [ 1700.397976][T19091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.405611][T19091] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.414392][T19091] bridge_slave_1: entered allmulticast mode [ 1700.430982][T19091] bridge_slave_1: entered promiscuous mode [ 1700.905295][T19306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3062'. [ 1700.927586][T19306] netlink: 'syz.4.3062': attribute type 7 has an invalid length. [ 1700.946578][T19306] netlink: 'syz.4.3062': attribute type 8 has an invalid length. [ 1700.961491][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3062'. [ 1701.010748][T19091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1701.115635][T19311] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1701.707514][T19091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.549328][T19091] team0: Port device team_slave_0 added [ 1703.643789][T19091] team0: Port device team_slave_1 added [ 1703.653369][T19338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3069'. [ 1704.009393][T19091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1704.031823][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1704.057772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.349668][T19091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1704.468642][T19342] sctp: failed to load transform for md5: -2 [ 1704.955803][T19346] 8021q: VLANs not supported on gre0 [ 1704.987376][T19091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1705.051223][T19091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.077254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.267639][T19091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1705.548758][T19372] usb usb1: usbfs: process 19372 (syz.9.3075) did not claim interface 0 before use [ 1705.562200][T19372] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1706.409849][T19091] hsr_slave_0: entered promiscuous mode [ 1706.422882][T19091] hsr_slave_1: entered promiscuous mode [ 1706.429156][T19091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1706.561648][T19091] Cannot create hsr debugfs directory [ 1706.861030][T19386] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1707.612380][T19384] usb usb1: usbfs: process 19384 (syz.4.3079) did not claim interface 0 before use [ 1707.621962][T19384] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1708.112582][T19401] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1709.007559][T19404] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3084'. [ 1709.947798][T19412] 8021q: VLANs not supported on gre0 [ 1711.028972][T19439] usb usb1: usbfs: process 19439 (syz.4.3094) did not claim interface 0 before use [ 1711.662186][T19439] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1712.172484][T19446] input: syz1 as /devices/virtual/input/input14 [ 1715.634079][T19091] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1715.783099][T19091] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1716.334379][T19091] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1716.476290][T19476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3102'. [ 1716.568884][T19091] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1716.832685][T19484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1717.607888][T19091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1717.872106][T19091] 8021q: adding VLAN 0 to HW filter on device team0 [ 1717.956615][T16599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.963807][T16599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1718.254514][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1718.261923][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.103179][T19507] usb usb1: usbfs: process 19507 (syz.4.3108) did not claim interface 0 before use [ 1720.594553][T19507] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1720.663105][ T30] audit: type=1800 audit(1748136568.073:35): pid=19509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3109" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1723.328642][T19091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1724.659163][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3119'. [ 1725.243825][T19564] vlan2: entered promiscuous mode [ 1726.654027][T19091] veth0_vlan: entered promiscuous mode [ 1726.755480][T19091] veth1_vlan: entered promiscuous mode [ 1727.012087][ T971] IPVS: starting estimator thread 0... [ 1727.038512][T19091] veth0_macvtap: entered promiscuous mode [ 1727.091883][T19590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1727.446907][T19091] veth1_macvtap: entered promiscuous mode [ 1727.487426][T19091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.564378][T19091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1727.598443][T19589] IPVS: using max 33 ests per chain, 79200 per kthread [ 1727.665263][T19091] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.706961][T19091] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.719833][T19091] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.728665][T19091] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1728.909976][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3127'. [ 1729.549022][T19605] ip6gretap0: entered promiscuous mode [ 1729.602043][T19605] vlan2: entered promiscuous mode [ 1730.150633][ T8897] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.199099][ T8897] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.342179][ T8821] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1730.574679][ T8897] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.583097][ T8821] usb 7-1: Using ep0 maxpacket: 32 [ 1730.602008][ T8897] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.621908][ T8821] usb 7-1: config 0 has no interfaces? [ 1730.648645][ T8821] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 1730.682038][ T8821] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.690052][ T8821] usb 7-1: Product: syz [ 1730.923308][ T8821] usb 7-1: Manufacturer: syz [ 1730.946316][ T8821] usb 7-1: SerialNumber: syz [ 1731.060885][ T8821] usb 7-1: config 0 descriptor?? [ 1731.074146][T19631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1731.454311][T15911] usb 7-1: USB disconnect, device number 22 [ 1732.455373][T19646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1732.466549][T19646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1732.475680][T19646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1732.484708][T19646] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3142'. [ 1732.952422][T19629] Bluetooth: hci5: command 0x0406 tx timeout [ 1734.103747][T19629] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1734.204297][T19629] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1734.294214][T19629] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1734.421701][T19629] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1734.432221][T19629] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1734.647942][T19667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1734.656962][T19667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1734.665950][T19667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1734.674965][T19667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3148'. [ 1734.851471][T19663] lo speed is unknown, defaulting to 1000 [ 1736.242735][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.622108][T15967] Bluetooth: hci6: command tx timeout [ 1736.684829][ T8897] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.989531][ T8897] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.344934][ T8897] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.647942][T15967] Bluetooth: hci6: command tx timeout [ 1739.289623][ T8897] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.727022][T15967] Bluetooth: hci6: command tx timeout [ 1740.804083][T19663] chnl_net:caif_netlink_parms(): no params data found [ 1740.984255][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3160'. [ 1741.249314][T19740] input: syz1 as /devices/virtual/input/input16 [ 1742.750139][T19663] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.781983][T19663] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.792017][T15967] Bluetooth: hci6: command tx timeout [ 1742.842519][T19663] bridge_slave_0: entered allmulticast mode [ 1742.913927][T19663] bridge_slave_0: entered promiscuous mode [ 1743.234532][T19663] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.261965][T19663] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.420491][T19663] bridge_slave_1: entered allmulticast mode [ 1743.429641][T19663] bridge_slave_1: entered promiscuous mode [ 1743.632124][T19663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1743.727459][T19663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1743.795336][ T8897] bridge_slave_1: left allmulticast mode [ 1743.830642][ T8897] bridge_slave_1: left promiscuous mode [ 1743.877563][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.997937][T19770] usb usb1: usbfs: process 19770 (syz.9.3166) did not claim interface 0 before use [ 1744.008701][T19770] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1744.494292][ T8897] bridge_slave_0: left allmulticast mode [ 1744.541318][ T8897] bridge_slave_0: left promiscuous mode [ 1744.696870][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.757280][T19786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3171'. [ 1745.802047][T19786] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3171'. [ 1747.641155][ T8897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.676174][ T8897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.694470][ T8897] bond0 (unregistering): Released all slaves [ 1747.829133][T19776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'. [ 1747.894100][T19663] team0: Port device team_slave_0 added [ 1747.939229][T19790] syz_tun: entered allmulticast mode [ 1747.964328][T19786] bridge0: entered promiscuous mode [ 1748.001133][T19786] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1748.041898][T19786] Cannot create hsr debugfs directory [ 1749.676182][T19823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1749.923740][T19827] usb usb1: usbfs: process 19827 (syz.4.3180) did not claim interface 0 before use [ 1749.937310][T19663] team0: Port device team_slave_1 added [ 1749.951591][T19827] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1750.051263][T19790] syz_tun: left allmulticast mode [ 1750.295634][T19806] lo speed is unknown, defaulting to 1000 [ 1750.464928][T15911] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1750.509997][T19663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.657008][T19663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1750.782400][T19663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1750.782564][T15911] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1750.824910][T19663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1750.908146][T19663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1750.942583][T15911] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1750.986715][T15911] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1751.008487][T15911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.016806][T19663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1751.140264][T19830] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1751.174151][T15911] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1751.484651][T15911] usb 7-1: USB disconnect, device number 23 [ 1752.045307][T19851] sctp: failed to load transform for md5: -2 [ 1752.070496][ T8897] hsr_slave_0: left promiscuous mode [ 1752.202047][ T8897] hsr_slave_1: left promiscuous mode [ 1752.244604][ T8897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1752.662982][ T8897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1752.802936][ T8897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1752.840817][ T8897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1753.083823][ T8897] veth1_macvtap: left promiscuous mode [ 1753.119376][ T8897] veth0_macvtap: left promiscuous mode [ 1753.137594][ T8897] veth1_vlan: left promiscuous mode [ 1753.152227][ T8897] veth0_vlan: left promiscuous mode [ 1755.701895][ T8897] team0 (unregistering): Port device team_slave_1 removed [ 1755.804310][ T8897] team0 (unregistering): Port device team_slave_0 removed [ 1757.132799][T19904] netlink: 'syz.0.3192': attribute type 4 has an invalid length. [ 1757.324477][T19663] hsr_slave_0: entered promiscuous mode [ 1757.390224][T19663] hsr_slave_1: entered promiscuous mode [ 1757.397166][T19663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1757.410884][T19663] Cannot create hsr debugfs directory [ 1757.551894][ T8227] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1757.725180][ T8227] usb 10-1: Using ep0 maxpacket: 8 [ 1757.922646][ T8227] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1758.239228][ T8227] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1758.495479][ T8227] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.570724][ T8227] usb 10-1: config 0 descriptor?? [ 1758.643056][ T8227] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1759.190840][ T8227] gspca_vc032x: reg_r err -110 [ 1759.238049][ T8227] vc032x 10-1:0.0: probe with driver vc032x failed with error -110 [ 1759.537317][T19928] usb usb1: usbfs: process 19928 (syz.4.3198) did not claim interface 0 before use [ 1759.575786][T19928] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1759.639067][T19931] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1760.372943][ T8821] usb 10-1: USB disconnect, device number 4 [ 1760.912158][ T971] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1763.917831][ T971] usb 7-1: device descriptor read/all, error -71 [ 1764.077720][T19663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1764.196822][T19663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1764.257710][T19663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1764.319028][T19663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1764.372539][ T30] audit: type=1800 audit(1748136611.763:36): pid=19957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3209" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1766.137395][T19663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.479982][T19966] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3212'. [ 1768.205681][T19663] 8021q: adding VLAN 0 to HW filter on device team0 [ 1768.234585][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.241804][ T5912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1768.313942][T19970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1768.314846][T19969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1768.358970][T16014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.366169][T16014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.405286][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1768.455057][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1769.266000][T19979] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1770.080207][T19986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1771.917063][T19663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1772.035749][T20007] usb usb1: usbfs: process 20007 (syz.6.3222) did not claim interface 0 before use [ 1772.057637][T20007] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1772.083791][T20005] syz_tun: entered promiscuous mode [ 1772.107054][T20005] vlan2: entered promiscuous mode [ 1773.107200][ T30] audit: type=1800 audit(1748136620.523:37): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3228" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1773.128005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1773.247681][T20025] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3229'. [ 1773.887999][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 1774.056825][ T30] audit: type=1800 audit(1748136621.463:38): pid=20030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3231" name="nullb0" dev="tmpfs" ino=1232 res=0 errno=0 [ 1774.077592][ C0] vkms_vblank_simulate: vblank timer overrun [ 1774.194532][T19663] veth0_vlan: entered promiscuous mode [ 1774.285050][T19663] veth1_vlan: entered promiscuous mode [ 1774.487111][T19663] veth0_macvtap: entered promiscuous mode [ 1774.568269][T20033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1774.587171][T19663] veth1_macvtap: entered promiscuous mode [ 1774.971629][T19663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1775.058016][T19663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1775.137103][T19663] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.221784][T19663] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.332044][T19663] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.365786][T19663] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1775.966328][T20043] loop9: detected capacity change from 0 to 32768 [ 1776.165704][T20043] XFS (loop9): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1776.781794][ T8908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1776.806694][T20043] XFS (loop9): Ending clean mount [ 1776.816607][ T8908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1776.834235][T20043] XFS (loop9): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 [ 1776.845566][T20043] XFS (loop9): Unmount and run xfs_repair [ 1776.851292][T20043] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 1776.858926][T20043] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1776.868077][T20043] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1776.877165][T20043] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1776.886050][T20043] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1776.894931][T20043] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1776.905995][T20043] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1776.914880][T20043] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1776.923749][T20043] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1776.932843][T20043] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x20 len 8 error 74 [ 1776.944528][T20043] XFS (loop9): Failed to initialize disk quotas, err -117. [ 1777.129460][ T4532] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1777.339540][T20066] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1777.380658][ T4532] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1777.436496][T18104] XFS (loop9): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1777.549768][T18104] XFS (loop9): Uncorrected metadata errors detected; please run xfs_repair. [ 1778.504217][T20071] block nbd0: shutting down sockets [ 1780.056160][T20084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1780.706334][ T8901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1781.429814][ T8901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.865851][T20099] xt_connbytes: Forcing CT accounting to be enabled [ 1782.872715][T20099] Cannot find set identified by id 0 to match [ 1783.531539][T20090] lo speed is unknown, defaulting to 1000 [ 1785.411895][T20109] page: refcount:515 mapcount:0 mapping:ffff888144e94c40 index:0x0 pfn:0x3f000 [ 1785.422015][T20109] head: order:9 mapcount:1 entire_mapcount:1 nr_pages_mapped:0 pincount:0 [ 1785.430530][T20109] aops:hugetlbfs_aops ino:102b1 dentry name(?):"anon_hugepage" [ 1785.438094][T20109] flags: 0xfff00000000041(locked|head|node=0|zone=1|lastcpupid=0x7ff) [ 1785.446256][T20109] page_type: f4(hugetlb) [ 1785.450512][T20109] raw: 00fff00000000041 ffffc900052dfe30 ffffc900052dfe30 ffff888144e94c40 [ 1785.459106][T20109] raw: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1785.467704][T20109] head: 00fff00000000041 ffffc900052dfe30 ffffc900052dfe30 ffff888144e94c40 [ 1785.476384][T20109] head: 0000000000000000 0000000000000000 00000203f4000000 0000000000000000 [ 1785.485086][T20109] head: 00fff00000000009 ffffea0000fc0001 0000000000000000 0000000000000000 [ 1785.493764][T20109] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000200 [ 1785.502433][T20109] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio)) [ 1785.509706][T20109] page_owner tracks the page as allocated [ 1785.516206][T20109] page last allocated via order 9, migratetype Movable, gfp_mask 0x146cca(GFP_HIGHUSER_MOVABLE|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 20105, tgid 20100 (syz.9.3248), ts 1784429133392, free_ts 1776956865513 [ 1785.537138][T20109] post_alloc_hook+0x1d8/0x230 [ 1785.541917][T20109] get_page_from_freelist+0x21ce/0x22b0 [ 1785.547460][T20109] __alloc_frozen_pages_noprof+0x181/0x370 [ 1785.553264][T20109] __folio_alloc_noprof+0x18/0x120 [ 1785.558378][T20109] alloc_buddy_hugetlb_folio+0xe2/0x570 [ 1785.563939][T20109] only_alloc_fresh_hugetlb_folio+0x8c/0x280 [ 1785.569939][T20109] alloc_surplus_hugetlb_folio+0x103/0x430 [ 1785.575764][T20109] alloc_hugetlb_folio+0xb24/0x15a0 [ 1785.580966][T20109] hugetlb_fault+0x1d11/0x2910 [ 1785.585736][T20109] handle_mm_fault+0x724/0x8c0 [ 1785.590500][T20109] do_user_addr_fault+0x764/0x1390 [ 1785.595611][T20109] exc_page_fault+0x68/0x110 [ 1785.600206][T20109] asm_exc_page_fault+0x26/0x30 [ 1785.605056][T20109] page last free pid 20044 tgid 20039 stack trace: [ 1785.611565][T20109] __free_frozen_pages+0xb0e/0xcd0 [ 1785.616698][T20109] __folio_put+0x21b/0x2c0 [ 1785.621156][T20109] free_huge_folio+0xd74/0x1220 [ 1785.626013][T20109] __folio_put+0xfd/0x2c0 [ 1785.630347][T20109] migrate_pages+0xd33/0x2850 [ 1785.635048][T20109] __se_sys_mbind+0xa3e/0xc30 [ 1785.639730][T20109] do_syscall_64+0xf6/0x210 [ 1785.644249][T20109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.650448][T20109] ------------[ cut here ]------------ [ 1785.655897][T20109] kernel BUG at mm/filemap.c:154! [ 1785.660928][T20109] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1785.667340][T20109] CPU: 1 UID: 0 PID: 20109 Comm: syz.9.3248 Not tainted 6.15.0-rc7-syzkaller-00144-gb1427432d3b6 #0 PREEMPT(full) [ 1785.679401][T20109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1785.689451][T20109] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1785.695702][T20109] Code: d1 c9 ff 48 89 df 48 c7 c6 40 10 74 8b e8 63 ec 10 00 90 0f 0b e8 7b d1 c9 ff 48 89 df 48 c7 c6 20 0f 74 8b e8 4c ec 10 00 90 <0f> 0b e8 64 d1 c9 ff 48 89 df 48 c7 c6 40 10 74 8b e8 35 ec 10 00 [ 1785.715306][T20109] RSP: 0018:ffffc9000529f1a0 EFLAGS: 00010046 [ 1785.721370][T20109] RAX: 1b19383fb8332d00 RBX: ffffea0000fc0000 RCX: 1b19383fb8332d00 [ 1785.729336][T20109] RDX: 0000000000000005 RSI: ffffffff8d939072 RDI: ffff88802480bc00 [ 1785.737302][T20109] RBP: 0000000000000001 R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 1785.745271][T20109] R10: dffffc0000000000 R11: ffffed10171247d3 R12: 0000000000000040 [ 1785.753238][T20109] R13: 1ffffd40001f8000 R14: 1ffffd40001f8001 R15: ffffea0000fc0008 [ 1785.761210][T20109] FS: 00007fb1263b26c0(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 1785.770136][T20109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1785.776715][T20109] CR2: 0000001b33a1aff8 CR3: 0000000063e8c000 CR4: 0000000000350ef0 [ 1785.784771][T20109] Call Trace: [ 1785.788043][T20109] [ 1785.790969][T20109] __filemap_remove_folio+0xc3/0x500 [ 1785.796265][T20109] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1785.801647][T20109] ? __pfx___filemap_remove_folio+0x10/0x10 [ 1785.807551][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.813194][T20109] ? _raw_spin_lock_irq+0xae/0xf0 [ 1785.818218][T20109] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1785.823771][T20109] filemap_remove_folio+0xe6/0x1f0 [ 1785.828888][T20109] remove_inode_hugepages+0x581/0x10e0 [ 1785.834344][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.839987][T20109] ? __pfx_remove_inode_hugepages+0x10/0x10 [ 1785.845884][T20109] ? __lock_acquire+0xaac/0xd20 [ 1785.850756][T20109] ? hugetlbfs_fallocate+0xbaf/0x1100 [ 1785.856212][T20109] ? up_write+0x1c4/0x420 [ 1785.860539][T20109] hugetlbfs_fallocate+0xbc7/0x1100 [ 1785.865768][T20109] ? aa_file_perm+0x3e7/0xed0 [ 1785.870451][T20109] ? __pfx_hugetlbfs_fallocate+0x10/0x10 [ 1785.876103][T20109] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1785.881996][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.887645][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.893282][T20109] vfs_fallocate+0x6a3/0x830 [ 1785.897878][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.903515][T20109] ? __pfx_vfs_fallocate+0x10/0x10 [ 1785.908632][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.914296][T20109] madvise_do_behavior+0x1749/0x3500 [ 1785.919612][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.925257][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.930894][T20109] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1785.936539][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.942172][T20109] ? __futex_wait+0x217/0x2a0 [ 1785.946854][T20109] ? __lock_acquire+0xaac/0xd20 [ 1785.951722][T20109] ? __pfx___futex_wait+0x10/0x10 [ 1785.956753][T20109] ? __pfx_futex_wake_mark+0x10/0x10 [ 1785.962045][T20109] ? mlock_drain_local+0x79/0x490 [ 1785.967063][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.972699][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.978329][T20109] ? futex_wait+0x285/0x360 [ 1785.982860][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.988490][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.994121][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1785.999758][T20109] ? __lock_acquire+0xaac/0xd20 [ 1786.004625][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1786.010264][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1786.015904][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1786.021542][T20109] __x64_sys_madvise+0x10c/0x150 [ 1786.026489][T20109] do_syscall_64+0xf6/0x210 [ 1786.031000][T20109] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1786.036630][T20109] ? exc_page_fault+0x91/0x110 [ 1786.041398][T20109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.047286][T20109] RIP: 0033:0x7fb12898e969 [ 1786.051700][T20109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1786.071313][T20109] RSP: 002b:00007fb1263b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1786.079729][T20109] RAX: ffffffffffffffda RBX: 00007fb128bb6240 RCX: 00007fb12898e969 [ 1786.087698][T20109] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 1786.095667][T20109] RBP: 00007fb128a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1786.103632][T20109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1786.111597][T20109] R13: 0000000000000000 R14: 00007fb128bb6240 R15: 00007ffee9749308 [ 1786.120012][T20109] [ 1786.123026][T20109] Modules linked in: [ 1786.126923][T20109] ---[ end trace 0000000000000000 ]--- [ 1786.132385][T20109] RIP: 0010:filemap_unaccount_folio+0x715/0x790 [ 1786.138652][T20109] Code: d1 c9 ff 48 89 df 48 c7 c6 40 10 74 8b e8 63 ec 10 00 90 0f 0b e8 7b d1 c9 ff 48 89 df 48 c7 c6 20 0f 74 8b e8 4c ec 10 00 90 <0f> 0b e8 64 d1 c9 ff 48 89 df 48 c7 c6 40 10 74 8b e8 35 ec 10 00 [ 1786.158266][T20109] RSP: 0018:ffffc9000529f1a0 EFLAGS: 00010046 [ 1786.164335][T20109] RAX: 1b19383fb8332d00 RBX: ffffea0000fc0000 RCX: 1b19383fb8332d00 [ 1786.172306][T20109] RDX: 0000000000000005 RSI: ffffffff8d939072 RDI: ffff88802480bc00 [ 1786.180360][T20109] RBP: 0000000000000001 R08: ffff8880b8923e93 R09: 1ffff110171247d2 [ 1786.188330][T20109] R10: dffffc0000000000 R11: ffffed10171247d3 R12: 0000000000000040 [ 1786.196306][T20109] R13: 1ffffd40001f8000 R14: 1ffffd40001f8001 R15: ffffea0000fc0008 [ 1786.204279][T20109] FS: 00007fb1263b26c0(0000) GS:ffff8881261c2000(0000) knlGS:0000000000000000 [ 1786.213213][T20109] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1786.219791][T20109] CR2: 0000001b33a1aff8 CR3: 0000000063e8c000 CR4: 0000000000350ef0 [ 1786.227765][T20109] Kernel panic - not syncing: Fatal exception [ 1786.234056][T20109] Kernel Offset: disabled [ 1786.238386][T20109] Rebooting in 86400 seconds..