last executing test programs: 9m25.936047115s ago: executing program 1 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1000000000000}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) mincore(&(0x7f0000184000/0x2000)=nil, 0x2000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) lseek(0xffffffffffffffff, 0x10000000005, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0xaf6, @private1, 0x200000}, 0x14) shutdown(r4, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 9m24.326100277s ago: executing program 1 (id=335): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = semget$private(0x0, 0x4, 0x29b) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, 0x0, 0x6010) semop(r3, &(0x7f0000000180)=[{}, {}], 0x2) semctl$GETZCNT(r3, 0x0, 0xf, 0x0) r5 = syz_io_uring_setup(0x126b, 0x0, &(0x7f0000000140), 0x0) r6 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x101000) ioctl$IOC_PR_PREEMPT(r6, 0x401870cb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711228000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20) 9m21.654010984s ago: executing program 1 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r3, 0x8004745a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x625}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r5, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e21, 0xffffffff, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$nl_route(0x10, 0x3, 0x0) 9m21.257217433s ago: executing program 1 (id=339): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000800}, 0x40000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x100, &(0x7f00000002c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x244000, 0x10b) rseq(0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0, 0x40000000, 0x1}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) r4 = timerfd_create(0x9, 0x0) readv(r4, 0x0, 0x0) r5 = syz_io_uring_setup(0x1e1e, &(0x7f0000000580)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0) 9m17.496582107s ago: executing program 1 (id=346): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xffffffffffffffff]}, 0x8, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r3, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x40000083) read$FUSE(r2, &(0x7f0000001a00)={0x2020}, 0x2020) socket$inet_icmp(0x2, 0x2, 0x1) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000061000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0x80000000, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0xd7}) rt_sigqueueinfo(r1, 0xb, &(0x7f0000000440)={0x0, 0x0, 0xfffffffb}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r5], 0x50) 9m13.820976395s ago: executing program 1 (id=351): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r5, 0x0, 0x0) 8m57.65092905s ago: executing program 32 (id=351): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvmmsg(r3, &(0x7f000000e280), 0x58a, 0x42, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r5, 0x0, 0x0) 8m8.979617401s ago: executing program 4 (id=426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x3, &(0x7f0000000240)=[{0x3d, 0x0, 0x1}, {0x1d, 0x0, 0x0, 0x10000000}, {0x6}]}) getsockname(r6, 0x0, &(0x7f0000000d00)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f00000005c0)={0x0, 0x2000000, {0x8, 0xfffffffd, 0xfffff1b4, 0x3}}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) fremovexattr(r9, &(0x7f0000000240)=@known='system.sockprotoname\x00') bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 8m7.549361159s ago: executing program 4 (id=429): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x700, 0x20, 0x10001, 0x40, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x65, 0x0, 0x4, 0xc, 0x0, @loopback, @empty}}}}) syz_io_uring_complete(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000c000000000000208000000004000000", @ANYRES32=0x1, @ANYRES32=r1], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 8m5.944884685s ago: executing program 4 (id=431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) 8m2.379869065s ago: executing program 4 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_ENUM_DV_TIMINGS(r4, 0xc0945662, &(0x7f00000003c0)={0x8000001, 0x0, '\x00', {0x0, @bt={0x9, 0x10001ff, 0x4, 0x3, 0x8000000000000001, 0x1, 0x8, 0x6000005, 0x8, 0x8, 0x1, 0x9, 0x1, 0x7c, 0x10, 0x1d, {0x7, 0xd}, 0x1, 0x9}}}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}], 0x2, 0x1005) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r7}, 0x8) ioctl$VIDIOC_SUBDEV_G_CROP(r4, 0xc038563b, &(0x7f0000000100)={0x0, 0x0, {0x4, 0x1ff, 0xc, 0x6e5}}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r8, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 8m0.999590095s ago: executing program 4 (id=435): ioperm(0x0, 0x2, 0x7e) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32], 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x80000000}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x281}, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socket(0xa, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r3, &(0x7f0000008140)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000000140)=""/8, 0x8}], 0x1}}], 0x1, 0x7fb10727dda9, 0x0) close(r4) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) 7m58.61485553s ago: executing program 4 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@private1, 0x18, r6}) r7 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1, @private1, 0x1, 0x80, 0x2a, 0x4}}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0xf05, 0x3234564e, 0x4, 0xa, [{0x4, 0x52b}, {0x1, 0x7}, {0x4, 0x4}, {0x495b, 0x7ff}, {0x8, 0xcdc}, {0x80000000}, {0xdb, 0x1}, {0x80, 0xa}], 0x7, 0x80, 0x6, 0x0, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000002580)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x1, 0x406}}}, 0x7) 7m43.483574123s ago: executing program 33 (id=438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0xa, 0x3, 0x87) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={@private1, 0x18, r6}) r7 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x6, 0xfffffffe, 0x4, @private1, @private1, 0x1, 0x80, 0x2a, 0x4}}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0xf05, 0x3234564e, 0x4, 0xa, [{0x4, 0x52b}, {0x1, 0x7}, {0x4, 0x4}, {0x495b, 0x7ff}, {0x8, 0xcdc}, {0x80000000}, {0xdb, 0x1}, {0x80, 0xa}], 0x7, 0x80, 0x6, 0x0, 0x3}}) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000002580)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x1, 0x406}}}, 0x7) 5m34.867070645s ago: executing program 5 (id=373): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) poll(0x0, 0x0, 0x7a0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000980)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc}, {@in=@empty, 0x0, 0x33}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x8000000000000001, 0x0, 0x3}, {0x4, 0x5, 0x0, 0x800000000}, {0x0, 0x0, 0x814}, 0x70bd2a, 0x0, 0xa, 0x2}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080) 5m33.122853204s ago: executing program 5 (id=592): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) close(r0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x2404c044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r5, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000000002061b0000000000000000000000000005000400000000000900020073797a310000000014000780050015000c000000080012400000002e0500050002000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r7, &(0x7f00000025c0)={0x9, {"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", 0x1000}}, 0x1006) socket(0x400000000010, 0x3, 0x0) 5m30.888595984s ago: executing program 5 (id=594): syz_init_net_socket$ax25(0x3, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102) mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) unlink(&(0x7f0000000140)='./cgroup\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x280100, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 5m28.373992705s ago: executing program 5 (id=599): socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(0x0) r2 = socket$inet6(0xa, 0xa, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe28, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0xfffffffe}, 0x1c) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f0000000300)={'dummy0\x00', 0x8000}) connect$inet6(r2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) r5 = getuid() quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000100)=@filename='./cgroup.cpu/cgroup.procs\x00', r5, &(0x7f0000000140)={0x5, 0xa, 0x0, 0x4}) 5m24.77882082s ago: executing program 5 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x40000000015, 0x5, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)=0xfffffffb) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f00000026c0)={0x2020}, 0x2020) 5m23.048198161s ago: executing program 5 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000000)={0x6, 0x8000, 0x6, 0x1, 0x5}) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(0xffffffffffffffff, r8, r8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x8c}}, 0x0) 5m7.697402254s ago: executing program 34 (id=609): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000000)={0x6, 0x8000, 0x6, 0x1, 0x5}) r7 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(0xffffffffffffffff, r8, r8) ioctl$TIOCGPTPEER(r5, 0x5441, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x8c}}, 0x0) 3m24.53961295s ago: executing program 7 (id=631): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8, 0x7, 0x3, 0xf94, {{0xd, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x30}, @dev={0xac, 0x14, 0x14, 0x12}, {[@generic={0x44, 0xb, "017c9923bdd7a22219"}, @timestamp_prespec={0x44, 0x4, 0x4a, 0x3, 0x9}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x3b, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f0000000940), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000b00)={@multicast2, @rand_addr, 0x0}, &(0x7f0000000b40)=0xc) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b80)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x8, 0x40, {{0x8, 0x4, 0x1, 0xb, 0x20, 0x65, 0x0, 0xe, 0x2f, 0x0, @broadcast, @multicast1, {[@end, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f80)={&(0x7f0000001080)={0x164, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x480d4}, 0x4040000) r7 = dup(0xffffffffffffffff) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x2000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_loose}]}}) write$UHID_INPUT(r8, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @dev}}}}}}, 0x0) 3m21.085707844s ago: executing program 7 (id=767): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0xa00, 0x60) read$FUSE(r3, &(0x7f0000002ec0)={0x2020}, 0x2020) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000ac0)={r5, 0xd0}, &(0x7f0000000b00)=0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5}, 0xe) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000000)=0xf66, 0x4) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) unlinkat$binderfs_device(0xffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00') ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000005c0)) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, &(0x7f0000000080)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m18.34285458s ago: executing program 7 (id=771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r4, 0x112, 0x13, 0x0, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') fchdir(r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f00000000c0)={0x3, 0x67}, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 3m16.211624095s ago: executing program 7 (id=775): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x3ff, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x9, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000003c0)=0x401, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, 0x0, 0x0) 3m0.89583699s ago: executing program 35 (id=775): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x487, &(0x7f00000000c0)={0x0, 0x9010, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x2, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa7, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x3ff, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x9, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f00000003c0)=0x401, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, 0x0, 0x0) 1m12.316106143s ago: executing program 3 (id=937): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x1c}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a0021030100000000000000021400000000ff000000000018ef15801400010000000000000f0f0000000000000000005b0edb63c2586712957d2de5"], 0x34}}, 0x2400c044) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001", @ANYRESOCT=r4], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m11.05051956s ago: executing program 3 (id=940): syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000480)='./file0\x00', &(0x7f0000000600), &(0x7f00000006c0)=@v3={0x3000000, [{0x0, 0x6}, {0x400, 0x7}], r1}, 0x18, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(r3, &(0x7f0000000000), 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r4, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x480}, 0xc, &(0x7f00000004c0)={0x0}}, 0x404004c) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, 0x0) 1m10.425981593s ago: executing program 8 (id=797): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) r7 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, r5, 0x0, '\x00', 0x0, r8, 0x2, 0x1}, 0x50) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x5452, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x91aef8a0c7c113eb, 0x0) bind$packet(r1, &(0x7f0000000100), 0x14) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000021800000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) 1m7.930361654s ago: executing program 8 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="18001ea14cc600006d00090004001d00000000000000009f3e4d6c7cbc9377f1010adb65605e0124125aec34c1b25aa918"], 0x18}, 0x1, 0x0, 0x0, 0x200040c5}, 0x40000084) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10138, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000", @ANYRES8=r8, @ANYRES32, @ANYBLOB], 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x8000) r9 = open_tree(r1, &(0x7f0000000080)='\x00', 0x1001) move_mount(r1, 0x0, r9, 0x0, 0x46) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x78, 0x6, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20004080) 1m4.911927226s ago: executing program 8 (id=946): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYRES16], 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250001000000000085100000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) clock_getres(0x7, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x20040000) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x98bd, 0x80000000000000c, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x0, 0x7, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x5, 0x7, 0xc1, 0x4, 0x2, 0x2, 0x2, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x5, 0x7, 0x4, 0x1, 0x9, 0x888f, 0x1, 0x6, 0x46, 0x1, 0x3, 0xa3de, 0x20000000006, 0x8, 0x7, 0x400, 0x3, 0xffffffffffbfffb7, 0xfffffffffffffffa, 0x2, 0xd, 0x6, 0x4, 0xe6, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x0, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0x10001, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x4000000007, 0x2, 0x3, 0x2, 0x2, 0xfff, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0xb, 0xff, 0x6, 0x28000000, 0x5, 0x9, 0x3, 0x7, 0xf6, 0x4, 0x6, 0x204, 0x7, 0xe53e, 0x4, 0x8, 0x2293332f, 0x6, 0x5, 0x1e, 0xd, 0x2, 0x4, 0xfffffffffffffffb, 0x80000001, 0x7, 0xdfd4, 0x5, 0x10, 0x20005, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0xcc, 0x8, 0x1000003]}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) 1m4.693389067s ago: executing program 3 (id=947): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x593802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040), 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$misdntimer(0xffffff9c, 0x0, 0x4000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000140)={0x48}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, 0x0, 0x0, 0x6, 0x40000000009}) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(0xffffffffffffffff, 0x3b86, &(0x7f0000000280)={0x18}) r6 = accept4$alg(r4, 0x0, 0x0, 0x0) sendfile(r3, r6, 0x0, 0x10ffff) 1m1.246453607s ago: executing program 3 (id=950): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) clock_gettime(0x4, 0x0) syz_emit_vhci(0x0, 0x9) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r4, r0, 0x0) 1m0.219617651s ago: executing program 8 (id=953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.impure\x00') sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0xfed9, 0x3, 0x3}}]}, 0x20}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffff3, 0x0, 0x1a) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000002c0)={0x60000002}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, 0x0, 0x44048) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 57.606732735s ago: executing program 3 (id=955): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001280)="f78d9c0000ff48f3be525b649ccb8848412b", 0x12}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}], 0x2}], 0x1, 0x40800) socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r2) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000000)=ANY=[], 0x138) r8 = getuid() mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, 'wfdno'}}, {@cache_mmap}, {@afid={'afid', 0x3d, 0xfffffffffffffff9}}], [{@uid_eq={'uid', 0x3d, r8}}]}}) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000000) 57.09304338s ago: executing program 8 (id=956): r0 = socket$l2tp6(0xa, 0x2, 0x73) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r1, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) get_mempolicy(0x0, &(0x7f0000000440), 0x4000, &(0x7f0000fff000/0x1000)=nil, 0x2) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000000)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x80, @empty}, 0x1c, 0x0}}], 0x1, 0x448d0) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x17d1}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000008c0)="ea7f6522ac662d00e8f496105f22f7c4f2bd128d06b2bd73c21e6056097a5a145f617538e063067b07e8fdb62e4cc4c63b9fda63f6fc01743a1f9630c99d", 0x3e}, {&(0x7f0000000200)="8602a42225f3ac33167edefd9046f25a00c364e1cee41b7fa128650dce6a8e3e8514c63712600c040cb92a2a557fe161d4cd9df7fb5deeabb91c3afd07e692a2be452dc634bb58b3099f9837e9be36964ada9a19a8d8d5b1d0dda2d5f58ec913cbae0625f51674f03f71e4532910de44f440b5ca40", 0x75}, {&(0x7f0000000280)}, {&(0x7f0000000300)="2f8725290e3d23917585d8e286e8ccd712cf021b7dc35d01d3307c04e973924da9fa8f35af6769f715cb8b6ed0e15be370ec42bcb3aabaa52f95633a5d5cc3a0bee9186feb08faf15963f17ff5c427bfa7c2e764f0535efb2931965e70bfc5fde37684a40a02", 0x66}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000900)="7abbbe795834d26be2515ab84c07b672bb7d1d9ffece9f4e5b9176ec115b2119e9899e5d607aac84b3a00ed25b3babfe25c02c7c3077ef14ac99f78572bbed13e4b404173eebb27545f4420fd4ed913447c01d7b78fc58a7b8b4f8fea648d2e00b73e8c3d417e65909af68213184df8f9ee09070f9a46b73d6681260d253bdb740876cbd052abba426bf39c9bb7fcbbed0cd0c5c90939de09aa23de4df02a2321ca7bcb46cd664dfe22fd65ea5741f3cb62519db627db7553d3aa4b43b35b443a8ee400afd5961feea4ac9034d8eb362ba9a2e06eddf6324ff4fc94b6afcf32a5f5fdc19399d0414eaef67f7248f09e251bf59a0a160e60f188e5d9a9752310e236adb899b", 0x105}, {&(0x7f0000000480)="4a1aa192dc4d54510e1d56882b90643657cfd43f9046301cc8729b1e17f6c3b8f68d71d0a7c7cc4cdd1fb4acebdc00876a008a7d9000af1db7abdc8c51a6e7b4aac60e41bf40b486ddc9ea830a62f24cc0bb7a194584011ecfb0b589784ff4455396e8f270e41bc22c4486ba956122af7920b8", 0x73}, {&(0x7f0000000500)}, {&(0x7f00000005c0)="ec8469fb744ee880ecc3341d3552b48935c6dc28fe0022dcb5e4d982950169819739a14e2ff3cc7e89783773deae492570a12d03007b9f1c1f50ee3a4dc6f21bf13d2860168221b99bee0ef181e3e5a5b5395746d76982d3aa982dd5e072b6dba3c9b9520c67c32543b089f10d973a370e50a267abe880fe45dc6dedc66428dea05bccf8641b9f64cf", 0x89}, {&(0x7f0000000680)="d69b1ab6c15bb143bf6231474afd0dda7b747197ff8ac3e4752bcabf3bb51763ad0296a03871a1818b884dae72e180de0a72f73d84987cceb0bca13f66025859268fb7929492426a9343a9c343b7a97650c28cae0ba905e0ea5641f41a73f324173872f1b30bc8d5891bb4dc21387930c2a273633a1b3c0e1a15be5dbb822114b9afa649fcd4473d135ba7f23054e565a214e1536ac636d6cc6974f945c844abd552b9a90904f7a778eb98f33ec241f3f2a96c1af37cfdbd969d5b3abe1d8b6185676784f83e917a6e34d8aae42c52444851b725", 0xd4}], 0xa, &(0x7f0000000840)=ANY=[@ANYBLOB="14000000000000002900000008000000c00200000000a70014000000000000002900000034000000ff0f000000"], 0x30}}], 0x1, 0x4010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB], 0x84}}, 0x0) 54.783108577s ago: executing program 8 (id=961): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) readahead(0xffffffffffffffff, 0x0, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x3b6}, 0x0, 0x0) 54.251778594s ago: executing program 3 (id=962): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309acb9"]) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) syz_open_dev$dri(0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x39440, 0x0) readahead(r2, 0x0, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x3b6}, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 39.32130226s ago: executing program 36 (id=961): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) readahead(0xffffffffffffffff, 0x0, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x3b6}, 0x0, 0x0) 38.677983738s ago: executing program 37 (id=962): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x77, 0x141301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000440)=ANY=[@ANYBLOB="0200a0061000070060000000020000a0d33309acb9"]) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) syz_open_dev$dri(0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x39440, 0x0) readahead(r2, 0x0, 0x1) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x3, 0x3b6}, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 13.651542616s ago: executing program 0 (id=1008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rxrpc(0x21, 0x2, 0xa) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x3, 0x2, 0xfffffe0f, {0xa, 0x4e21, 0x2, @private0, 0x2}}, 0x0, 0x0, 0x1}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r4, &(0x7f0000000140)=""/15, 0xf, 0x4) creat(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) gettid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) execve(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) 13.238445898s ago: executing program 2 (id=1010): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) landlock_create_ruleset(&(0x7f0000000940)={0xe134, 0x0, 0x1}, 0xfffffffffffffff0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d}) close(r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"/395], 0x254}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='contention_end\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x2, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="08b4", 0x0, 0xfffffffe, 0x0, 0x0, 0x0}) 10.534153055s ago: executing program 2 (id=1012): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$rose(r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a800008100000088a800000e7be770c1686ff333523efa78516ff715bb3dd31227151323b7a30e378ae800000000000000005cad5dfac0b884a3f0072074c90bc820f4166179377f69ab6fd3428001376dc133"], 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x3c, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x20008040) 10.531606926s ago: executing program 0 (id=1020): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) clock_gettime(0x4, 0x0) syz_emit_vhci(0x0, 0x9) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r4, r0, 0x0) 8.366375702s ago: executing program 2 (id=1014): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca1, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r1 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xba, 0x0) sched_setscheduler(r1, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000500)=ANY=[]) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') fcntl$setownex(r3, 0xf, &(0x7f0000000240)={0x1}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r5], 0x38}, 0x1, 0x0, 0x0, 0x2048800}, 0x24000000) 8.365987301s ago: executing program 6 (id=1015): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0x4c03, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r7 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r5, r6}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) 7.234330121s ago: executing program 6 (id=1016): openat$ppp(0xffffffffffffff9c, 0x0, 0x161142, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x5752c1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}}, 0x20}}, 0x0) syz_emit_vhci(0x0, 0x0) r1 = syz_open_dev$radio(0x0, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000240)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4820) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x2, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_reconf_req={{0x19, 0xf, 0x8}, {0x5, 0x0, [0x3, 0x1000]}}}}, 0x15) 6.456288812s ago: executing program 2 (id=1017): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf25040000000800040002000000080002005066000008000300bc9100000800040000040000050006000000000008000300060000000800"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004c00)=""/102392, 0x18ff8) socket(0x23, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) pwrite64(r1, &(0x7f00000011c0), 0x0, 0x7) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 6.433087364s ago: executing program 6 (id=1018): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) sendmsg$tipc(r8, &(0x7f00000003c0)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000000)="5eb0", 0x2}], 0x1, 0x0, 0x0, 0x26040885}, 0x20000040) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}]}}]}, 0x8c}}, 0x0) 4.950979143s ago: executing program 0 (id=1019): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) clock_gettime(0x4, 0x0) syz_emit_vhci(0x0, 0x9) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r3, 0xffffffffffffffff, 0x0) 4.873439469s ago: executing program 6 (id=1021): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x200}, &(0x7f0000000280)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f00000000c0)=0xc) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, r2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000001180)=[0x1d, 0x810, 0x8, 0x899d, 0x7fffffff, 0x825, 0x7, 0xd, 0xfffffe01, 0x1, 0x4, 0x2, 0x6, 0x6, 0x0], 0x1, 0x4000005}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 3.974599308s ago: executing program 6 (id=1022): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) clock_gettime(0x4, 0x0) syz_emit_vhci(0x0, 0x9) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup3(r3, r0, 0x0) 3.778312694s ago: executing program 0 (id=1023): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) sendmsg$inet6(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)='d', 0x1}], 0x1}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x62}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r4, 0x0, 0x30}, 0xc) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x34000}], 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc8}}, 0x0) 2.679116338s ago: executing program 6 (id=1024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.25026176s ago: executing program 0 (id=1025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000001500009e000040"]) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0x7}, 0x18) socket(0x28, 0x803, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) mkdir(0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) 1.146361058s ago: executing program 2 (id=1026): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000140)) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$alg(0x26, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) shutdown(r6, 0x1) 365.844µs ago: executing program 0 (id=1027): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x5ca1, 0x200, 0xfffffffe, 0x8}, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) r1 = syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0x1a, r1, 0xba, 0x0) sched_setscheduler(r1, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x14}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000500)=ANY=[]) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/snmp\x00') fcntl$setownex(r3, 0xf, &(0x7f0000000240)={0x1}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r5], 0x38}, 0x1, 0x0, 0x0, 0x2048800}, 0x24000000) 0s ago: executing program 2 (id=1028): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x4, 0xfffef034}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x100) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003ec0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003f00)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x6080) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000400)}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000) kernel console output (not intermixed with test programs): DMA32 free:1373652kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:996kB inactive_anon:51544kB active_file:19516kB inactive_file:143804kB unevictable:1536kB writepending:1856kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:48444kB local_pcp:10832kB free_cma:0kB [ 277.114668][ T7225] lowmem_reserve[]: 0 0 1 1 1 [ 277.119555][ T7225] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 277.149133][ T7225] lowmem_reserve[]: 0 0 0 0 0 [ 277.153971][ T7225] Node 1 Normal free:3898460kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18820kB local_pcp:12004kB free_cma:0kB [ 277.188224][ T7225] lowmem_reserve[]: 0 0 0 0 0 [ 277.193090][ T7225] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 277.206209][ T7225] Node 0 DMA32: 339*4kB (UE) 242*8kB (UE) 123*16kB (UME) 106*32kB (UE) 33*64kB (UME) 25*128kB (UME) 9*256kB (UM) 5*512kB (U) 5*1024kB (UME) 5*2048kB (ME) 327*4096kB (UM) = 1373580kB [ 277.224792][ T7225] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 277.237368][ T7225] Node 1 Normal: 205*4kB (UME) 57*8kB (UE) 44*16kB (UE) 137*32kB (UE) 44*64kB (UME) 11*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898460kB [ 277.255676][ T7225] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.265399][ T7225] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 277.277334][ T7225] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 277.287170][ T7225] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 277.296592][ T7225] 49467 total pagecache pages [ 277.301510][ T7225] 0 pages in swap cache [ 277.305743][ T7225] Free swap = 124996kB [ 277.310096][ T7225] Total swap = 124996kB [ 277.314332][ T7225] 2097051 pages RAM [ 277.317603][ T7229] net_ratelimit: 10 callbacks suppressed [ 277.317622][ T7229] openvswitch: netlink: Missing valid actions attribute. [ 277.318206][ T7225] 0 pages HighMem/MovableOnly [ 277.323970][ T7229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.344912][ T7225] 424695 pages reserved [ 277.349242][ T7225] 0 pages cma reserved [ 277.942237][ T7209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 277.951148][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.4.272'. [ 278.042171][ T7209] warning: `syz.4.272' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 280.157225][ T7240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.279'. [ 280.457194][ T7255] tipc: Failed to remove unknown binding: 66,1,1/0:2341088404/2341088406 [ 280.465997][ T7255] tipc: Failed to remove unknown binding: 66,1,1/0:2341088404/2341088406 [ 281.185651][ T7260] netlink: 'syz.3.281': attribute type 11 has an invalid length. [ 281.193886][ T7260] netlink: 224 bytes leftover after parsing attributes in process `syz.3.281'. [ 282.982226][ T7272] Failed to get privilege flags for destination (handle=0x2:0xf7ffffff) [ 287.022704][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 288.464099][ T7330] netlink: 'syz.0.299': attribute type 4 has an invalid length. [ 288.506471][ T7330] netlink: 'syz.0.299': attribute type 4 has an invalid length. [ 289.574239][ T7337] netlink: 'syz.0.299': attribute type 3 has an invalid length. [ 290.763801][ T7348] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 297.727888][ T7417] x_tables: duplicate entry at hook 1 [ 299.871980][ T7431] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 300.504009][ T7431] bond1: entered promiscuous mode [ 300.509357][ T7431] bond1: entered allmulticast mode [ 300.514997][ T7431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 304.491728][ T7465] netlink: 'syz.0.324': attribute type 16 has an invalid length. [ 304.501684][ T7465] netlink: 'syz.0.324': attribute type 17 has an invalid length. [ 304.529636][ T7465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.426053][ T7475] vivid-000: disconnect [ 305.445967][ T7475] vivid-000: reconnect [ 313.018435][ T7521] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 313.018435][ T7521] The task syz.1.335 (7521) triggered the difference, watch for misbehavior. [ 317.269743][ T7552] veth0_to_team: entered promiscuous mode [ 317.275640][ T7552] veth0_to_team: entered allmulticast mode [ 320.044145][ T7568] tipc: Failed to remove unknown binding: 66,1,1/0:2624678099/2624678101 [ 320.053802][ T7568] tipc: Failed to remove unknown binding: 66,1,1/0:2624678099/2624678101 [ 321.231725][ T7580] input: syz1 as /devices/virtual/input/input5 [ 324.968571][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.975057][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.023351][ T7603] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.354' sets config #1 [ 326.707195][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 326.707219][ T30] audit: type=1326 audit(1755743585.142:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 326.927121][ T30] audit: type=1326 audit(1755743585.142:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 327.080330][ T30] audit: type=1326 audit(1755743585.142:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 327.101794][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.132592][ T30] audit: type=1326 audit(1755743585.142:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 328.153976][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.184806][ T30] audit: type=1326 audit(1755743585.142:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 328.223570][ T30] audit: type=1326 audit(1755743585.152:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 328.267382][ T30] audit: type=1326 audit(1755743585.152:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 328.448231][ T30] audit: type=1326 audit(1755743585.152:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 328.469737][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.195142][ T30] audit: type=1326 audit(1755743585.152:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 329.216576][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.223058][ T30] audit: type=1326 audit(1755743585.152:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7594 comm="syz.4.354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x7ffc0000 [ 331.174445][ T7643] tipc: Failed to remove unknown binding: 66,1,1/0:1538149235/1538149237 [ 331.183296][ T7643] tipc: Failed to remove unknown binding: 66,1,1/0:1538149235/1538149237 [ 332.770710][ T7651] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 335.124646][ T7670] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 336.827764][ T7684] fuse: Bad value for 'fd' [ 338.893963][ T7703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.194927][ T7708] syz.4.376: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 340.209918][ T7708] CPU: 0 UID: 0 PID: 7708 Comm: syz.4.376 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 340.209948][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.209975][ T7708] Call Trace: [ 340.209986][ T7708] [ 340.209995][ T7708] dump_stack_lvl+0x189/0x250 [ 340.210033][ T7708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.210059][ T7708] ? __pfx__printk+0x10/0x10 [ 340.210096][ T7708] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.210124][ T7708] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 340.210155][ T7708] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 340.210186][ T7708] warn_alloc+0x214/0x310 [ 340.210212][ T7708] ? stack_depot_save_flags+0x40/0x900 [ 340.210241][ T7708] ? __pfx_warn_alloc+0x10/0x10 [ 340.210269][ T7708] ? kasan_save_track+0x4f/0x80 [ 340.210305][ T7708] ? xskq_create+0x56/0x170 [ 340.210325][ T7708] ? xsk_init_queue+0xb0/0x110 [ 340.210342][ T7708] ? xsk_setsockopt+0x43f/0x710 [ 340.210372][ T7708] ? do_sock_setsockopt+0x179/0x1b0 [ 340.210401][ T7708] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 340.210430][ T7708] ? do_syscall_64+0xfa/0x3b0 [ 340.210452][ T7708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.210483][ T7708] __vmalloc_node_range_noprof+0x125/0x12f0 [ 340.210541][ T7708] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.210575][ T7708] ? __kasan_kmalloc+0x93/0xb0 [ 340.210600][ T7708] vmalloc_user_noprof+0xad/0xf0 [ 340.210625][ T7708] ? xskq_create+0xbf/0x170 [ 340.210648][ T7708] xskq_create+0xbf/0x170 [ 340.210674][ T7708] xsk_init_queue+0xb0/0x110 [ 340.210699][ T7708] xsk_setsockopt+0x43f/0x710 [ 340.210738][ T7708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.210778][ T7708] ? __fget_files+0x2a/0x420 [ 340.210806][ T7708] ? __fget_files+0x2a/0x420 [ 340.210829][ T7708] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 340.210852][ T7708] ? __pfx_xsk_setsockopt+0x10/0x10 [ 340.210889][ T7708] do_sock_setsockopt+0x179/0x1b0 [ 340.210927][ T7708] __x64_sys_setsockopt+0x13f/0x1b0 [ 340.210967][ T7708] do_syscall_64+0xfa/0x3b0 [ 340.210991][ T7708] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.211014][ T7708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.211036][ T7708] ? clear_bhb_loop+0x60/0xb0 [ 340.211063][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.211094][ T7708] RIP: 0033:0x7ff54a58ebe9 [ 340.211115][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.211133][ T7708] RSP: 002b:00007ff54b43f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 340.211157][ T7708] RAX: ffffffffffffffda RBX: 00007ff54a7b6090 RCX: 00007ff54a58ebe9 [ 340.211173][ T7708] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 340.211186][ T7708] RBP: 00007ff54a611e19 R08: 0000000000000052 R09: 0000000000000000 [ 340.211200][ T7708] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.211213][ T7708] R13: 00007ff54a7b6128 R14: 00007ff54a7b6090 R15: 00007ffe169a90d8 [ 340.211248][ T7708] [ 340.211293][ T7708] Mem-Info: [ 340.534648][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 340.534667][ T30] audit: type=1326 audit(1755743599.682:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7704 comm="syz.3.377" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff991d8ebe9 code=0x0 [ 340.566348][ T7708] active_anon:251 inactive_anon:9081 isolated_anon:0 [ 340.566348][ T7708] active_file:5564 inactive_file:35810 isolated_file:0 [ 340.566348][ T7708] unevictable:768 dirty:430 writeback:0 [ 340.566348][ T7708] slab_reclaimable:10082 slab_unreclaimable:97507 [ 340.566348][ T7708] mapped:31413 shmem:5255 pagetables:1127 [ 340.566348][ T7708] sec_pagetables:0 bounce:0 [ 340.566348][ T7708] kernel_misc_reclaimable:0 [ 340.566348][ T7708] free:1328834 free_pcp:13213 free_cma:0 [ 340.612077][ T7708] Node 0 active_anon:1004kB inactive_anon:36324kB active_file:21996kB inactive_file:143240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125600kB dirty:1720kB writeback:0kB shmem:19484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12292kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 340.646154][ T7708] Node 1 active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 340.678756][ T7708] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 340.707660][ T7708] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 340.713667][ T7708] Node 0 DMA32 free:1400212kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1000kB inactive_anon:36284kB active_file:20240kB inactive_file:143172kB unevictable:1536kB writepending:1720kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:35248kB local_pcp:9552kB free_cma:0kB [ 340.746486][ T7708] lowmem_reserve[]: 0 0 1 1 1 [ 340.751523][ T7708] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 340.782527][ T7708] lowmem_reserve[]: 0 0 0 0 0 [ 340.787359][ T7708] Node 1 Normal free:3899744kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:260kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17556kB local_pcp:6048kB free_cma:0kB [ 340.818737][ T7708] lowmem_reserve[]: 0 0 0 0 0 [ 340.823637][ T7708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 340.836385][ T7708] Node 0 DMA32: 36*4kB (UME) 325*8kB (UME) 223*16kB (UM) 392*32kB (UME) 116*64kB (UME) 56*128kB (UME) 23*256kB (UM) 12*512kB (UM) 5*1024kB (UME) 5*2048kB (UME) 327*4096kB (UM) = 1400232kB [ 340.855233][ T7708] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 340.869041][ T7708] Node 1 Normal: 206*4kB (UME) 57*8kB (UE) 44*16kB (UE) 163*32kB (UE) 49*64kB (UME) 12*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3899744kB [ 340.887233][ T7708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.897015][ T7708] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.906442][ T7708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 340.916408][ T7708] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 340.926060][ T7708] 46625 total pagecache pages [ 340.930815][ T7708] 0 pages in swap cache [ 340.935000][ T7708] Free swap = 124996kB [ 340.939202][ T7708] Total swap = 124996kB [ 340.943367][ T7708] 2097051 pages RAM [ 340.947228][ T7708] 0 pages HighMem/MovableOnly [ 340.951909][ T7708] 424695 pages reserved [ 340.956091][ T7708] 0 pages cma reserved [ 345.091158][ T7732] CUSE: unknown device info "KJ éH+ßãÛ¤2Lh¸änLþ1Õ`†CcÝòn§õ†îì8­¨×0º©®(À3Õ¶ië®â>f¡Çè_Ù®,°ð<Ö_e¤FÀÆ" [ 345.103068][ T7732] CUSE: unknown device info "3ÜŸ•,²¥Ì˜õ" [ 345.109082][ T7732] CUSE: unknown device info "Jô©Ð2S Zûü !e/ëÅúãõž‘­J½+-n´¸a4¼ßØÁDÿ|G$öó­5O~©q ´ƒ [ 345.109082][ T7732] f𳦧ìýzóÚXÁSAäx¡Ùjª½T¾Ç”¨åw— üæšxRÉQ÷®(hÒj pøVdY0¨Æ|M?2JÿúIšvö^RÎ@´å" [ 345.128154][ T7732] CUSE: unknown device info "!ToÛ}Ý&|L+U²®oæõϲ±„Ð"–¨FstVµ:׌E• gJºî‹ÂÁ<@cÁ”²ûŽ4ÊTáM˜M|©·š‚ô" [ 345.139537][ T7732] CUSE: DEVNAME unspecified [ 345.206657][ T30] audit: type=1326 audit(1755743604.322:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7725 comm="syz.2.380" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f421338ebe9 code=0x0 [ 345.895572][ T7720] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.660781][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.670697][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.679822][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.750433][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.769349][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.581444][ T78] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.017493][ T5850] Bluetooth: hci2: command tx timeout [ 351.685617][ T7778] random: crng reseeded on system resumption [ 353.360357][ T5850] Bluetooth: hci2: command tx timeout [ 353.360463][ T5853] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 353.394296][ T78] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.368597][ T5853] Bluetooth: hci2: command tx timeout [ 357.646416][ T5853] Bluetooth: hci2: command tx timeout [ 357.703077][ T78] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.721145][ T78] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.509053][ T7848] ubi31: attaching mtd0 [ 361.536427][ T7848] ubi31: scanning is finished [ 361.541309][ T7848] ubi31: empty MTD device detected [ 363.304411][ T7853] ceph: No mds server is up or the cluster is laggy [ 363.314003][ T24] libceph: connect (1)[c::]:6789 error -101 [ 363.707421][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 363.799296][ T7858] bridge2: entered promiscuous mode [ 363.805600][ T7858] bridge2: entered allmulticast mode [ 363.819023][ T7858] team0: Port device bridge2 added [ 364.024198][ T7848] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 364.033842][ T7848] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 364.041317][ T7848] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 364.048444][ T7848] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 364.055979][ T7848] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 364.063091][ T7848] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 364.071283][ T7848] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2580619416 [ 364.081541][ T7848] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 364.128364][ T7860] ubi31: background thread "ubi_bgt31d" started, PID 7860 [ 364.666960][ T7868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 365.331129][ T78] bridge_slave_1: left allmulticast mode [ 365.360714][ T78] bridge_slave_1: left promiscuous mode [ 365.580143][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.215349][ T7878] new mount options do not match the existing superblock, will be ignored [ 366.230559][ T7878] option changes via remount are deprecated (pid=7865 comm=syz.3.405) [ 366.956112][ T9] libceph: connect (1)[c::]:6789 error -101 [ 366.962421][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 367.311935][ T9] libceph: connect (1)[c::]:6789 error -101 [ 367.403707][ T7891] befs: (nullb0): invalid magic header [ 367.975695][ T7883] ceph: No mds server is up or the cluster is laggy [ 367.993970][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 368.459570][ T5956] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 368.743070][ T9] libceph: connect (1)[c::]:6789 error -101 [ 368.863232][ T78] bridge_slave_0: left allmulticast mode [ 368.905630][ T5956] usb 5-1: device descriptor read/64, error -71 [ 368.926268][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 369.013731][ T78] bridge_slave_0: left promiscuous mode [ 369.181687][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.396568][ T5956] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 369.840244][ T5956] usb 5-1: device descriptor read/64, error -71 [ 370.177412][ T5956] usb usb5-port1: attempt power cycle [ 384.120165][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.126544][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.931852][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.959627][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.984265][ T78] bond0 (unregistering): Released all slaves [ 385.712345][ T78] bond1 (unregistering): Released all slaves [ 386.527253][ T7752] chnl_net:caif_netlink_parms(): no params data found [ 386.924040][ T30] audit: type=1326 audit(1755743646.072:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7987 comm="syz.4.426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff54a58ebe9 code=0x0 [ 388.176043][ T8006] Bluetooth: MGMT ver 1.23 [ 394.685335][ T8046] tipc: Failed to remove unknown binding: 66,1,1/0:2462094693/2462094695 [ 394.695175][ T8046] tipc: Failed to remove unknown binding: 66,1,1/0:2462094693/2462094695 [ 396.250894][ T78] hsr_slave_0: left promiscuous mode [ 396.466323][ T78] hsr_slave_1: left promiscuous mode [ 396.552055][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.657438][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.770471][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.799814][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.791967][ T78] veth1_macvtap: left promiscuous mode [ 397.814309][ T78] veth0_macvtap: left promiscuous mode [ 397.838327][ T78] veth1_vlan: left promiscuous mode [ 397.860056][ T78] veth0_vlan: left promiscuous mode [ 402.677592][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 402.737158][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 402.748483][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 402.758752][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 402.766944][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 404.806870][ T5853] Bluetooth: hci5: command tx timeout [ 405.374597][ T8116] tipc: Failed to remove unknown binding: 66,1,1/0:3980856054/3980856056 [ 405.389347][ T8116] tipc: Failed to remove unknown binding: 66,1,1/0:3980856054/3980856056 [ 406.161719][ T6091] IPVS: starting estimator thread 0... [ 406.307229][ T8122] IPVS: using max 22 ests per chain, 52800 per kthread [ 406.860551][ T8127] qrtr: Invalid version 47 [ 407.089166][ T5853] Bluetooth: hci5: command tx timeout [ 408.036533][ T78] team0 (unregistering): Port device team_slave_1 removed [ 408.841649][ T78] team0 (unregistering): Port device team_slave_0 removed [ 409.147168][ T5853] Bluetooth: hci5: command tx timeout [ 411.763825][ T5853] Bluetooth: hci5: command tx timeout [ 412.955286][ T5850] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 412.967470][ T5850] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 412.980341][ T5850] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 412.990619][ T5850] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 413.005457][ T5850] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.391892][ T7752] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.399913][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.407412][ T7752] bridge_slave_0: entered allmulticast mode [ 414.415964][ T7752] bridge_slave_0: entered promiscuous mode [ 415.140397][ T5853] Bluetooth: hci6: command tx timeout [ 415.324717][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.332343][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.378286][ T8175] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 416.581525][ T8180] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 416.588471][ T8180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.629280][ T8182] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(13) [ 416.637525][ T8182] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 416.737068][ T8182] vhci_hcd vhci_hcd.0: Device attached [ 416.776042][ T8180] vhci_hcd vhci_hcd.0: Device attached [ 416.988699][ T8194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 417.159472][ T8191] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(16) [ 417.166332][ T8191] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 417.203960][ T24] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 417.286908][ T5853] Bluetooth: hci6: command tx timeout [ 419.231571][ T8180] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 419.238270][ T8180] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 419.271919][ T8180] vhci_hcd vhci_hcd.0: Device attached [ 419.439814][ T5853] Bluetooth: hci6: command tx timeout [ 419.519281][ T8191] vhci_hcd vhci_hcd.0: Device attached [ 419.604956][ T8182] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 419.611645][ T8182] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 419.652486][ T8194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 419.903202][ T8211] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 420.794002][ T8182] vhci_hcd vhci_hcd.0: Device attached [ 420.813442][ T8180] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 421.368194][ T8208] vhci_hcd: connection closed [ 421.368511][ T8206] vhci_hcd: connection closed [ 421.374074][ T1098] vhci_hcd: stop threads [ 421.378306][ T8192] vhci_hcd: connection closed [ 421.378993][ T8183] vhci_hcd: connection reset by peer [ 421.393519][ T8185] vhci_hcd: connection closed [ 421.418567][ T1098] vhci_hcd: release socket [ 421.447024][ T5853] Bluetooth: hci6: command tx timeout [ 421.496308][ T8226] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 421.608651][ T1098] vhci_hcd: disconnect device [ 421.818146][ T1098] vhci_hcd: stop threads [ 421.822494][ T1098] vhci_hcd: release socket [ 421.831497][ T1098] vhci_hcd: disconnect device [ 421.856903][ T1098] vhci_hcd: stop threads [ 421.869223][ T1098] vhci_hcd: release socket [ 421.873946][ T1098] vhci_hcd: disconnect device [ 422.471791][ T8184] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 422.597253][ T1098] vhci_hcd: stop threads [ 422.601580][ T1098] vhci_hcd: release socket [ 422.611375][ T1098] vhci_hcd: disconnect device [ 422.616262][ T1098] vhci_hcd: stop threads [ 422.621283][ T1098] vhci_hcd: release socket [ 422.627742][ T1098] vhci_hcd: disconnect device [ 422.707020][ T24] vhci_hcd: vhci_device speed not set [ 424.808869][ T8259] overlayfs: failed to resolve './file1': -2 [ 425.042834][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 425.205165][ T5940] usb usb34-port1: attempt power cycle [ 425.215513][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 425.306616][ T78] IPVS: stop unused estimator thread 0... [ 425.838348][ T5940] usb usb34-port1: unable to enumerate USB device [ 426.102426][ T980] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 426.693010][ T8096] chnl_net:caif_netlink_parms(): no params data found [ 426.747947][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.770841][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.795558][ T8153] bridge_slave_0: entered allmulticast mode [ 426.818022][ T8153] bridge_slave_0: entered promiscuous mode [ 426.909830][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.937091][ T980] usb 1-1: Using ep0 maxpacket: 8 [ 426.942459][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.002009][ T8153] bridge_slave_1: entered allmulticast mode [ 427.111547][ T8286] overlay: Unknown parameter '/' [ 427.841210][ T8153] bridge_slave_1: entered promiscuous mode [ 429.662968][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.935411][ T8307] No such timeout policy "syz1" [ 430.666119][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.811103][ T8310] tmpfs: Bad value for 'mpol' [ 431.267131][ T980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 431.285709][ T980] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 431.326807][ T980] usb 1-1: can't read configurations, error -71 [ 431.341802][ T8308] xt_hashlimit: max too large, truncated to 1048576 [ 431.535268][ T8310] xt_connbytes: Forcing CT accounting to be enabled [ 432.276872][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.403875][ T8310] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 432.818377][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 432.868781][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 433.089856][ T8324] ceph: No mds server is up or the cluster is laggy [ 433.991771][ T8153] team0: Port device team_slave_0 added [ 434.060572][ T5940] libceph: connect (1)[c::]:6789 error -101 [ 434.066714][ T5940] libceph: mon0 (1)[c::]:6789 connect error [ 435.332510][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.148912][ T8096] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.156134][ T8096] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.165808][ T8343] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 437.210369][ T8343] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 437.357137][ T8096] bridge_slave_0: entered allmulticast mode [ 437.368410][ T8096] bridge_slave_0: entered promiscuous mode [ 437.380489][ T8153] team0: Port device team_slave_1 added [ 441.173445][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.246177][ T8096] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.270862][ T8096] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.279743][ T8096] bridge_slave_1: entered allmulticast mode [ 441.299853][ T8096] bridge_slave_1: entered promiscuous mode [ 441.633209][ T8362] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 442.466916][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.420890][ T8373] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 443.927021][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.944300][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.975645][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.005625][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.024604][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.063188][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.097996][ T8377] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 444.222530][ T8096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.224621][ T8096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.292195][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.341222][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.829150][ T8387] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-™ú:‡/": -EINTR [ 445.904591][ T8153] hsr_slave_0: entered promiscuous mode [ 446.014569][ T8153] hsr_slave_1: entered promiscuous mode [ 446.038140][ T8153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.045883][ T8153] Cannot create hsr debugfs directory [ 447.896227][ T8405] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 447.896976][ T8406] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 448.016497][ T8409] tipc: Failed to remove unknown binding: 66,1,1/0:1861876818/1861876820 [ 448.037561][ T8096] team0: Port device team_slave_0 added [ 448.156585][ T8409] tipc: Failed to remove unknown binding: 66,1,1/0:1861876818/1861876820 [ 449.397116][ T8423] netlink: 'syz.0.497': attribute type 8 has an invalid length. [ 450.017306][ T8096] team0: Port device team_slave_1 added [ 450.408418][ T8424] netlink: 'syz.3.498': attribute type 10 has an invalid length. [ 450.416688][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.498'. [ 451.607664][ T8424] batman_adv: batadv0: Adding interface: virt_wifi0 [ 451.614370][ T8424] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.787484][ T8424] batman_adv: batadv0: Interface activated: virt_wifi0 [ 451.894446][ T8440] netlink: 60 bytes leftover after parsing attributes in process `syz.2.501'. [ 451.915008][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.923870][ T8440] unsupported nlmsg_type 40 [ 451.947499][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.501'. [ 452.276301][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.407407][ T8096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.438883][ T8096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.445995][ T8096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.094425][ T8096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.116326][ T78] bridge_slave_0: left allmulticast mode [ 454.125791][ T78] bridge_slave_0: left promiscuous mode [ 454.132373][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.529454][ T78] bond0 (unregistering): Released all slaves [ 457.151536][ T8481] netlink: zone id is out of range [ 457.151650][ T8481] netlink: zone id is out of range [ 457.151683][ T8481] netlink: zone id is out of range [ 457.151769][ T8481] netlink: zone id is out of range [ 457.151802][ T8481] netlink: zone id is out of range [ 457.151834][ T8481] netlink: zone id is out of range [ 457.151867][ T8481] netlink: zone id is out of range [ 457.151899][ T8481] netlink: zone id is out of range [ 457.152136][ T8481] netlink: zone id is out of range [ 457.152169][ T8481] netlink: zone id is out of range [ 458.867430][ T8487] tipc: Failed to remove unknown binding: 66,1,1/0:2516940317/2516940319 [ 458.897167][ T8487] tipc: Failed to remove unknown binding: 66,1,1/0:2516940317/2516940319 [ 460.258225][ T8500] block nbd0: NBD_DISCONNECT [ 460.264857][ T8500] block nbd0: Send disconnect failed -32 [ 460.270906][ T8500] block nbd0: Disconnected due to user request. [ 460.277278][ T8500] block nbd0: shutting down sockets [ 461.209619][ T8507] kAFS: unable to lookup cell '/,' [ 462.861497][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.881260][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 463.893293][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.107056][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.118710][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.127906][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.212873][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.338650][ T78] bond0 (unregistering): Released all slaves [ 466.218064][ T8533] trusted_key: encrypted_key: insufficient parameters specified [ 466.351669][ T5850] Bluetooth: hci2: command tx timeout [ 467.107929][ T78] bond1 (unregistering): Released all slaves [ 467.349851][ T8545] tipc: Failed to remove unknown binding: 66,1,1/0:3204002605/3204002607 [ 467.394017][ T8545] tipc: Failed to remove unknown binding: 66,1,1/0:3204002605/3204002607 [ 467.426391][ T8546] 9pnet_fd: Insufficient options for proto=fd [ 468.468415][ T5850] Bluetooth: hci2: command tx timeout [ 469.444607][ T8558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 469.521852][ T78] hsr_slave_0: left promiscuous mode [ 469.601219][ T78] hsr_slave_1: left promiscuous mode [ 469.666701][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.938243][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.038838][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.122253][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.272414][ T78] veth1_macvtap: left promiscuous mode [ 470.289641][ T78] veth0_macvtap: left promiscuous mode [ 470.312708][ T78] veth1_vlan: left promiscuous mode [ 470.327203][ T78] veth0_vlan: left promiscuous mode [ 470.487149][ T5850] Bluetooth: hci2: command tx timeout [ 472.636847][ T5850] Bluetooth: hci2: command tx timeout [ 473.558928][ T8590] binder: BINDER_SET_CONTEXT_MGR already set [ 473.565749][ T8590] binder: 8587:8590 ioctl 4018620d 200000000040 returned -16 [ 474.170029][ T8594] netlink: 256 bytes leftover after parsing attributes in process `syz.0.528'. [ 475.219037][ T8605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 476.391342][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 476.405012][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 476.413817][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 476.422185][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 476.444486][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 476.925866][ T8618] fuse: Bad value for 'user_id' [ 476.931127][ T8618] fuse: Bad value for 'user_id' [ 477.064369][ T78] team_slave_1 (unregistering): left promiscuous mode [ 477.078569][ T78] team_slave_1 (unregistering): left allmulticast mode [ 477.101015][ T78] team0 (unregistering): Port device team_slave_1 removed [ 477.203571][ T78] team_slave_0 (unregistering): left promiscuous mode [ 477.225627][ T78] team_slave_0 (unregistering): left allmulticast mode [ 477.252473][ T78] team0 (unregistering): Port device team_slave_0 removed [ 478.487230][ T5850] Bluetooth: hci4: command tx timeout [ 480.628401][ T5850] Bluetooth: hci4: command tx timeout [ 481.390171][ T8643] xt_SECMARK: invalid mode: 2 [ 482.646936][ T5850] Bluetooth: hci4: command tx timeout [ 483.903524][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 484.816940][ T5850] Bluetooth: hci4: command tx timeout [ 487.496932][ T8610] chnl_net:caif_netlink_parms(): no params data found [ 488.080172][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.203587][ T8680] xt_TPROXY: Can be used only with -p tcp or -p udp [ 488.787571][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.795102][ T8514] bridge_slave_0: entered allmulticast mode [ 488.925424][ T8514] bridge_slave_0: entered promiscuous mode [ 488.940107][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.947443][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.954820][ T8514] bridge_slave_1: entered allmulticast mode [ 488.969254][ T8514] bridge_slave_1: entered promiscuous mode [ 489.373434][ T8691] netlink: 'syz.2.544': attribute type 32 has an invalid length. [ 493.059576][ T78] IPVS: stop unused estimator thread 0... [ 493.062353][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.381524][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.514273][ T8610] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.545994][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.563799][ T8610] bridge_slave_0: entered allmulticast mode [ 494.608323][ T8610] bridge_slave_0: entered promiscuous mode [ 494.702152][ T8514] team0: Port device team_slave_0 added [ 494.704633][ T30] audit: type=1326 audit(1755743753.853:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8728 comm="syz.0.550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5f038ebe9 code=0x0 [ 494.741149][ T8514] team0: Port device team_slave_1 added [ 494.913810][ T8610] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.956950][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.029112][ T8610] bridge_slave_1: entered allmulticast mode [ 495.037724][ T8610] bridge_slave_1: entered promiscuous mode [ 496.402326][ T8738] net_ratelimit: 7 callbacks suppressed [ 496.402349][ T8738] sctp: failed to load transform for md5: -2 [ 497.684151][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.725439][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.764389][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.297850][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.304951][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.636179][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.872122][ T8610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.594037][ T8778] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 502.594422][ T8610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.742677][ T8610] team0: Port device team_slave_0 added [ 505.082645][ T8514] hsr_slave_0: entered promiscuous mode [ 505.622687][ T8514] hsr_slave_1: entered promiscuous mode [ 505.636676][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.644465][ T8514] Cannot create hsr debugfs directory [ 505.824575][ T8610] team0: Port device team_slave_1 added [ 506.767324][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.773776][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.100147][ T8811] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 507.927742][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.056537][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.144981][ T8818] fuse: Unknown parameter '0x0000000000000005' [ 508.842501][ T8610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.902107][ T8610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.931726][ T8610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.137053][ T8610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.303624][ T8610] hsr_slave_0: entered promiscuous mode [ 512.310566][ T8610] hsr_slave_1: entered promiscuous mode [ 512.317865][ T8610] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.325595][ T8610] Cannot create hsr debugfs directory [ 512.606828][ T8847] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 512.618888][ T8847] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 515.915054][ T78] bridge_slave_1: left allmulticast mode [ 515.921918][ T78] bridge_slave_1: left promiscuous mode [ 515.941045][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.084075][ T78] bridge_slave_0: left allmulticast mode [ 516.093192][ T78] bridge_slave_0: left promiscuous mode [ 516.206408][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.451604][ T78] bridge_slave_1: left allmulticast mode [ 516.476825][ T78] bridge_slave_1: left promiscuous mode [ 516.484691][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.523548][ T78] bridge_slave_0: left allmulticast mode [ 516.561443][ T78] bridge_slave_0: left promiscuous mode [ 516.595448][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.102800][ T8889] input: syz0 as /devices/virtual/input/input6 [ 518.199694][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.573233][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.737554][ T78] bond0 (unregistering): Released all slaves [ 519.352122][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 519.404727][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 519.472221][ T78] bond0 (unregistering): Released all slaves [ 519.502228][ T8865] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 520.707387][ T8908] tipc: Failed to remove unknown binding: 66,1,1/0:1994008292/1994008294 [ 520.760735][ T8908] tipc: Failed to remove unknown binding: 66,1,1/0:1994008292/1994008294 [ 520.897226][ T121] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 521.198641][ T8920] tipc: Failed to remove unknown binding: 66,1,1/0:4055198895/4055198897 [ 521.436921][ T8920] tipc: Failed to remove unknown binding: 66,1,1/0:4055198895/4055198897 [ 521.461139][ T78] hsr_slave_0: left promiscuous mode [ 521.475437][ T78] hsr_slave_1: left promiscuous mode [ 522.397015][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.448696][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.501955][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.526430][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.050789][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 523.768717][ T8937] netlink: 'syz.3.582': attribute type 8 has an invalid length. [ 523.781266][ T121] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 523.804558][ T121] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 526.285372][ T8950] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 526.292667][ T8950] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 526.299747][ T8950] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 526.308288][ T8950] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 526.317972][ T8950] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 526.324839][ T8950] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 526.383234][ T8950] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 526.865610][ T78] team0 (unregistering): Port device team_slave_1 removed [ 526.901991][ T78] team0 (unregistering): Port device team_slave_0 removed [ 527.221217][ T78] team0 (unregistering): Port device team_slave_1 removed [ 527.257929][ T78] team0 (unregistering): Port device team_slave_0 removed [ 529.573396][ T8962] qrtr: Invalid version 47 [ 529.719278][ T8965] fuse: Unknown parameter 'fd0x0000000000000009' [ 530.290090][ T8610] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 530.325148][ T8610] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 530.339702][ T8610] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 530.360039][ T8610] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 530.494120][ T8610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.531136][ T8610] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.546550][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.553824][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.601070][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.608353][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.944639][ T8610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.359685][ T8610] veth0_vlan: entered promiscuous mode [ 531.381259][ T8610] veth1_vlan: entered promiscuous mode [ 531.433767][ T8610] veth0_macvtap: entered promiscuous mode [ 531.473709][ T8610] veth1_macvtap: entered promiscuous mode [ 531.504057][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.522090][ T8610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.541577][ T8610] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.551850][ T8610] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.561628][ T8610] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.571788][ T8610] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.852295][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 531.859325][ T121] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 531.865545][ T121] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 531.919201][ T9021] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 531.958335][ T9021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 531.973705][ T9021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 531.984412][ T9021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 531.994198][ T9021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 532.281975][ T13] bridge_slave_1: left allmulticast mode [ 532.298035][ T13] bridge_slave_1: left promiscuous mode [ 532.303899][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.376825][ T13] bridge_slave_0: left allmulticast mode [ 532.382730][ T13] bridge_slave_0: left promiscuous mode [ 532.397201][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.620570][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.644078][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.661580][ T9021] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.671755][ T9021] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 532.682119][ T13] bond0 (unregistering): Released all slaves [ 532.685341][ T9021] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 532.700475][ T9021] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 532.715259][ T9021] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.828587][ T13] hsr_slave_0: left promiscuous mode [ 532.834745][ T13] hsr_slave_1: left promiscuous mode [ 532.841098][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.850116][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.026425][ T13] team0 (unregistering): Port device team_slave_1 removed [ 533.067413][ T13] team0 (unregistering): Port device team_slave_0 removed [ 533.700852][ T8933] chnl_net:caif_netlink_parms(): no params data found [ 533.903213][ T9028] chnl_net:caif_netlink_parms(): no params data found [ 533.970106][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.006957][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.014185][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.031296][ T8933] bridge_slave_0: entered allmulticast mode [ 534.039520][ T8933] bridge_slave_0: entered promiscuous mode [ 534.054894][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.062731][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.070775][ T8933] bridge_slave_1: entered allmulticast mode [ 534.079373][ T8933] bridge_slave_1: entered promiscuous mode [ 534.096913][ T9021] Bluetooth: hci5: command tx timeout [ 534.199448][ T8933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.214779][ T8933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.312424][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.476426][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.515078][ T8933] team0: Port device team_slave_0 added [ 534.525462][ T8933] team0: Port device team_slave_1 added [ 534.542578][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.556073][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.565361][ T9028] bridge_slave_0: entered allmulticast mode [ 534.600441][ T9028] bridge_slave_0: entered promiscuous mode [ 534.655033][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.704100][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.717989][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.725351][ T9028] bridge_slave_1: entered allmulticast mode [ 534.739586][ T9028] bridge_slave_1: entered promiscuous mode [ 534.808221][ T9021] Bluetooth: hci2: command tx timeout [ 534.815321][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.827830][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.855692][ T8933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.893806][ T8933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.901289][ T8933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.927511][ T8933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 534.955307][ T9028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.968717][ T9028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.085103][ T9028] team0: Port device team_slave_0 added [ 535.114373][ T8933] hsr_slave_0: entered promiscuous mode [ 535.121733][ T8933] hsr_slave_1: entered promiscuous mode [ 535.132876][ T8933] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.140755][ T8933] Cannot create hsr debugfs directory [ 535.155687][ T9028] team0: Port device team_slave_1 added [ 535.242399][ T13] bridge_slave_1: left allmulticast mode [ 535.251405][ T13] bridge_slave_1: left promiscuous mode [ 535.257620][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.268925][ T13] bridge_slave_0: left allmulticast mode [ 535.274635][ T13] bridge_slave_0: left promiscuous mode [ 535.281382][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.634697][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.647010][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 535.659073][ T13] bond0 (unregistering): Released all slaves [ 535.753989][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.761654][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.793364][ T9028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.822459][ T9028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.829944][ T9028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.857734][ T9028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.978621][ T13] hsr_slave_0: left promiscuous mode [ 535.985031][ T13] hsr_slave_1: left promiscuous mode [ 536.000445][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.017196][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.025586][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.040904][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.076447][ T13] veth1_macvtap: left promiscuous mode [ 536.083466][ T13] veth0_macvtap: left promiscuous mode [ 536.097332][ T13] veth1_vlan: left promiscuous mode [ 536.102878][ T13] veth0_vlan: left promiscuous mode [ 536.167324][ T9021] Bluetooth: hci5: command tx timeout [ 536.792319][ T13] team0 (unregistering): Port device team_slave_1 removed [ 536.843557][ T13] team0 (unregistering): Port device team_slave_0 removed [ 536.887068][ T9021] Bluetooth: hci2: command tx timeout [ 537.327313][ T9028] hsr_slave_0: entered promiscuous mode [ 537.333799][ T9028] hsr_slave_1: entered promiscuous mode [ 537.341297][ T9028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.353764][ T9028] Cannot create hsr debugfs directory [ 537.737095][ T8933] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 537.763628][ T8933] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 537.821205][ T8933] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 537.836073][ T8933] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 538.203292][ T8933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.247016][ T9021] Bluetooth: hci5: command tx timeout [ 538.274325][ T8933] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.312346][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.319678][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.376555][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.384066][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.422099][ T9028] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 538.443964][ T9028] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 538.459450][ T9028] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 538.485590][ T9028] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 538.745793][ T9028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.802502][ T9028] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.815448][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.822705][ T7869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.846760][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.854067][ T6046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.967483][ T9021] Bluetooth: hci2: command tx timeout [ 539.100981][ T8933] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.533644][ T9028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.625183][ T8933] veth0_vlan: entered promiscuous mode [ 539.646057][ T8933] veth1_vlan: entered promiscuous mode [ 539.751857][ T8933] veth0_macvtap: entered promiscuous mode [ 539.770818][ T8933] veth1_macvtap: entered promiscuous mode [ 539.826480][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.883419][ T8933] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.912974][ T8933] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.933037][ T8933] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.944563][ T8933] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.954785][ T8933] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.124148][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.158603][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.225053][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.234227][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.308454][ T9028] veth0_vlan: entered promiscuous mode [ 540.329102][ T9021] Bluetooth: hci5: command tx timeout [ 540.350875][ T9028] veth1_vlan: entered promiscuous mode [ 540.733017][ T9028] veth0_macvtap: entered promiscuous mode [ 540.752375][ T9028] veth1_macvtap: entered promiscuous mode [ 541.386823][ T9021] Bluetooth: hci2: command tx timeout [ 541.778663][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.799928][ T9028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.923950][ T9169] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 542.057158][ T9028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.106136][ T9028] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.118679][ T9028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.424596][ T9028] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.768332][ T9181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 545.092212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.358082][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.790223][ T7869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.798287][ T7869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.726883][ T9202] macvtap1: entered allmulticast mode [ 546.732500][ T9202] veth0_macvtap: entered allmulticast mode [ 549.558582][ T9234] netlink: 100 bytes leftover after parsing attributes in process `syz.2.605'. [ 563.568600][ T9330] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.624'. [ 565.820154][ T9349] misc userio: No port type given on /dev/userio [ 568.899729][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.907504][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.883552][ T9390] tipc: Failed to remove unknown binding: 66,1,1/0:1903966166/1903966168 [ 571.892419][ T9390] tipc: Failed to remove unknown binding: 66,1,1/0:1903966166/1903966168 [ 573.364407][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.375570][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.384509][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.397297][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.405093][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 575.447652][ T5850] Bluetooth: hci4: command tx timeout [ 575.501775][ T9404] xt_hashlimit: overflow, rate too high: 0 [ 576.294864][ T9423] ptrace attach of "./syz-executor exec"[9424] was attempted by "./syz-executor exec"[9423] [ 577.574994][ T5850] Bluetooth: hci4: command tx timeout [ 579.880933][ T5850] Bluetooth: hci4: command tx timeout [ 580.563623][ T9428] libceph: resolve '4' (ret=-3): failed [ 581.183746][ T9441] lo speed is unknown, defaulting to 1000 [ 581.190568][ T9441] lo speed is unknown, defaulting to 1000 [ 581.200335][ T9441] lo speed is unknown, defaulting to 1000 [ 581.211709][ T9441] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 581.226279][ T9441] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 581.263026][ T9441] lo speed is unknown, defaulting to 1000 [ 581.272299][ T9441] lo speed is unknown, defaulting to 1000 [ 581.279578][ T9441] lo speed is unknown, defaulting to 1000 [ 581.286626][ T9441] lo speed is unknown, defaulting to 1000 [ 581.293740][ T9441] lo speed is unknown, defaulting to 1000 [ 581.301606][ T9441] lo speed is unknown, defaulting to 1000 [ 581.411845][ T9448] Device name cannot be null; rc = [-22] [ 582.220215][ T5850] Bluetooth: hci4: command tx timeout [ 582.718788][ T9459] netlink: 'syz.0.650': attribute type 2 has an invalid length. [ 583.106563][ T78] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.475803][ T9463] tipc: Failed to remove unknown binding: 66,1,1/0:917453796/917453798 [ 585.516912][ T9463] tipc: Failed to remove unknown binding: 66,1,1/0:917453796/917453798 [ 585.633641][ T78] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.872529][ T9401] chnl_net:caif_netlink_parms(): no params data found [ 586.065173][ T78] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.169382][ T9485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.512850][ T78] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.678156][ T9493] No such timeout policy "syz0" [ 590.969258][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.976408][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.050678][ T9401] bridge_slave_0: entered allmulticast mode [ 591.059989][ T9401] bridge_slave_0: entered promiscuous mode [ 591.089636][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.109084][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.309012][ T9401] bridge_slave_1: entered allmulticast mode [ 591.329407][ T9401] bridge_slave_1: entered promiscuous mode [ 593.102459][ T9401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.160824][ T9401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.519679][ T9523] ubi: mtd0 is already attached to ubi31 [ 595.842860][ T9401] team0: Port device team_slave_0 added [ 595.944550][ T9401] team0: Port device team_slave_1 added [ 596.105434][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.115910][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.196018][ T9401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.242604][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.258736][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.292214][ T9401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.938731][ T78] bridge_slave_1: left allmulticast mode [ 596.962615][ T78] bridge_slave_1: left promiscuous mode [ 596.984151][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.032348][ T78] bridge_slave_0: left allmulticast mode [ 597.052246][ T78] bridge_slave_0: left promiscuous mode [ 597.228447][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.646836][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 601.146850][ T43] usb 7-1: device not accepting address 2, error -71 [ 602.059103][ T9623] program syz.6.676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.120254][ T9623] program syz.6.676 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 602.133122][ T9623] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 603.881005][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.962507][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.998088][ T78] bond0 (unregistering): Released all slaves [ 604.238577][ T78] bond1 (unregistering): Released all slaves [ 605.597539][ T9401] hsr_slave_0: entered promiscuous mode [ 605.615439][ T9401] hsr_slave_1: entered promiscuous mode [ 605.634108][ T9401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.641876][ T9401] Cannot create hsr debugfs directory [ 607.257686][ T9021] Bluetooth: hci4: command 0x0405 tx timeout [ 607.335898][ T9648] netlink: 'syz.3.682': attribute type 10 has an invalid length. [ 608.335964][ T9655] xt_nat: multiple ranges no longer supported [ 608.377791][ T9648] team0: Port device wlan1 added [ 610.340194][ T9670] comedi comedi4: comedi_config --init_data is deprecated [ 610.358866][ T78] hsr_slave_0: left promiscuous mode [ 610.574014][ T78] hsr_slave_1: left promiscuous mode [ 611.351064][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.798760][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.847461][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.864493][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.990086][ T9674] input: syz0 as /devices/virtual/input/input7 [ 612.028847][ T78] veth1_macvtap: left promiscuous mode [ 612.051564][ T78] veth0_macvtap: left promiscuous mode [ 612.078288][ T78] veth1_vlan: left promiscuous mode [ 612.442596][ T78] veth0_vlan: left promiscuous mode [ 613.785257][ T9699] netlink: 'syz.6.693': attribute type 11 has an invalid length. [ 613.806012][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.6.693'. [ 615.547370][ T2156] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 615.854553][ T2156] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.877557][ T2156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.893289][ T2156] usb 3-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 615.907543][ T2156] usb 3-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 615.940747][ T2156] usb 3-1: config 1 interface 1 has no altsetting 0 [ 615.966182][ T2156] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.968170][ T78] team0 (unregistering): Port device team_slave_1 removed [ 615.980109][ T2156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.005012][ T2156] usb 3-1: Product: syz [ 616.010449][ T2156] usb 3-1: Manufacturer: syz [ 616.016138][ T2156] usb 3-1: SerialNumber: syz [ 616.043707][ T2156] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 616.124067][ T78] team0 (unregistering): Port device team_slave_0 removed [ 616.754154][ T9401] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 616.772203][ T9401] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 616.795221][ T9401] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 616.869669][ T9401] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 618.190234][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.6.697'. [ 619.154391][ T9401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.301130][ T121] usb 3-1: USB disconnect, device number 4 [ 619.621244][ T9401] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.665983][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.673277][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.749630][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.756945][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.933228][ T9401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.021204][ T9751] netlink: 68 bytes leftover after parsing attributes in process `syz.2.703'. [ 623.807530][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 624.291032][ T30] audit: type=1326 audit(1755743883.433:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 624.477871][ T9763] sctp: [Deprecated]: syz.3.705 (pid 9763) Use of int in maxseg socket option. [ 624.477871][ T9763] Use struct sctp_assoc_value instead [ 624.718674][ T9605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 624.735871][ T9760] IPVS: stopping backup sync thread 9761 ... [ 624.737442][ T9761] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 624.758125][ T121] IPVS: starting estimator thread 0... [ 624.763757][ T30] audit: type=1326 audit(1755743883.443:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 624.849106][ T9766] IPVS: using max 36 ests per chain, 86400 per kthread [ 624.912572][ T30] audit: type=1326 audit(1755743883.513:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 625.115308][ T30] audit: type=1326 audit(1755743883.513:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 626.031829][ T30] audit: type=1326 audit(1755743883.523:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 626.103068][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.236804][ T30] audit: type=1326 audit(1755743883.613:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 626.320802][ T30] audit: type=1326 audit(1755743883.613:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 626.366977][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.707'. [ 626.517330][ T30] audit: type=1326 audit(1755743883.613:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 626.864880][ T30] audit: type=1326 audit(1755743883.613:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 626.950033][ T30] audit: type=1326 audit(1755743883.613:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9753 comm="syz.3.705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff991d8ebe9 code=0x7ffc0000 [ 627.111273][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 628.562800][ T9790] siw: device registration error -23 [ 628.871382][ T9792] batadv1: entered promiscuous mode [ 629.371777][ T9605] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 629.618059][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.624568][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.057456][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 633.660652][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 634.247057][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 636.658226][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 636.740408][ T9836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 637.107335][ T9840] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 638.719579][ T9021] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 638.735918][ T9021] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 638.751141][ T9021] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 638.825344][ T9857] loop9: detected capacity change from 0 to 7 [ 638.846315][ T9021] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 638.910927][ T9021] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 639.223826][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 639.957936][ T9864] binder: BINDER_SET_CONTEXT_MGR already set [ 639.964206][ T9864] binder: 9860:9864 ioctl 4018620d 200000004a80 returned -16 [ 640.649108][ T9868] netlink: 64 bytes leftover after parsing attributes in process `syz.6.728'. [ 641.076503][ T9850] lo speed is unknown, defaulting to 1000 [ 641.287938][ T5850] Bluetooth: hci4: command tx timeout [ 641.785978][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 643.366918][ T5850] Bluetooth: hci4: command tx timeout [ 645.132759][ T9897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.463481][ T5850] Bluetooth: hci4: command tx timeout [ 646.197356][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 647.597028][ T5850] Bluetooth: hci4: command tx timeout [ 648.013518][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 648.097445][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.111330][ T9922] bond0: (slave rose0): Enslaving as an active interface with an up link [ 648.121116][ T9924] batman_adv: batadv0: Adding interface: dummy0 [ 648.127603][ T9924] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.152968][ T9924] batman_adv: batadv0: Interface activated: dummy0 [ 648.169964][ T9924] batadv0: mtu less than device minimum [ 648.177304][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.189377][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.201406][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.213437][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.225488][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.237569][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.249594][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.261618][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.273341][ T9924] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 648.988214][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.742'. [ 649.091759][ T9934] usb usb8: usbfs: process 9934 (syz.0.742) did not claim interface 0 before use [ 649.813699][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.3.741'. [ 650.640454][ T1162] bridge_slave_1: left allmulticast mode [ 650.866953][ T1162] bridge_slave_1: left promiscuous mode [ 650.927211][ T1162] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.225730][ T1162] bridge_slave_0: left allmulticast mode [ 651.292640][ T1162] bridge_slave_0: left promiscuous mode [ 651.397566][ T1162] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.447233][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 653.973517][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 654.124416][ T9978] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.277599][ T9979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 655.827672][ T1162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.957379][ T1162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 656.016929][ T1162] bond0 (unregistering): Released all slaves [ 656.647143][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.071994][T10002] tmpfs: Unknown parameter '0x0000000000000007' [ 657.296775][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 657.981213][ T1162] hsr_slave_0: left promiscuous mode [ 658.013808][ T1162] hsr_slave_1: left promiscuous mode [ 658.048429][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.082550][ T1162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.863875][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 662.282743][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 663.045058][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 663.045079][ T30] audit: type=1326 audit(1755743921.703:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 663.075899][ T30] audit: type=1326 audit(1755743921.703:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 663.289811][ T30] audit: type=1326 audit(1755743921.803:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 663.396993][ T30] audit: type=1326 audit(1755743921.803:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 663.444664][ T30] audit: type=1326 audit(1755743921.803:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 663.469364][ T1162] team0 (unregistering): Port device team_slave_1 removed [ 663.731775][ T30] audit: type=1326 audit(1755743921.843:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 663.868996][ T30] audit: type=1326 audit(1755743921.863:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 664.138722][ T30] audit: type=1326 audit(1755743921.893:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 664.161222][ T30] audit: type=1326 audit(1755743921.903:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 664.589868][T10057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 664.597798][T10058] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 664.609670][T10058] cramfs: wrong magic [ 664.637941][ T30] audit: type=1326 audit(1755743921.903:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10035 comm="syz.2.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421338ebe9 code=0x7ffc0000 [ 664.647091][ T1162] team0 (unregistering): Port device team_slave_0 removed [ 665.800074][T10071] binder: 10064:10071 ioctl c0306201 0 returned -14 [ 666.112886][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.373301][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 667.733998][ T9850] chnl_net:caif_netlink_parms(): no params data found [ 668.004062][ T9850] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.011876][ T9850] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.023069][ T9850] bridge_slave_0: entered allmulticast mode [ 668.031460][ T9850] bridge_slave_0: entered promiscuous mode [ 668.044049][ T9850] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.051759][ T9850] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.059391][ T9850] bridge_slave_1: entered allmulticast mode [ 668.067973][ T9850] bridge_slave_1: entered promiscuous mode [ 668.120857][ T9850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.160640][ T9850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.233310][ T9850] team0: Port device team_slave_0 added [ 668.245595][ T9850] team0: Port device team_slave_1 added [ 668.302266][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.313320][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.339343][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.360223][ T9850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.375432][ T9850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.382898][ T9850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.409503][ T9850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.482262][ T9850] hsr_slave_0: entered promiscuous mode [ 668.493037][ T9850] hsr_slave_1: entered promiscuous mode [ 668.501073][ T9850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 668.512985][ T9850] Cannot create hsr debugfs directory [ 669.119256][ T9850] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.134984][ T9850] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.165672][ T9850] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 669.181655][ T9850] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 669.325797][ T9850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.359789][ T9850] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.373443][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.380719][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.407661][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.415003][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.742152][ T9850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.178496][ T9850] veth0_vlan: entered promiscuous mode [ 670.201701][ T9850] veth1_vlan: entered promiscuous mode [ 670.246597][ T9850] veth0_macvtap: entered promiscuous mode [ 670.271702][ T9850] veth1_macvtap: entered promiscuous mode [ 670.311695][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.335133][ T9850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.350494][ T9850] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.360779][ T9850] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.371626][ T9850] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.384648][ T9850] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.514830][ T9596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.533951][ T9596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.598694][ T9596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.611455][ T9596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.117643][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 672.219498][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.227142][T10172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.236689][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.243898][T10172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.257911][T10172] team0: Port device bridge0 added [ 672.263722][T10173] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 673.797731][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 673.969251][T10176] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 673.979369][T10176] netlink: 224 bytes leftover after parsing attributes in process `syz.3.778'. [ 676.987521][T10200] sp0: Synchronizing with TNC [ 677.989459][ T9605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 678.090071][T10209] tmpfs: Unknown parameter 'quot' [ 678.123157][T10209] syz.6.772: attempt to access beyond end of device [ 678.123157][T10209] nbd6: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 678.136976][T10209] SQUASHFS error: Failed to read block 0x0: -5 [ 678.143884][T10209] unable to read squashfs_super_block [ 679.678055][T10223] lo speed is unknown, defaulting to 1000 [ 680.198626][T10222] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 680.223540][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 680.572558][T10227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.082442][T10234] netlink: 140 bytes leftover after parsing attributes in process `syz.2.782'. [ 682.924409][T10239] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 684.353588][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 685.504157][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 688.525299][T10284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 690.035842][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 690.589285][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.058539][ T9593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.071309][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.081334][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.218474][T10302] netlink: 224 bytes leftover after parsing attributes in process `syz.6.793'. [ 692.086102][T10308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 692.140604][T10309] input: syz1 as /devices/virtual/input/input9 [ 696.182583][ T9605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.261497][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.246721][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.227530][ T5850] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 701.297001][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.524702][ T5850] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 701.594719][ T5850] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 701.615380][ T5850] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 701.625500][ T5850] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 703.891645][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 704.808072][ T9021] Bluetooth: hci5: command tx timeout [ 706.407798][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 706.697688][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.811'. [ 706.707247][T10401] netlink: 16 bytes leftover after parsing attributes in process `syz.0.811'. [ 706.888334][ T9021] Bluetooth: hci5: command tx timeout [ 706.990759][T10362] lo speed is unknown, defaulting to 1000 [ 707.227260][T10413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.352702][ T78] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.252497][T10421] ptrace attach of "./syz-executor exec"[10423] was attempted by "./syz-executor exec"[10421] [ 709.066929][ T9021] Bluetooth: hci5: command tx timeout [ 709.576077][ T78] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.609102][ T9605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 711.138474][ T9021] Bluetooth: hci5: command tx timeout [ 711.306719][ T5940] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 711.759904][ T78] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.020083][ T5940] usb 3-1: config 0 has no interfaces? [ 712.033277][ T5940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 712.057438][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.117513][ T5940] usb 3-1: config 0 descriptor?? [ 712.168975][ T9605] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.378766][ T78] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.600832][T10449] xt_SECMARK: invalid mode: 2 [ 713.305497][T10436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 713.367180][T10436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.369904][T10436] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 715.466481][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.533062][ T43] usb 3-1: USB disconnect, device number 5 [ 716.415348][T10472] syz.0.822: attempt to access beyond end of device [ 716.415348][T10472] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 716.429587][T10472] (syz.0.822,10472,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 716.437586][T10472] (syz.0.822,10472,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 716.445135][T10472] (syz.0.822,10472,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 716.454241][T10472] (syz.0.822,10472,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 717.258097][T10362] chnl_net:caif_netlink_parms(): no params data found [ 717.297906][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.545819][ T78] bridge_slave_1: left allmulticast mode [ 718.551604][ T78] bridge_slave_1: left promiscuous mode [ 718.557687][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.589106][ T78] bridge_slave_0: left allmulticast mode [ 718.608894][ T78] bridge_slave_0: left promiscuous mode [ 718.643964][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.229763][ T6046] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 721.624362][T10518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.367593][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.171911][T10553] vim2m vim2m.0: vidioc_s_fmt queue busy [ 726.568458][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.707327][T10573] No such timeout policy "syz0" [ 729.594590][ T6931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.017692][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.539232][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.593054][ T78] bond0 (unregistering): Released all slaves [ 731.017571][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.845'. [ 732.199407][ T5991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.363649][T10592] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.596309][T10628] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 735.754085][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 736.103592][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.111786][T10362] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.132954][T10362] bridge_slave_0: entered allmulticast mode [ 736.142069][T10362] bridge_slave_0: entered promiscuous mode [ 736.352376][T10638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.671207][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.695646][T10362] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.776875][T10362] bridge_slave_1: entered allmulticast mode [ 736.798275][T10362] bridge_slave_1: entered promiscuous mode [ 737.923991][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 738.015715][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.854'. [ 738.431498][T10362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.167456][ T78] hsr_slave_0: left promiscuous mode [ 739.226295][ T78] hsr_slave_1: left promiscuous mode [ 739.302014][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.381370][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.467713][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.508653][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.664814][ T78] veth1_macvtap: left promiscuous mode [ 739.712501][ T78] veth0_macvtap: left promiscuous mode [ 739.740928][ T78] veth1_vlan: left promiscuous mode [ 739.746353][ T78] veth0_vlan: left promiscuous mode [ 741.555217][T10680] atomic_op ffff8880564d1198 conn xmit_atomic 0000000000000000 [ 742.680017][T10685] block device autoloading is deprecated and will be removed. [ 742.694092][T10685] syz.3.860: attempt to access beyond end of device [ 742.694092][T10685] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 743.819907][T10695] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd0": -EINTR [ 743.868945][T10694] Invalid source name [ 743.879011][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 743.882252][T10694] UBIFS error (pid: 10694): cannot open "/dev/sg0", error -22 [ 744.842793][T10702] netlink: 'syz.0.863': attribute type 4 has an invalid length. [ 746.437180][T10709] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.553685][ T78] team0 (unregistering): Port device team_slave_1 removed [ 746.647975][ T78] team0 (unregistering): Port device team_slave_0 removed [ 748.516488][T10362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.385658][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 750.184014][ T980] lo speed is unknown, defaulting to 1000 [ 750.249549][T10744] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.794167][T10362] team0: Port device team_slave_0 added [ 750.800463][ T980] syz0: Port: 1 Link DOWN [ 750.827785][ T980] IPVS: starting estimator thread 0... [ 751.058692][T10362] team0: Port device team_slave_1 added [ 751.149639][T10747] IPVS: using max 23 ests per chain, 55200 per kthread [ 752.316732][T10362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.579078][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.007685][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.034069][T10362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 753.048094][T10362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 753.084870][T10362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 753.170748][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.201910][T10362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.241327][T10765] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 754.772726][T10362] hsr_slave_0: entered promiscuous mode [ 754.818361][ T6931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.431203][T10362] hsr_slave_1: entered promiscuous mode [ 755.438506][T10362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 755.446285][T10362] Cannot create hsr debugfs directory [ 755.456431][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 756.130403][T10777] Failed to get privilege flags for destination (handle=0x2:0x0) [ 758.203472][T10786] tmpfs: Bad value for 'mpol' [ 758.349173][T10787] xt_hashlimit: max too large, truncated to 1048576 [ 758.790171][T10790] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 759.547734][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 759.568618][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 759.580513][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 759.597081][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 759.604898][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 759.982222][T10799] lo speed is unknown, defaulting to 1000 [ 760.105781][ T9596] bridge_slave_1: left allmulticast mode [ 760.403132][ T9596] bridge_slave_1: left promiscuous mode [ 760.437704][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.658140][ T9596] bridge_slave_0: left allmulticast mode [ 760.683616][ T9596] bridge_slave_0: left promiscuous mode [ 761.380709][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.441241][ T6931] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.457179][ T5991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.686899][ T5850] Bluetooth: hci4: command tx timeout [ 762.320653][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.884'. [ 762.339529][T10826] netlink: 'syz.6.884': attribute type 11 has an invalid length. [ 762.347907][T10826] netlink: 224 bytes leftover after parsing attributes in process `syz.6.884'. [ 763.332481][ T9596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.806757][ T5850] Bluetooth: hci4: command tx timeout [ 764.089474][ T9596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.121733][ T9596] bond0 (unregistering): Released all slaves [ 764.816953][ T9596] hsr_slave_0: left promiscuous mode [ 765.579868][ T9596] hsr_slave_1: left promiscuous mode [ 765.623101][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.685145][ T9596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.702136][T10851] tipc: Failed to remove unknown binding: 66,1,1/0:1564221058/1564221060 [ 765.856781][ T5850] Bluetooth: hci4: command tx timeout [ 765.907398][T10851] tipc: Failed to remove unknown binding: 66,1,1/0:1564221058/1564221060 [ 767.124295][T10868] netlink: 332 bytes leftover after parsing attributes in process `syz.0.892'. [ 767.133636][T10868] netlink: 'syz.0.892': attribute type 9 has an invalid length. [ 767.142302][T10868] netlink: 108 bytes leftover after parsing attributes in process `syz.0.892'. [ 767.151496][T10868] netlink: 32 bytes leftover after parsing attributes in process `syz.0.892'. [ 767.238503][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 767.248335][T10869] netlink: 'syz.0.892': attribute type 5 has an invalid length. [ 767.256034][T10869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 767.547729][ T9593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.548592][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 767.774466][T10871] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 767.941407][ T5850] Bluetooth: hci4: command tx timeout [ 768.351658][ T9596] team0 (unregistering): Port device team_slave_1 removed [ 768.478737][ T9596] team0 (unregistering): Port device team_slave_0 removed [ 768.914486][T10880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.636749][T10869] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 769.656123][T10869] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 769.675613][T10869] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 769.716098][T10869] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 769.735396][T10884] trusted_key: syz.2.894 sent an empty control message without MSG_MORE. [ 769.772716][T10869] geneve2: entered promiscuous mode [ 769.940546][T10869] geneve2: entered allmulticast mode [ 770.679528][T10887] block nbd0: server does not support multiple connections per device. [ 770.735641][T10887] block nbd0: shutting down sockets [ 771.098354][T10892] ip6gre1: entered promiscuous mode [ 772.891797][ T9593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 774.170661][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 774.947129][T10799] chnl_net:caif_netlink_parms(): no params data found [ 775.300635][T10945] tipc: Failed to remove unknown binding: 66,1,1/0:3076478443/3076478445 [ 775.309372][T10945] tipc: Failed to remove unknown binding: 66,1,1/0:3076478443/3076478445 [ 775.750696][T10799] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.760193][T10799] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.768915][T10799] bridge_slave_0: entered allmulticast mode [ 775.782516][T10799] bridge_slave_0: entered promiscuous mode [ 775.807577][T10799] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.818001][T10799] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.880879][T10799] bridge_slave_1: entered allmulticast mode [ 775.903614][T10799] bridge_slave_1: entered promiscuous mode [ 776.090361][T10799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.166313][T10799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.367565][T10799] team0: Port device team_slave_0 added [ 776.401082][T10799] team0: Port device team_slave_1 added [ 776.863362][T10799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.904330][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.237112][T10799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.382234][T10799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.389278][T10969] block device autoloading is deprecated and will be removed. [ 777.607429][T10968] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 777.664569][T10799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.795431][T10799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.580610][T10799] hsr_slave_0: entered promiscuous mode [ 778.706150][T10799] hsr_slave_1: entered promiscuous mode [ 778.724254][T10799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.732864][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 779.435540][T10799] Cannot create hsr debugfs directory [ 780.025361][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 782.538175][T11003] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 783.617040][T11011] Falling back ldisc for ptm0. [ 783.908442][T11017] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 784.110785][T11023] can0: slcan on ttyS3. [ 784.734025][T11024] can0 (unregistered): slcan off ttyS3. [ 785.342657][T10799] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 785.382336][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.905969][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 787.178278][T10799] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 788.138273][T10799] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 788.374520][T10799] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 788.381779][ T980] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 788.971387][ T980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.987510][ T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.094090][ T980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 789.106359][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 789.121825][ T980] usb 3-1: SerialNumber: syz [ 789.496708][ T980] usb 3-1: can't set config #1, error -71 [ 789.515389][ T980] usb 3-1: USB disconnect, device number 6 [ 790.808795][ T1114] Bluetooth: hci5: Frame reassembly failed (-84) [ 790.921579][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 791.193789][T10799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.225405][T10799] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.045653][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.053037][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.257594][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.307487][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.314827][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 792.667091][ T9021] Bluetooth: hci5: command 0x1003 tx timeout [ 792.673683][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 794.333015][T11066] loop2: detected capacity change from 0 to 7 [ 794.347065][T11066] loop2: [ 794.350574][T11066] loop2: partition table partially beyond EOD, truncated [ 796.315023][T11099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 796.532190][T10799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.647313][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.286973][ T9021] Bluetooth: hci4: command 0x0405 tx timeout [ 797.424438][T11115] can0: slcan on ttyS3. [ 798.048883][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 798.097341][T11115] can0 (unregistered): slcan off ttyS3. [ 798.699752][T11124] batadv_slave_0: entered promiscuous mode [ 799.314040][T11120] batadv_slave_0: left promiscuous mode [ 800.552063][T10799] veth0_vlan: entered promiscuous mode [ 800.751207][T10799] veth1_vlan: entered promiscuous mode [ 801.019387][T10799] veth0_macvtap: entered promiscuous mode [ 801.075712][T10799] veth1_macvtap: entered promiscuous mode [ 801.173840][T10799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.240007][T10799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.336124][T10799] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.364969][T10799] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.507125][T10799] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.711404][T10799] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.835427][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.868327][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.028837][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 804.278649][ T9603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.347610][ T9603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.531660][T11166] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 805.249788][T11175] bridge0: entered allmulticast mode [ 805.705081][T11182] veth0_to_team: entered promiscuous mode [ 805.711050][T11182] veth0_to_team: entered allmulticast mode [ 806.523742][T11181] No such timeout policy "syz0" [ 806.654839][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 810.166430][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 813.468318][T11222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 813.814549][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 814.012124][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.018634][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.323473][T11240] tipc: Failed to remove unknown binding: 66,1,1/0:3464563296/3464563298 [ 815.332432][T11240] tipc: Failed to remove unknown binding: 66,1,1/0:3464563296/3464563298 [ 815.948412][ T1162] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 816.123843][T11252] netlink: 28 bytes leftover after parsing attributes in process `syz.6.954'. [ 817.416843][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.8.953'. [ 817.429225][T11256] lo speed is unknown, defaulting to 1000 [ 819.703983][ T5991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 820.565769][T11279] netlink: 'syz.6.959': attribute type 9 has an invalid length. [ 822.281122][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 825.754554][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 826.534779][T11329] tipc: Started in network mode [ 826.540334][T11329] tipc: Node identity 4, cluster identity 4711 [ 826.549149][T11329] tipc: Node number set to 4 [ 826.946778][T11335] macsec1: entered allmulticast mode [ 826.952366][T11335] macvlan1: entered allmulticast mode [ 826.959344][T11335] veth1_vlan: entered allmulticast mode [ 827.908274][T11335] macvlan1: left allmulticast mode [ 827.913452][T11335] veth1_vlan: left allmulticast mode [ 828.647456][ T9591] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.960942][T11365] syz.6.971: attempt to access beyond end of device [ 830.960942][T11365] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 831.378557][ T5991] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 834.028964][ T9603] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 836.978026][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 839.132370][ T78] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 840.267631][T11426] dlm: no local IP address has been set [ 840.274828][T11426] dlm: cannot start dlm midcomms -107 [ 841.993147][T11427] geneve3: entered allmulticast mode [ 842.120389][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 842.181355][ T9021] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 842.190987][ T9021] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 842.199384][ T9021] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 842.208661][ T9021] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 842.218958][ T9021] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 842.615233][T11429] lo speed is unknown, defaulting to 1000 [ 842.695318][ T9021] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 842.905634][ T9021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 842.915639][ T9021] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 842.923945][ T9021] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 842.933577][ T9021] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 844.326734][ T9021] Bluetooth: hci5: command tx timeout [ 844.651420][ T9596] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 844.961071][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 844.961103][ T30] audit: type=1804 audit(1755744103.843:127): pid=11453 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.991" name="/newroot/240/file0" dev="tmpfs" ino=1303 res=1 errno=0 [ 844.976843][ T9021] Bluetooth: hci6: command tx timeout [ 845.411863][T11441] lo speed is unknown, defaulting to 1000 [ 846.406745][ T9021] Bluetooth: hci5: command tx timeout [ 847.046843][ T9021] Bluetooth: hci6: command tx timeout [ 848.488089][ T9021] Bluetooth: hci5: command tx timeout [ 849.126829][ T9021] Bluetooth: hci6: command tx timeout [ 851.276741][ T9021] Bluetooth: hci5: command tx timeout [ 851.282553][ T9021] Bluetooth: hci6: command tx timeout [ 851.646635][T11486] capability: warning: `syz.6.997' uses 32-bit capabilities (legacy support in use) [ 852.666801][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.6.997'. [ 853.922458][ T5991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 854.160271][T11497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 856.233867][ T5991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.316186][T11429] chnl_net:caif_netlink_parms(): no params data found [ 859.377253][ T5991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.842668][T11549] No such timeout policy "syz0" [ 861.665634][T11539] overlayfs: failed to resolve './file1': -2 [ 861.722445][ T5991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.974346][T11441] chnl_net:caif_netlink_parms(): no params data found [ 864.043416][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.054160][T11429] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.071770][T11429] bridge_slave_0: entered allmulticast mode [ 864.084441][T11429] bridge_slave_0: entered promiscuous mode [ 864.171271][T11569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1010'. [ 864.209369][T11569] net_ratelimit: 10 callbacks suppressed [ 864.209393][T11569] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 864.528201][T11575] tipc: Failed to remove unknown binding: 66,1,1/4:3812588848/3812588850 [ 864.583659][T11429] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.608079][T11575] tipc: Failed to remove unknown binding: 66,1,1/4:3812588848/3812588850 [ 864.621685][T11429] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.703453][T11429] bridge_slave_1: entered allmulticast mode [ 864.756713][T11429] bridge_slave_1: entered promiscuous mode [ 866.166738][T11597] sysfs: Unknown parameter 'tS' [ 866.518383][T11584] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 866.552795][T11584] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 866.566733][T11596] tipc: Failed to remove unknown binding: 66,1,1/0:3293544203/3293544205 [ 866.581901][T11596] tipc: Failed to remove unknown binding: 66,1,1/0:3293544203/3293544205 [ 866.616794][T11584] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 866.644367][T11584] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 866.662757][T11584] geneve2: entered allmulticast mode [ 866.779938][T11429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.863694][T11429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.073018][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.111321][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.138270][T11441] bridge_slave_0: entered allmulticast mode [ 868.159009][T11441] bridge_slave_0: entered promiscuous mode [ 868.163360][T11611] program syz.2.1014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.232324][T11611] program syz.2.1014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 868.241941][T11611] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 868.399972][T11429] team0: Port device team_slave_0 added [ 868.440735][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.461674][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.506326][T11441] bridge_slave_1: entered allmulticast mode [ 868.544485][T11441] bridge_slave_1: entered promiscuous mode [ 868.619988][T11429] team0: Port device team_slave_1 added [ 870.372255][T11638] netlink: 'syz.2.1017': attribute type 10 has an invalid length. [ 870.389102][T11638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1017'. [ 871.387586][T11653] tipc: Failed to remove unknown binding: 66,1,1/4:77409068/77409070 [ 871.412487][T11653] tipc: Failed to remove unknown binding: 66,1,1/4:77409068/77409070 [ 873.635530][ T5991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.649999][ T5991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.662212][ T5991] bond0 (unregistering): Released all slaves [ 873.680717][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.694284][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.722975][T11429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.734028][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.759969][ C1] vkms_vblank_simulate: vblank timer overrun [ 873.782598][T11429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.795169][T11638] dummy0: entered promiscuous mode [ 873.803395][T11638] bridge0: port 3(dummy0) entered blocking state [ 873.812703][T11638] bridge0: port 3(dummy0) entered disabled state [ 873.820463][T11638] dummy0: entered allmulticast mode [ 873.852248][T11665] lo speed is unknown, defaulting to 1000 [ 874.863618][ T5991] _ÐZ`Ô€@ÿÃ: left promiscuous mode [ 874.903017][T11429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.910897][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.937089][ C1] vkms_vblank_simulate: vblank timer overrun [ 875.004045][T11429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.044273][T11441] team0: Port device team_slave_0 added [ 875.159363][T11441] team0: Port device team_slave_1 added [ 875.265683][T11429] hsr_slave_0: entered promiscuous mode [ 875.295790][T11429] hsr_slave_1: entered promiscuous mode [ 875.305123][T11429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 875.313269][T11429] Cannot create hsr debugfs directory [ 875.375095][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.381879][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.432719][ T5991] [ 875.435129][ T5991] ====================================================== [ 875.442206][ T5991] WARNING: possible circular locking dependency detected [ 875.449281][ T5991] 6.16.0-syzkaller #0 Not tainted [ 875.454339][ T5991] ------------------------------------------------------ [ 875.461390][ T5991] kworker/u8:10/5991 is trying to acquire lock: [ 875.467721][ T5991] ffff888058804e00 (team->team_lock_key#5){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 875.477578][ T5991] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 875.477578][ T5991] but task is already holding lock: [ 875.484974][ T5991] ffff8880309f8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 875.495400][ T5991] [ 875.495400][ T5991] which lock already depends on the new lock. [ 875.495400][ T5991] [ 875.505828][ T5991] [ 875.505828][ T5991] the existing dependency chain (in reverse order) is: [ 875.514874][ T5991] [ 875.514874][ T5991] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 875.522628][ T5991] lock_acquire+0x120/0x360 [ 875.527703][ T5991] __mutex_lock+0x182/0xe80 [ 875.532745][ T5991] ieee80211_open+0xed/0x1f0 [ 875.537877][ T5991] __dev_open+0x470/0x880 [ 875.542762][ T5991] netif_open+0xaa/0x170 [ 875.547544][ T5991] dev_open+0x125/0x260 [ 875.552245][ T5991] team_add_slave+0xb36/0x2840 [ 875.557548][ T5991] do_set_master+0x530/0x6d0 [ 875.562699][ T5991] do_setlink+0xcf0/0x41c0 [ 875.567655][ T5991] rtnl_newlink+0x160b/0x1c70 [ 875.572885][ T5991] rtnetlink_rcv_msg+0x7cc/0xb70 [ 875.578444][ T5991] netlink_rcv_skb+0x205/0x470 [ 875.583752][ T5991] netlink_unicast+0x75c/0x8e0 [ 875.589057][ T5991] netlink_sendmsg+0x805/0xb30 [ 875.594360][ T5991] __sock_sendmsg+0x21c/0x270 [ 875.599584][ T5991] ____sys_sendmsg+0x505/0x830 [ 875.604891][ T5991] ___sys_sendmsg+0x21f/0x2a0 [ 875.610108][ T5991] __x64_sys_sendmsg+0x19b/0x260 [ 875.615609][ T5991] do_syscall_64+0xfa/0x3b0 [ 875.620664][ T5991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.627098][ T5991] [ 875.627098][ T5991] -> #0 (team->team_lock_key#5){+.+.}-{4:4}: [ 875.635292][ T5991] validate_chain+0xb9b/0x2140 [ 875.640612][ T5991] __lock_acquire+0xab9/0xd20 [ 875.645827][ T5991] lock_acquire+0x120/0x360 [ 875.650861][ T5991] __mutex_lock+0x182/0xe80 [ 875.655902][ T5991] team_del_slave+0x32/0x1c0 [ 875.661030][ T5991] team_device_event+0x285/0xa20 [ 875.666513][ T5991] notifier_call_chain+0x1b3/0x3e0 [ 875.672185][ T5991] unregister_netdevice_many_notify+0x15d8/0x2320 [ 875.679147][ T5991] unregister_netdevice_queue+0x33c/0x380 [ 875.685403][ T5991] _cfg80211_unregister_wdev+0x165/0x590 [ 875.691577][ T5991] ieee80211_remove_interfaces+0x49a/0x6d0 [ 875.697921][ T5991] ieee80211_unregister_hw+0x5d/0x2c0 [ 875.703840][ T5991] mac80211_hwsim_del_radio+0x275/0x460 [ 875.709935][ T5991] hwsim_exit_net+0x584/0x640 [ 875.715149][ T5991] ops_undo_list+0x497/0x990 [ 875.720275][ T5991] cleanup_net+0x4c5/0x800 [ 875.725232][ T5991] process_scheduled_works+0xade/0x17b0 [ 875.731328][ T5991] worker_thread+0x8a0/0xda0 [ 875.736455][ T5991] kthread+0x70e/0x8a0 [ 875.741069][ T5991] ret_from_fork+0x3fc/0x770 [ 875.746190][ T5991] ret_from_fork_asm+0x1a/0x30 [ 875.751513][ T5991] [ 875.751513][ T5991] other info that might help us debug this: [ 875.751513][ T5991] [ 875.761750][ T5991] Possible unsafe locking scenario: [ 875.761750][ T5991] [ 875.769204][ T5991] CPU0 CPU1 [ 875.774587][ T5991] ---- ---- [ 875.779963][ T5991] lock(&rdev->wiphy.mtx); [ 875.784486][ T5991] lock(team->team_lock_key#5); [ 875.791968][ T5991] lock(&rdev->wiphy.mtx); [ 875.799010][ T5991] lock(team->team_lock_key#5); [ 875.803971][ T5991] [ 875.803971][ T5991] *** DEADLOCK *** [ 875.803971][ T5991] [ 875.812127][ T5991] 5 locks held by kworker/u8:10/5991: [ 875.817506][ T5991] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 875.828409][ T5991] #1: ffffc900047efbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 875.838968][ T5991] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 875.848412][ T5991] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 875.858295][ T5991] #4: ffff8880309f8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 875.869121][ T5991] [ 875.869121][ T5991] stack backtrace: [ 875.875124][ T5991] CPU: 1 UID: 0 PID: 5991 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 875.875144][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.875158][ T5991] Workqueue: netns cleanup_net [ 875.875188][ T5991] Call Trace: [ 875.875201][ T5991] [ 875.875210][ T5991] dump_stack_lvl+0x189/0x250 [ 875.875232][ T5991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 875.875251][ T5991] ? __pfx__printk+0x10/0x10 [ 875.875273][ T5991] ? print_lock_name+0xde/0x100 [ 875.875295][ T5991] print_circular_bug+0x2ee/0x310 [ 875.875318][ T5991] check_noncircular+0x134/0x160 [ 875.875340][ T5991] validate_chain+0xb9b/0x2140 [ 875.875364][ T5991] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.875386][ T5991] __lock_acquire+0xab9/0xd20 [ 875.875405][ T5991] ? team_del_slave+0x32/0x1c0 [ 875.875427][ T5991] lock_acquire+0x120/0x360 [ 875.875441][ T5991] ? team_del_slave+0x32/0x1c0 [ 875.875466][ T5991] ? __mutex_trylock_common+0x153/0x260 [ 875.875488][ T5991] __mutex_lock+0x182/0xe80 [ 875.875506][ T5991] ? team_del_slave+0x32/0x1c0 [ 875.875530][ T5991] ? rcu_is_watching+0x15/0xb0 [ 875.875551][ T5991] ? team_del_slave+0x32/0x1c0 [ 875.875574][ T5991] ? __pfx___mutex_lock+0x10/0x10 [ 875.875593][ T5991] ? bond_netdev_event+0xd9/0xe80 [ 875.875619][ T5991] ? __pfx___mutex_lock+0x10/0x10 [ 875.875637][ T5991] ? __pfx_bond_netdev_event+0x10/0x10 [ 875.875666][ T5991] team_del_slave+0x32/0x1c0 [ 875.875690][ T5991] team_device_event+0x285/0xa20 [ 875.875707][ T5991] notifier_call_chain+0x1b3/0x3e0 [ 875.875730][ T5991] unregister_netdevice_many_notify+0x15d8/0x2320 [ 875.875757][ T5991] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 875.875784][ T5991] ? __lock_acquire+0xab9/0xd20 [ 875.875813][ T5991] unregister_netdevice_queue+0x33c/0x380 [ 875.875833][ T5991] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 875.875855][ T5991] _cfg80211_unregister_wdev+0x165/0x590 [ 875.875881][ T5991] ieee80211_remove_interfaces+0x49a/0x6d0 [ 875.875902][ T5991] ? __pfx_synchronize_rcu+0x10/0x10 [ 875.875922][ T5991] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 875.875942][ T5991] ? rcu_is_watching+0x15/0xb0 [ 875.875963][ T5991] ieee80211_unregister_hw+0x5d/0x2c0 [ 875.875992][ T5991] mac80211_hwsim_del_radio+0x275/0x460 [ 875.876020][ T5991] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 875.876050][ T5991] hwsim_exit_net+0x584/0x640 [ 875.876073][ T5991] ? __pfx_hwsim_exit_net+0x10/0x10 [ 875.876096][ T5991] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 875.876123][ T5991] ops_undo_list+0x497/0x990 [ 875.876148][ T5991] ? __pfx_ops_undo_list+0x10/0x10 [ 875.876176][ T5991] cleanup_net+0x4c5/0x800 [ 875.876201][ T5991] ? __pfx_cleanup_net+0x10/0x10 [ 875.876225][ T5991] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.876239][ T5991] ? process_scheduled_works+0x9ef/0x17b0 [ 875.876256][ T5991] ? process_scheduled_works+0x9ef/0x17b0 [ 875.876274][ T5991] process_scheduled_works+0xade/0x17b0 [ 875.876304][ T5991] ? __pfx_process_scheduled_works+0x10/0x10 [ 875.876329][ T5991] worker_thread+0x8a0/0xda0 [ 875.876349][ T5991] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 875.876379][ T5991] ? __kthread_parkme+0x7b/0x200 [ 875.876402][ T5991] kthread+0x70e/0x8a0 [ 875.876425][ T5991] ? __pfx_worker_thread+0x10/0x10 [ 875.876443][ T5991] ? __pfx_kthread+0x10/0x10 [ 875.876465][ T5991] ? _raw_spin_unlock_irq+0x23/0x50 [ 875.876480][ T5991] ? lockdep_hardirqs_on+0x9c/0x150 [ 875.876496][ T5991] ? __pfx_kthread+0x10/0x10 [ 875.876519][ T5991] ret_from_fork+0x3fc/0x770 [ 875.876539][ T5991] ? __pfx_ret_from_fork+0x10/0x10 [ 875.876561][ T5991] ? __switch_to_asm+0x39/0x70 [ 875.876583][ T5991] ? __switch_to_asm+0x33/0x70 [ 875.876603][ T5991] ? __pfx_kthread+0x10/0x10 [ 875.876625][ T5991] ret_from_fork_asm+0x1a/0x30 [ 875.876653][ T5991] [ 876.244059][ C1] vkms_vblank_simulate: vblank timer overrun [ 876.271628][ T5991] team0: Port device wlan1 removed [ 876.857040][T11682] program syz.0.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.087259][T11682] program syz.0.1027 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 877.103405][T11682] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 877.407195][T11441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.414180][T11441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.440117][ C1] vkms_vblank_simulate: vblank timer overrun [ 877.495672][T11441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.819727][ T5991] hsr_slave_0: left promiscuous mode [ 877.884178][ T5991] hsr_slave_1: left promiscuous mode [ 877.892030][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.918671][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.964671][ T5991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.989034][ T5991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.037217][ T5991] batman_adv: batadv0: Removing interface: virt_wifi0 [ 878.091114][ T5991] veth0_macvtap: left allmulticast mode [ 878.118355][ T5991] veth1_macvtap: left promiscuous mode [ 878.123971][ T5991] veth0_macvtap: left promiscuous mode [ 878.142685][ T5991] veth1_vlan: left promiscuous mode [ 878.150372][ T5991] veth0_vlan: left promiscuous mode [ 878.381805][ T5991] team0 (unregistering): Port device team_slave_1 removed [ 878.416039][ T5991] team0 (unregistering): Port device team_slave_0 removed [ 878.895687][ T5991] IPVS: stop unused estimator thread 0... [ 878.909987][ T5991] ------------[ cut here ]------------ [ 878.915539][ T5991] WARNING: CPU: 0 PID: 5991 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x270/0x2f0 [ 878.925750][ T5991] Modules linked in: [ 878.930091][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 878.941172][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 878.951526][ T5991] Workqueue: netns cleanup_net [ 878.956360][ T5991] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 878.962223][ T5991] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 878.982229][ T5991] RSP: 0018:ffffc900047ef898 EFLAGS: 00010293 [ 878.988759][ T5991] RAX: ffffffff8a0f293f RBX: ffff888079274100 RCX: ffff88802f6a9e00 [ 878.997172][ T5991] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff88802f6a9e00 [ 879.005196][ T5991] RBP: ffffc900047ef9b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 879.013465][ T5991] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 879.022179][ T5991] R13: 1ffff920008fdf40 R14: ffff8880792755c0 R15: dffffc0000000000 [ 879.030284][ T5991] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 879.039309][ T5991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 879.045945][ T5991] CR2: 0000000000000000 CR3: 0000000032b04000 CR4: 00000000003526f0 [ 879.054052][ T5991] Call Trace: [ 879.057495][ T5991] [ 879.060475][ T5991] xfrm_net_exit+0x2d/0x70 [ 879.064942][ T5991] ops_undo_list+0x497/0x990 [ 879.069635][ T5991] ? __pfx_ops_undo_list+0x10/0x10 [ 879.074901][ T5991] cleanup_net+0x4c5/0x800 [ 879.079582][ T5991] ? __pfx_cleanup_net+0x10/0x10 [ 879.084678][ T5991] ? _raw_spin_unlock_irq+0x23/0x50 [ 879.090134][ T5991] ? process_scheduled_works+0x9ef/0x17b0 [ 879.095910][ T5991] ? process_scheduled_works+0x9ef/0x17b0 [ 879.101760][ T5991] process_scheduled_works+0xade/0x17b0 [ 879.107415][ T5991] ? __pfx_process_scheduled_works+0x10/0x10 [ 879.113455][ T5991] worker_thread+0x8a0/0xda0 [ 879.118158][ T5991] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 879.124635][ T5991] ? __kthread_parkme+0x7b/0x200 [ 879.129761][ T5991] kthread+0x70e/0x8a0 [ 879.133891][ T5991] ? __pfx_worker_thread+0x10/0x10 [ 879.139135][ T5991] ? __pfx_kthread+0x10/0x10 [ 879.143783][ T5991] ? _raw_spin_unlock_irq+0x23/0x50 [ 879.149062][ T5991] ? lockdep_hardirqs_on+0x9c/0x150 [ 879.154393][ T5991] ? __pfx_kthread+0x10/0x10 [ 879.159100][ T5991] ret_from_fork+0x3fc/0x770 [ 879.163745][ T5991] ? __pfx_ret_from_fork+0x10/0x10 [ 879.168951][ T5991] ? __switch_to_asm+0x39/0x70 [ 879.173773][ T5991] ? __switch_to_asm+0x33/0x70 [ 879.178663][ T5991] ? __pfx_kthread+0x10/0x10 [ 879.183464][ T5991] ret_from_fork_asm+0x1a/0x30 [ 879.188481][ T5991] [ 879.191567][ T5991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 879.198885][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: kworker/u8:10 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 879.209083][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 879.219295][ T5991] Workqueue: netns cleanup_net [ 879.224173][ T5991] Call Trace: [ 879.227503][ T5991] [ 879.230517][ T5991] dump_stack_lvl+0x99/0x250 [ 879.235261][ T5991] ? __asan_memcpy+0x40/0x70 [ 879.239879][ T5991] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.245093][ T5991] ? __pfx__printk+0x10/0x10 [ 879.249720][ T5991] panic+0x2db/0x790 [ 879.253631][ T5991] ? __pfx_panic+0x10/0x10 [ 879.258064][ T5991] ? ret_from_fork_asm+0x1a/0x30 [ 879.263019][ T5991] __warn+0x31b/0x4b0 [ 879.267017][ T5991] ? xfrm_state_fini+0x270/0x2f0 [ 879.271996][ T5991] ? xfrm_state_fini+0x270/0x2f0 [ 879.276956][ T5991] report_bug+0x2be/0x4f0 [ 879.281299][ T5991] ? xfrm_state_fini+0x270/0x2f0 [ 879.286261][ T5991] ? xfrm_state_fini+0x270/0x2f0 [ 879.291226][ T5991] ? xfrm_state_fini+0x272/0x2f0 [ 879.296187][ T5991] handle_bug+0x84/0x160 [ 879.300451][ T5991] exc_invalid_op+0x1a/0x50 [ 879.304994][ T5991] asm_exc_invalid_op+0x1a/0x20 [ 879.309861][ T5991] RIP: 0010:xfrm_state_fini+0x270/0x2f0 [ 879.315446][ T5991] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d8 e3 10 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 f4 f1 f7 e8 81 fc b0 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 73 fc b0 f7 90 0f 0b 90 e9 60 fe ff ff [ 879.335194][ T5991] RSP: 0018:ffffc900047ef898 EFLAGS: 00010293 [ 879.341278][ T5991] RAX: ffffffff8a0f293f RBX: ffff888079274100 RCX: ffff88802f6a9e00 [ 879.349262][ T5991] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffff88802f6a9e00 [ 879.357267][ T5991] RBP: ffffc900047ef9b0 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 879.365253][ T5991] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: ffffffff8f6054a0 [ 879.373276][ T5991] R13: 1ffff920008fdf40 R14: ffff8880792755c0 R15: dffffc0000000000 [ 879.381266][ T5991] ? xfrm_state_fini+0x26f/0x2f0 [ 879.386276][ T5991] ? xfrm_state_fini+0x26f/0x2f0 [ 879.391242][ T5991] xfrm_net_exit+0x2d/0x70 [ 879.395677][ T5991] ops_undo_list+0x497/0x990 [ 879.400288][ T5991] ? __pfx_ops_undo_list+0x10/0x10 [ 879.405427][ T5991] cleanup_net+0x4c5/0x800 [ 879.409865][ T5991] ? __pfx_cleanup_net+0x10/0x10 [ 879.414818][ T5991] ? _raw_spin_unlock_irq+0x23/0x50 [ 879.420030][ T5991] ? process_scheduled_works+0x9ef/0x17b0 [ 879.425765][ T5991] ? process_scheduled_works+0x9ef/0x17b0 [ 879.432389][ T5991] process_scheduled_works+0xade/0x17b0 [ 879.437960][ T5991] ? __pfx_process_scheduled_works+0x10/0x10 [ 879.443962][ T5991] worker_thread+0x8a0/0xda0 [ 879.448572][ T5991] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 879.455013][ T5991] ? __kthread_parkme+0x7b/0x200 [ 879.459973][ T5991] kthread+0x70e/0x8a0 [ 879.464062][ T5991] ? __pfx_worker_thread+0x10/0x10 [ 879.469185][ T5991] ? __pfx_kthread+0x10/0x10 [ 879.473790][ T5991] ? _raw_spin_unlock_irq+0x23/0x50 [ 879.479000][ T5991] ? lockdep_hardirqs_on+0x9c/0x150 [ 879.484210][ T5991] ? __pfx_kthread+0x10/0x10 [ 879.488840][ T5991] ret_from_fork+0x3fc/0x770 [ 879.493441][ T5991] ? __pfx_ret_from_fork+0x10/0x10 [ 879.498657][ T5991] ? __switch_to_asm+0x39/0x70 [ 879.503444][ T5991] ? __switch_to_asm+0x33/0x70 [ 879.508223][ T5991] ? __pfx_kthread+0x10/0x10 [ 879.512917][ T5991] ret_from_fork_asm+0x1a/0x30 [ 879.517707][ T5991] [ 879.521049][ T5991] Kernel Offset: disabled [ 879.525379][ T5991] Rebooting in 86400 seconds..