last executing test programs: 1m16.781102066s ago: executing program 2 (id=3): socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x3a3d00, 0x183) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x9e}}, {0x2, 0x4e24, @local}, 0x221, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd1, 0xbc, 0xfffc}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x24040804) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1m15.534304461s ago: executing program 2 (id=13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000140)='oom_score_adj\x00') openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x1, 0x8010800000000084) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket(0x1d, 0x2, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x111, 0x8}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4126}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) (fail_nth: 3) 1m13.502002353s ago: executing program 2 (id=16): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'veth0_to_hsr\x00', {0x10000}, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYRESOCT=r0], 0x34}}, 0x2000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000180)=ANY=[]) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='f2fs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m3.720970175s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0xa3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f0000000e000000050000000700000090200000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000000000400000000001caae7eef991ff64d73e002f1194390000000000000000000024eccd706cb6eb4001d495903890fae1666aa3fdf1352084352a4bd995dccf2274efd6c814818d18a606a12bd1b13402aa2fe028c06db268ac2802286f0d1a076f6ffe57bbde7ae510f8db5191dd1afa1ff53872d3c270c49702a15ee576d0b218ab6575edeb323cfe46dd1750ff822d5db10fcddb0fc229220f356aea4fdfc9192bd1f1c576c4e8090de2e86601ff43d714deaed63005962925b952b5752b"], 0x50) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1d, 0x1, @tid=r0}, &(0x7f0000000200)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) getdents64(r6, &(0x7f0000000000)=""/49, 0x31) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = timerfd_create(0x9, 0x0) timerfd_settime(r7, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) 59.365321211s ago: executing program 2 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp6(0xa, 0x3, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@local, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7fff, 0x5, 0x6, 0x0, 0x607, 0xa2, r3}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010300000000000000000a00000d140007800800084000000037080006400000080013000300686173683a6e65742c69666163650000050005000a00000005000400000000000900020073797a31000000000500010007000000"], 0x60}}, 0x0) 46.365059048s ago: executing program 4 (id=40): r0 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000180)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x802, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c726f64e14c0e75927a2d5fd2bdc469849ce23c5ac32373fe2c666d75736b3d30303030303030303038303030303030303030303031302c696f636861727365743d6d61636761656c69632c756e695f780bd540577eddff9eb2444136776d6c6174653d302c696f636861727365743d6d6163677265656b2c71756965742c756e", @ANYRESHEX=0x0, @ANYBLOB=',shortname=winnt,rodir,utf8=0,flush,\x00'], 0x2d, 0x33e, &(0x7f0000000480)="$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") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x8}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x26b9ffe36856e205}, {0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x1}}, 0xb8}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6085a900009c8800fe8000000000000000000000000000bbfe8000000000000000000000000000aa"], 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9", 0x7b}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006119a0000000000095000000f5000000447f1169abe22257f8a17e444c52b8874245c8a3dfc0490d5383321beedc6fb31c9463c01064cebf644155"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/80, 0x50}], 0x2}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @remote, @empty}, &(0x7f0000000440)=0xc) sendmsg$nl_route(r6, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@getstats={0x1c, 0x5e, 0x800, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x2}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004014}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) setsockopt$inet6_int(r8, 0x29, 0x42, &(0x7f0000000080)=0xf2a, 0x4) 44.943646911s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0xc, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={0xffffffffffffffff, r1}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r6, 0x0, 0x0) keyctl$instantiate(0xc, r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) read$FUSE(r0, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x10}, 0x0, 0x0, 0x0, 0x0}) 44.589564503s ago: executing program 4 (id=43): r0 = fsopen(&(0x7f0000000240)='f2fs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00', 0x7101}) socket(0x2d, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000b1ddb70721ce734cf4b7659cd8", @ANYRES16=0x0, @ANYBLOB="e7bf2abd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4014) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x0, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) syz_emit_ethernet(0x8a, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000380)={{0x84, @empty, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0x4f}, {@rand_addr=0x64010102, 0x4e26, 0x3, 0x0, 0x8001, 0x1}}, 0x44) fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0x80c808, &(0x7f0000000340)=ANY=[], 0x1, 0x2f0, &(0x7f00000027c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r5}, 0x4) r6 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa) 44.086365273s ago: executing program 0 (id=45): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwritev(r2, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000300)={0x0, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000280)=0x17) 42.331926531s ago: executing program 0 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0xa3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1f0000000e000000050000000700000090200000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000000000400000000001caae7eef991ff64d73e002f1194390000000000000000000024eccd706cb6eb4001d495903890fae1666aa3fdf1352084352a4bd995dccf2274efd6c814818d18a606a12bd1b13402aa2fe028c06db268ac2802286f0d1a076f6ffe57bbde7ae510f8db5191dd1afa1ff53872d3c270c49702a15ee576d0b218ab6575edeb323cfe46dd1750ff822d5db10fcddb0fc229220f356aea4fdfc9192bd1f1c576c4e8090de2e86601ff43d714deaed63005962925b952b5752b"], 0x50) timer_create(0x7, &(0x7f0000000240)={0x0, 0x1d, 0x1, @tid=r0}, &(0x7f0000000200)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x2, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) getdents64(r6, &(0x7f0000000000)=""/49, 0x31) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000002c0)=0x20) 41.943592265s ago: executing program 3 (id=47): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (fail_nth: 3) 41.47797695s ago: executing program 3 (id=49): syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x5, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="33b59d6edb0500174ede7fd5f8b01be6325bb962454b3767052873c80c5f2c573ed5f4429de9f22d38503c73041915fe06e7e3b92c12f5c0d1c60ce3bafce2fcc95dd1d85553f94a39a1ef9aba9e2f00af7b50d3596cc1e448275ad4618db4b4e2cafd969271ba2c8dd354f9dba9bf7df6dfa6b7617f36b7cc8d4623d59f15558ddfdeed68d6f318f7fee8", @ANYBLOB="3cbed6e52efe7e5218c0f9829b50d40a4da4d0accda131734cbe6c66d4eb9ac85f5cb845dd4a8185d66e14c9511af49b481c0a86d034e702e2df26bc8d2020116977c6008d4a10ec2ff5b5a2c73d099f1d28", @ANYRESOCT], 0x9f, 0x19b, &(0x7f0000000840)="$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") 40.506023648s ago: executing program 3 (id=50): socket$tipc(0x1e, 0x5, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x144, 0x24, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xfff2, 0x4}, {0x3, 0x6}, {0xd, 0xfff1}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x24000004}, 0x6040050) r2 = syz_open_dev$usbfs(0x0, 0x13, 0x80801) ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000400)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000fffffff88500000004000000180100002020642500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f00000003c0)={r9, 0x0, 0x0, 0xd0d, 0x85, 0xcb1, 0x800, 0x4, 0x1, 0x1000, 0x8, 0xfffffffb}) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r10, &(0x7f0000000040)="800037", 0x3, 0x0, 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r11, 0x4040ae77, 0x0) syz_io_uring_setup(0x498, &(0x7f0000000400)={0x0, 0x3f73, 0x1, 0x0, 0x1a}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) 40.350381519s ago: executing program 1 (id=51): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000008c0)={0x5, 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r1, 0xc01864c1, &(0x7f0000000040)) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000280)={0x14, &(0x7f0000000080)={0x0, 0x21, 0xad, {0xad, 0xd, "d7a4fe599a14b52502a17abdc86f16c683ceed5e79a30cec74fafa071f487eaee42b012e0e7db39a8ca4d5c7a7c03437b296f2c7f35010a5dac8130b203d1c74134a0a328ae14d83ff31464c14eab55c23648f4443398df0261eed608fec7d72931bf3966d7189c1f17685ebe5f575d0224ee30752c5e2bcc78171849bacd1c3b421edb7cfc34e2c9f331b41be6ead4aefa4cbb0a3f26a44336629ad7efee493d8ac01cac8218f06c11fa6"}}, &(0x7f0000000140)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}}, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x40, 0x6, 0xd, "a705330d434e47fbb8b78c47f820fe6b49d54d80e06067b970bc6b47d8fbee375aef1a042bbfaefaa38e1bc45bbe657e41cc6c92162d8458552b38135dc1f2a0e35832a7beff9c6d0b18f0dc5424"}, &(0x7f0000000340)={0x0, 0xa, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000003c0)={0x20, 0x81, 0x2, 'l\\'}, &(0x7f0000000400)={0x20, 0x82, 0x1, "f7"}, &(0x7f0000000440)={0x20, 0x83, 0x3, '&_\x00'}, &(0x7f0000000480)={0x20, 0x84, 0x1, "ac"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "09a377"}}) 40.070010365s ago: executing program 4 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x17a, 0x0, 0x8000010000000001}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfffffffffffffff8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x93}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc6c}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20040011}, 0x4000840) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$KVM_CAP_DISABLE_QUIRKS2(0xffffffffffffffff, 0x4068aea3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010605"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r2, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x90, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_MARK={0x8}, @CTA_MARK_MASK={0x8}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}]}, 0x90}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d00060a0008002bbd70000000000003000500ff00000002004e20ffffffff000000000000008e0500060000201e000a004e240000000000000000000000000000fff77f0003010300000000000000"], 0x50}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) 39.269363411s ago: executing program 1 (id=53): r0 = syz_open_pts(0xffffffffffffffff, 0x20000) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000240)=0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36adbe9abc89b6f5bec", 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005ac000/0x3000)=nil, 0x3000, 0x2) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f00003fd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000000c0)=0x5, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80640, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="0f", 0x7fd8}], 0x20}, 0x40040) 39.127487593s ago: executing program 4 (id=54): lstat(0x0, 0x0) setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000000180)=[{0x0, 0x203}, {}], 0x2) semctl$GETVAL(r0, 0x1, 0xc, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x8000000000000000, 0x8000000000000003, 0x2, 0xfefffffffeffffff, 0x1, 0x4000000007fff, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017000000080002000500000008000300070000000000000003000000080004000a000000080001006574680014000280080003007032ffff0800010002000000080001007564700014000280080001001500000008000200ffffffff0c0003800800020008eeffff5b0007800c0004000000000000000000080001000000ffff0c00030006000000000000000c000400c5080000000000000800020008"], 0x160}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010043000400018010000280060001"], 0x28}}, 0x0) 39.084336094s ago: executing program 3 (id=55): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 36.949212893s ago: executing program 0 (id=56): syz_io_uring_setup(0x23ec3, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsn(0x0, 0x200, 0x420400) sendmsg$key(r4, 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, r5) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}}}}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 36.49348693s ago: executing program 1 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x3c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xe81}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24048050}, 0x40080) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = dup(r4) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, &(0x7f0000000740)) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000040)={0x1, @pix_mp={0xedd, 0x2, 0x38414261, 0x0, 0x5, [{0x1cd5, 0xa64a}, {0xffff, 0x2}, {0xdff, 0x5580}, {0x24, 0x1}, {0x5, 0x101}, {0xde, 0x3}, {0x80000000, 0x6}, {0x9, 0x6}], 0x0, 0xf, 0x6, 0x1, 0x1}}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f00000000c0)={0x8000000000000001, 0xffff, 0x0, 0x400}) r8 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r8, 0xc050561a, &(0x7f0000000200)={0x0, "80a246be445c94f43a16d380ec570000aa2e5a00", 0x3, 0x3, 0x5, 0x10, 0x606020a, 0x2}) 36.058898544s ago: executing program 4 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'veth0_to_hsr\x00', {0x10000}, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYBLOB, @ANYRES32=r1, @ANYRES64=r1, @ANYRESOCT=r0], 0x34}}, 0x2000) openat$nullb(0xffffffffffffff9c, 0x0, 0x8001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000180)=ANY=[]) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gro_p\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCMIWAIT(r5, 0x545c, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='f2fs\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 34.432981321s ago: executing program 1 (id=59): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x82) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES16, @ANYRES64=r1], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x5, 0x200}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0x40a2}}}}]}, 0x38}}, 0x20000800) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00290203000001"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8000) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000540)="56c63d42", 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000100)={0xd, 0x4, 0x8001, 0x7, 'syz1\x00', 0x6}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="8bb7", 0x2}], 0x1) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2202"], 0xfdef) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0xc000) 32.991704773s ago: executing program 3 (id=60): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x5, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYBLOB="33b59d6edb0500174ede7fd5f8b01be6325bb962454b3767052873c80c5f2c573ed5f4429de9f22d38503c73041915fe06e7e3b92c12f5c0d1c60ce3bafce2fcc95dd1d85553f94a39a1ef9aba9e2f00af7b50d3596cc1e448275ad4618db4b4e2cafd969271ba2c8dd354f9dba9bf7df6dfa6b7617f36b7cc8d4623d59f15558ddfdeed68d6f318f7fee8", @ANYBLOB="3cbed6e52efe7e5218c0f9829b50d40a4da4d0accda131734cbe6c66d4eb9ac85f5cb845dd4a8185d66e14c9511af49b481c0a86d034e702e2df26bc8d2020116977c6008d4a10ec2ff5b5a2c73d099f1d28", @ANYRESOCT], 0x9f, 0x19b, &(0x7f0000000840)="$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") r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb8}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0xf, 0x8, 0x4d, 0x4, {{0x1c, 0x4, 0x2, 0x7, 0x70, 0x65, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0xa}, {[@ssrr={0x89, 0x23, 0xb9, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @private=0xa010102, @multicast1, @multicast2, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x64, 0x1, 0x4, [{@multicast2, 0x8}, {@loopback, 0x2}, {@remote, 0x5}]}, @timestamp_prespec={0x44, 0x1c, 0xbe, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x3130}]}, @noop]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@mpls_newroute={0x28, 0x18, 0x100, 0x70bd2b, 0x25dfdbfb, {0x1c, 0x4, 0x20, 0x1, 0xff, 0x3, 0xfd, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x5, 0x10, 0x9, r4}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) 28.631520547s ago: executing program 32 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x9, 0x4, 0xc, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={0xffffffffffffffff, r1}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) r6 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000040)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r6, 0x0, 0x0) keyctl$instantiate(0xc, r6, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) read$FUSE(r0, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r7, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x10}, 0x0, 0x0, 0x0, 0x0}) 28.146003249s ago: executing program 1 (id=62): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 27.97627013s ago: executing program 0 (id=63): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv4_getnexthop={0x34, 0x6a, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_MASTER={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24042841}, 0x20040040) fsopen(&(0x7f0000000200)='binder\x00', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x5, &(0x7f0000000000)={0x1, 0x1, 0x201, 0xb}) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000240)=0xd60, 0x8000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x9, 0x42f, &(0x7f0000000940)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r4}, &(0x7f0000000980), &(0x7f0000000a00)=r5}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r6 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r6) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r8, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa3d2, 0x4c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4002000}, 0x80) r9 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f00000004c0)={0x1, 0x0, &(0x7f0000000280)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01864ba, &(0x7f0000000540)={0x9, 0x0, r10, 0xb0b0b0b0}) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x2) socket$key(0xf, 0x3, 0x2) 27.245685516s ago: executing program 4 (id=64): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r1, 0x0, 0x10, 0x4}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000001c0)=0x1) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x400000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x1}, 0x7, 0x4, &(0x7f0000000040)={0x40, 0x1f, 0x0, 0x2, 0x67}, 0x8, 0x5, 0x5, 0x0, 0x7, 0x4, 0x0}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) fsopen(&(0x7f0000000ac0)='configfs\x00', 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, 0x0, 0x0, 0x9, 0x7}) 26.621071091s ago: executing program 1 (id=65): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, r1, 0x0, 0x10, 0x4}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, &(0x7f00000001c0)=0x1) r3 = syz_open_dev$usbfs(0x0, 0x0, 0x400000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {0x1}, 0x7, 0x4, &(0x7f0000000040)={0x40, 0x1f, 0x0, 0x2, 0x67}, 0x8, 0x5, 0x5, 0x0, 0x7, 0x4, 0x0}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000001340)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) fsopen(&(0x7f0000000ac0)='configfs\x00', 0x0) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xffffffff}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, 0x0, 0x0, 0x9, 0x7}) 26.316699881s ago: executing program 0 (id=66): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000031400022cbd7000ffdbdf250900020073797a30000000000800410073697700140033006d6163736563300000f9ffffffffffffff00020073797a3000000000080041007278650014003300697036746e6c"], 0xb0}, 0x1, 0x0, 0x0, 0x45}, 0x950) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0xfffffffe) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x10040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x1, 0x0) pread64(0xffffffffffffffff, &(0x7f0000004500)=""/122, 0x7a, 0x3) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 24.967106907s ago: executing program 0 (id=67): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4142, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0xa) 24.659705691s ago: executing program 3 (id=68): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee01}}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r1}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$chown(0x4, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 0s ago: executing program 33 (id=67): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x4142, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff}, 0xc) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x5) landlock_restrict_self(r2, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 89.100132][ T5598] cgroup: Unknown subsys name 'net' [ 89.333793][ T5598] cgroup: Unknown subsys name 'cpuset' [ 89.396759][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.425546][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.649708][ T824] cfg80211: failed to load regulatory.db [ 94.039958][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.044002][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.044901][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.048927][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.050430][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.102367][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.109081][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.134352][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.154542][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.157392][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.159973][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.174732][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.177614][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.181836][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.185046][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.188574][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.188913][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.261605][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.277190][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.280460][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.281324][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.283710][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.287665][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.290061][ T4928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.290711][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.238919][ T61] Bluetooth: hci3: command tx timeout [ 96.316312][ T61] Bluetooth: hci4: command tx timeout [ 96.316496][ T61] Bluetooth: hci1: command tx timeout [ 96.397162][ T5616] Bluetooth: hci0: command tx timeout [ 96.397348][ T5616] Bluetooth: hci2: command tx timeout [ 97.142725][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.144001][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.144200][ T5610] bridge_slave_0: entered allmulticast mode [ 97.148594][ T5610] bridge_slave_0: entered promiscuous mode [ 97.198864][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.199054][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.199422][ T5611] bridge_slave_0: entered allmulticast mode [ 97.201611][ T5611] bridge_slave_0: entered promiscuous mode [ 97.224273][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.224567][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.224865][ T5610] bridge_slave_1: entered allmulticast mode [ 97.229246][ T5610] bridge_slave_1: entered promiscuous mode [ 97.270030][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.270251][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.270432][ T5611] bridge_slave_1: entered allmulticast mode [ 97.272912][ T5611] bridge_slave_1: entered promiscuous mode [ 97.429012][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.429265][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.429439][ T5613] bridge_slave_0: entered allmulticast mode [ 97.431626][ T5613] bridge_slave_0: entered promiscuous mode [ 97.445661][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.497160][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.498519][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.499310][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.499491][ T5613] bridge_slave_1: entered allmulticast mode [ 97.502147][ T5613] bridge_slave_1: entered promiscuous mode [ 97.519194][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.519585][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.519877][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.520131][ T5614] bridge_slave_0: entered allmulticast mode [ 97.524241][ T5614] bridge_slave_0: entered promiscuous mode [ 97.570387][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.609736][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.609949][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.610122][ T5614] bridge_slave_1: entered allmulticast mode [ 97.612269][ T5614] bridge_slave_1: entered promiscuous mode [ 97.614436][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.614668][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.614847][ T5612] bridge_slave_0: entered allmulticast mode [ 97.619524][ T5612] bridge_slave_0: entered promiscuous mode [ 97.706172][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.706516][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.706892][ T5612] bridge_slave_1: entered allmulticast mode [ 97.709111][ T5612] bridge_slave_1: entered promiscuous mode [ 97.743526][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.751118][ T5610] team0: Port device team_slave_0 added [ 97.792027][ T5611] team0: Port device team_slave_0 added [ 97.797050][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.804760][ T5610] team0: Port device team_slave_1 added [ 97.815910][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.840102][ T5611] team0: Port device team_slave_1 added [ 97.878971][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.904729][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.995473][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.008669][ T5613] team0: Port device team_slave_0 added [ 98.010932][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.010945][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.010961][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.041149][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.041166][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.041191][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.077301][ T5613] team0: Port device team_slave_1 added [ 98.082229][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.082245][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.082271][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.088728][ T5614] team0: Port device team_slave_0 added [ 98.092260][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.092275][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.092300][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.171156][ T5614] team0: Port device team_slave_1 added [ 98.190136][ T5612] team0: Port device team_slave_0 added [ 98.253807][ T5612] team0: Port device team_slave_1 added [ 98.255531][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.255544][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.255561][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.326226][ T5616] Bluetooth: hci3: command tx timeout [ 98.350506][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.350519][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.350536][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.374674][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.374691][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.374716][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.406216][ T5616] Bluetooth: hci1: command tx timeout [ 98.406226][ T61] Bluetooth: hci4: command tx timeout [ 98.468477][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.468490][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.468506][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.476365][ T5616] Bluetooth: hci0: command tx timeout [ 98.476405][ T5616] Bluetooth: hci2: command tx timeout [ 99.015877][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.015898][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.015926][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.063115][ T5610] hsr_slave_0: entered promiscuous mode [ 99.065532][ T5610] hsr_slave_1: entered promiscuous mode [ 99.099697][ T5611] hsr_slave_0: entered promiscuous mode [ 99.101239][ T5611] hsr_slave_1: entered promiscuous mode [ 99.102567][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 99.102646][ T5611] Cannot create hsr debugfs directory [ 99.104422][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.104432][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.104448][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.261279][ T5613] hsr_slave_0: entered promiscuous mode [ 99.262671][ T5613] hsr_slave_1: entered promiscuous mode [ 99.263768][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 99.263794][ T5613] Cannot create hsr debugfs directory [ 99.356557][ T5614] hsr_slave_0: entered promiscuous mode [ 99.358014][ T5614] hsr_slave_1: entered promiscuous mode [ 99.359212][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 99.359238][ T5614] Cannot create hsr debugfs directory [ 99.438367][ T5612] hsr_slave_0: entered promiscuous mode [ 99.439834][ T5612] hsr_slave_1: entered promiscuous mode [ 99.440943][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 99.440969][ T5612] Cannot create hsr debugfs directory [ 100.396413][ T61] Bluetooth: hci3: command tx timeout [ 100.479195][ T61] Bluetooth: hci1: command tx timeout [ 100.479647][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.487107][ T61] Bluetooth: hci4: command tx timeout [ 100.527742][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.538971][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.556327][ T61] Bluetooth: hci2: command tx timeout [ 100.556350][ T5616] Bluetooth: hci0: command tx timeout [ 100.584097][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.605528][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.644665][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.668309][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.713880][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.809911][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.843401][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.854914][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.881451][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.885143][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.910291][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.944309][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.981961][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.130972][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.172094][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.194420][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.231386][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.235251][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.269156][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.301946][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.346210][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.535921][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.580149][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.602528][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.635128][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.651560][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.695403][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.727651][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.774656][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.945032][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.970014][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.012448][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.013095][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.053687][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.061051][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.091826][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.107384][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.150117][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.284018][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.343483][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.373724][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.375678][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.459392][ T1509] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.459520][ T1509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.486539][ T61] Bluetooth: hci3: command tx timeout [ 102.533839][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.557200][ T5616] Bluetooth: hci1: command tx timeout [ 102.557250][ T61] Bluetooth: hci4: command tx timeout [ 102.629243][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.636399][ T61] Bluetooth: hci2: command tx timeout [ 102.638944][ T61] Bluetooth: hci0: command tx timeout [ 102.659191][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.659356][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.734709][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.734883][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.844681][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.878126][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.930066][ T157] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.930242][ T157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.976486][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.976711][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.114077][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.197431][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.238792][ T3337] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.239044][ T3337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.360311][ T3337] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.361941][ T3337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.519239][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.638784][ T1499] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.639066][ T1499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.721960][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.722152][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.500086][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.711747][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.191407][ T5610] veth0_vlan: entered promiscuous mode [ 105.305978][ T5610] veth1_vlan: entered promiscuous mode [ 105.414061][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.798397][ T5610] veth0_macvtap: entered promiscuous mode [ 105.840474][ T5610] veth1_macvtap: entered promiscuous mode [ 105.922780][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.964016][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.012045][ T5611] veth0_vlan: entered promiscuous mode [ 106.023284][ T5612] veth0_vlan: entered promiscuous mode [ 106.062381][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.095864][ T5611] veth1_vlan: entered promiscuous mode [ 106.105180][ T5612] veth1_vlan: entered promiscuous mode [ 106.122367][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.192912][ T71] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.213730][ T71] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.231669][ T71] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.245470][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.547653][ T5614] veth0_vlan: entered promiscuous mode [ 106.616793][ T5613] veth0_vlan: entered promiscuous mode [ 106.634854][ T5611] veth0_macvtap: entered promiscuous mode [ 106.672205][ T5612] veth0_macvtap: entered promiscuous mode [ 106.735353][ T5611] veth1_macvtap: entered promiscuous mode [ 106.787707][ T5612] veth1_macvtap: entered promiscuous mode [ 106.799494][ T5614] veth1_vlan: entered promiscuous mode [ 106.826541][ T5613] veth1_vlan: entered promiscuous mode [ 106.915497][ T1509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.915522][ T1509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.984957][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.007921][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.071025][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.074282][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.080772][ T3337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.080791][ T3337] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.194541][ T168] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.229565][ T168] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.256936][ T168] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.270782][ T168] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.299777][ T5614] veth0_macvtap: entered promiscuous mode [ 107.302101][ T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.303299][ T5613] veth0_macvtap: entered promiscuous mode [ 107.331444][ T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.381901][ T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.432824][ T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.482421][ T5614] veth1_macvtap: entered promiscuous mode [ 107.495938][ T5613] veth1_macvtap: entered promiscuous mode [ 109.670412][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.709749][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.775560][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.815270][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.898978][ T5808] FAULT_INJECTION: forcing a failure. [ 109.898978][ T5808] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.899016][ T5808] CPU: 0 UID: 0 PID: 5808 Comm: syz.1.6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.899039][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.899051][ T5808] Call Trace: [ 109.899060][ T5808] [ 109.899069][ T5808] dump_stack_lvl+0xe8/0x150 [ 109.899101][ T5808] should_fail_ex+0x46b/0x600 [ 109.899133][ T5808] _copy_from_iter+0x1d3/0x1670 [ 109.899173][ T5808] ? __pfx__copy_from_iter+0x10/0x10 [ 109.899210][ T5808] ? skb_put+0x11b/0x210 [ 109.899236][ T5808] hci_sock_sendmsg+0x426/0xf40 [ 109.899266][ T5808] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 109.899291][ T5808] ? __pfx_aa_file_perm+0x10/0x10 [ 109.899318][ T5808] ? aa_sock_msg_perm+0x122/0x200 [ 109.899351][ T5808] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 109.899371][ T5808] sock_sendmsg_nosec+0x112/0x150 [ 109.899403][ T5808] sock_write_iter+0x308/0x410 [ 109.899445][ T5808] ? __pfx_sock_write_iter+0x10/0x10 [ 109.899494][ T5808] vfs_write+0x629/0xba0 [ 109.899533][ T5808] ? __pfx_vfs_write+0x10/0x10 [ 109.899573][ T5808] ? __fget_files+0x2a/0x420 [ 109.899610][ T5808] ksys_write+0x156/0x270 [ 109.899641][ T5808] ? __pfx_ksys_write+0x10/0x10 [ 109.899677][ T5808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.899700][ T5808] do_syscall_64+0x15f/0xf80 [ 109.899725][ T5808] ? trace_irq_disable+0x3b/0x140 [ 109.900010][ T5808] ? clear_bhb_loop+0x40/0x90 [ 109.900033][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.900053][ T5808] RIP: 0033:0x7ff2de9ccdd9 [ 109.900074][ T5808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.900090][ T5808] RSP: 002b:00007ff2dcc26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 109.900113][ T5808] RAX: ffffffffffffffda RBX: 00007ff2dec45fa0 RCX: 00007ff2de9ccdd9 [ 109.900127][ T5808] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 109.900140][ T5808] RBP: 00007ff2dcc26090 R08: 0000000000000000 R09: 0000000000000000 [ 109.900152][ T5808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.900164][ T5808] R13: 00007ff2dec46038 R14: 00007ff2dec45fa0 R15: 00007ffc7cc4a248 [ 109.900195][ T5808] [ 110.158841][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.158864][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.238047][ T1509] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.244159][ T1509] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.260758][ T1509] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.264005][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.264025][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.311369][ T1509] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.343221][ T1509] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.358101][ T1509] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.450242][ T1509] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.484932][ T1509] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.561745][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.561767][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.594762][ T5816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 110.594790][ T5816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 110.618354][ T5816] Zero length message leads to an empty skb [ 111.068641][ T5818] loop1: detected capacity change from 0 to 32768 [ 111.071515][ T5818] btrfs: Deprecated parameter 'usebackuproot' [ 111.071666][ T5818] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 111.081008][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.090828][ T5818] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9 (5818) [ 111.257908][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.285097][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.396574][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.439896][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.448087][ T5818] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.448131][ T5818] BTRFS info (device loop1): using crc32c checksum algorithm [ 111.448170][ T5818] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 111.450738][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.479248][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.487543][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.493266][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.501237][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.501984][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.503036][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.503729][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.505767][ T71] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.522461][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.523240][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.529554][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.535164][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.536415][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.562514][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.565891][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.575211][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.609033][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.609862][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.611007][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.611738][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.612493][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.613316][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.614035][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.627697][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.629092][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.629968][ T3337] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.652971][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.669397][ T3337] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.669463][ T3337] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.669510][ T3337] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.700215][ T1381] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.849069][ T3337] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 111.862190][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.862207][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.935177][ T1381] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.022805][ T1381] BTRFS warning (device loop1): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0 [ 112.023187][ T5818] BTRFS warning (device loop1): couldn't read tree root [ 112.023218][ T5818] BTRFS warning (device loop1): try to load backup roots slot 1 [ 112.024824][ T1381] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.030898][ T151] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0 [ 112.034147][ T5818] BTRFS warning (device loop1): couldn't read tree root [ 112.034184][ T5818] BTRFS warning (device loop1): try to load backup roots slot 2 [ 112.036212][ T151] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.063990][ T157] BTRFS warning (device loop1): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1 [ 112.064141][ T5818] BTRFS warning (device loop1): couldn't read tree root [ 112.064167][ T5818] BTRFS warning (device loop1): try to load backup roots slot 3 [ 112.065479][ T151] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.071393][ T1381] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.082845][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.085770][ T1381] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.088083][ T1381] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.112541][ T1381] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.127453][ T1499] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.183623][ T3337] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 112.199341][ T5818] BTRFS info (device loop1): rebuilding free space tree [ 112.335267][ T1381] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 112.335577][ T1381] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 112.434782][ T168] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 112.550134][ T5818] BTRFS info (device loop1): disabling free space tree [ 112.551169][ T5818] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 112.551201][ T5818] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 112.591131][ T1509] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 112.746184][ T1509] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 112.777182][ T5818] BTRFS info (device loop1): checking UUID tree [ 112.792090][ T5818] BTRFS info (device loop1): enabling ssd optimizations [ 112.792115][ T5818] BTRFS info (device loop1): turning off barriers [ 112.792130][ T5818] BTRFS info (device loop1): turning on sync discard [ 112.792145][ T5818] BTRFS info (device loop1): enabling disk space caching [ 112.792159][ T5818] BTRFS info (device loop1): force clearing of disk cache [ 112.792173][ T5818] BTRFS info (device loop1): enabling auto defrag [ 112.792187][ T5818] BTRFS info (device loop1): trying to use backup root at mount time [ 112.792203][ T5818] BTRFS info (device loop1): max_inline set to 0 [ 113.274449][ T5840] netlink: 'syz.4.10': attribute type 32 has an invalid length. [ 113.326446][ T157] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 113.409951][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 113.462292][ T39] audit: type=1326 audit(1778526718.635:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4543cdd9 code=0x7ffc0000 [ 113.474808][ T1381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.474830][ T1381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.482826][ T39] audit: type=1326 audit(1778526718.695:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5839 comm="" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4543cdd9 code=0x7ffc0000 [ 113.532968][ T12] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 113.575868][ T157] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 113.586265][ T157] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 113.685915][ T157] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 113.774244][ T1381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.774269][ T1381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.794953][ T5610] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 113.852410][ T5844] loop4: detected capacity change from 0 to 1024 [ 113.854033][ T5844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.945776][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.110492][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.137249][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.137339][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.168575][ T5846] Bluetooth: MGMT ver 1.23 [ 114.272699][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.280593][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.285851][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.300489][ T1499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.307449][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.353839][ T1499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.353894][ T1499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.353921][ T1499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.367089][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.384152][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.386434][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.403899][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.457950][ T1499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 114.478821][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 114.513899][ T12] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 114.522761][ T3337] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 114.707617][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.707641][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.959340][ T5851] xt_policy: too many policy elements [ 115.039889][ T5809] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 115.162506][ T5856] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.164249][ T5844] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.281755][ T5857] FAULT_INJECTION: forcing a failure. [ 115.281755][ T5857] name failslab, interval 1, probability 0, space 0, times 1 [ 115.281793][ T5857] CPU: 1 UID: 0 PID: 5857 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 115.281818][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.281830][ T5857] Call Trace: [ 115.281839][ T5857] [ 115.281848][ T5857] dump_stack_lvl+0xe8/0x150 [ 115.281883][ T5857] should_fail_ex+0x46b/0x600 [ 115.281914][ T5857] should_failslab+0xa8/0x100 [ 115.281950][ T5857] __kmalloc_cache_noprof+0x84/0x690 [ 115.281984][ T5857] ? ucma_alloc_ctx+0x4e/0x340 [ 115.282014][ T5857] ucma_alloc_ctx+0x4e/0x340 [ 115.282040][ T5857] ucma_create_id+0x1e3/0x380 [ 115.282077][ T5857] ? __pfx_ucma_create_id+0x10/0x10 [ 115.282128][ T5857] ucma_write+0x257/0x2f0 [ 115.282164][ T5857] ? __pfx_ucma_write+0x10/0x10 [ 115.282201][ T5857] ? rw_verify_area+0x25b/0x4e0 [ 115.282238][ T5857] vfs_writev+0x4c6/0x9a0 [ 115.282266][ T5857] ? __pfx_ucma_write+0x10/0x10 [ 115.282310][ T5857] ? __pfx_vfs_writev+0x10/0x10 [ 115.282351][ T5857] ? __fget_files+0x2a/0x420 [ 115.282383][ T5857] ? __fget_files+0x3a6/0x420 [ 115.282409][ T5857] ? __fget_files+0x2a/0x420 [ 115.282446][ T5857] do_writev+0x15a/0x2e0 [ 115.282474][ T5857] ? __pfx_do_writev+0x10/0x10 [ 115.282508][ T5857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.282532][ T5857] do_syscall_64+0x15f/0xf80 [ 115.282569][ T5857] ? clear_bhb_loop+0x40/0x90 [ 115.282596][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.282618][ T5857] RIP: 0033:0x7fdb6eaecdd9 [ 115.282639][ T5857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.282665][ T5857] RSP: 002b:00007fdb6cd25028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 115.282689][ T5857] RAX: ffffffffffffffda RBX: 00007fdb6ed66090 RCX: 00007fdb6eaecdd9 [ 115.282704][ T5857] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000014 [ 115.282718][ T5857] RBP: 00007fdb6cd25090 R08: 0000000000000000 R09: 0000000000000000 [ 115.282731][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.282744][ T5857] R13: 00007fdb6ed66128 R14: 00007fdb6ed66090 R15: 00007ffef24843f8 [ 115.282777][ T5857] [ 115.526303][ T1509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.526327][ T1509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.511124][ T39] audit: type=1326 audit(1778526721.695:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.3.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd73cdd9 code=0x7ffc0000 [ 116.511189][ T39] audit: type=1326 audit(1778526721.695:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.3.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd73cdd9 code=0x7ffc0000 [ 116.623780][ T39] audit: type=1326 audit(1778526721.835:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.3.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbabd6fd60e code=0x7ffc0000 [ 116.623844][ T39] audit: type=1326 audit(1778526721.835:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.3.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd73cdd9 code=0x7ffc0000 [ 116.623893][ T39] audit: type=1326 audit(1778526721.835:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.3.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabd73cdd9 code=0x7ffc0000 [ 116.625483][ T39] audit: type=1326 audit(1778526721.835:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.3.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbabd6fd60e code=0x7ffc0000 [ 116.625534][ T39] audit: type=1326 audit(1778526721.835:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.3.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbabd73ca6b code=0x7ffc0000 [ 116.625579][ T39] audit: type=1326 audit(1778526721.835:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.3.15" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbabd73ca6b code=0x7ffc0000 [ 116.967779][ T5716] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.150679][ T823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.371620][ T823] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 117.371654][ T823] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 117.371674][ T823] usb 4-1: config 0 has no interface number 0 [ 117.372338][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 117.372370][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 117.372395][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 117.372422][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 117.532666][ T823] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 117.532701][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.532723][ T823] usb 4-1: Product: syz [ 117.532738][ T823] usb 4-1: Manufacturer: syz [ 117.532752][ T823] usb 4-1: SerialNumber: syz [ 117.579712][ T5716] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 117.579749][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.579771][ T5716] usb 2-1: Product: syz [ 117.579787][ T5716] usb 2-1: Manufacturer: syz [ 117.579802][ T5716] usb 2-1: SerialNumber: syz [ 117.854183][ T5716] usb 2-1: config 0 descriptor?? [ 117.862938][ T823] usb 4-1: config 0 descriptor?? [ 118.341125][ T5875] loop2: detected capacity change from 0 to 512 [ 118.364148][ T5875] ======================================================= [ 118.364148][ T5875] WARNING: The mand mount option has been deprecated and [ 118.364148][ T5875] and is ignored by this kernel. Remove the mand [ 118.364148][ T5875] option from the mount to silence this warning. [ 118.364148][ T5875] ======================================================= [ 118.364245][ T5875] ext4: Unknown parameter '' [ 118.364848][ T5875] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 121.046907][ T3337] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 121.849482][ T5871] /dev/sg0: Can't lookup blockdev [ 122.807064][ T823] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 122.807106][ T823] uvcvideo 4-1:0.64: No valid video chain found. [ 123.407703][ T823] usb 4-1: USB disconnect, device number 2 [ 123.575519][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.943946][ T5716] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 124.184992][ T5879] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 124.259888][ T1509] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 124.374539][ T5611] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 124.795453][ T5716] usb 2-1: USB disconnect, device number 2 [ 125.672246][ T5895] loop3: detected capacity change from 0 to 512 [ 126.242528][ T5893] loop4: detected capacity change from 0 to 1024 [ 126.255658][ T1529] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 126.533641][ T1529] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 126.567728][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 126.595362][ T5893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.807204][ T5897] loop0: detected capacity change from 0 to 512 [ 126.862524][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 126.875765][ T1043] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 126.894213][ T57] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 126.910095][ T5897] ext4: Unknown parameter '' [ 126.921649][ T5897] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 127.070376][ T3372] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 127.255430][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 127.443319][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 127.506269][ T3337] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 127.521810][ T1043] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 128.016463][ T5893] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 128.031449][ T5895] EXT4-fs warning (device loop3): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop3. [ 128.046317][ T5896] /dev/sg0: Can't lookup blockdev [ 128.981790][ T5611] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 129.196072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.226099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.236074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.246097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.256073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.266083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.276097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.286098][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.296073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.306067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.326338][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 135.326361][ T39] audit: type=1326 audit(1778526739.105:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326407][ T39] audit: type=1326 audit(1778526739.145:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326446][ T39] audit: type=1326 audit(1778526739.195:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326485][ T39] audit: type=1326 audit(1778526739.205:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326523][ T39] audit: type=1326 audit(1778526739.205:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326562][ T39] audit: type=1326 audit(1778526739.205:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326603][ T39] audit: type=1326 audit(1778526739.225:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326642][ T39] audit: type=1326 audit(1778526739.235:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326680][ T39] audit: type=1326 audit(1778526739.245:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.326719][ T39] audit: type=1326 audit(1778526739.245:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5914 comm="syz.1.26" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2de9ccdd9 code=0x7ffc0000 [ 135.938123][ T5613] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 136.369736][ T5921] fuse: Bad value for 'group_id' [ 136.369759][ T5921] fuse: Bad value for 'group_id' [ 138.728541][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.728680][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.834282][ T5936] loop3: detected capacity change from 0 to 8 [ 138.858434][ T1499] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 138.892090][ T3372] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 138.895489][ T5936] squashfs image failed sanity check [ 138.913142][ T5936] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 139.257544][ T5938] fuse: Bad value for 'group_id' [ 139.257566][ T5938] fuse: Bad value for 'group_id' [ 140.602952][ T5934] loop0: detected capacity change from 0 to 4096 [ 140.604338][ T5934] ntfs3: Bad value for 'uid' [ 140.604361][ T5934] ntfs3: Bad value for 'uid' [ 140.634467][ T5934] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 143.048810][ T5951] loop1: detected capacity change from 0 to 8 [ 143.092498][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 143.609518][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 143.645629][ T1043] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 143.650506][ T5951] squashfs image failed sanity check [ 143.772342][ T5864] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 144.159073][ T5965] loop4: detected capacity change from 0 to 512 [ 144.160526][ T5965] EXT4-fs: Ignoring removed bh option [ 144.166323][ T13] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.222951][ T5965] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 144.259622][ T1043] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.291249][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.293579][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.298584][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 144.345453][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.346086][ T5965] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.40: corrupted in-inode xattr: e_value size too large [ 144.346293][ T5965] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 144.347329][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 144.352128][ T5965] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.40: couldn't read orphan inode 15 (err -117) [ 144.352304][ T5965] loop4: lost filesystem error report for type 5 error -117 [ 144.352675][ T57] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 144.365041][ T5965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.454813][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.456204][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.468866][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.468930][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.474789][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.484241][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.492201][ T1499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.502993][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.550263][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 144.580898][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 145.514141][ T5966] syz.1.39 (5966) used greatest stack depth: 17800 bytes left [ 145.940432][ T5978] fuse: Bad value for 'group_id' [ 145.940466][ T5978] fuse: Bad value for 'group_id' [ 146.121775][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.261944][ T68] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 146.294650][ T5611] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 148.333156][ T823] IPVS: starting estimator thread 0... [ 148.499510][ T5994] IPVS: using max 7 ests per chain, 16800 per kthread [ 148.649802][ T5989] loop4: detected capacity change from 0 to 64 [ 148.678609][ T5989] hfs: Unknown parameter 'À' [ 148.740117][ T68] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 148.750320][ T1043] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 148.764646][ T168] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 148.778052][ T168] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 148.803657][ T5989] 9p: Bad value for 'rfdno' [ 148.970766][ T5837] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 149.087660][ T5998] binder: 5997:5998 ioctl c0306201 200000000040 returned -14 [ 149.526998][ T6001] loop3: detected capacity change from 0 to 8 [ 149.589463][ T151] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 149.589895][ T151] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 149.631979][ T1499] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 149.632349][ T6001] squashfs image failed sanity check [ 149.859583][ T5864] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 153.597792][ T6020] loop3: detected capacity change from 0 to 1024 [ 153.625322][ T6020] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.640059][ T1043] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.710285][ T1043] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.710369][ T5881] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.729467][ T1043] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.729617][ T1043] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.729726][ T1043] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.740829][ T168] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.746688][ T168] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 153.762030][ T1043] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.762839][ T1043] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.770662][ T1043] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 153.787176][ T5881] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.858863][ T1043] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 153.860874][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.863311][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.863363][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.863388][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.869064][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.884412][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.909529][ T6020] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.910291][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.915449][ T68] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 153.980462][ T6019] netlink: 60 bytes leftover after parsing attributes in process `syz.4.54'. [ 153.980482][ T6019] netlink: 35 bytes leftover after parsing attributes in process `syz.4.54'. [ 156.361013][ T6037] loop4: detected capacity change from 0 to 512 [ 156.445152][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 156.480859][ T25] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 156.490773][ T3337] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 156.554450][ T151] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 156.570481][ T1509] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 156.653631][ T5881] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 156.859132][ T5881] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 156.975427][ T25] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 156.975632][ T25] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 156.994826][ T25] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 157.462188][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.589455][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.590105][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.590660][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.591113][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.591608][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.594211][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.594737][ T157] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.806823][ T1509] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 157.872547][ T5613] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.885934][ T5879] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 158.086244][ T6037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.088274][ T6037] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.947211][ T1499] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 159.071175][ T5879] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 159.703726][ T5802] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 160.107545][ T5802] usb 2-1: Using ep0 maxpacket: 16 [ 160.131823][ T5802] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 160.131894][ T5802] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.131921][ T5802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.131948][ T5802] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.131996][ T5802] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 160.132021][ T5802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.389788][ T6036] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.58: corrupted inode contents [ 160.665846][ T157] lo_rw_aio(loop3) starting write with raw_refcnt=0x0, refcnt=1 [ 160.822113][ T5879] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 161.867189][ T1499] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 162.084669][ T6036] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #2: comm syz.4.58: mark_inode_dirty error [ 162.088816][ T5613] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 162.170402][ T5881] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 162.190551][ T5802] usb 2-1: config 0 descriptor?? [ 162.191269][ T5802] usb 2-1: can't set config #0, error -71 [ 162.296647][ T6036] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.58: corrupted inode contents [ 162.322215][ T25] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 162.322707][ T6036] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.58: mark_inode_dirty error [ 162.323024][ T25] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 162.420877][ T5802] usb 2-1: USB disconnect, device number 3 [ 162.573793][ T6037] EXT4-fs warning (device loop4): ext4_es_cache_extent:1082: inode #2: comm syz.4.58: ES cache extent failed: add [0,1,20,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 162.573793][ T6037] [ 162.606866][ T6051] loop3: detected capacity change from 0 to 8 [ 162.608735][ T1509] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 162.662468][ T57] lo_rw_aio(loop4) starting read with raw_refcnt=0x0, refcnt=1 [ 162.664917][ T6037] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #2: comm syz.4.58: corrupted inode contents [ 162.761327][ T5881] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 162.784033][ T5881] lo_rw_aio(loop3) starting read with raw_refcnt=0x0, refcnt=1 [ 162.787761][ T6051] squashfs image failed sanity check [ 162.870255][ T157] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 162.892675][ T6037] EXT4-fs error (device loop4): ext4_append:88: inode #2: comm syz.4.58: mark_inode_dirty error [ 162.892916][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 162.893742][ T6037] EXT4-fs error (device loop4) in ext4_append:100: Corrupt filesystem [ 162.928525][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 162.983774][ T5864] __loop_clr_fd(loop3) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 163.191076][ T6057] loop1: detected capacity change from 0 to 1024 [ 163.201754][ T6057] EXT4-fs: Ignoring removed nomblk_io_submit option [ 163.210542][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.210894][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.211406][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.215020][ T1509] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 163.217355][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.219806][ T1509] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 163.227743][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.227825][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.242783][ T1509] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 163.247104][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.247166][ T1509] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.256208][ T5881] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.256256][ T5881] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.264234][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.272140][ T57] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.285250][ T5881] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.295706][ T6057] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.309421][ T5881] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.309568][ T5881] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.309689][ T5881] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.313387][ T5881] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.321570][ T5881] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.334168][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.337406][ T157] lo_rw_aio(loop1) starting read with raw_refcnt=0x0, refcnt=1 [ 163.722676][ T1509] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 163.722770][ T1509] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 163.722808][ T1509] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 163.722842][ T1509] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 163.925953][ T5611] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.973523][ T5610] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.028283][ T157] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 164.104908][ T157] lo_rw_aio(loop1) starting write with raw_refcnt=0x0, refcnt=1 [ 164.143257][ T157] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 164.172145][ T5610] __loop_clr_fd(loop1) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 164.227682][ T151] lo_rw_aio(loop4) starting write with raw_refcnt=0x0, refcnt=1 [ 164.256251][ T5611] __loop_clr_fd(loop4) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 164.680342][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 165.116468][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 165.119947][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 165.121269][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 165.148443][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.960007][ T6084] fuse: Bad value for 'group_id' [ 165.960029][ T6084] fuse: Bad value for 'group_id' [ 165.986516][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 165.996251][ T5867] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.156968][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 166.161917][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.161949][ T10] usb 2-1: config 179 has no interface number 0 [ 166.176159][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 166.202514][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.203043][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.203216][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.203234][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.203529][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.203708][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.203854][ T5867] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.203868][ T5867] usb 5-1: config 179 has no interface number 0 [ 166.203895][ T5867] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.203910][ T5867] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 166.203927][ T5867] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 166.203942][ T5867] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 166.203957][ T5867] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 166.203981][ T5867] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 166.203995][ T5867] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.325534][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.488774][ T6073] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 166.493262][ T6069] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 166.708480][ T6069] process 'syz.1.65' launched './file0' with NULL argv: empty string added [ 167.284248][ T61] Bluetooth: hci5: command tx timeout [ 169.369336][ T61] Bluetooth: hci5: command tx timeout [ 171.446344][ T61] Bluetooth: hci5: command tx timeout [ 173.516135][ T61] Bluetooth: hci5: command tx timeout [ 200.740302][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.740428][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 244.476313][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 246.556280][ T5626] Bluetooth: hci1: command tx timeout [ 262.537539][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.537711][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 315.493943][ T5621] Bluetooth: hci3: command tx timeout [ 318.446408][ T5621] Bluetooth: hci4: command tx timeout [ 318.446513][ T61] Bluetooth: hci5: command tx timeout [ 324.806507][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.806642][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.926121][ T40] INFO: task kworker/u8:10:1381 blocked for more than 150 seconds. [ 342.926152][ T40] Not tainted syzkaller #0 [ 342.926164][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 342.926174][ T40] task:kworker/u8:10 state:D stack:23304 pid:1381 tgid:1381 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 342.926246][ T40] Workqueue: events_unbound linkwatch_event [ 342.926277][ T40] Call Trace: [ 342.926284][ T40] [ 342.926297][ T40] __schedule+0x16f9/0x5500 [ 342.926359][ T40] ? __pfx___schedule+0x10/0x10 [ 342.926382][ T40] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 342.926434][ T40] rt_mutex_schedule+0x76/0xf0 [ 342.926466][ T40] rt_mutex_slowlock_block+0x508/0x680 [ 342.926532][ T40] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 342.926567][ T40] rt_mutex_slowlock+0x2dc/0x780 [ 342.926603][ T40] ? rt_mutex_slowlock+0x1fd/0x780 [ 342.926638][ T40] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 342.926685][ T40] ? linkwatch_event+0xe/0x60 [ 342.926716][ T40] ? process_one_work+0x8be/0x1630 [ 342.926755][ T40] ? linkwatch_event+0xe/0x60 [ 342.926779][ T40] mutex_lock_nested+0x168/0x1d0 [ 342.926817][ T40] ? process_one_work+0x8be/0x1630 [ 342.926847][ T40] linkwatch_event+0xe/0x60 [ 342.926872][ T40] process_one_work+0x98b/0x1630 [ 342.926926][ T40] ? __pfx_process_one_work+0x10/0x10 [ 342.926956][ T40] ? move_linked_works+0x238/0x250 [ 342.927004][ T40] worker_thread+0xb49/0x1140 [ 342.927048][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 342.927091][ T40] kthread+0x388/0x470 [ 342.927116][ T40] ? __pfx_worker_thread+0x10/0x10 [ 342.927146][ T40] ? __pfx_kthread+0x10/0x10 [ 342.927173][ T40] ret_from_fork+0x514/0xb70 [ 342.927205][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 342.927233][ T40] ? __switch_to+0xc79/0x1410 [ 342.927259][ T40] ? __pfx_kthread+0x10/0x10 [ 342.927286][ T40] ret_from_fork_asm+0x1a/0x30 [ 342.927335][ T40] [ 345.723295][ T40] [ 345.723295][ T40] Showing all locks held in the system: [ 345.723312][ T40] 2 locks held by kthreadd/2: [ 345.723326][ T40] #0: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 345.723389][ T40] #1: ffff88813fe15858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 345.723539][ T40] 5 locks held by kworker/0:0/9: [ 345.723553][ T40] #0: ffff88805efa4938 ((wq_completion)wg-kex-wg1#10){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 345.723618][ T40] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 345.723684][ T40] #2: ffff88803b8ef930 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 345.723740][ T40] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 345.723795][ T40] #4: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: sched_balance_domains+0xf9/0x900 [ 345.723846][ T40] 4 locks held by kworker/0:1/10: [ 345.723857][ [ 345.723857][ T40] #0: ffff88805efc2d38 ((wq_completion)wg-kex-wg2#10){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 345.723915][ T40] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 345.723981][ T40] #2: ffff88802bfd96f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a1/0x9a0 [ 345.724038][ T40] #3: ffff88803b6f7930 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x58b/0x9a0 [ 345.724094][ T40] 4 locks held by kworker/u8:0/12: [ 345.724105][ T40] #0: ffff888035b1c938 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 345.724166][ T40] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 345.724221][ T40] #2: ffff8880374e56f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 345.724281][ T40] #3: ffff8880603363e0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 345.724337][ T40] 4 locks held by kworker/u8:1/13: [ 345.724349][ T40] #0: ffff88803658f938 ((wq_completion)ext4-rsv-conversion){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 345.724402][ T40] #1: ffffc90000127c40 ((work_completion)(&ei->i_rsv_conversion_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 345.724469][ T40] #2: ffff888036020bb0 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x2054/0x2290 [ 345.724517][ T40] #3: ffff88803fd04960 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x7b5/0x11d0 [ 345.724576][ T40] 4 locks held by ktimers/0/16: [ 345.724587][ T40] #0: ffffffff8de5f380 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 345.724641][ T40] #1: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 345.724695][ T40] #2: ffff8880b8628478 (&base->softirq_expiry_lock){+...}-{3:3}, at: hrtimer_run_softirq+0x7f/0x260 [ 345.724751][ T40] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 345.724806][ T40] 4 locks held by pr/legacy/17: [ 345.724818][ T40] #0: ffffffff8dfba4e0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 345.724863][ T40] #1: ffffffff8dea1dd8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 345.724911][ T40] #2: ffffffff99b6ead8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90 [ 345.724969][ T40] #3: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 345.725023][ T40] 1 lock held by rcub/0/19: [ 345.725034][ T40] #0: ffffffff8dfcde08 (rcu_state){+.+.}-{0:0}, at: rcu_boost_kthread+0x2fb/0x4b0 [ 345.725088][ T40] 7 locks held by kworker/u8:2/25: [ 345.725099][ T40] #0: ffff88801b68e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 345.725152][ T40] #1: ffffc900001e7c40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 345.725204][ T40] #2: ffffffff8f362ac0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 345.725249][ T40] #3: ffff88806031a160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 345.725304][ T40] #4: ffff88803b1ae310 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 345.725362][ T40] #5: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 345.725413][ T40] #6: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 345.725475][ T40] 5 locks held by kworker/1:0/33: [ 345.725485][ T40] #0: ffff88805eb20538 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 345.725543][ T40] #1: ffffc90000a7fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 345.725608][ T40] #2: ffff888060353940 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 345.725661][ T40] #3: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 345.725711][ T40] #4: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 345.725764][ T40] 5 locks held by kworker/1:1/38: [ 345.725775][ T40] #0: ffff888036e16538 ((wq_completion)wg-kex-wg0#5){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 345.725830][ T40] #1: ffffc90000ad7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 345.725894][ T40] #2: ffff8880603363e0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 346.751766][ T40] #3: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.751816][ T40] #4: ffff8880b863b820 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 346.751869][ T40] 1 lock held by khungtaskd/40: [ 346.751880][ T40] #0: ffffffff8dfc8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 346.751932][ T40] 6 locks held by kworker/R-write/42: [ 346.751944][ T40] #0: ffff88801fec4138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.752002][ T40] #1: ffffc90000b37c00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.752058][ T40] #2: ffff888036f1a0d0 (&type->s_umount_key#33){++++}-{4:4}, at: super_trylock_shared+0x20/0xf0 [ 346.752121][ T40] #3: ffff888036efccd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 346.752177][ T40] #4: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.752231][ T40] #5: ffff88813fe15858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 346.752295][ T40] 3 locks held by kworker/u8:3/57: [ 346.752307][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.752366][ T40] #1: ffffc9000123fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.752425][ T40] #2: ffff8880640608d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.752493][ T40] 4 locks held by kworker/u8:4/68: [ 346.752505][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.752562][ T40] #1: ffffc9000153fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.752622][ T40] #2: ffff8880626608d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.752684][ T40] #3: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcab/0x2850 [ 346.752737][ T40] 4 locks held by kworker/u8:5/71: [ 346.752748][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.752807][ T40] #1: ffffc9000156fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.752866][ T40] #2: ffff8880629c08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.752916][ T40] #3: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xcab/0x2850 [ 346.752967][ T40] 4 locks held by kworker/u8:6/151: [ 346.752979][ T40] #0: ffff88803905b138 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.753036][ T40] #1: ffffc90003a1fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.753091][ T40] #2: ffff88802bfd96f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 346.753144][ T40] #3: ffff88803b6f6e88 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 346.753201][ T40] 4 locks held by kworker/u8:7/157: [ 346.753213][ T40] #0: ffff888039ae0938 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.753275][ T40] #1: ffffc90003a6fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.753329][ T40] #2: ffff888039a116f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 346.753389][ T40] #3: ffff888060353940 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 346.753460][ T40] 4 locks held by kworker/u8:8/168: [ 346.753472][ T40] #0: ffff888039ae4138 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.753526][ T40] #1: ffffc90003aefc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.753657][ T40] #2: ffff888039a316f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 346.753715][ T40] #3: ffff888060336e88 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 346.753776][ T40] 5 locks held by kworker/1:2/823: [ 346.753787][ T40] #0: ffff88801f6f7538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.753846][ T40] #1: ffffc900055cfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.753905][ T40] #2: ffff888029efa210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 346.753966][ T40] #3: ffff888029ef5658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x628/0x4f60 [ 346.754025][ T40] #4: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.754084][ T40] 5 locks held by kworker/0:2/824: [ 346.754095][ T40] #0: ffff88805efc2538 ((wq_completion)wg-kex-wg1#6){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.754159][ T40] #1: ffffc9000522fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.754232][ T40] #2: ffff888060333940 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 346.754292][ T40] #3: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.754349][ T40] #4: ffff88813fe15858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 346.754414][ T40] 3 locks held by kworker/u8:9/1043: [ 346.754427][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.754495][ T40] #1: ffffc90005db7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.754554][ T40] #2: ffff8880647c08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.754614][ T40] 3 locks held by kworker/u8:10/1381: [ 346.754626][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.754685][ T40] #1: ffffc90006797c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.754743][ T40] #2: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 346.754801][ T40] 3 locks held by kworker/u8:11/1499: [ 346.754813][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.754871][ T40] #1: ffffc900069e7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.754931][ T40] #2: ffff888061ab08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.754986][ T40] 2 locks held by kworker/u8:12/1509: [ 346.754998][ T40] #0: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.755055][ T40] #1: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 346.755115][ T40] 2 locks held by kworker/u8:13/1529: [ 346.755127][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.755186][ T40] #1: ffffc900069b7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.755258][ T40] 3 locks held by kworker/R-ipv6_/3224: [ 346.755270][ T40] #0: ffff888031b20938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.755329][ T40] #1: ffffc9000e107c00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.755391][ T40] #2: ffffffff8f371f78 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 346.755461][ T40] 3 locks held by kworker/u8:15/3292: [ 346.755473][ T40] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.755532][ T40] #1: ffffc9000e397c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.755591][ T40] #2: ffff888061c908d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 346.755645][ T40] 4 locks held by kworker/u8:17/3372: [ 346.755657][ T40] #0: ffff888039ae4138 ((wq_completion)wg-kex-wg1){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.755716][ T40] #1: ffffc9000e367c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.755777][ T40] #2: ffff888039a316f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12f/0x830 [ 346.755838][ T40] #3: ffff888060337930 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x140/0x830 [ 346.755897][ T40] 5 locks held by kworker/u9:1/4928: [ 346.755957][ T40] #0: ffff88803fbe2938 ((wq_completion)hci3){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 346.756019][ T40] #1: ffffc90010e0fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 346.756078][ T40] #2: ffff88805bc3cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 346.756132][ T40] #3: ffff88805bc3c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 346.756194][ T40] #4: ffffffff8f717cd8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_net_broadcast+0x281/0x560 [ 346.756248][ T40] 2 locks held by jbd2/sda1-8/4940: [ 346.756260][ T40] #0: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.756317][ T40] #1: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 346.756376][ T40] 2 locks held by klogd/4967: [ 346.756387][ T40] #0: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.756451][ T40] #1: ffff88813fffbb98 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x43/0x250 [ 346.756509][ T40] 1 lock held by udevd/4978: [ 346.756521][ T40] #0: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.756578][ T40] 2 locks held by dhcpcd/5272: [ 346.756590][ T40] #0: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.756647][ T40] #1: ffff88813fe15858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0xf1/0x2a0 [ 346.756710][ T40] 1 lock held by crond/5350: [ 346.756722][ T40] #0: ffffffff8e10d270 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 346.756779][ T40] 2 locks held by getty/5367: [ 346.756790][ T40] #0: ffff88803605b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70