last executing test programs: 16.28393411s ago: executing program 0 (id=95): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0xc, 0xb21, 0x1ff, 0x80080}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) r5 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x84008, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0xe6f9}}, {@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x8}}], [{@dont_measure}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '*#('}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}, 0x1, 0x0, &(0x7f0000000580)="0903c87329ad4d3d3cad91621a8de377ccb3a739e80f22fedb60ad6033bfecf765e23f306615354dbe033011b8388f6ffd79c8ea2b159cd306d1ac2db026b5b194ef9dc4a1fe0117883c50f779e999c4945b1cc942c90d9218bf579fd8c2c67d20d00bcb59a3c2ff6cac321b1c1982f187e943a41498bf8fd870e0cb049708fb4e4165688494955c6ab462bf6a42e59a000cc91fbc3e03d387ef88cb3400305686f88acc20361c7b7853ad8b4ba6f610669d1b99949009fceda8bf8fad0366010e2532871108f1968dfa9bf66e08ee507c7dbaa64962d7b5e059f68cf8e4f9f8ab1b6d8479b4") mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x4) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 16.283324347s ago: executing program 4 (id=96): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000004180)={0x8, 0x20000000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f0000002200)=0x2, 0x5, 0x0, 0x0, &(0x7f0000002240)=0x3, 0xab02000d) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000e0000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000f63c31e5fdf8c000000000000400000000000000000000000000000000000000000000000200000000000000080000000080000000000000000000000000000000000000040000000000"], 0xb8}}, 0x40) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100"], 0xb8}}, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc000, 0x103) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x94f031, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}}, 0x0) close(r2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000020c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000002100)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlinkprop={0x44, 0x6c, 0xe40c30bb29912201, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8d0}, [@IFLA_MAP={0x24, 0xe, {0xa, 0xa, 0x5, 0x2, 0x7, 0x83}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 16.122907778s ago: executing program 1 (id=97): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5}, 0x8) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0xc, 0xb21, 0x1ff, 0x80080}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)}], 0x1}}], 0x2, 0x10) r5 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x84008, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0xe6f9}}, {@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x8}}], [{@dont_measure}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '*#('}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}, 0x1, 0x0, &(0x7f0000000580)="0903c87329ad4d3d3cad91621a8de377ccb3a739e80f22fedb60ad6033bfecf765e23f306615354dbe033011b8388f6ffd79c8ea2b159cd306d1ac2db026b5b194ef9dc4a1fe0117883c50f779e999c4945b1cc942c90d9218bf579fd8c2c67d20d00bcb59a3c2ff6cac321b1c1982f187e943a41498bf8fd870e0cb049708fb4e4165688494955c6ab462bf6a42e59a000cc91fbc3e03d387ef88cb3400305686f88acc20361c7b7853ad8b4ba6f610669d1b99949009fceda8bf8fad0366010e2532871108f1968dfa9bf66e08ee507c7dbaa64962d7b5e059f68cf8e4f9f8ab1b6d8479b4") mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x4) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 13.900348797s ago: executing program 3 (id=100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) 13.65395273s ago: executing program 3 (id=102): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x78, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400d4}, 0x40001) timer_create(0x3, &(0x7f0000000480)={0x0, 0x24, 0x4, @thr={&(0x7f0000000500)="2a92ceb59a34d94f24ebead77bf4b312e2a3ee78b8a06bc1b9dc1095dace325f832f8ee8234db59b01a33b3a24e7f707b69beb29e4c187754a903a1ad5f2c40fe1811dd0d224502acb7591346514e1e9be86a8ece049165d8184b9f8dc6a1f8bb19672cc4e423ad4cd0b2640e9b7", &(0x7f00000008c0)="f9646c6b81f8390f4f65775d570f5c805b77b0d8cbd9d380dd8e708a82137f6163a5af9c1932ccb2758397d628caa83a4a5a1e69a1043e3971328725bcb103589bbf9ad99c0bdc389761f34fff4118be349861bab133d6bf9b4a1c1a0144d8e962c48aea0056c56815bb63943c20651b8c6a2ad09c070c83eff1f601189a0be908149ba4cd62c1a8e730f0d0c02f5aa89532b1290a8032126f9f2b003a8fc320282428694a2babf6a2cb09409c3615c11ef9735783503fc77db5235ed3cf7eb143345770c0940a684b61da46146ace2ebadc4d46a7013b744230ffc19bb0"}}, &(0x7f0000044000)) timer_settime(0x0, 0x1, 0x0, 0x0) clock_gettime(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000000d06030000000000000000000a000004050001"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x840) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) 13.527673449s ago: executing program 0 (id=103): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) r0 = userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000400)=0xffffffed) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0xa2c25) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000340)=0xe) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000140)="8f", 0x1}], 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r6 = memfd_create(0x0, 0xe) ftruncate(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) connect$inet(r7, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f0000000040)='X', 0x1}], 0x1) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_ABS_SETUP(r8, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0xfffffffe, 0x7, 0x4, 0x5, 0x52}}) shutdown(r7, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r9 = fsopen(&(0x7f0000000180)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000080)='so\xe0Z(\x9e', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x1000001, 0x2012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0x400000, 0xba, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = syz_open_pts(r1, 0x101) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r7 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r7}], 0x0, 0x0, 0x0}) r8 = dup3(r2, r1, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r9, 0x6, 0x19, &(0x7f0000000ec0), 0x4b) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) sendmsg$inet(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) write$UHID_INPUT(r8, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 12.171239023s ago: executing program 1 (id=109): ptrace(0x4208, 0x0) r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x100}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902", @ANYRES16=r1], 0x0) r3 = inotify_init1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) symlink(0x0, &(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0xa4000021) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r5, r4, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ppoll(&(0x7f0000000000)=[{r6, 0x200}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r7, 0x80047456, &(0x7f0000002300)) 10.866388096s ago: executing program 4 (id=110): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5}, 0x8) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0xc, 0xb21, 0x1ff, 0x80080}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) r5 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x84008, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0xe6f9}}, {@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x8}}], [{@dont_measure}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '*#('}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}, 0x1, 0x0, &(0x7f0000000580)="0903c87329ad4d3d3cad91621a8de377ccb3a739e80f22fedb60ad6033bfecf765e23f306615354dbe033011b8388f6ffd79c8ea2b159cd306d1ac2db026b5b194ef9dc4a1fe0117883c50f779e999c4945b1cc942c90d9218bf579fd8c2c67d20d00bcb59a3c2ff6cac321b1c1982f187e943a41498bf8fd870e0cb049708fb4e4165688494955c6ab462bf6a42e59a000cc91fbc3e03d387ef88cb3400305686f88acc20361c7b7853ad8b4ba6f610669d1b99949009fceda8bf8fad0366010e2532871108f1968dfa9bf66e08ee507c7dbaa64962d7b5e059f68cf8e4f9f8ab1b6d8479b4") mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x4) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 9.744598386s ago: executing program 0 (id=113): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000000000000fc020000000000000000000000000001fc02000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c00000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044010500ac1414aa000000000000000000000000000004d53c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000000003c"], 0x1fc}}, 0x0) 9.052903173s ago: executing program 0 (id=115): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x4400) 8.879746339s ago: executing program 0 (id=117): ptrace(0x4208, 0x0) r0 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x100}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) symlink(0x0, &(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) dup3(r4, r3, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r5, 0x200}], 0x1, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$FIONREAD(r6, 0x80047456, &(0x7f0000002300)) 8.683062272s ago: executing program 4 (id=118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv2(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000540)=""/205, 0xcd}], 0x5, 0x50, 0x6, 0x2) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xffe4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000180)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[], 0x10}}, 0x0) syz_fuse_handle_req(r5, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(r7, &(0x7f0000000700)=""/90, 0x5a) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x100001, 0x5}}, 0x10) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) dup2(r3, r4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 8.467977447s ago: executing program 3 (id=119): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, &(0x7f00000006c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xd}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e105000700810000008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xfe65}], 0x2}, 0x0) 8.360263106s ago: executing program 2 (id=120): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0x40000000000000d, &(0x7f0000937fed)=""/9, &(0x7f0000000080)=0x9) 8.145464645s ago: executing program 2 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 8.073542107s ago: executing program 3 (id=122): r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x0, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', r1, 0x20, 0x40, 0x1001000, 0x756, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x64, 0x0, 0xe9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) 7.835392722s ago: executing program 3 (id=123): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000a00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "8ab8c8", 0x8, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, {[@dstopts={0x6}]}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, &(0x7f0000000140)=0xc) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1d, r8, 0x3, {0x0, 0x1, 0x3}, 0xff}, 0x18, &(0x7f0000000200)={&(0x7f0000000400)="0abf74ac14f876a4b564679f7e38407a5f4b101d982620682c313cab7f4b832186772f04b542009492e044e2a1eb5cce8ff17395e49cc2484f9124f41e99bde147f9a08e57864a8d3ea946c1dbc702b22e2ac2f1c967c5a5865dce8e7e58eb6866141ebdba4d34681f7e151d2abd4097283a8dc139361212b9574d3fd5682d30dbc9b499a1d63a", 0x87}, 0x1, 0x0, 0x0, 0x40}, 0x400c807) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2b2b694d, 0x0, 0x0, 0x0, 0x7f}, @call={0x85, 0x0, 0x0, 0x85}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$apparmor_exec(r6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = dup(r10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011146d7700000000000000e407004b"], 0x18}}, 0x8000) sendfile(r3, r6, 0x0, 0x80001d00c0d1) 7.77198541s ago: executing program 2 (id=124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x1d, @empty, 0x2, 0x3, 'fo\x00', 0x0, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0x100000, 0xfffffffe}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 6.880489033s ago: executing program 1 (id=125): prctl$PR_GET_TIMERSLACK(0x1e) socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) exit(0x0) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe) eventfd2(0x8, 0x80800) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7438}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0xd0) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) setitimer(0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000000)='debugfs\x00', 0x1) memfd_create(&(0x7f0000000340)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81~pa#\xff\x00\x00\x00\x00\x00\x00\x00\xe2:Op\xd0\xa2\x82\x1eb;(\xb5\xf6\x00\x01\x01\x00%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac[\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\x96\x83\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecw)$\x04\x13\x87\x8bvi{\x96U', 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1_to_team\x00', 0x4}, 0x18) 6.844601746s ago: executing program 2 (id=126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @window={0x3, 0x3, 0x9}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @sack={0x5, 0x22, [0x91, 0x4, 0x2, 0x0, 0x31f3, 0x2a66645e, 0x9, 0x4]}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) 6.066839545s ago: executing program 2 (id=127): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0) 2.448176967s ago: executing program 2 (id=128): pipe(&(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5}, 0x8) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000340)={0xc, 0xb21, 0x1ff, 0x80080}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f0", 0x8) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) accept$alg(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}], 0x1, 0x10) r5 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x84008, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0xe6f9}}, {@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0x6}}, {@max_read={'max_read', 0x3d, 0x8}}], [{@dont_measure}, {@appraise_type}, {@subj_user={'subj_user', 0x3d, '*#('}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@fowner_eq}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}]}}, 0x1, 0x0, &(0x7f0000000580)="0903c87329ad4d3d3cad91621a8de377ccb3a739e80f22fedb60ad6033bfecf765e23f306615354dbe033011b8388f6ffd79c8ea2b159cd306d1ac2db026b5b194ef9dc4a1fe0117883c50f779e999c4945b1cc942c90d9218bf579fd8c2c67d20d00bcb59a3c2ff6cac321b1c1982f187e943a41498bf8fd870e0cb049708fb4e4165688494955c6ab462bf6a42e59a000cc91fbc3e03d387ef88cb3400305686f88acc20361c7b7853ad8b4ba6f610669d1b99949009fceda8bf8fad0366010e2532871108f1968dfa9bf66e08ee507c7dbaa64962d7b5e059f68cf8e4f9f8ab1b6d8479b4") mknodat(r5, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x4) syz_usb_disconnect(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) 1.367875127s ago: executing program 1 (id=129): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a40)=""/4110, 0x100e}, {&(0x7f0000001a80)=""/4074, 0xfea}, {&(0x7f00000009c0)=""/98, 0x62}, {&(0x7f0000000040)=""/94, 0x5e}, {&(0x7f00000003c0)=""/134, 0x86}], 0x5}, 0x0) 358.54801ms ago: executing program 4 (id=130): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030200590200280000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3332be2c936205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 101.348395ms ago: executing program 3 (id=131): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, 0x0) 60.68782ms ago: executing program 0 (id=132): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = socket(0x2, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x30, 0x5, 0x1, 0xfffff034}, {0x6, 0x1, 0x6, 0x6}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000a00)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "8ab8c8", 0x8, 0x0, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x12}, {[@dstopts={0x6}]}}}}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x10009, 0x9}, &(0x7f0000000140)=0xc) r6 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r6, 0x200004) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$can_j1939(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x1d, r8, 0x3, {0x0, 0x1, 0x3}, 0xff}, 0x18, &(0x7f0000000200)={&(0x7f0000000400)="0abf74ac14f876a4b564679f7e38407a5f4b101d982620682c313cab7f4b832186772f04b542009492e044e2a1eb5cce8ff17395e49cc2484f9124f41e99bde147f9a08e57864a8d3ea946c1dbc702b22e2ac2f1c967c5a5865dce8e7e58eb6866141ebdba4d34681f7e151d2abd4097283a8dc139361212b9574d3fd5682d30dbc9b499a1d63a40f6b1d3e271ce6e6ee93577eb48884795377abcf4ffc99eaf198066b2430e3428e86323d4aa44d18be5e527", 0xb3}, 0x1, 0x0, 0x0, 0x40}, 0x400c807) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x12, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2b2b694d, 0x0, 0x0, 0x0, 0x7f}, @call={0x85, 0x0, 0x0, 0x85}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$apparmor_exec(r6, 0x0, 0x8) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = dup(r10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000011146d7700000000000000e407004b"], 0x18}}, 0x8000) sendfile(r3, r6, 0x0, 0x80001d00c0d1) 0s ago: executing program 1 (id=133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$unix(r0, &(0x7f0000000540), 0x0, 0x4040880) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140), 0x8) sendto$inet6(r2, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x29, 0xb, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) close_range(r4, r5, 0x200000000000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x400, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) socket$packet(0x11, 0x3, 0x300) mq_open(&(0x7f0000000580)='exthdr\x00', 0x2, 0x189, &(0x7f00000005c0)={0x49335f85, 0x7, 0x8, 0x46}) r6 = socket$kcm(0xa, 0x3, 0x3a) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x4000) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x3c, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x890, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 82.234592][ T5824] cgroup: Unknown subsys name 'net' [ 82.390240][ T5824] cgroup: Unknown subsys name 'cpuset' [ 82.399501][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.082924][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.896302][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.904661][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.912633][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.928226][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.947044][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.978713][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.996192][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.006025][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.014210][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.022287][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.117021][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.126253][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.134730][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.145238][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.152995][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.161521][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.212498][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.244103][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.253735][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.262281][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.269822][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.278912][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.286467][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.295430][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.304117][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.690887][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.905831][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.097329][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.105271][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.117238][ T5843] bridge_slave_0: entered allmulticast mode [ 89.125578][ T5843] bridge_slave_0: entered promiscuous mode [ 89.138359][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.145531][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.153046][ T5843] bridge_slave_1: entered allmulticast mode [ 89.162819][ T5843] bridge_slave_1: entered promiscuous mode [ 89.225438][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.243440][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.259343][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 89.285167][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 89.298651][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 89.371314][ T5843] team0: Port device team_slave_0 added [ 89.387002][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.394228][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.404557][ T5842] bridge_slave_0: entered allmulticast mode [ 89.412658][ T5842] bridge_slave_0: entered promiscuous mode [ 89.454117][ T5843] team0: Port device team_slave_1 added [ 89.474112][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.482059][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.489413][ T5842] bridge_slave_1: entered allmulticast mode [ 89.497243][ T5842] bridge_slave_1: entered promiscuous mode [ 89.628775][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.635897][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.661940][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.693685][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.726439][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.733439][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.760161][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.788339][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.866405][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.873588][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.881618][ T5852] bridge_slave_0: entered allmulticast mode [ 89.889058][ T5852] bridge_slave_0: entered promiscuous mode [ 89.910069][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.917449][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.924648][ T5851] bridge_slave_0: entered allmulticast mode [ 89.933972][ T5851] bridge_slave_0: entered promiscuous mode [ 89.942568][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.950139][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.957942][ T5851] bridge_slave_1: entered allmulticast mode [ 89.965178][ T5851] bridge_slave_1: entered promiscuous mode [ 89.973134][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.980568][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.988158][ T5853] bridge_slave_0: entered allmulticast mode [ 89.995480][ T5853] bridge_slave_0: entered promiscuous mode [ 90.003093][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.010323][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.018348][ T5847] Bluetooth: hci0: command tx timeout [ 90.020725][ T5852] bridge_slave_1: entered allmulticast mode [ 90.032170][ T5852] bridge_slave_1: entered promiscuous mode [ 90.059203][ T5842] team0: Port device team_slave_0 added [ 90.105831][ T5847] Bluetooth: hci1: command tx timeout [ 90.127367][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.134538][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.141885][ T5853] bridge_slave_1: entered allmulticast mode [ 90.149717][ T5853] bridge_slave_1: entered promiscuous mode [ 90.187150][ T5842] team0: Port device team_slave_1 added [ 90.195675][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.211093][ T5843] hsr_slave_0: entered promiscuous mode [ 90.218609][ T5843] hsr_slave_1: entered promiscuous mode [ 90.240961][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.254026][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.263294][ T5847] Bluetooth: hci2: command tx timeout [ 90.298699][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.327661][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.337020][ T5847] Bluetooth: hci4: command tx timeout [ 90.337029][ T5849] Bluetooth: hci3: command tx timeout [ 90.341729][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.371582][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.378898][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.405372][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.473929][ T5852] team0: Port device team_slave_0 added [ 90.481839][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.491017][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.517581][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.531620][ T5851] team0: Port device team_slave_0 added [ 90.561285][ T5853] team0: Port device team_slave_0 added [ 90.570133][ T5852] team0: Port device team_slave_1 added [ 90.598376][ T5851] team0: Port device team_slave_1 added [ 90.619982][ T5853] team0: Port device team_slave_1 added [ 90.676902][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.683981][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.710399][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.771492][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.778905][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.806734][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.818619][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.825602][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.852020][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.896831][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.903841][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.930137][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.949566][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.956744][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.983592][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.001844][ T5842] hsr_slave_0: entered promiscuous mode [ 91.008807][ T5842] hsr_slave_1: entered promiscuous mode [ 91.015065][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 91.021041][ T5842] Cannot create hsr debugfs directory [ 91.050062][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.057168][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.083506][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.218829][ T5852] hsr_slave_0: entered promiscuous mode [ 91.225310][ T5852] hsr_slave_1: entered promiscuous mode [ 91.231845][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 91.237650][ T5852] Cannot create hsr debugfs directory [ 91.343922][ T5851] hsr_slave_0: entered promiscuous mode [ 91.351031][ T5851] hsr_slave_1: entered promiscuous mode [ 91.358082][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 91.363848][ T5851] Cannot create hsr debugfs directory [ 91.396764][ T5853] hsr_slave_0: entered promiscuous mode [ 91.403171][ T5853] hsr_slave_1: entered promiscuous mode [ 91.409589][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 91.415351][ T5853] Cannot create hsr debugfs directory [ 91.663161][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.717270][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.773131][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.812598][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.970763][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.989523][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.002145][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.013813][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.046792][ T10] cfg80211: failed to load regulatory.db [ 92.107016][ T5847] Bluetooth: hci0: command tx timeout [ 92.113387][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.124225][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.157163][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.168811][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.177607][ T5847] Bluetooth: hci1: command tx timeout [ 92.269212][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.288968][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.301729][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.331016][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.337870][ T5847] Bluetooth: hci2: command tx timeout [ 92.381798][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.416639][ T5847] Bluetooth: hci4: command tx timeout [ 92.417804][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.422096][ T5847] Bluetooth: hci3: command tx timeout [ 92.440100][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.447424][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.486614][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.493869][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.561043][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.605632][ T5853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.621187][ T5853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.632269][ T5853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.653433][ T5853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.691074][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.717465][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.724647][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.760568][ T4479] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.767796][ T4479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.915543][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.935462][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.951999][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.023454][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.043538][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.058719][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.090017][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.097232][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.130559][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.137930][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.150165][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.157352][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.193501][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.200680][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.224011][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.262623][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.302491][ T5843] veth0_vlan: entered promiscuous mode [ 93.324181][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.343401][ T5843] veth1_vlan: entered promiscuous mode [ 93.369063][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.376282][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.437897][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.445066][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.495052][ T5842] veth0_vlan: entered promiscuous mode [ 93.529497][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.561184][ T5843] veth0_macvtap: entered promiscuous mode [ 93.574642][ T5842] veth1_vlan: entered promiscuous mode [ 93.609372][ T5843] veth1_macvtap: entered promiscuous mode [ 93.643315][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.679940][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.738128][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.751078][ T5851] veth0_vlan: entered promiscuous mode [ 93.772279][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.782832][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.792933][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.803123][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.820308][ T5851] veth1_vlan: entered promiscuous mode [ 93.862317][ T5842] veth0_macvtap: entered promiscuous mode [ 93.880600][ T5842] veth1_macvtap: entered promiscuous mode [ 93.935490][ T5852] veth0_vlan: entered promiscuous mode [ 93.955422][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.970268][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.998567][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.021750][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.031349][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.040256][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.049179][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.083082][ T5852] veth1_vlan: entered promiscuous mode [ 94.098630][ T5851] veth0_macvtap: entered promiscuous mode [ 94.137476][ T5851] veth1_macvtap: entered promiscuous mode [ 94.157000][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.169918][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.177479][ T5847] Bluetooth: hci0: command tx timeout [ 94.256722][ T5847] Bluetooth: hci1: command tx timeout [ 94.258167][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.264066][ T5852] veth0_macvtap: entered promiscuous mode [ 94.286816][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.304070][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.318080][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.331194][ T5852] veth1_macvtap: entered promiscuous mode [ 94.340256][ T5853] veth0_vlan: entered promiscuous mode [ 94.369065][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.384189][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.394381][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.403306][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.416468][ T5847] Bluetooth: hci2: command tx timeout [ 94.433984][ T5853] veth1_vlan: entered promiscuous mode [ 94.462199][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.493851][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.501512][ T5847] Bluetooth: hci3: command tx timeout [ 94.502202][ T5849] Bluetooth: hci4: command tx timeout [ 94.583029][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.608211][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.626926][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.647250][ T5853] veth0_macvtap: entered promiscuous mode [ 94.679110][ T5853] veth1_macvtap: entered promiscuous mode [ 94.690500][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.700119][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.709124][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.718638][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.797226][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.915835][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.932631][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.949142][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.973798][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.991472][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.114822][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.139856][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.149330][ T5930] bridge0: entered promiscuous mode [ 95.161636][ T5930] bond0: entered promiscuous mode [ 95.170245][ T5930] bond_slave_0: entered promiscuous mode [ 95.181460][ T5930] bond_slave_1: entered promiscuous mode [ 95.210040][ T5930] hsr1: entered allmulticast mode [ 95.215152][ T5930] bridge0: entered allmulticast mode [ 95.221586][ T5930] bond0: entered allmulticast mode [ 95.227089][ T5930] bond_slave_0: entered allmulticast mode [ 95.233736][ T5930] bond_slave_1: entered allmulticast mode [ 95.261902][ T5853] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.275225][ T5853] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.435803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.444166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 95.472354][ T5853] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.540084][ T5853] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.650461][ T5937] random: crng reseeded on system resumption [ 95.766024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 95.906373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.946799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.253801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.256537][ T5849] Bluetooth: hci0: command tx timeout [ 96.274797][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.283174][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.356509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.383950][ T5849] Bluetooth: hci1: command tx timeout [ 96.408557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.444452][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.465107][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.496383][ T5849] Bluetooth: hci2: command tx timeout [ 96.575847][ T5849] Bluetooth: hci3: command tx timeout [ 96.586270][ T5849] Bluetooth: hci4: command tx timeout [ 96.846436][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.854836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.020637][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.093561][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.338323][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 97.347491][ T5946] Zero length message leads to an empty skb [ 97.428220][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.486606][ T5948] binder: 5942:5948 unknown command 0 [ 97.492191][ T5948] binder: 5942:5948 ioctl c0306201 2000000003c0 returned -22 [ 97.530002][ T5948] fuse: Bad value for 'fd' [ 97.559059][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.619008][ T5946] block device autoloading is deprecated and will be removed. [ 97.628545][ T5946] syz.2.3: attempt to access beyond end of device [ 97.628545][ T5946] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 100.416638][ T5925] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.728597][ T5925] usb 4-1: no configurations [ 100.733807][ T5925] usb 4-1: can't read configurations, error -22 [ 100.949174][ T5925] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.157412][ T5925] usb 4-1: no configurations [ 101.162319][ T5925] usb 4-1: can't read configurations, error -22 [ 101.212919][ T5925] usb usb4-port1: attempt power cycle [ 101.546091][ T5973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.591066][ T5973] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.606530][ T5973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.698237][ T5925] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.648840][ T5979] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.706995][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.732219][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.812258][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9'. [ 102.978332][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 103.032556][ T43] usb 2-1: config 0 has no interfaces? [ 103.072001][ T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 103.130068][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.247815][ T43] usb 2-1: Product: syz [ 103.257887][ T43] usb 2-1: Manufacturer: syz [ 103.292301][ T43] usb 2-1: SerialNumber: syz [ 103.366169][ T5915] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.541838][ T5925] usb 4-1: device descriptor read/8, error -71 [ 103.588544][ T43] usb 2-1: config 0 descriptor?? [ 103.883631][ T5915] usb 5-1: not running at top speed; connect to a high speed hub [ 104.047309][ T5915] usb 5-1: config index 0 descriptor too short (expected 39460, got 36) [ 104.075421][ T5915] usb 5-1: config 14 has an invalid descriptor of length 230, skipping remainder of the config [ 104.089179][ T5915] usb 5-1: config 14 has 0 interfaces, different from the descriptor's value: 19 [ 104.171258][ T5977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.375534][ T5977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.392588][ T5915] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 104.402066][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.425876][ T5915] usb 5-1: Product: с [ 104.429994][ T5915] usb 5-1: Manufacturer: ୢ∿䍹툄幞曼굁﵎엕m촧鐰섬䶆⠆묲᯷ꋓ覤ἷ鶆⿾몈㸩镫ﲢ䃰〺䞅륏㨂㚞ಶ룳៕ꋽ갖䷕酡팊䔝ᵁ﯒뀁焆힓懶愯ヒ튔ᖱ薢神璧猙䓟櫃漰뽼⁦ꤼცᗏ涟槉餿فⅅ뻈봯⠽뗄娯꾴굀멹想掮脨遽䮝喎ᄘ鼢㰓㻋饘훸壛틴᪳偂ά艓詌㩴 [ 104.628733][ T5915] usb 5-1: SerialNumber: Й [ 105.110091][ T5996] sctp: failed to load transform for md5: -2 [ 105.352535][ T5915] usb 5-1: USB disconnect, device number 2 [ 106.502203][ T6017] hub 9-0:1.0: USB hub found [ 106.510996][ T6017] hub 9-0:1.0: 1 port detected [ 106.588795][ T6023] PKCS7: Unknown OID: [5] (bad) [ 106.594003][ T6023] PKCS7: Only support pkcs7_signedData type [ 106.882330][ T6028] random: crng reseeded on system resumption [ 107.023762][ T43] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.805910][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 107.823445][ T43] usb 5-1: config 0 has no interfaces? [ 107.839072][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 107.856665][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.868091][ T43] usb 5-1: Product: syz [ 107.872322][ T43] usb 5-1: Manufacturer: syz [ 107.946093][ T43] usb 5-1: SerialNumber: syz [ 107.978457][ T43] usb 5-1: config 0 descriptor?? [ 108.685493][ T24] usb 2-1: USB disconnect, device number 2 [ 109.091356][ T6041] syz.0.19: attempt to access beyond end of device [ 109.091356][ T6041] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 111.011038][ T6045] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 111.799710][ T5925] usb 5-1: USB disconnect, device number 3 [ 112.891235][ T6066] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.912167][ T6066] team0: Port device batadv1 added [ 113.973372][ T6080] netlink: 32 bytes leftover after parsing attributes in process `syz.0.24'. [ 114.219107][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 114.251279][ T6082] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 116.793850][ T6106] netlink: 'syz.1.30': attribute type 23 has an invalid length. [ 116.960718][ T6109] random: crng reseeded on system resumption [ 117.246050][ T5925] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.465829][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 117.545602][ T5925] usb 1-1: unable to get BOS descriptor or descriptor too short [ 117.635926][ T5925] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 117.644199][ T5925] usb 1-1: config 7 has no interface number 0 [ 117.713894][ T5925] usb 1-1: config 7 interface 187 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 117.728594][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.748808][ T5925] usb 1-1: config 7 interface 187 has no altsetting 0 [ 117.792358][ T5925] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 117.836194][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.868220][ T5925] usb 1-1: Product: syz [ 117.882098][ T5925] usb 1-1: Manufacturer: syz [ 117.895925][ T5925] usb 1-1: SerialNumber: syz [ 117.942619][ T5892] usb 5-1: Using ep0 maxpacket: 32 [ 118.066316][ T5892] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 118.159164][ T5925] usb 1-1: Limiting number of CPorts to U8_MAX [ 118.186523][ T5892] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 118.215351][ T5925] usb 1-1: Unknown endpoint type found, address 0x07 [ 118.259126][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.315445][ T5925] usb 1-1: Not enough endpoints found in device, aborting! [ 118.333764][ T5892] usb 5-1: Product: syz [ 118.362319][ T5892] usb 5-1: Manufacturer: syz [ 118.384590][ T5892] usb 5-1: SerialNumber: syz [ 118.408285][ T5892] usb 5-1: config 0 descriptor?? [ 118.422912][ T5892] usb 5-1: bad CDC descriptors [ 118.530671][ T5892] usb 5-1: unsupported MDLM descriptors [ 119.431824][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.456555][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.424553][ T6131] syz.3.36: attempt to access beyond end of device [ 120.424553][ T6131] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 121.399371][ T6148] netlink: 32 bytes leftover after parsing attributes in process `syz.2.40'. [ 121.461273][ T5906] usb 5-1: USB disconnect, device number 4 [ 121.554203][ T5892] usb 1-1: USB disconnect, device number 2 [ 122.398636][ T6160] tipc: Failed to remove unknown binding: 66,1,1/0:537332436/537332438 [ 122.411737][ T6160] tipc: Failed to remove unknown binding: 66,1,1/0:537332436/537332438 [ 122.428000][ T6160] tipc: Failed to remove unknown binding: 66,1,1/0:537332436/537332438 [ 124.751726][ T6174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 124.765289][ T30] audit: type=1326 audit(1753874959.451:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 125.023536][ T6190] syz.1.48: attempt to access beyond end of device [ 125.023536][ T6190] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 125.115076][ T30] audit: type=1326 audit(1753874959.451:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 125.209185][ T30] audit: type=1326 audit(1753874959.451:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 125.510863][ T30] audit: type=1326 audit(1753874959.451:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 125.647893][ T6197] binder: BINDER_SET_CONTEXT_MGR already set [ 125.654321][ T6197] binder: 6193:6197 ioctl 4018620d 200000000040 returned -16 [ 125.687068][ T30] audit: type=1326 audit(1753874959.451:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 126.022542][ T30] audit: type=1326 audit(1753874959.461:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20f7f8d310 code=0x7ffc0000 [ 126.044691][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.051039][ T30] audit: type=1326 audit(1753874959.461:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 126.073539][ T30] audit: type=1326 audit(1753874959.501:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 126.095392][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.124143][ T6197] binder: 6193:6197 ioctl c0306201 200000001a80 returned -11 [ 126.263037][ T30] audit: type=1326 audit(1753874959.501:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 126.527239][ T30] audit: type=1326 audit(1753874959.511:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6170 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20f7f8e9a9 code=0x7ffc0000 [ 126.735876][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.917828][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 130.696356][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short [ 130.722882][ T5906] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 130.748770][ T5906] usb 5-1: can't read configurations, error -71 [ 131.048936][ T6234] syz.1.56 uses obsolete (PF_INET,SOCK_PACKET) [ 131.063192][ T6234] sctp: [Deprecated]: syz.1.56 (pid 6234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 131.063192][ T6234] Use struct sctp_sack_info instead [ 131.084309][ T6234] netlink: 'syz.1.56': attribute type 75 has an invalid length. [ 131.825949][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 132.512569][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 133.013697][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.021388][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.219512][ T6248] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 134.168660][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 134.322957][ T6263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.63'. [ 134.850031][ T6265] vlan2: entered promiscuous mode [ 134.855377][ T6265] bridge0: entered promiscuous mode [ 134.864141][ T6265] vlan2: entered allmulticast mode [ 134.869813][ T6265] bridge0: entered allmulticast mode [ 134.912035][ T6266] bridge_slave_0: left allmulticast mode [ 134.918179][ T6266] bridge_slave_0: left promiscuous mode [ 134.929545][ T6266] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.987163][ T6266] bridge_slave_1: left allmulticast mode [ 134.993066][ T6266] bridge_slave_1: left promiscuous mode [ 135.000259][ T6266] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.028828][ T6266] bond0: (slave bond_slave_0): Releasing backup interface [ 135.047218][ T6266] bond0: (slave bond_slave_1): Releasing backup interface [ 135.081814][ T6266] team0: Port device team_slave_0 removed [ 135.109471][ T6266] team0: Port device team_slave_1 removed [ 135.117780][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.125540][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.151219][ T6266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.159129][ T6266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.199350][ T6281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 137.019767][ T6290] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.361898][ T6266] syz.1.64 (6266) used greatest stack depth: 19640 bytes left [ 138.565936][ T5892] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 138.808776][ T5892] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 138.817053][ T5892] usb 3-1: config 0 has no interface number 0 [ 138.839220][ T5892] usb 3-1: config 0 interface 29 has no altsetting 0 [ 138.983337][ T5892] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 139.024564][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.205878][ T5892] usb 3-1: Product: syz [ 139.210304][ T5892] usb 3-1: Manufacturer: syz [ 139.214951][ T5892] usb 3-1: SerialNumber: syz [ 139.271111][ T5892] usb 3-1: config 0 descriptor?? [ 139.550349][ T5892] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v213 fw v0.0.0 (2 channels) [ 139.854801][ T6312] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 139.972660][ T6313] random: crng reseeded on system resumption [ 140.333434][ T924] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 141.421088][ T924] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 141.431581][ T924] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 141.481336][ T924] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.685949][ T924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.261373][ T6327] syz.0.78: attempt to access beyond end of device [ 142.261373][ T6327] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 142.435238][ T6326] mmap: syz.0.78 (6326) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 143.217380][ T5892] peak_usb 3-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 143.240921][ T5892] peak_usb 3-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 143.353263][ T5892] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -71 [ 143.390547][ T5892] usb 3-1: USB disconnect, device number 2 [ 144.143595][ T5925] usb 5-1: USB disconnect, device number 7 [ 144.536034][ T924] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.687521][ T6344] kAFS: unable to lookup cell '(/cL' [ 144.832139][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.059519][ T924] usb 2-1: config 0 has no interfaces? [ 145.202753][ T924] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.211931][ T924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.220095][ T924] usb 2-1: Product: syz [ 145.224332][ T924] usb 2-1: Manufacturer: syz [ 145.228981][ T924] usb 2-1: SerialNumber: syz [ 145.237357][ T924] usb 2-1: config 0 descriptor?? [ 145.279545][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 145.398736][ T43] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 145.477739][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.501197][ T6334] pimreg: entered allmulticast mode [ 145.515014][ T6334] pimreg: left allmulticast mode [ 145.521616][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.724405][ T43] usb 2-1: USB disconnect, device number 3 [ 145.773234][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.82'. [ 146.869590][ T6362] netlink: 'syz.1.87': attribute type 12 has an invalid length. [ 147.036005][ T924] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.349323][ T924] usb 4-1: config 0 has no interfaces? [ 147.361342][ T924] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.375942][ T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.381629][ T6367] vivid-000: disconnect [ 147.388350][ T924] usb 4-1: Product: syz [ 147.388382][ T924] usb 4-1: Manufacturer: syz [ 147.388398][ T924] usb 4-1: SerialNumber: syz [ 147.392476][ T924] usb 4-1: config 0 descriptor?? [ 147.603060][ T6352] vivid-000: reconnect [ 147.743219][ T6370] geneve2: entered promiscuous mode [ 147.862736][ T6360] binder: BINDER_SET_CONTEXT_MGR already set [ 147.870432][ T6360] binder: 6356:6360 ioctl 4018620d 2000000001c0 returned -16 [ 147.936444][ T924] usb 1-1: USB disconnect, device number 3 [ 148.216408][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 148.231447][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.92'. [ 148.241024][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.4.94'. [ 148.255094][ T6381] vlan0: entered promiscuous mode [ 150.405852][ T924] usb 4-1: USB disconnect, device number 6 [ 151.847336][ T5925] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 152.150801][ T5925] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 152.161310][ T5925] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 152.235823][ T924] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 152.379784][ T5925] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.492277][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.530160][ T924] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.561969][ T924] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.700961][ T924] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.738491][ T924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.917467][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'. [ 152.952044][ T6418] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 153.054656][ T924] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.098496][ T5925] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.344136][ T5925] usb 2-1: config 0 has no interfaces? [ 153.359117][ T5925] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 153.368480][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.386288][ T5925] usb 2-1: Product: syz [ 153.416291][ T5925] usb 2-1: Manufacturer: syz [ 153.442532][ T6430] binder_alloc: 6424: pid 6424 spamming oneway? 1 buffers allocated for a total size of 4096 [ 153.497764][ T5925] usb 2-1: SerialNumber: syz [ 153.556566][ T6430] binder_alloc: 6424: pid 6424 spamming oneway? 2 buffers allocated for a total size of 5120 [ 153.564229][ T5925] usb 2-1: config 0 descriptor?? [ 153.855151][ T6429] binder: BINDER_SET_CONTEXT_MGR already set [ 153.876546][ T6429] binder: 6426:6429 ioctl 4018620d 2000000001c0 returned -16 [ 154.854930][ T5892] usb 1-1: USB disconnect, device number 4 [ 155.907874][ T6450] syz.2.116 (6450): /proc/6449/oom_adj is deprecated, please use /proc/6449/oom_score_adj instead. [ 156.033537][ T924] usb 4-1: USB disconnect, device number 7 [ 156.306001][ T5906] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 156.505239][ T5906] usb 1-1: config 0 has no interfaces? [ 156.524133][ T5906] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 156.556897][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.565051][ T5906] usb 1-1: Product: syz [ 156.711913][ T5906] usb 1-1: Manufacturer: syz [ 156.721778][ T5906] usb 1-1: SerialNumber: syz [ 156.747893][ T5906] usb 1-1: config 0 descriptor?? [ 157.082044][ T6473] sctp: [Deprecated]: syz.3.123 (pid 6473) Use of struct sctp_assoc_value in delayed_ack socket option. [ 157.082044][ T6473] Use struct sctp_sack_info instead [ 157.175448][ T5915] usb 2-1: USB disconnect, device number 4 [ 157.244798][ T6473] netlink: 'syz.3.123': attribute type 75 has an invalid length. [ 162.705878][ T6490] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 164.458927][ T924] usb 1-1: USB disconnect, device number 5 [ 169.627750][ T6498] sched: DL replenish lagged too much [ 290.855739][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 290.863161][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5168/1:b..l P2/1:b..l [ 290.872423][ C1] rcu: (detected by 1, t=10502 jiffies, g=16353, q=73455 ncpus=2) [ 290.880378][ C1] task:kthreadd state:R running task stack:25368 pid:2 tgid:2 ppid:0 task_flags:0x208040 flags:0x00004000 [ 290.894824][ C1] Call Trace: [ 290.898153][ C1] [ 290.901125][ C1] __schedule+0x1737/0x4d30 [ 290.905688][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.910953][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 290.916290][ C1] ? __pfx___schedule+0x10/0x10 [ 290.921189][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.926441][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 290.932394][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 290.937731][ C1] preempt_schedule_irq+0xb5/0x150 [ 290.942975][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 290.948753][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 290.954598][ C1] irqentry_exit+0x6f/0x90 [ 290.959055][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.965081][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 290.970503][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 9b 23 fc 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 290.990415][ C1] RSP: 0018:ffffc90000077178 EFLAGS: 00000206 [ 290.996610][ C1] RAX: d3adae37c7595700 RBX: 0000000000000000 RCX: d3adae37c7595700 [ 291.004613][ C1] RDX: 0000000000000000 RSI: ffffffff8db5f80a RDI: ffffffff8be2f600 [ 291.012620][ C1] RBP: ffffffff8172cd05 R08: 0000000000000000 R09: ffffffff8172cd05 [ 291.020624][ C1] R10: ffffc90000077338 R11: ffffffff81ac3f80 R12: 0000000000000002 [ 291.028637][ C1] R13: ffffffff8e13c520 R14: 0000000000000000 R15: 0000000000000246 [ 291.036653][ C1] ? unwind_next_frame+0xa5/0x2390 [ 291.041831][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.048047][ C1] ? unwind_next_frame+0xa5/0x2390 [ 291.053228][ C1] ? unwind_next_frame+0x19ae/0x2390 [ 291.058571][ C1] ? stack_trace_save+0x9c/0xe0 [ 291.063467][ C1] ? unwind_next_frame+0xa5/0x2390 [ 291.068640][ C1] unwind_next_frame+0xc2/0x2390 [ 291.073624][ C1] ? unwind_next_frame+0xa5/0x2390 [ 291.078784][ C1] ? arch_stack_walk+0xe4/0x150 [ 291.083689][ C1] ? __unwind_start+0x5b9/0x760 [ 291.088577][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.094771][ C1] arch_stack_walk+0x11c/0x150 [ 291.099582][ C1] ? stack_trace_save+0x9c/0xe0 [ 291.104474][ C1] stack_trace_save+0x9c/0xe0 [ 291.109284][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 291.114709][ C1] save_stack+0xf5/0x1f0 [ 291.118996][ C1] ? __pfx_save_stack+0x10/0x10 [ 291.123905][ C1] ? page_ext_put+0x97/0xc0 [ 291.128458][ C1] __reset_page_owner+0x71/0x1f0 [ 291.133447][ C1] __free_frozen_pages+0xc71/0xe70 [ 291.138621][ C1] __put_partials+0x161/0x1c0 [ 291.143339][ C1] put_cpu_partial+0x17c/0x250 [ 291.148137][ C1] ? put_cpu_partial+0x6d/0x250 [ 291.153027][ C1] __slab_free+0x2f7/0x400 [ 291.157483][ C1] ? __phys_addr+0xd3/0x180 [ 291.162051][ C1] qlist_free_all+0x97/0x140 [ 291.166683][ C1] kasan_quarantine_reduce+0x148/0x160 [ 291.172185][ C1] __kasan_slab_alloc+0x22/0x80 [ 291.177086][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 291.182593][ C1] ? prepare_creds+0x31/0x6c0 [ 291.187324][ C1] prepare_creds+0x31/0x6c0 [ 291.191868][ C1] copy_creds+0x106/0xa10 [ 291.196253][ C1] copy_process+0x964/0x3c00 [ 291.200900][ C1] ? finish_task_switch+0x18b/0x950 [ 291.206146][ C1] ? __pfx_copy_process+0x10/0x10 [ 291.211207][ C1] ? finish_task_switch+0x266/0x950 [ 291.216457][ C1] ? __pfx_kthread+0x10/0x10 [ 291.221112][ C1] kernel_clone+0x21e/0x840 [ 291.225654][ C1] ? trace_sched_exit_tp+0x38/0x120 [ 291.230897][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 291.235979][ C1] ? __pfx_kthread+0x10/0x10 [ 291.240614][ C1] kernel_thread+0x10c/0x160 [ 291.245247][ C1] ? __pfx_kernel_thread+0x10/0x10 [ 291.250447][ C1] ? __lock_acquire+0xab9/0xd20 [ 291.255376][ C1] ? __pfx_kthread+0x10/0x10 [ 291.260019][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 291.265272][ C1] kthreadd+0x575/0x770 [ 291.269464][ C1] ? kthreadd+0x30b/0x770 [ 291.273835][ C1] ? __pfx_kthreadd+0x10/0x10 [ 291.278556][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.283794][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.289030][ C1] ? __pfx_kthreadd+0x10/0x10 [ 291.293740][ C1] ret_from_fork+0x3fc/0x770 [ 291.298368][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 291.303524][ C1] ? __switch_to_asm+0x39/0x70 [ 291.308324][ C1] ? __switch_to_asm+0x33/0x70 [ 291.313123][ C1] ? __pfx_kthreadd+0x10/0x10 [ 291.317839][ C1] ret_from_fork_asm+0x1a/0x30 [ 291.322660][ C1] [ 291.325708][ C1] task:jbd2/sda1-8 state:R running task stack:25032 pid:5168 tgid:5168 ppid:2 task_flags:0x240040 flags:0x00004000 [ 291.339254][ C1] Call Trace: [ 291.342567][ C1] [ 291.345541][ C1] __schedule+0x1737/0x4d30 [ 291.350113][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 291.355444][ C1] ? __pfx___schedule+0x10/0x10 [ 291.360446][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 291.365779][ C1] preempt_schedule_irq+0xb5/0x150 [ 291.370935][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 291.376718][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 291.382568][ C1] irqentry_exit+0x6f/0x90 [ 291.387045][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.393061][ C1] RIP: 0010:unwind_next_frame+0x4d7/0x2390 [ 291.398902][ C1] Code: 00 00 41 c6 07 01 48 c7 c2 00 4a 88 8b 4c 8b 6c 24 50 48 8d 72 04 4c 8d 62 05 48 89 f0 48 c1 e8 03 48 89 44 24 40 0f b6 04 28 <84> c0 48 89 54 24 08 48 89 34 24 0f 85 4d 18 00 00 4c 89 e0 48 c1 [ 291.418560][ C1] RSP: 0018:ffffc9000e48f138 EFLAGS: 00000a02 [ 291.424682][ C1] RAX: 0000000000000000 RBX: ffffffff8fbceed4 RCX: ffffffff8fbceed8 [ 291.432784][ C1] RDX: ffffffff903cb3a4 RSI: ffffffff903cb3a8 RDI: ffffffff8be2f5a0 [ 291.440805][ C1] RBP: dffffc0000000000 R08: 0000000000000012 R09: ffffffff8172cd05 [ 291.448829][ C1] R10: ffffc9000e48f258 R11: ffffffff81ac3f80 R12: ffffffff903cb3a9 [ 291.456842][ C1] R13: ffffc9000e48f258 R14: ffffc9000e48f208 R15: ffffffff8172cd05 [ 291.464854][ C1] ? unwind_next_frame+0xa5/0x2390 [ 291.470013][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.476212][ C1] ? unwind_next_frame+0xa5/0x2390 [ 291.481387][ C1] ? unwind_next_frame+0xd4/0x2390 [ 291.486571][ C1] ? unwind_next_frame+0xa5/0x2390 [ 291.491817][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 291.497501][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.503706][ C1] arch_stack_walk+0x11c/0x150 [ 291.508523][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 291.514201][ C1] stack_trace_save+0x9c/0xe0 [ 291.518918][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 291.524354][ C1] save_stack+0xf5/0x1f0 [ 291.528652][ C1] ? __pfx_save_stack+0x10/0x10 [ 291.533543][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 291.538883][ C1] ? __put_partials+0x161/0x1c0 [ 291.543768][ C1] ? put_cpu_partial+0x17c/0x250 [ 291.548789][ C1] ? __slab_free+0x2f7/0x400 [ 291.553413][ C1] ? qlist_free_all+0x97/0x140 [ 291.558229][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 291.563914][ C1] ? page_ext_put+0x97/0xc0 [ 291.568475][ C1] __reset_page_owner+0x71/0x1f0 [ 291.573467][ C1] __free_frozen_pages+0xc71/0xe70 [ 291.578636][ C1] __put_partials+0x161/0x1c0 [ 291.583377][ C1] put_cpu_partial+0x17c/0x250 [ 291.588182][ C1] ? put_cpu_partial+0x6d/0x250 [ 291.593073][ C1] __slab_free+0x2f7/0x400 [ 291.597530][ C1] ? __phys_addr+0xd3/0x180 [ 291.602082][ C1] qlist_free_all+0x97/0x140 [ 291.606714][ C1] kasan_quarantine_reduce+0x148/0x160 [ 291.612217][ C1] __kasan_slab_alloc+0x22/0x80 [ 291.617114][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 291.622615][ C1] ? alloc_buffer_head+0x2a/0x270 [ 291.627688][ C1] alloc_buffer_head+0x2a/0x270 [ 291.632572][ C1] ? jbd2_journal_write_metadata_buffer+0xac/0x1060 [ 291.639268][ C1] jbd2_journal_write_metadata_buffer+0xc3/0x1060 [ 291.645740][ C1] ? __pfx_jbd2_journal_next_log_block+0x10/0x10 [ 291.652129][ C1] jbd2_journal_commit_transaction+0x1625/0x5a00 [ 291.658500][ C1] ? finish_task_switch+0x18b/0x950 [ 291.663789][ C1] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 291.670526][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.676911][ C1] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 291.682597][ C1] ? __pfx___timer_delete_sync+0x10/0x10 [ 291.688293][ C1] kjournald2+0x3cf/0x750 [ 291.692684][ C1] ? __pfx_kjournald2+0x10/0x10 [ 291.697575][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 291.703684][ C1] ? __kthread_parkme+0x7b/0x200 [ 291.708656][ C1] ? __kthread_parkme+0x1a1/0x200 [ 291.713723][ C1] kthread+0x711/0x8a0 [ 291.717843][ C1] ? __pfx_kjournald2+0x10/0x10 [ 291.722729][ C1] ? __pfx_kthread+0x10/0x10 [ 291.727362][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.732610][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.737845][ C1] ? __pfx_kthread+0x10/0x10 [ 291.742483][ C1] ret_from_fork+0x3fc/0x770 [ 291.747111][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 291.752445][ C1] ? __switch_to_asm+0x39/0x70 [ 291.757266][ C1] ? __switch_to_asm+0x33/0x70 [ 291.762069][ C1] ? __pfx_kthread+0x10/0x10 [ 291.766711][ C1] ret_from_fork_asm+0x1a/0x30 [ 291.771618][ C1] [ 291.774668][ C1] rcu: rcu_preempt kthread starved for 10234 jiffies! g16353 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 291.785906][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 291.795909][ C1] rcu: RCU grace-period kthread stack dump: [ 291.801822][ C1] task:rcu_preempt state:R running task stack:27160 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 291.815370][ C1] Call Trace: [ 291.818683][ C1] [ 291.821669][ C1] __schedule+0x1737/0x4d30 [ 291.826250][ C1] ? schedule+0x165/0x360 [ 291.830631][ C1] ? __pfx___schedule+0x10/0x10 [ 291.835546][ C1] ? schedule+0x91/0x360 [ 291.839836][ C1] schedule+0x165/0x360 [ 291.844061][ C1] schedule_timeout+0x12b/0x270 [ 291.848956][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 291.854386][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 291.860330][ C1] ? __pfx_process_timeout+0x10/0x10 [ 291.866102][ C1] ? prepare_to_swait_event+0x341/0x380 [ 291.871709][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 291.876639][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 291.882849][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 291.888186][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 291.893453][ C1] rcu_gp_kthread+0x99/0x390 [ 291.898111][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 291.903357][ C1] ? __kthread_parkme+0x7b/0x200 [ 291.908354][ C1] ? __kthread_parkme+0x1a1/0x200 [ 291.913427][ C1] kthread+0x711/0x8a0 [ 291.917539][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 291.922786][ C1] ? __pfx_kthread+0x10/0x10 [ 291.927418][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 291.932659][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.937909][ C1] ? __pfx_kthread+0x10/0x10 [ 291.942544][ C1] ret_from_fork+0x3fc/0x770 [ 291.947172][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 291.952350][ C1] ? __switch_to_asm+0x39/0x70 [ 291.957156][ C1] ? __switch_to_asm+0x33/0x70 [ 291.961969][ C1] ? __pfx_kthread+0x10/0x10 [ 291.966712][ C1] ret_from_fork_asm+0x1a/0x30 [ 291.971527][ C1] [ 291.974656][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 291.981035][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(full) [ 291.992355][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.002442][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 292.008214][ C1] Code: 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 ef 18 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 292.027961][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 292.034078][ C1] RAX: 7c70d08217f8d500 RBX: ffffffff8196a648 RCX: 7c70d08217f8d500 [ 292.042186][ C1] RDX: 0000000000000001 RSI: ffffffff8d972dc6 RDI: ffffffff8be2f600 [ 292.050293][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f1b R09: 1ffff110170e65e3 [ 292.058302][ C1] R10: dffffc0000000000 R11: ffffed10170e65e4 R12: ffffffff8fa050f0 [ 292.066399][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5eb40 [ 292.074407][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 292.083382][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.090003][ C1] CR2: 00007f6e7e665d1e CR3: 0000000030720000 CR4: 00000000003526f0 [ 292.098011][ C1] Call Trace: [ 292.101323][ C1] [ 292.104287][ C1] default_idle+0x13/0x20 [ 292.108675][ C1] default_idle_call+0x74/0xb0 [ 292.113487][ C1] do_idle+0x1e8/0x510 [ 292.117614][ C1] ? __pfx_do_idle+0x10/0x10 [ 292.122245][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.127513][ C1] cpu_startup_entry+0x44/0x60 [ 292.132335][ C1] start_secondary+0x101/0x110 [ 292.137149][ C1] common_startup_64+0x13e/0x147 [ 292.142164][ C1] [ 292.886245][ T1301] ieee802154 phy0 wpan0: encryption failed: -22