last executing test programs: 13m51.730275382s ago: executing program 1 (id=120): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x6, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) iopl(0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), 0xffffffffffffffff) rt_tgsigqueueinfo(r1, r1, 0x2c, &(0x7f0000000040)={0x13, 0x6, 0x4}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103381) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x0, 0x0, 0x4, 0xfffffffc, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="2000000025000000280012800e0001006970366772657461"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x13, 0x1, 0x0, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800"}) 13m44.241284274s ago: executing program 1 (id=131): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getresgid(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036000000"], 0x5b0}, 0x20008001) getrusage(0x1, 0x0) sendmsg$inet6(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x374}], 0x1}, 0x20000044) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000000400000004000000120000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000b596"], 0x48) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3430076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) 13m42.918409868s ago: executing program 1 (id=133): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x402, 0x1) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 13m41.115068553s ago: executing program 1 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40e00, 0x63, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffc, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000001380)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000080000000060a010400000000000000000100000008000b4000000000500004804c0001800a00010071756f74610000003c0002800c00044000000000000007ff08000240000000000c00014000000000810000000000000000000000000000070c00044000000000000000010900010073797a3000000000050007"], 0xf4}}, 0x0) r6 = socket(0x22, 0x6, 0x80) sendto$inet6(r6, &(0x7f0000000180)="9000000018001f2fb9409b52ffff65580200be04020cfe0560020b0243000f00ffffff9e00c8388827a685a168d0bf47d32345653602648dcaaf6c26c291214549935ade4a460c20b6ec0cff3959547f500f58ba86c902000f", 0x59, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 13m35.480241579s ago: executing program 1 (id=143): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGREP(r1, 0x80084522, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r4, r4, 0x0, 0x101) fdatasync(r3) mount(0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) r6 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xae\xd1md\xc8\x85\x00\x00\xfb\xff\x00\x18\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;2\xb5\xe1jS\xeb\xbf%||\xa0\x8e\x01\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x4) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') 13m31.877817373s ago: executing program 1 (id=147): openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x4004804) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) 13m16.2751607s ago: executing program 32 (id=147): openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x4004804) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x8) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) 5m27.826075773s ago: executing program 5 (id=1028): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='adfs\x00', 0x8000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 5m26.359750944s ago: executing program 5 (id=1029): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff72, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd23, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) shutdown(r5, 0x1) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0040d07, &(0x7f0000000040)=0x121) 5m24.873683868s ago: executing program 5 (id=1033): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x40800) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r6 = socket$inet(0x2, 0x4000000805, 0x0) listen(r6, 0x5) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x1ff, 0x0, 0x20000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x68, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x40, @link='syz1\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) ioprio_set$uid(0x3, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x125182, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0xc2fa, 0x200) sendfile(0xffffffffffffffff, r7, 0x0, 0xfffe82) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000000000000450000000000000066baf80cb8713c4586ef66bafc0cec0f0176e266b83e018ec845d3d8660f3a0e2a09f4c4226906548009ac263b5300c442f91d28c300000000000000001800000000000000070000000000000000000000000000001800000000000000010000000000000000000000000000001800000000000000ff0100000000000001000000000000005b0000000000000069f604000000a7c4a3a57eef008f6978c18f00000000c4825dbe8282e1abdd0f20d835200000000f22d80fc72d2d6d0000660f3880780b26420f015a06440f20c0350b000000440f22c0c300000000000000001800000000000000020000000000000000000000000000001800000000000000010000000000000000000000000000001800000000000000010000000000000000000000000000001800000000000000050000000000000001000000000000006400000000000000f3f047819a000000802d000000b9800000c00f3235001000000f3066470f38806d00f30f01dfc423812004cf5fc4837909f810b805000000b9b79100000f01d9b93b0600000f320fc77d00f30f119087790000c300000000000000001800000000000000000000000000000001000000000000005d0000000000000066baf80cb878430984ef66bafc0cb000eeb9970900000f3266b899008ee066460fc7730b400f01cb652666420fdac565670f7638420f30266477abb9be0a0000b8cd000000ba000000000f30c300000000000000001800000000000000a4000000000000000100000000000000a4000000000000000f0ec744240044000000c7442402af9d2a4aff2c2466460f388048fcc7442400f78fffffc7442402fb030000c7442406000000000f011424400f78620ec7442400bf850000c744240200480000c7442406000000000f011c24c4c291b84af1b9350a0000b80c000000ba000000000f30c7442400269a0000c74424028974fa09c7442406000000000f011c2466b868000f00d8c301000000000000006700000000000000b9480800000f32c4a2d13d38430f32f2420f7d1eb91f0800000f320f20c035000000200f22c066baf80cb878a9c78aef66bafc0cb800240000ef66b8b8008ec00f20d835200000000f22d80f20d835080000000f22d8c301000000000000006a000000000000002e0f23d5c42213f6b807000000440f015dbeb9800000c00f3235002000000f30260f01d1440f20c03501000000440f22c066bad10466b8867366ef66baf80cb842bd4183ef66bafc0c66b8080066ef470f01c966b8df008ec0c300000000000000001800000000000000070000000000000000000000000000001800000000000000010000000000000001000000000000005100000000000000f30f0866b87b000f00d0b805000000b9000000000f01c1c40129f88b000000008f2850879cf3a90000000066b8e9000f00d80f30420f21584315ac248be80f30c301000000000000005900000000000000420f0636460f22c066b8cf000f00d8b977090000b80b000080ba000000000f30470f2242c482f938b0043ada13b9800000c00f3235010000000f3066400ff6f6c40238f30a430f08c3000000000000000018000000000000004904000000000000000000000000000018000000000000000900000000000000000000000000000000000000400100000000000000000000000000001800ecff000000000900000000000000010000000000000074000000000000004f0fc79f0300000026f0450fb0059e440000c744240011010000c74424020a000000ff1c2426640f01f80fae6e94b907030000b800f0ffffbaffffffff0f30b805000000b9910000000f01d9b805000000b90a0000000f01d9c461f96f5b68450f01cac300000000"], 0x55c}) writev(r8, &(0x7f00000007c0), 0x0) 5m21.526094197s ago: executing program 5 (id=1040): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='adfs\x00', 0x8000, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x928, 0x200000008b}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 5m18.036562799s ago: executing program 5 (id=1045): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000100)=ANY=[], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000800004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x400008a, 0x700) listen(r5, 0x2) getsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c0001800602"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 5m14.713419554s ago: executing program 5 (id=1053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x869b10a9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000ca10cf8b"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 4m58.133972564s ago: executing program 33 (id=1053): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x869b10a9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000020000000095000000ca10cf8b"], &(0x7f0000000200)='GPL\x00', 0xff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r5}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001400000000508000140000000090c0002"], 0x140}}, 0x0) 21.012994069s ago: executing program 3 (id=1624): syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0xc0285628, &(0x7f0000000280)=0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x1, 0x8}, {0x6, 0x2, 0xff, 0x1}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="03000000ffffdba2080000010000000000000000c26b8634a0a86557a99ef57d315a3b3e3915f084de1353c860bae059ebe151de467ce0ac793faa9a66039a4ae5bccef7529fb7dc044f711285fd74ff98187573feb47f7e352eb67d7ec02c4c66685e8dc3badf5017b389f326c5b3556f374e7693a63f681a417c1e3125106014a383b5ee7a577b21116460f1a40a07ac8643", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xe0a42, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x28, 0x0, @fd_index=0x6, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_raw(0x1d, 0x3, 0x1) 18.285903874s ago: executing program 3 (id=1631): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ptrace(0x10, 0x1) landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1) socket$kcm(0xa, 0x2, 0x3a) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000040)="00000000f5ff", 0x6, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @broadcast}, 0xc) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') 15.921757714s ago: executing program 0 (id=1635): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff72, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd23, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) shutdown(r5, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0xffffffffffffff15) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) 15.068323907s ago: executing program 2 (id=1638): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 13.39383594s ago: executing program 2 (id=1641): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close_range(r6, r6, 0x2) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, 0x0) fstat(r7, &(0x7f0000001200)) ioctl$SIOCX25SFACILITIES(r7, 0x89e3, &(0x7f0000000340)={0x2b, 0x101, 0x4, 0x8, 0x781, 0x81}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xffffffff], [0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a, 0x6, 0x0, 0x61}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xffffffff, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x11, 0x0, 0x0) 11.743642731s ago: executing program 0 (id=1642): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x1, 0x2, 0x1, 0x8, 0x0, 0x30, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x6, 0x6, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0x2, 0x7, 0xc, 0x10}, @map_fd={0x18, 0x3}, @generic={0xe9, 0x7, 0x5, 0x479, 0x6}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0xb, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x5, 0xb, 0x6}, {0x0, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x2, 0x9}, {0x1, 0x1, 0x5, 0x7}, {0x4, 0x2, 0x3, 0xc}, {0x0, 0x5, 0xa, 0x7}], 0x10, 0x8, @void, @value}, 0x94) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getrlimit(0x4, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 11.736702632s ago: executing program 4 (id=1643): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x40800) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r6], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'pimreg0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @private}, &(0x7f0000000240)=0xc) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r12, 0x25, 0x6, @val=@netfilter={0x1, 0x0, 0xfff0003, 0x1}}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="38010000", @ANYRES16=r4, @ANYBLOB="000128bd7000fedbdf25040000000c00018008000100", @ANYRES32=r7, @ANYBLOB="2000018014000200697036746e6c3000000000000000000008000300020000000c000180080003000300000048000180140002007465616d5f736c6176655f3100000000080003000200000014000200776c616e300000000000000000000000140002007866726d300000000000000000000000500001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r8, @ANYBLOB="140002006d6163766c616e3100000000000000001400020064766d7270300000000000000000000008000100", @ANYBLOB="54000180140002007767320000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="800400080000000000000000", @ANYRES32=0x0, @ANYBLOB="14000200767863616e310000000000000000000008000300000000000800030000000000"], 0x138}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='huge=always']) socket$key(0xf, 0x3, 0x2) 11.593893794s ago: executing program 2 (id=1644): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000240)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x0}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x0, 0x2, 0x9, 0xfffffffe}) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 9.579162607s ago: executing program 3 (id=1645): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='adfs\x00', 0x8000, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 9.466730035s ago: executing program 4 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) socket$rds(0x15, 0x5, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x14, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x20}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r9) sendmsg$IEEE802154_LLSEC_SETPARAMS(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)={0x28, r10, 0x10b, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x880) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) 9.405794419s ago: executing program 2 (id=1647): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$radio(0x0, 0x2, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) mount$overlay(0x0, &(0x7f0000000500)='./file1\x00', &(0x7f0000000080), 0x2010000, &(0x7f0000000600)={[{@nfs_export_off}, {@verity_on}], [{@subj_type={'subj_type', 0x3d, '^$,\xb6\xcb'}}, {@smackfsdef={'smackfsdef', 0x3d, '}\'@.&+'}}, {@fowner_lt}, {@flag='ro'}, {@permit_directio}, {@smackfshat}]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000340), 0x4041, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000140)={{}, 'port0\x00'}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)={'#! ', '', [{0x20, '/dev/snd/pcmC#D#c\x00'}, {0x20, 'key_or_keyring:'}, {0x20, '\xbd\xb3\xd1\xf4J\xacU\x1c3\x98\x962t\xb7,\xcap}\xd9\x97\x8d\x87\x9c\x8d)s;\xccM#\x1e\x1e\xa8K/S\xa3\x93\xee\x0e\x94\x82\xf8\xf6}\xedF\xe4~\x1eJ\xceU!\x06\xc1\xa8\xb0\xc5\x8a8C\x7f\'F\xb5\x01k\x82\x15\"p}\xb0\xa2_\xff\xfd.\x0f\xee\xb3{/\x01\x00\x00\x00\x88-\x96\x99\xcaT\x10'}, {0x20, '\x84rfj\f\xa5\xf1|\xdc<\t\x8d\x84M\x9b\a\x16\xc8K\xec\bh\xf3\xc5\xbc\xd5u\x98\x91\x05\xfc}p\xc9\xdc\x17d\xb7\x13\xe1\xf0RNwV$\xedx)aE\n?\xc0\x93\x85\xdd\xa7\x9c\x80\xeb\x1d\xe1\xd8\x92\xda\xcbb\xc8\x95\x90\x80y\xe5\xe7\xed\v\xa2V\xa5dX\xc4\xac\xcdT\xe9\xa8\xf1\x8fV\x99\x01\xf1u}aA\xd2,\xf2^\x7f\x87\x17\x8a\x98-\x8co\xbc\x98\x00'}, {0x20, 'key_or_keyring:'}, {0x20, 'nfs_e\x0fMa\xa8[\xcc\x11\xb0\x92\xe6?\rr-\x99Xxport=off'}, {0x20, 'GPL\x00'}, {}, {0x20, '$::\\&('}, {0x20, '&@/\x95\xa7\x14\xb5\x84\x82\xaf\xec\x15K\xeb\x12\xfd\xeeQ\xf7|\x04A\xd8\x80eAz\xdbv\xd5\xa7A\xb08?\x8dX\xcb\f\n`6\xdd\xc9\xbdX\xd7V\x8f\x14[M\xbc\xc2<\xee\xb7b\xffi$\xe2\xb4'}], 0xa, "be2a9bda860b10c86c2524877b34579a2c5dd573e90037304667deb2d0baff3032025eb03f0e818511eb59f7182f1418ffa8215d9403d6da1340f9ce5a6dfa18ad2a478c31bbe33d0d80330009429890a8a3f0c5f21c3c2b076cad1fc748663a5ac6731354a6123f4fef6f1c18e6465fd7e4eafdc5def3b1021a02dd3b0509f22d78dc2649e6cca4170df482e8833d29397cc9868d02a0f11d8e37657ba12300004969bbaef39da1df5fab7ea518d54ebc8fc55935953431cf5af319cb7ea2edaa4c5c15ef7711cb78"}, 0x23e) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) syz_open_dev$sndpcmc(&(0x7f00000004c0), 0x0, 0x22000) 8.763580856s ago: executing program 3 (id=1648): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8.450229877s ago: executing program 2 (id=1649): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x5a20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000200)={0x58, 0xa, 0x0, "3205c546e8b51e04f4bf40070700", 0x4f424752}) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xd8}, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0x1fc4, &(0x7f0000000bc0)={0x0, 0xbf7f, 0x8000, 0x0, 0x2cb}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) setitimer(0x1, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000100)=0x7, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r9, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x11a0}, 0x1, 0x0, 0x0, 0x20048804}, 0x24004080) r10 = fcntl$dupfd(r7, 0x0, r7) prlimit64(r0, 0x6, &(0x7f0000000300)={0xfff, 0x4}, &(0x7f0000000340)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 7.971426005s ago: executing program 3 (id=1650): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) 7.351513429s ago: executing program 4 (id=1651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911046000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, 0x0) getpid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket(0xa, 0x1, 0x0) fgetxattr(r4, &(0x7f00000000c0)=@known='security.apparmor\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) socket$inet(0x2, 0xa, 0xffffffd2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x100000000004, 0x0) 6.640697976s ago: executing program 2 (id=1652): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xffffffffffffff72, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd23, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x5, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) shutdown(r5, 0x1) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0xffffffffffffff15) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) 6.313608842s ago: executing program 3 (id=1653): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x1, 0x2, 0x1, 0x8, 0x0, 0x30, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x6, 0x6, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0x2, 0x7, 0xc, 0x10}, @map_fd={0x18, 0x3}, @generic={0xe9, 0x7, 0x5, 0x479, 0x6}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0xb, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x5, 0xb, 0x6}, {0x0, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x2, 0x9}, {0x1, 0x1, 0x5, 0x7}, {0x4, 0x2, 0x3, 0xc}, {0x0, 0x5, 0xa, 0x7}], 0x10, 0x8, @void, @value}, 0x94) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) getrlimit(0x4, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 5.713756413s ago: executing program 0 (id=1654): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c2754713e36569b2fae8649eb50c4d0000000000", @ANYRES32=0x1], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r2}) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000cc0)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0xf}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000000c0)=0x6, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="af6ef484dce2585400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000300)=ANY=[@ANYRESOCT], &(0x7f00000002c0)='GPL\x00', 0x3eb, 0xd5, &(0x7f0000000640)=""/213, 0x40f00, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(r10, &(0x7f0000000340), 0x12) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r10, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=r11, @ANYBLOB="00f2000000000000240012800b0001006272696467650000140002800800080088a8ffff050007000700"], 0x44}}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) 3.224871179s ago: executing program 4 (id=1655): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 2.590675409s ago: executing program 0 (id=1656): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmsg(r4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000240)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x0}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, 0x0) syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.266480761s ago: executing program 4 (id=1657): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x20) bpf$PROG_LOAD(0x5, 0x0, 0x23) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0700000004000000080000000001000020000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000010000000f0000000800340001ec000008000300", @ANYRES32=r9, @ANYBLOB="050033"], 0x2c}}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x5, 0x3, 0x44, @private1, @local, 0x1, 0x700, 0x0, 0xc2c4000}}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10b00248}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r8, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5c}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfc9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 1.14164034s ago: executing program 0 (id=1658): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000baa8b4c80aa416a1b6", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r3, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r6, 0x40045567, 0x0) write$uinput_user_dev(r6, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x621, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r6, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6, 0x4}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0x4, 0xa0, 0x3, 0xc, 0x0, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8b, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0x0, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x3, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xa86, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x7, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0x9, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0x1, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0xa1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) syz_emit_ethernet(0x124, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) userfaultfd(0x1) 9.395321ms ago: executing program 4 (id=1659): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x4}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x1, 0x2, 0x1, 0x8, 0x0, 0x30, 0x10}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x6, 0x6, 0x4, 0xfffffffffffffff0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x3, 0x0, 0x2, 0x7, 0xc, 0x10}, @map_fd={0x18, 0x3}, @generic={0xe9, 0x7, 0x5, 0x479, 0x6}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0xb, 0x3}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x5, 0xb, 0x6}, {0x0, 0x3, 0x1, 0x4}, {0x0, 0x1, 0x2, 0x9}, {0x1, 0x1, 0x5, 0x7}, {0x4, 0x2, 0x3, 0xc}, {0x0, 0x5, 0xa, 0x7}], 0x10, 0x8, @void, @value}, 0x94) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 0s ago: executing program 0 (id=1660): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) inotify_init1(0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x0, 0x3, 0x0, 0x2, 0x3e, 0x0, 0x301, 0x38, 0x0, 0xf, 0x0, 0x20, 0x1, 0x4, 0x4}, [{0x3, 0xffffffc0, 0x8001, 0x7, 0x6, 0x101, 0x10000009, 0x8}]}, 0x58) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x1, 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000002140)={0x3, 0x1, 0x3, "cad96945f5752bdb56d28b4046c8862c9a3d7268f7145394e0f9f8e7e70ef615", 0x47524247}) inotify_init() kernel console output (not intermixed with test programs): hsr_slave_1: left promiscuous mode [ 412.660326][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.672766][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.877908][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.965043][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.805480][ T8622] ======================================================= [ 414.805480][ T8622] WARNING: The mand mount option has been deprecated and [ 414.805480][ T8622] and is ignored by this kernel. Remove the mand [ 414.805480][ T8622] option from the mount to silence this warning. [ 414.805480][ T8622] ======================================================= [ 415.845153][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.428477][ T6084] team0 (unregistering): Port device team_slave_1 removed [ 416.879242][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.911037][ T6084] team0 (unregistering): Port device team_slave_0 removed [ 417.018808][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.458589][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.386676][ T8648] ALSA: mixer_oss: invalid OSS volume 'S' [ 419.407891][ T8648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.417226][ T8648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.426755][ T8648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.467813][ T8648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.477611][ T8648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.486329][ T8648] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.495374][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.503794][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.512134][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.896298][ T8383] hsr_slave_0: entered promiscuous mode [ 419.904202][ T8383] hsr_slave_1: entered promiscuous mode [ 421.723216][ T8664] syz.4.548: attempt to access beyond end of device [ 421.723216][ T8664] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 422.396405][ T8672] batadv1: entered promiscuous mode [ 423.888649][ T5823] net_ratelimit: 127 callbacks suppressed [ 423.888667][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.750377][ T5823] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 424.852232][ T8706] ptrace attach of "./syz-executor exec"[5820] was attempted by "   Œ Ðÿ ð¥ Àÿ Àÿ Ðÿ À• ðÿ °ÿ Àÿ ÿÿÿÿ [ 425.391454][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.767702][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 425.814437][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 426.085511][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.292424][ T5823] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 426.377662][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.486382][ T8719] syz_tun: entered allmulticast mode [ 426.501880][ T8383] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.550709][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.578742][ T8383] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.582753][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.598777][ T5823] usb 5-1: config 0 descriptor?? [ 426.688166][ T8723] dvmrp1: entered allmulticast mode [ 426.704093][ T8383] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.938519][ T8718] syz_tun: left allmulticast mode [ 426.945126][ T8383] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 427.681841][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.078917][ T5823] usbhid 5-1:0.0: can't add hid device: -71 [ 428.094526][ T5823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 428.274019][ T5823] usb 5-1: USB disconnect, device number 5 [ 428.912274][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.498125][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.696427][ T8383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.730247][ T8383] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.775506][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.782794][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.809830][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.824391][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.831539][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.968588][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.008653][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.072482][ T8788] overlayfs: failed to clone upperpath [ 432.121174][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.165919][ T8788] __nla_validate_parse: 37 callbacks suppressed [ 432.165934][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 432.787203][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.743399][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.944645][ T8806] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ00000000000000000000ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 434.917982][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.159486][ T8383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.493419][ T8824] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 435.967016][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.002815][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.404923][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.792103][ T8836] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 437.864443][ T8836] CIFS mount error: No usable UNC path provided in device string! [ 437.864443][ T8836] [ 437.876050][ T8836] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 439.023197][ T8843] overlayfs: failed to resolve './file1': -2 [ 439.341170][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.448958][ T8849] netlink: 596 bytes leftover after parsing attributes in process `syz.3.588'. [ 439.463085][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.484952][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.528460][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.430723][ T8858] Process accounting resumed [ 441.616735][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.418836][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.638798][ T8896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.647458][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.765495][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.187906][ T5835] Bluetooth: hci4: unknown advertising packet type: 0x70 [ 444.274246][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.710684][ T8914] openvswitch: netlink: IP tunnel attribute has 44 unknown bytes. [ 444.725083][ T8914] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 445.498545][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.708071][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.842230][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.853049][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.863326][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.874722][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.883835][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.166040][ T8922] lo speed is unknown, defaulting to 1000 [ 446.821156][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.989614][ T5835] Bluetooth: hci1: command tx timeout [ 447.998322][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.732924][ T8954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.741649][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.768803][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.009803][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.035968][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.561783][ T8971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.609'. [ 450.048381][ T5835] Bluetooth: hci1: command tx timeout [ 450.169353][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.223950][ T6082] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.223624][ T1116] bridge_slave_1: left allmulticast mode [ 451.233508][ T1116] bridge_slave_1: left promiscuous mode [ 451.367309][ T5872] net_ratelimit: 2 callbacks suppressed [ 451.367327][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.423476][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.347891][ T5835] Bluetooth: hci1: command tx timeout [ 452.427818][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.462574][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.554756][ T1116] bridge_slave_0: left allmulticast mode [ 452.570544][ T1116] bridge_slave_0: left promiscuous mode [ 452.584481][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.659819][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.391963][ T5835] Bluetooth: hci1: command tx timeout [ 455.059350][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.781858][ T66] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.794998][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.310208][ T5876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.339372][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.390044][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.554011][ T9040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.569647][ T9040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.585478][ T9040] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.664268][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.672418][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.343067][ T9055] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 460.327118][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.336343][ T9055] qnx6: wrong signature (magic) in superblock #1. [ 460.346184][ T9055] qnx6: unable to read the first superblock [ 460.468396][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.532061][ T1116] bond0 (unregistering): Released all slaves [ 461.419531][ T8922] chnl_net:caif_netlink_parms(): no params data found [ 462.442754][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 462.653769][ T8555] net_ratelimit: 3 callbacks suppressed [ 462.653794][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.703364][ T64] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.731171][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.759184][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.784007][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.794683][ T1116] hsr_slave_0: left promiscuous mode [ 464.203187][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.437847][ T1116] hsr_slave_1: left promiscuous mode [ 464.444031][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.559358][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.882216][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.209489][ T9103] netlink: 'syz.4.641': attribute type 4 has an invalid length. [ 467.237309][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.294243][ T5872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.155237][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 468.211725][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.462243][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 468.616139][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.181858][ T8555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.553843][ T9146] veth0_to_team: entered promiscuous mode [ 471.559646][ T9146] veth0_to_team: entered allmulticast mode [ 471.662747][ T5825] Bluetooth: hci0: unexpected event for opcode 0x2041 [ 471.676973][ T8922] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.694544][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.716599][ T8922] bridge_slave_0: entered allmulticast mode [ 471.735689][ T8922] bridge_slave_0: entered promiscuous mode [ 471.754007][ T8922] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.907705][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.916432][ T8922] bridge_slave_1: entered allmulticast mode [ 471.926380][ T8922] bridge_slave_1: entered promiscuous mode [ 472.507302][ T8555] IPVS: starting estimator thread 0... [ 472.627927][ T9158] IPVS: using max 50 ests per chain, 120000 per kthread [ 472.672198][ T8922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.098063][ T8922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.148763][ T8922] team0: Port device team_slave_0 added [ 474.338549][ T8922] team0: Port device team_slave_1 added [ 474.887862][ T9180] Lens B: ================= START STATUS ================= [ 474.895403][ T9180] Lens B: Focus, Absolute: 0 [ 474.900220][ T9180] Lens B: ================== END STATUS ================== [ 475.648943][ T9189] netlink: 32 bytes leftover after parsing attributes in process `syz.2.658'. [ 476.532888][ T9189] xt_CT: You must specify a L4 protocol and not use inversions on it [ 476.975014][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.014888][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.206940][ T8922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.036660][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.091977][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.068439][ T8922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.207897][ T8922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.235271][ T8922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.642589][ T9238] overlayfs: missing 'lowerdir' [ 482.517557][ T8922] hsr_slave_0: entered promiscuous mode [ 482.612376][ T8922] hsr_slave_1: entered promiscuous mode [ 483.573331][ T9255] 8021q: VLANs not supported on wg2 [ 484.053632][ T5825] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 484.053743][ T5825] Bluetooth: hci4: Malformed Event: 0x2f [ 484.885809][ T9273] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 486.516628][ T5825] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 488.436665][ T9283] sctp: failed to load transform for md5: -2 [ 488.714156][ T9304] overlayfs: failed to clone upperpath [ 490.236700][ T30] audit: type=1326 audit(1747155988.021:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 490.417741][ T9325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.684'. [ 490.450222][ T30] audit: type=1326 audit(1747155988.021:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 490.541484][ T5825] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 490.554933][ T5825] Bluetooth: hci4: Injecting HCI hardware error event [ 490.577116][ T30] audit: type=1326 audit(1747155988.021:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 490.577631][ T5835] Bluetooth: hci4: hardware error 0x00 [ 490.604817][ T30] audit: type=1326 audit(1747155988.021:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 490.989608][ T30] audit: type=1326 audit(1747155988.021:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 491.691035][ T30] audit: type=1326 audit(1747155988.021:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 491.784005][ T30] audit: type=1326 audit(1747155988.021:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 491.939837][ T30] audit: type=1326 audit(1747155988.021:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 491.966292][ T8922] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 492.011233][ T8922] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 492.293484][ T30] audit: type=1326 audit(1747155988.021:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 492.337694][ T30] audit: type=1326 audit(1747155988.021:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9316 comm="syz.0.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 493.045893][ T9344] xt_TPROXY: Can be used only with -p tcp or -p udp [ 493.321946][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 494.150139][ T8922] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 494.889417][ T8922] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 498.154315][ T8922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.408866][ T8922] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.462448][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.469685][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.687234][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.694548][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.380278][ T9442] siw: device registration error -23 [ 506.047999][ T9453] overlayfs: failed to clone upperpath [ 506.090756][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 506.100346][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 506.108569][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 506.116597][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 506.149684][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 507.098098][ T9461] lo speed is unknown, defaulting to 1000 [ 508.158404][ T9461] chnl_net:caif_netlink_parms(): no params data found [ 508.274294][ T5835] Bluetooth: hci1: command tx timeout [ 510.307911][ T5835] Bluetooth: hci1: command tx timeout [ 512.369060][ T5835] Bluetooth: hci1: command tx timeout [ 513.317054][ T9520] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 513.359435][ T9461] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.366827][ T9461] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.384774][ T9461] bridge_slave_0: entered allmulticast mode [ 513.403014][ T9461] bridge_slave_0: entered promiscuous mode [ 514.123515][ T9461] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.139126][ T9461] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.147047][ T9461] bridge_slave_1: entered allmulticast mode [ 514.270555][ T9461] bridge_slave_1: entered promiscuous mode [ 514.447738][ T5835] Bluetooth: hci1: command tx timeout [ 514.470182][ T9461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.502915][ T9546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.727'. [ 514.593925][ T9461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.859603][ T1116] bridge_slave_1: left allmulticast mode [ 514.868309][ T1116] bridge_slave_1: left promiscuous mode [ 514.897456][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.043339][ T1116] bridge_slave_0: left allmulticast mode [ 515.054041][ T1116] bridge_slave_0: left promiscuous mode [ 515.677101][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.330638][ T9590] set match dimension is over the limit! [ 518.572729][ T1116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.604599][ T1116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.619458][ T1116] bond0 (unregistering): Released all slaves [ 518.635425][ T9461] team0: Port device team_slave_0 added [ 518.800042][ T9461] team0: Port device team_slave_1 added [ 519.306584][ T1116] hsr_slave_0: left promiscuous mode [ 519.322955][ T1116] hsr_slave_1: left promiscuous mode [ 519.329580][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.345331][ T1116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.410913][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 520.260235][ T9641] xt_hashlimit: overflow, rate too high: 0 [ 520.269891][ T5835] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 521.439566][ T9651] xt_connbytes: Forcing CT accounting to be enabled [ 521.446310][ T9651] set match dimension is over the limit! [ 521.901144][ T1116] team0 (unregistering): Port device team_slave_1 removed [ 522.076727][ T1116] team0 (unregistering): Port device team_slave_0 removed [ 522.163226][ T9659] IPv6: addrconf: prefix option has invalid lifetime [ 522.755979][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.373029][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.401643][ T9461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.514566][ T9461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.523343][ T9461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.550737][ T9461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.651451][ T9675] netlink: 32 bytes leftover after parsing attributes in process `syz.3.751'. [ 524.106314][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.753'. [ 524.593754][ T9461] hsr_slave_0: entered promiscuous mode [ 524.621340][ T5825] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 524.630747][ T5825] Bluetooth: hci3: Injecting HCI hardware error event [ 524.639494][ T5835] Bluetooth: hci3: hardware error 0x00 [ 524.693821][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 524.708392][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 524.708414][ T30] audit: type=1326 audit(1747156022.441:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9678 comm="syz.2.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x7fc00000 [ 524.787989][ T9461] hsr_slave_1: entered promiscuous mode [ 524.804601][ T9689] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.814676][ T9689] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.823397][ T9689] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.832151][ T9689] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.886807][ T9692] overlayfs: failed to clone upperpath [ 524.907755][ T9689] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.917959][ T9689] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.926844][ T9689] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.936503][ T9689] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.241906][ T5835] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 527.790788][ T9733] netlink: 'syz.2.760': attribute type 10 has an invalid length. [ 528.485560][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.496773][ T9733] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 531.245792][ T9758] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[9758] [ 532.134215][ T9766] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 537.787903][ T30] audit: type=1804 audit(1747156035.521:26): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.774" name="/newroot/165/file1" dev="fuse" ino=1 res=1 errno=0 [ 538.456610][ T9815] xt_hashlimit: overflow, rate too high: 0 [ 539.051178][ T9820] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 539.057835][ T9820] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 539.073391][ T9820] vhci_hcd vhci_hcd.0: Device attached [ 539.082891][ T9820] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 539.089532][ T9820] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 539.634431][ T9820] vhci_hcd vhci_hcd.0: Device attached [ 539.650910][ T5875] vhci_hcd: vhci_device speed not set [ 539.669706][ T9832] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 539.718270][ T5875] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 541.046595][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 541.063760][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 541.070059][ T9843] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(24) [ 541.076688][ T9843] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 541.087310][ T9843] vhci_hcd vhci_hcd.0: Device attached [ 541.130532][ T9820] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(16) [ 541.137186][ T9820] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 541.500368][ T9839] ceph: No mds server is up or the cluster is laggy [ 541.500961][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 541.536041][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 541.547078][ T9820] vhci_hcd vhci_hcd.0: Device attached [ 541.557235][ T9848] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 541.560360][ T9832] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 541.571961][ T9832] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 541.626914][ T9832] vhci_hcd vhci_hcd.0: Device attached [ 541.690144][ T9820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 541.852161][ T9820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 542.874582][ T9832] vhci_hcd vhci_hcd.0: port 0 already used [ 543.139967][ T9846] vhci_hcd: connection closed [ 543.144662][ T9855] vhci_hcd: connection closed [ 543.144953][ T9849] vhci_hcd: connection closed [ 543.169905][ T9824] vhci_hcd: connection closed [ 543.184194][ T9821] vhci_hcd: connection reset by peer [ 543.196813][ T1116] vhci_hcd: stop threads [ 543.612245][ T1116] vhci_hcd: release socket [ 543.627429][ T1116] vhci_hcd: disconnect device [ 543.669180][ T9461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 543.689508][ T1116] vhci_hcd: stop threads [ 543.712449][ T1116] vhci_hcd: release socket [ 543.718497][ T9461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 543.725462][ T1116] vhci_hcd: disconnect device [ 543.734630][ T1116] vhci_hcd: stop threads [ 543.739727][ T1116] vhci_hcd: release socket [ 543.746894][ T9461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 543.754062][ T1116] vhci_hcd: disconnect device [ 543.761478][ T1116] vhci_hcd: stop threads [ 543.765905][ T1116] vhci_hcd: release socket [ 543.774389][ T9461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.778129][ T1116] vhci_hcd: disconnect device [ 543.962150][ T1116] vhci_hcd: stop threads [ 543.983177][ T1116] vhci_hcd: release socket [ 544.004479][ T1116] vhci_hcd: disconnect device [ 544.416442][ T9461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.179047][ T9461] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.197851][ T5875] vhci_hcd: vhci_device speed not set [ 545.385050][ T9461] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.396211][ T9461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.308871][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.316166][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.349689][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.356919][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.562043][ T5876] usb usb42-port1: attempt power cycle [ 549.229509][ T5876] usb usb42-port1: unable to enumerate USB device [ 549.506790][ T9461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.173333][ T9461] veth0_vlan: entered promiscuous mode [ 552.228890][ T9461] veth1_vlan: entered promiscuous mode [ 553.199964][ T9461] veth0_macvtap: entered promiscuous mode [ 553.211025][ T9461] veth1_macvtap: entered promiscuous mode [ 553.929480][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.519675][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.547858][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.597763][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.623517][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.711341][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.729928][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 554.744260][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 554.778880][ T9461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.811511][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.253284][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.276162][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.303432][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.316149][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.332088][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.345186][ T9461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.360817][ T9461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.377044][ T9461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.403508][ T9461] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.415291][ T9461] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.457544][ T9461] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.506374][ T9461] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.687100][ T9970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 555.844453][ T9976] syz.4.803: attempt to access beyond end of device [ 555.844453][ T9976] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 555.857536][ T9976] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 556.647720][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.670716][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.417982][ T6073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.857327][ T6073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.288500][T10011] set match dimension is over the limit! [ 560.693652][T10019] dlm: plock device version mismatch: kernel (1.2.0), user (4207673345.1574799195.3139252685) [ 565.163543][ T30] audit: type=1800 audit(1747156062.951:27): pid=10051 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.819" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 565.205069][T10054] set match dimension is over the limit! [ 573.839041][T10101] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.830'. [ 573.848352][T10101] netlink: 24 bytes leftover after parsing attributes in process `syz.4.830'. [ 577.785676][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 577.889379][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 578.098091][T10128] ceph: No mds server is up or the cluster is laggy [ 578.395844][T10140] set match dimension is over the limit! [ 578.870749][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 578.876888][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 581.815680][T10173] veth2: entered allmulticast mode [ 582.175353][T10187] xt_socket: unknown flags 0x50 [ 585.442161][T10213] set match dimension is over the limit! [ 586.685834][T10223] batadv_slave_1: entered promiscuous mode [ 588.045320][T10222] batadv_slave_1: left promiscuous mode [ 588.456850][T10232] orangefs_mount: mount request failed with -4 [ 591.352505][T10266] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 594.798133][T10279] set match dimension is over the limit! [ 603.029592][T10319] Process accounting resumed [ 603.248020][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.876'. [ 603.578502][T10337] usb usb8: usbfs: process 10337 (syz.5.878) did not claim interface 0 before use [ 604.479191][T10339] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 604.479191][T10339] program syz.4.877 not setting count and/or reply_len properly [ 605.345817][T10348] netlink: ct family unspecified [ 605.350954][T10348] openvswitch: netlink: Actions may not be safe on all matching packets [ 605.361564][T10348] netlink: 'syz.0.881': attribute type 21 has an invalid length. [ 609.941535][T10376] binder: 10374:10376 ioctl 4018620d 0 returned -22 [ 609.982282][T10375] binder: 10374:10375 ioctl c0306201 0 returned -14 [ 611.402122][T10376] syz.5.888 (10376): drop_caches: 2 [ 612.172095][T10397] netlink: 'syz.2.893': attribute type 1 has an invalid length. [ 618.585670][T10424] xt_socket: unknown flags 0x8 [ 620.590177][T10432] fuse: Unknown parameter 'user_00000000000000000000' [ 623.811847][T10454] Process accounting resumed [ 625.195525][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 627.794993][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.922'. [ 627.850112][T10508] overlayfs: failed to clone upperpath [ 628.936520][T10520] openvswitch: netlink: Actions may not be safe on all matching packets [ 629.353688][T10520] 9pnet_fd: Insufficient options for proto=fd [ 631.130366][ T30] audit: type=1326 audit(1747156128.821:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10540 comm="syz.2.931" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x0 [ 631.289720][T10545] xt_bpf: check failed: parse error [ 631.327363][T10545] bridge0: port 3(gretap0) entered blocking state [ 631.334643][T10545] bridge0: port 3(gretap0) entered disabled state [ 631.342377][T10545] gretap0: entered allmulticast mode [ 631.362493][T10545] gretap0: entered promiscuous mode [ 631.412611][T10545] gretap0: left allmulticast mode [ 631.417735][T10545] gretap0: left promiscuous mode [ 631.423011][T10545] bridge0: port 3(gretap0) entered disabled state [ 631.574360][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 634.539381][T10584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.944'. [ 634.548375][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 634.926839][T10591] set match dimension is over the limit! [ 635.245514][T10594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.946'. [ 635.256591][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 636.148620][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'. [ 638.844466][T10628] netlink: 'syz.4.956': attribute type 3 has an invalid length. [ 638.852777][T10628] netlink: 3 bytes leftover after parsing attributes in process `syz.4.956'. [ 639.745047][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.2.960'. [ 639.763380][T10639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 639.846809][T10630] set match dimension is over the limit! [ 640.511989][T10656] rdma_rxe: rxe_newlink: failed to add lo [ 641.549876][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.963'. [ 641.560096][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 643.108479][T10679] Malformed UNC in devname [ 643.108479][T10679] [ 644.174521][T10679] CIFS: VFS: Malformed UNC in devname [ 644.411931][T10679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 646.232830][T10707] netlink: 20 bytes leftover after parsing attributes in process `syz.4.980'. [ 646.258490][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'. [ 647.711649][T10717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.983'. [ 647.720616][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.983'. [ 648.837690][T10729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.984'. [ 648.864634][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.984'. [ 649.931524][T10743] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 10743 comm: syz.5.987) [ 650.583368][ T30] audit: type=1800 audit(1747156147.741:29): pid=10743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.987" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=23629 res=0 errno=0 [ 650.715345][T10745] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 650.724542][T10745] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 651.606654][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.992'. [ 651.667485][T10757] set match dimension is over the limit! [ 651.986738][T10751] netlink: 'syz.0.991': attribute type 10 has an invalid length. [ 652.022445][T10751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.033252][T10751] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 652.132368][T10763] overlayfs: failed to clone upperpath [ 652.933295][T10768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.996'. [ 652.982062][T10768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.996'. [ 653.170608][T10766] set match dimension is over the limit! [ 655.791849][T10791] netlink: 4328 bytes leftover after parsing attributes in process `syz.5.998'. [ 655.801484][T10791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.809275][T10791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.312739][T10800] set match dimension is over the limit! [ 656.354288][T10791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.381616][T10791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.469515][T10804] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 657.279760][T10793] bridge0: port 3(erspan0) entered blocking state [ 657.292553][T10793] bridge0: port 3(erspan0) entered disabled state [ 657.313381][T10793] erspan0: entered allmulticast mode [ 657.374157][T10806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1006'. [ 657.384531][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 658.279069][T10793] erspan0: entered promiscuous mode [ 658.284629][T10793] bridge0: port 3(erspan0) entered blocking state [ 658.291300][T10793] bridge0: port 3(erspan0) entered forwarding state [ 658.427786][T10798] erspan0: left allmulticast mode [ 658.433310][T10798] erspan0: left promiscuous mode [ 658.466282][T10798] bridge0: port 3(erspan0) entered disabled state [ 658.568002][T10820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1010'. [ 658.606024][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 659.071104][T10828] netlink: 'syz.2.1011': attribute type 9 has an invalid length. [ 659.702980][T10830] set match dimension is over the limit! [ 660.244558][T10844] syz.4.1013: attempt to access beyond end of device [ 660.244558][T10844] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 660.257874][T10844] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 660.959081][ T5835] Bluetooth: hci1: unexpected event for opcode 0x041c [ 662.692423][T10869] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 663.777731][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1020'. [ 663.787247][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1020'. [ 664.177337][T10874] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1022'. [ 664.403706][T10874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 664.787965][T10879] set match dimension is over the limit! [ 665.007806][ T5835] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 665.016508][ T5835] Bluetooth: hci1: Injecting HCI hardware error event [ 665.025375][ T5825] Bluetooth: hci1: hardware error 0x00 [ 666.110175][T10892] syz.5.1028: attempt to access beyond end of device [ 666.110175][T10892] nbd5: rw=0, sector=6, nr_sectors = 2 limit=0 [ 666.123048][T10892] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 668.536298][T10911] overlayfs: failed to clone upperpath [ 668.640592][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 670.452370][T10923] IPVS: set_ctl: invalid protocol: 8 224.0.0.1:20002 [ 670.505393][T10930] xt_hashlimit: overflow, rate too high: 0 [ 671.265374][T10933] sctp: failed to load transform for md5: -2 [ 671.411619][T10939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1037'. [ 671.420907][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1037'. [ 671.501118][T10935] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 671.510287][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1036'. [ 673.484187][T10962] syz.5.1040: attempt to access beyond end of device [ 673.484187][T10962] nbd5: rw=0, sector=6, nr_sectors = 2 limit=0 [ 673.497386][T10962] ADFS-fs (nbd5): error: unable to read block 3, try 0 [ 675.810962][T10977] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 675.820487][T10977] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 675.870550][T10981] xt_TPROXY: Can be used only with -p tcp or -p udp [ 676.849499][T10993] overlayfs: failed to clone upperpath [ 678.121845][T11000] new mount options do not match the existing superblock, will be ignored [ 678.713389][T11004] netlink: 'syz.5.1045': attribute type 2 has an invalid length. [ 678.729773][T11004] : entered promiscuous mode [ 678.919159][T10999] sctp: failed to load transform for md5: -2 [ 679.235086][T11011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 679.523719][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.531531][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.558984][T11014] bridge0: entered allmulticast mode [ 679.576093][T11014] bridge_slave_1: left allmulticast mode [ 679.584862][T11014] bridge_slave_1: left promiscuous mode [ 679.630313][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.182177][T11019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1051'. [ 680.191392][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 680.239608][T11014] bridge_slave_0: left allmulticast mode [ 680.245488][T11014] bridge_slave_0: left promiscuous mode [ 680.258213][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.327879][T11015] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1053'. [ 686.217851][T11071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1066'. [ 686.227221][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 690.255671][T11099] IPv6: Can't replace route, no match found [ 690.768526][T11115] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 690.782319][T11115] Error validating options; rc = [-22] [ 691.059838][T11121] netlink: 'syz.2.1082': attribute type 4 has an invalid length. [ 691.067734][T11121] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1082'. [ 696.206474][T11157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 696.216221][T11157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 696.225101][T11157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 696.234285][T11157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 696.244255][T11157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 696.344010][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.398019][T11155] lo speed is unknown, defaulting to 1000 [ 696.880554][T11162] overlayfs: failed to clone upperpath [ 696.932252][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.552478][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.881295][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.746499][T11174] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1094'. [ 698.755523][T11174] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1094'. [ 698.764479][T11174] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1094'. [ 698.773554][T11174] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1094'. [ 698.782526][T11174] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1094'. [ 698.854353][T11157] Bluetooth: hci1: command tx timeout [ 700.419091][T11198] netlink: 'syz.4.1097': attribute type 2 has an invalid length. [ 700.468086][T11157] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 700.487145][T11157] Bluetooth: hci0: Injecting HCI hardware error event [ 700.501179][T11157] Bluetooth: hci0: hardware error 0x00 [ 700.817499][T11195] sctp: failed to load transform for md5: -2 [ 700.944401][ T5825] Bluetooth: hci1: command tx timeout [ 700.977765][T11198] : entered promiscuous mode [ 701.103211][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1100'. [ 701.115652][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1100'. [ 701.161273][T11155] chnl_net:caif_netlink_parms(): no params data found [ 701.443024][T11216] syz.4.1103 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 702.608082][T11157] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 703.137547][T11157] Bluetooth: hci1: command tx timeout [ 703.225857][T11235] set match dimension is over the limit! [ 703.741860][T11155] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.752840][T11155] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.890826][T11155] bridge_slave_0: entered allmulticast mode [ 703.912728][T11155] bridge_slave_0: entered promiscuous mode [ 705.178166][T11157] Bluetooth: hci1: command tx timeout [ 707.872002][T11273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1116'. [ 707.881077][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 708.011189][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.024944][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.035380][ T66] bond0 (unregistering): Released all slaves [ 708.093953][T11155] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.101984][T11155] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.112286][T11155] bridge_slave_1: entered allmulticast mode [ 708.121327][T11155] bridge_slave_1: entered promiscuous mode [ 708.244564][ T66] : left promiscuous mode [ 708.580796][T11280] nbd: must specify an index to disconnect [ 709.762344][T11289] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 710.260921][T11155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.531977][T11155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.338698][ T66] hsr_slave_0: left promiscuous mode [ 715.058199][ T66] hsr_slave_1: left promiscuous mode [ 715.119293][T11337] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1130'. [ 715.130946][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 715.345607][ T66] veth1_macvtap: left promiscuous mode [ 715.623378][T11346] netlink: 'syz.2.1131': attribute type 2 has an invalid length. [ 716.180988][ T66] veth0_macvtap: left promiscuous mode [ 716.194443][T11344] sctp: failed to load transform for md5: -2 [ 716.204429][ T66] veth1_vlan: left promiscuous mode [ 716.226003][ T66] veth0_vlan: left promiscuous mode [ 716.457413][T11352] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 716.463981][T11352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 716.476482][T11352] vhci_hcd vhci_hcd.0: Device attached [ 716.778578][ T5875] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 718.406350][ T66] team0 (unregistering): Port device team_slave_1 removed [ 718.446223][ T66] team0 (unregistering): Port device team_slave_0 removed [ 718.900990][T11155] team0: Port device team_slave_0 added [ 718.915042][T11155] team0: Port device team_slave_1 added [ 719.670458][T11346] : entered promiscuous mode [ 720.229351][T11155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.236476][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.238260][T11155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.870649][T11155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.974891][T11155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.308783][T11155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.567010][T11155] hsr_slave_0: entered promiscuous mode [ 722.574200][T11155] hsr_slave_1: entered promiscuous mode [ 722.591120][T11376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 722.619127][T11394] syz.4.1139: attempt to access beyond end of device [ 722.619127][T11394] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 722.632065][T11394] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 723.617453][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1141'. [ 723.629123][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'. [ 723.945355][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1142'. [ 725.002877][T11413] set match dimension is over the limit! [ 726.359411][T11432] netlink: 'syz.3.1146': attribute type 2 has an invalid length. [ 726.791247][T11430] sctp: failed to load transform for md5: -2 [ 727.235154][T11432] : entered promiscuous mode [ 727.389962][T11155] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 727.466893][T11155] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 727.645558][T11155] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 728.308831][T11449] overlayfs: failed to clone upperpath [ 728.976162][T11155] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 730.361138][T11463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1150'. [ 730.370336][T11463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1150'. [ 730.465268][T11464] syz.0.1150: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 730.480755][T11464] CPU: 1 UID: 0 PID: 11464 Comm: syz.0.1150 Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 730.480784][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.480805][T11464] Call Trace: [ 730.480817][T11464] [ 730.480830][T11464] dump_stack_lvl+0x189/0x250 [ 730.480867][T11464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.480895][T11464] ? __pfx__printk+0x10/0x10 [ 730.480925][T11464] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 730.480957][T11464] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 730.480991][T11464] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 730.481026][T11464] warn_alloc+0x214/0x310 [ 730.481048][T11464] ? __pfx___schedule+0x10/0x10 [ 730.481074][T11464] ? __pfx_warn_alloc+0x10/0x10 [ 730.481095][T11464] ? kasan_save_track+0x4f/0x80 [ 730.481121][T11464] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 730.481149][T11464] ? xskq_create+0x56/0x170 [ 730.481174][T11464] ? __x64_sys_setsockopt+0x18b/0x220 [ 730.481197][T11464] ? do_syscall_64+0xf6/0x210 [ 730.481221][T11464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.481253][T11464] __vmalloc_node_range_noprof+0x125/0x12c0 [ 730.481310][T11464] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 730.481335][T11464] ? __kasan_kmalloc+0x93/0xb0 [ 730.481370][T11464] vmalloc_user_noprof+0x74/0x80 [ 730.481391][T11464] ? xskq_create+0xbf/0x170 [ 730.481413][T11464] xskq_create+0xbf/0x170 [ 730.481445][T11464] xsk_init_queue+0xb0/0x110 [ 730.481471][T11464] xsk_setsockopt+0x43f/0x710 [ 730.481496][T11464] ? __pfx_xsk_setsockopt+0x10/0x10 [ 730.481520][T11464] ? __lock_acquire+0xaac/0xd20 [ 730.481555][T11464] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 730.481580][T11464] ? __pfx_xsk_setsockopt+0x10/0x10 [ 730.481604][T11464] do_sock_setsockopt+0x25a/0x3e0 [ 730.481633][T11464] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 730.481655][T11464] ? __fget_files+0x2a/0x420 [ 730.481679][T11464] ? __fget_files+0x3a0/0x420 [ 730.481696][T11464] ? __fget_files+0x2a/0x420 [ 730.481724][T11464] __x64_sys_setsockopt+0x18b/0x220 [ 730.481756][T11464] do_syscall_64+0xf6/0x210 [ 730.481781][T11464] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 730.481800][T11464] ? clear_bhb_loop+0x60/0xb0 [ 730.481825][T11464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.481844][T11464] RIP: 0033:0x7f082b38e969 [ 730.481871][T11464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.481889][T11464] RSP: 002b:00007f08291b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 730.481911][T11464] RAX: ffffffffffffffda RBX: 00007f082b5b6160 RCX: 00007f082b38e969 [ 730.481927][T11464] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 730.481940][T11464] RBP: 00007f082b410ab1 R08: 0000000000000052 R09: 0000000000000000 [ 730.481954][T11464] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.481967][T11464] R13: 0000000000000000 R14: 00007f082b5b6160 R15: 00007ffda91267c8 [ 730.482000][T11464] [ 730.482031][T11464] Mem-Info: [ 730.788696][T11464] active_anon:10022 inactive_anon:14584 isolated_anon:0 [ 730.788696][T11464] active_file:18718 inactive_file:42462 isolated_file:0 [ 730.788696][T11464] unevictable:768 dirty:315 writeback:0 [ 730.788696][T11464] slab_reclaimable:10675 slab_unreclaimable:100447 [ 730.788696][T11464] mapped:40069 shmem:19732 pagetables:1099 [ 730.788696][T11464] sec_pagetables:0 bounce:0 [ 730.788696][T11464] kernel_misc_reclaimable:0 [ 730.788696][T11464] free:1298924 free_pcp:739 free_cma:0 [ 730.834999][T11464] Node 0 active_anon:40088kB inactive_anon:58196kB active_file:74588kB inactive_file:169848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160232kB dirty:1256kB writeback:0kB shmem:77392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11488kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 730.870269][T11464] Node 1 active_anon:0kB inactive_anon:140kB active_file:284kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 730.902127][T11464] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.929504][T11464] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 730.935389][T11464] Node 0 DMA32 free:1270352kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:40084kB inactive_anon:58192kB active_file:74496kB inactive_file:169836kB unevictable:1536kB writepending:1252kB present:3129332kB managed:2564588kB mlocked:0kB bounce:0kB free_pcp:2952kB local_pcp:1968kB free_cma:0kB [ 730.967897][T11464] lowmem_reserve[]: 0 0 0 0 0 [ 730.972720][T11464] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:4kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.999695][T11464] lowmem_reserve[]: 0 0 0 0 0 [ 731.004512][T11464] Node 1 Normal free:3909984kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:140kB active_file:284kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 731.033886][T11464] lowmem_reserve[]: 0 0 0 0 0 [ 731.038722][T11464] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 731.052604][T11464] Node 0 DMA32: 7*4kB (UME) 9*8kB (ME) 289*16kB (UME) 240*32kB (UME) 148*64kB (UME) 15*128kB (UE) 11*256kB (UM) 23*512kB (UME) 7*1024kB (ME) 6*2048kB (ME) 296*4096kB (UME) = 1270260kB [ 731.071418][T11464] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 731.083128][T11464] Node 1 Normal: 208*4kB (UE) 54*8kB (UME) 41*16kB (UME) 185*32kB (UE) 103*64kB (UME) 32*128kB (UME) 13*256kB (UM) 8*512kB (UM) 5*1024kB (UME) 2*2048kB (ME) 946*4096kB (M) = 3909984kB [ 731.101730][T11464] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.111701][T11464] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 731.195530][T11464] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.205380][T11464] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 731.214893][T11464] 80923 total pagecache pages [ 731.219789][T11464] 0 pages in swap cache [ 731.223991][T11464] Free swap = 124996kB [ 731.228367][T11464] Total swap = 124996kB [ 731.232685][T11464] 2097051 pages RAM [ 731.236529][T11464] 0 pages HighMem/MovableOnly [ 731.241308][T11464] 424245 pages reserved [ 731.245542][T11464] 0 pages cma reserved [ 731.835505][T11473] ceph: No mds server is up or the cluster is laggy [ 731.843416][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 731.876626][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 732.519058][T11155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.191271][T11155] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.787947][ T6073] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.795117][ T6073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.874978][ T3542] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.882181][ T3542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.687825][T11516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1160'. [ 736.817126][T11533] fuse: Unknown parameter 'grou00000000000000000000' [ 738.607430][T11155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.611345][T11571] Invalid source name [ 740.848538][T11573] overlayfs: failed to clone upperpath [ 740.947068][ T30] audit: type=1326 audit(1747156238.628:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 741.463071][ T30] audit: type=1326 audit(1747156238.628:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 741.503779][ T30] audit: type=1326 audit(1747156238.628:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 741.688462][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1171'. [ 744.872623][ T30] audit: type=1326 audit(1747156238.628:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 745.447761][ T30] audit: type=1326 audit(1747156238.628:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 745.586490][ T30] audit: type=1326 audit(1747156238.628:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 745.727808][ T30] audit: type=1326 audit(1747156238.628:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 745.751851][ T30] audit: type=1326 audit(1747156238.628:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 745.774518][ T30] audit: type=1326 audit(1747156238.628:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 745.893027][ T30] audit: type=1326 audit(1747156238.628:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 746.445610][ T30] audit: type=1326 audit(1747156238.628:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 746.516517][ T30] audit: type=1326 audit(1747156238.628:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 746.684892][ T30] audit: type=1326 audit(1747156238.628:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 746.867049][ T30] audit: type=1326 audit(1747156238.628:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 746.888888][ T30] audit: type=1326 audit(1747156238.628:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 747.033329][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 747.042461][T11611] netlink: 'syz.3.1176': attribute type 5 has an invalid length. [ 747.050415][T11611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1176'. [ 747.215217][ T30] audit: type=1326 audit(1747156238.628:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 747.236890][ T30] audit: type=1326 audit(1747156238.628:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 747.273793][ T30] audit: type=1326 audit(1747156238.628:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 747.698222][T11611] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 747.707025][T11611] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 747.715719][T11611] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 747.724361][T11611] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 747.733198][T11611] geneve2: entered promiscuous mode [ 747.738457][T11611] geneve2: entered allmulticast mode [ 747.761753][ T30] audit: type=1326 audit(1747156238.628:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 747.783229][ C0] vkms_vblank_simulate: vblank timer overrun [ 747.805701][ T30] audit: type=1326 audit(1747156238.628:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.0.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x7ffc0000 [ 749.000186][T11155] veth0_vlan: entered promiscuous mode [ 749.043761][T11155] veth1_vlan: entered promiscuous mode [ 750.298278][T11155] veth0_macvtap: entered promiscuous mode [ 750.317564][T11155] veth1_macvtap: entered promiscuous mode [ 750.561620][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.604091][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.623645][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.636838][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.684676][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.722393][T11658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1186'. [ 750.732743][T11658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1186'. [ 750.737729][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.790198][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.820784][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.861392][T11155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.885318][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1188'. [ 750.929780][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1188'. [ 750.949216][T11652] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1187'. [ 751.203974][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.311195][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.365425][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 752.517704][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.475225][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.627201][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.637745][T11155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 753.648412][T11155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 753.660181][T11155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 753.690905][T11675] lo speed is unknown, defaulting to 1000 [ 753.935023][T11683] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 753.958213][T11683] batman_adv: batadv0: Adding interface: ip6gretap1 [ 753.964898][T11683] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 753.984935][T11683] batman_adv: batadv0: Interface activated: ip6gretap1 [ 754.333087][T11155] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.342106][T11155] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.361001][T11155] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.400942][T11155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.918327][T11696] futex_wake_op: syz.4.1195 tries to shift op by 32; fix this program [ 758.031789][T11723] bridge0: port 3(batadv1) entered blocking state [ 758.038465][T11723] bridge0: port 3(batadv1) entered disabled state [ 758.045010][T11723] batadv1: entered allmulticast mode [ 758.051489][T11723] batadv1: entered promiscuous mode [ 758.397871][T11729] netlink: 'syz.2.1202': attribute type 4 has an invalid length. [ 758.405779][T11729] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1202'. [ 758.932045][ T1116] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 758.941884][ T1116] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 759.043176][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 759.054215][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 759.065147][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 759.074441][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 759.110727][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 759.177785][T11731] lo speed is unknown, defaulting to 1000 [ 761.289859][ T5825] Bluetooth: hci5: command tx timeout [ 763.349734][ T5825] Bluetooth: hci5: command tx timeout [ 763.374013][ T1084] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.474257][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'. [ 764.863541][T11731] chnl_net:caif_netlink_parms(): no params data found [ 765.456769][ T5825] Bluetooth: hci5: command tx timeout [ 765.528489][T11808] overlayfs: failed to clone upperpath [ 765.929007][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 765.929026][ T30] audit: type=1107 audit(1747156263.308:69): pid=11795 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='1' [ 766.264294][ T1084] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.305368][ T30] audit: type=1326 audit(1747156264.098:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11814 comm="syz.0.1220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f082b38e969 code=0x0 [ 766.952099][ T1084] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.223018][T11834] netlink: 'syz.4.1224': attribute type 4 has an invalid length. [ 767.230993][T11834] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1224'. [ 767.971139][ T5825] Bluetooth: hci5: command tx timeout [ 768.410615][ T1084] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.498777][T11849] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 768.515504][T11849] overlayfs: failed to resolve './file1/file0': -2 [ 769.479343][T11731] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.598620][T11857] netlink: 788 bytes leftover after parsing attributes in process `syz.0.1229'. [ 770.096937][T11859] befs: (nullb0): No write support. Marking filesystem read-only [ 770.107130][T11859] befs: (nullb0): invalid magic header [ 770.457772][T11731] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.465003][T11731] bridge_slave_0: entered allmulticast mode [ 770.479527][T11731] bridge_slave_0: entered promiscuous mode [ 770.744812][T11731] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.767340][T11731] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.781146][T11731] bridge_slave_1: entered allmulticast mode [ 770.789777][T11731] bridge_slave_1: entered promiscuous mode [ 770.920822][T11854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1228'. [ 771.151152][T11731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.736940][T11731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.925548][T11731] team0: Port device team_slave_0 added [ 772.035303][T11875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1234'. [ 772.148254][T11885] Invalid ELF header type: 0 != 1 [ 772.901788][T11731] team0: Port device team_slave_1 added [ 772.922122][T11875] bridge0: entered allmulticast mode [ 773.192398][ T1084] bridge_slave_1: left allmulticast mode [ 773.208682][ T1084] bridge_slave_1: left promiscuous mode [ 773.811614][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.125567][ T1084] bridge_slave_0: left allmulticast mode [ 774.125739][ T1084] bridge_slave_0: left promiscuous mode [ 774.145358][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.785779][T11891] tty tty28: ldisc open failed (-12), clearing slot 27 [ 776.818933][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.830512][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.841215][ T1084] bond0 (unregistering): Released all slaves [ 776.879212][T11731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.886897][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.927990][T11731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.940025][T11926] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 777.046009][T11731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.073601][T11731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.109879][T11731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.333694][T11936] syz.2.1244 (11936) used greatest stack depth: 18168 bytes left [ 778.274629][T11731] hsr_slave_0: entered promiscuous mode [ 778.345518][T11731] hsr_slave_1: entered promiscuous mode [ 778.401998][T11731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.410471][T11731] Cannot create hsr debugfs directory [ 781.493542][ T1084] hsr_slave_0: left promiscuous mode [ 781.526250][ T1084] hsr_slave_1: left promiscuous mode [ 782.220006][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.409047][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 782.437134][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.445720][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.619275][ T1084] veth1_macvtap: left promiscuous mode [ 783.627137][ T1084] veth0_macvtap: left promiscuous mode [ 783.751390][ T1084] veth1_vlan: left promiscuous mode [ 783.757441][ T1084] veth0_vlan: left promiscuous mode [ 783.977434][ T30] audit: type=1400 audit(1747156281.718:71): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=12009 comm="syz.4.1262" path="socket:[27733]" dev="sockfs" ino=27733 [ 786.081187][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 786.787286][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 787.333618][T12031] overlay: Unknown parameter '/' [ 788.033161][ T5985] lo speed is unknown, defaulting to 1000 [ 788.070434][T12033] bridge0: entered allmulticast mode [ 789.374722][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 789.400230][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 789.409772][T12047] ceph: No mds server is up or the cluster is laggy [ 790.502423][T12066] Invalid ELF header type: 0 != 1 [ 791.846045][T12080] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1277'. [ 793.341345][ T30] audit: type=1326 audit(1747156290.128:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 793.982737][ T30] audit: type=1326 audit(1747156290.128:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 794.136711][ T30] audit: type=1326 audit(1747156290.138:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 794.216076][ T30] audit: type=1326 audit(1747156290.138:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 794.275938][ T30] audit: type=1326 audit(1747156290.138:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 794.332675][T12098] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 794.343438][T12098] bridge0: port 3(netdevsim0) entered blocking state [ 794.350312][T12098] bridge0: port 3(netdevsim0) entered listening state [ 794.357388][T12098] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.364615][T12098] bridge0: port 2(bridge_slave_1) entered listening state [ 794.372089][T12098] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.379349][T12098] bridge0: port 1(bridge_slave_0) entered listening state [ 794.389535][ T30] audit: type=1326 audit(1747156290.138:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 794.436555][ T30] audit: type=1326 audit(1747156290.138:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 794.462403][T12098] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 795.115154][ T30] audit: type=1326 audit(1747156290.138:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 795.137330][ T30] audit: type=1326 audit(1747156290.148:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 795.214272][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1282'. [ 795.223969][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1282'. [ 795.366433][ T30] audit: type=1326 audit(1747156290.148:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12077 comm="syz.3.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 796.349097][T12119] : renamed from bond0 (while UP) [ 797.068442][T11731] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 797.216838][T11731] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 799.249736][T11731] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 799.480064][T11731] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 799.999324][T12152] netlink: 'syz.4.1290': attribute type 6 has an invalid length. [ 801.649344][T12167] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 801.835759][T11731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.951323][T11731] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.075318][T12182] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1296'. [ 802.086241][T12182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1296'. [ 802.088308][T12183] netlink: 'syz.3.1295': attribute type 7 has an invalid length. [ 802.814447][T12183] : entered promiscuous mode [ 802.822799][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.829920][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.239251][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.246389][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 804.137837][T11731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 804.148269][T11731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 804.438197][T12194] No control pipe specified [ 806.863685][T11731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.426650][T12252] capability: warning: `syz.3.1311' uses 32-bit capabilities (legacy support in use) [ 809.978702][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 809.987427][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 809.994625][ C0] bridge0: port 3(netdevsim0) entered learning state [ 813.645674][T11731] veth0_vlan: entered promiscuous mode [ 814.704893][T11731] veth1_vlan: entered promiscuous mode [ 815.698092][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 815.698110][ T30] audit: type=1326 audit(1747156313.498:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12280 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f740d98e969 code=0x7fc00000 [ 815.854004][ T30] audit: type=1326 audit(1747156313.648:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12280 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f740d985927 code=0x7fc00000 [ 815.875518][T11731] veth0_macvtap: entered promiscuous mode [ 815.881506][T11731] veth1_macvtap: entered promiscuous mode [ 815.911101][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 815.923984][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.977707][ T30] audit: type=1326 audit(1747156313.648:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12280 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f740d92ab39 code=0x7fc00000 [ 816.007696][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.036407][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.277693][ T30] audit: type=1326 audit(1747156313.648:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12280 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f740d92abff code=0x7fc00000 [ 816.299547][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.317713][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.336475][ T30] audit: type=1326 audit(1747156313.648:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12280 comm="syz.4.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f740d98e969 code=0x7fc00000 [ 816.358854][T11731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 816.404741][T11731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.439182][T11731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.413154][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 817.427048][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1325'. [ 817.749821][T12323] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 820.999631][T12342] overlayfs: failed to clone upperpath [ 821.462683][T11157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 821.473298][T11157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 821.491771][T11157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 821.511199][T11157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 821.528285][T11157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 821.550916][T12354] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1334'. [ 821.605831][T12354] Invalid ELF header magic: != ELF [ 821.702009][T12347] lo speed is unknown, defaulting to 1000 [ 822.259725][ T5985] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 822.443902][ T5985] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 822.483677][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.655352][ T5985] usb 5-1: config 0 descriptor?? [ 822.671965][ T5985] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 823.947751][ T5825] Bluetooth: hci1: command tx timeout [ 824.791408][ T5985] gp8psk: usb in 128 operation failed. [ 824.800787][T12394] overlayfs: failed to clone upperpath [ 825.327747][ C0] bridge0: port 3(netdevsim0) entered forwarding state [ 825.334645][ C0] bridge0: topology change detected, propagating [ 825.341426][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.348702][ C0] bridge0: topology change detected, propagating [ 825.355144][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.362361][ C0] bridge0: topology change detected, propagating [ 825.520665][ T5985] gp8psk: usb in 137 operation failed. [ 825.530684][ T5985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 825.554102][ T5985] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 825.649869][ T5985] usb 5-1: media controller created [ 825.705194][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 825.821730][ T5985] gp8psk_fe: Frontend attached [ 825.826810][ T5985] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 825.902177][ T5985] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 825.920448][T12347] chnl_net:caif_netlink_parms(): no params data found [ 825.973320][ T5825] Bluetooth: hci1: command tx timeout [ 826.195817][ T6073] bridge_slave_1: left allmulticast mode [ 826.220638][ T6073] bridge_slave_1: left promiscuous mode [ 826.642993][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.658677][ T6073] bridge_slave_0: left allmulticast mode [ 826.670378][ T6073] bridge_slave_0: left promiscuous mode [ 826.676914][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.742952][ T5985] gp8psk: usb in 138 operation failed. [ 826.770252][ T5985] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 827.903878][ T5985] gp8psk: found Genpix USB device pID = 203 (hex) [ 828.867817][ T30] audit: type=1326 audit(1747156325.918:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 828.878239][ T5825] Bluetooth: hci1: command tx timeout [ 829.875873][ T30] audit: type=1326 audit(1747156325.918:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 829.913902][ T5985] usb 5-1: USB disconnect, device number 6 [ 830.255368][ T30] audit: type=1326 audit(1747156325.918:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 830.281431][ T30] audit: type=1326 audit(1747156325.918:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 830.320838][ T30] audit: type=1326 audit(1747156325.918:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 830.398114][ T30] audit: type=1326 audit(1747156325.928:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 830.726281][ T30] audit: type=1326 audit(1747156325.928:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 831.069217][ T5825] Bluetooth: hci1: command tx timeout [ 831.107792][ T30] audit: type=1326 audit(1747156325.928:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 831.648160][ T30] audit: type=1326 audit(1747156325.928:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 831.669879][ T30] audit: type=1326 audit(1747156325.928:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12425 comm="syz.2.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdcaf8e969 code=0x7ffc0000 [ 832.191136][ T5967] libceph: connect (1)[c::]:6789 error -101 [ 832.206665][ T5967] libceph: mon0 (1)[c::]:6789 connect error [ 832.222375][T12449] ceph: No mds server is up or the cluster is laggy [ 832.231382][T12451] Falling back ldisc for ptm1. [ 832.318326][ T5985] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 834.603453][T12476] vivid-003: ================= START STATUS ================= [ 834.612045][T12476] vivid-003: Radio HW Seek Mode: Bounded [ 834.618093][T12476] vivid-003: Radio Programmable HW Seek: false [ 834.624291][T12476] vivid-003: RDS Rx I/O Mode: Block I/O [ 834.629945][T12476] vivid-003: Generate RBDS Instead of RDS: false [ 834.636310][T12476] vivid-003: RDS Reception: true [ 834.641347][T12476] vivid-003: RDS Program Type: 0 inactive [ 834.647113][T12476] vivid-003: RDS PS Name: inactive [ 834.652379][T12476] vivid-003: RDS Radio Text: inactive [ 834.657911][T12476] vivid-003: RDS Traffic Announcement: false inactive [ 834.664885][T12476] vivid-003: RDS Traffic Program: false inactive [ 834.671415][T12476] vivid-003: RDS Music: false inactive [ 834.677021][T12476] vivid-003: ================== END STATUS ================== [ 835.574646][ T6073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.914513][ T6073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.959020][ T6073] bond0 (unregistering): Released all slaves [ 836.608994][ T6073] hsr_slave_0: left promiscuous mode [ 836.622374][ T6073] hsr_slave_1: left promiscuous mode [ 836.632617][ T6073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.646072][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.853913][T12491] Invalid ELF header type: 0 != 1 [ 836.994239][ T6073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.054957][ T6073] veth1_macvtap: left promiscuous mode [ 837.062849][ T6073] veth0_macvtap: left promiscuous mode [ 837.069804][ T6073] veth1_vlan: left promiscuous mode [ 837.075718][ T6073] veth0_vlan: left promiscuous mode [ 839.015036][ T6073] team0 (unregistering): Port device team_slave_1 removed [ 839.171950][ T6073] team0 (unregistering): Port device team_slave_0 removed [ 841.640890][T12513] lo speed is unknown, defaulting to 1000 [ 841.646757][T12513] lo speed is unknown, defaulting to 1000 [ 841.654925][T12513] lo speed is unknown, defaulting to 1000 [ 841.668967][T12513] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 841.688957][T12513] lo speed is unknown, defaulting to 1000 [ 841.695757][T12513] lo speed is unknown, defaulting to 1000 [ 841.703848][T12513] lo speed is unknown, defaulting to 1000 [ 841.710853][T12513] lo speed is unknown, defaulting to 1000 [ 841.717910][T12513] lo speed is unknown, defaulting to 1000 [ 842.113142][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.122223][T12347] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.143785][T12533] syz.4.1372: attempt to access beyond end of device [ 842.143785][T12533] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 842.156606][T12533] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 842.686106][T12347] bridge_slave_0: entered allmulticast mode [ 842.729442][T12347] bridge_slave_0: entered promiscuous mode [ 842.830271][T12347] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.838527][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.845757][T12347] bridge_slave_1: entered allmulticast mode [ 842.864914][T12347] bridge_slave_1: entered promiscuous mode [ 845.250429][T12547] bridge1: entered promiscuous mode [ 845.372649][T12347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.392831][T12347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.475693][T12570] Invalid ELF header type: 0 != 1 [ 846.586300][T12571] use of bytesused == 0 is deprecated and will be removed in the future, [ 846.595146][T12571] use the actual size instead. [ 846.875452][T12347] team0: Port device team_slave_0 added [ 847.119569][T12347] team0: Port device team_slave_1 added [ 848.081847][T12584] tipc: Started in network mode [ 848.087007][T12584] tipc: Node identity 7, cluster identity 4711 [ 848.093294][T12584] tipc: Node number set to 7 [ 848.542947][T12347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.190779][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.587146][T12347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 849.630610][T12347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 849.638466][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 849.666004][T12347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.060943][T12600] Process accounting resumed [ 851.111944][T12347] hsr_slave_0: entered promiscuous mode [ 851.128341][T12347] hsr_slave_1: entered promiscuous mode [ 852.886307][T12631] CIFS mount error: No usable UNC path provided in device string! [ 852.886307][T12631] [ 853.413246][T12631] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 853.437436][T12633] Invalid ELF header type: 0 != 1 [ 855.787038][T12661] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 855.796204][T12661] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.478710][T12682] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 858.556831][T12682] delete_channel: no stack [ 859.265034][T12687] netlink: 'syz.3.1404': attribute type 15 has an invalid length. [ 859.293172][T12687] netlink: 723 bytes leftover after parsing attributes in process `syz.3.1404'. [ 859.501107][T12347] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 859.534621][T12347] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 859.579997][T12347] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 859.607978][T12347] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 861.054879][T12347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.120909][T12347] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.310020][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.317247][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.603823][T12711] Invalid ELF header type: 0 != 1 [ 862.317730][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.324933][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.833442][T12347] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 863.202228][T12347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.858886][T12347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.054389][T12796] netlink: 'syz.4.1422': attribute type 39 has an invalid length. [ 872.535304][T12347] veth0_vlan: entered promiscuous mode [ 872.585532][T12347] veth1_vlan: entered promiscuous mode [ 872.689249][T12347] veth0_macvtap: entered promiscuous mode [ 873.513269][T12347] veth1_macvtap: entered promiscuous mode [ 874.110367][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.153348][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.184238][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.235632][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.241938][T12834] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 874.273849][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.420800][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.431161][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 874.442184][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 874.469773][T12347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.741254][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.778936][T12834] xt_CT: No such helper "snmp_trap" [ 875.863962][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.877392][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.905682][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.965471][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.001701][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.055741][T12347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.386000][T12347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.351502][T12347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.207614][T12872] Invalid ELF header type: 0 != 1 [ 882.012282][T12879] overlayfs: failed to clone upperpath [ 882.062827][T12883] kAFS: Can only specify source 'none' with -o dyn [ 882.767650][T12896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1440'. [ 882.806288][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1440'. [ 883.266532][T11157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 883.475908][T11157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 883.485582][T11157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 883.495314][T11157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 883.503837][T11157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 884.170288][T12928] netlink: 'syz.0.1445': attribute type 9 has an invalid length. [ 885.153193][T12940] xt_TPROXY: Can be used only with -p tcp or -p udp [ 885.566561][ T5825] Bluetooth: hci5: command tx timeout [ 886.047875][T12939] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 886.057018][T12939] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 886.525056][T12952] set match dimension is over the limit! [ 887.092260][T12900] lo speed is unknown, defaulting to 1000 [ 887.684713][ T5825] Bluetooth: hci5: command tx timeout [ 888.101462][T12970] Invalid ELF header type: 0 != 1 [ 889.564048][T12900] lo speed is unknown, defaulting to 1000 [ 889.755657][ T5825] Bluetooth: hci5: command tx timeout [ 889.830984][T12985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1456'. [ 889.840165][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'. [ 891.599831][T13001] Invalid ELF header type: 0 != 1 [ 891.856755][ T5825] Bluetooth: hci5: command tx timeout [ 893.169104][T13015] set match dimension is over the limit! [ 895.302009][T13032] uprobe: syz.4.1464:13032 failed to unregister, leaking uprobe [ 895.312065][T13032] uprobe: syz.4.1464:13032 failed to unregister, leaking uprobe [ 895.394182][T12900] chnl_net:caif_netlink_parms(): no params data found [ 895.627192][T13046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1467'. [ 895.637984][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1467'. [ 895.720935][T13050] Invalid ELF header type: 0 != 1 [ 896.281868][ T6082] bridge_slave_1: left allmulticast mode [ 896.384767][ T6082] bridge_slave_1: left promiscuous mode [ 896.525881][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.893000][ T6082] bridge_slave_0: left allmulticast mode [ 896.911012][ T6082] bridge_slave_0: left promiscuous mode [ 896.928541][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.304492][T13070] Invalid ELF header type: 0 != 1 [ 901.553857][T13078] netlink: 'syz.4.1473': attribute type 16 has an invalid length. [ 901.562098][T13078] netlink: 'syz.4.1473': attribute type 17 has an invalid length. [ 903.038366][ T6082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.051142][ T6082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.062798][ T6082] bond0 (unregistering): Released all slaves [ 904.162340][T13107] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1479'. [ 904.189976][ T6082] hsr_slave_0: left promiscuous mode [ 904.424987][ T6082] hsr_slave_1: left promiscuous mode [ 904.431124][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.485056][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 905.466859][ T6082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 905.477946][ T6082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 905.764630][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 905.764648][ T30] audit: type=1800 audit(2000000065.733:152): pid=13118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1481" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=30910 res=0 errno=0 [ 907.400443][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1482'. [ 907.524340][ T6082] veth1_macvtap: left promiscuous mode [ 907.530096][ T6082] veth0_macvtap: left promiscuous mode [ 907.539102][ T6082] veth1_vlan: left promiscuous mode [ 907.544841][ T6082] veth0_vlan: left promiscuous mode [ 907.678058][T13134] syz.2.1483: attempt to access beyond end of device [ 907.678058][T13134] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 907.692340][T13134] FAT-fs (loop5): unable to read boot sector [ 907.753581][T13134] overlay: ./file0 is not a directory [ 908.418556][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1485'. [ 909.160806][ T6082] team0 (unregistering): Port device team_slave_1 removed [ 909.209653][ T6082] team0 (unregistering): Port device team_slave_0 removed [ 909.819417][T12900] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.827111][T12900] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.834757][T12900] bridge_slave_0: entered allmulticast mode [ 909.845314][T12900] bridge_slave_0: entered promiscuous mode [ 909.883213][T13131] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.892289][T13131] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.901046][T13131] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 909.913218][T13131] vxlan0: entered promiscuous mode [ 910.007286][T12900] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.030532][T12900] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.055585][T12900] bridge_slave_1: entered allmulticast mode [ 910.067937][T12900] bridge_slave_1: entered promiscuous mode [ 910.201716][T12900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.240110][T12900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 912.305890][T13169] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1490'. [ 912.315255][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1490'. [ 912.325275][T13160] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 914.006730][T12900] team0: Port device team_slave_0 added [ 914.098069][T12900] team0: Port device team_slave_1 added [ 915.408092][T12900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 915.663755][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.233713][T13217] overlayfs: failed to clone upperpath [ 916.473087][T12900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.669511][T12900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.775110][T12900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 916.848993][T12900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.198138][T13231] overlayfs: failed to resolve './file1/file0': -2 [ 919.183083][T13233] set match dimension is over the limit! [ 921.102691][T12900] hsr_slave_0: entered promiscuous mode [ 921.122196][T12900] hsr_slave_1: entered promiscuous mode [ 923.383083][T13276] Invalid ELF header type: 0 != 1 [ 925.552464][T13295] veth1_macvtap: left promiscuous mode [ 926.379663][T13313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1520'. [ 929.424177][T13339] Invalid ELF header type: 0 != 1 [ 930.378258][T13355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1528'. [ 930.628533][T13355] bridge_slave_1: left allmulticast mode [ 930.634549][T13355] bridge_slave_1: left promiscuous mode [ 930.640406][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.679277][T13355] bridge_slave_0: left allmulticast mode [ 930.685216][T13355] bridge_slave_0: left promiscuous mode [ 930.691810][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.050315][T13363] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 931.781396][T12900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 931.897374][T12900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 932.101570][T12900] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 932.174728][T12900] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 932.717925][T13381] overlay: Unknown parameter '/' [ 933.046044][T13377] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1534'. [ 933.347179][T12900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 933.459179][T12900] 8021q: adding VLAN 0 to HW filter on device team0 [ 933.513474][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.520687][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 933.595810][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.603078][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.893825][T13437] bridge1: entered promiscuous mode [ 939.714947][T13466] overlayfs: failed to clone lowerpath [ 941.198357][T13485] Invalid ELF header type: 0 != 1 [ 941.253388][T11157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 941.269291][T11157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 941.278456][T11157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 941.288632][T11157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 941.422275][T11157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 941.667400][T13499] netlink: 'syz.3.1561': attribute type 21 has an invalid length. [ 941.696680][T13499] netlink: 'syz.3.1561': attribute type 6 has an invalid length. [ 941.704637][T13499] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1561'. [ 942.626964][T13486] lo speed is unknown, defaulting to 1000 [ 942.648472][T13486] lo speed is unknown, defaulting to 1000 [ 943.562040][T11157] Bluetooth: hci1: command tx timeout [ 944.885383][T13486] chnl_net:caif_netlink_parms(): no params data found [ 945.652542][T11157] Bluetooth: hci1: command tx timeout [ 945.704596][T13537] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 945.717237][T13537] batman_adv: batadv0: Adding interface: ip6gretap1 [ 945.724388][T13537] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.750674][T13537] batman_adv: batadv0: Interface activated: ip6gretap1 [ 945.852587][ T1084] bridge_slave_1: left allmulticast mode [ 945.858856][ T1084] bridge_slave_1: left promiscuous mode [ 945.892170][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.972988][ T1084] bridge_slave_0: left allmulticast mode [ 945.979746][ T1084] bridge_slave_0: left promiscuous mode [ 946.006389][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.981964][T11157] Bluetooth: hci1: command tx timeout [ 950.308785][T11157] Bluetooth: hci1: command tx timeout [ 951.691041][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.706223][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.721171][ T1084] bond0 (unregistering): Released all slaves [ 951.786912][T13592] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 951.812615][T13592] batman_adv: batadv0: Adding interface: ip6gretap1 [ 951.819231][T13592] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.844867][T13592] batman_adv: batadv0: Interface activated: ip6gretap1 [ 953.310325][ T1084] hsr_slave_0: left promiscuous mode [ 953.348609][ T1084] hsr_slave_1: left promiscuous mode [ 953.373640][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.404015][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.944946][T13629] sctp: [Deprecated]: syz.4.1586 (pid 13629) Use of int in maxseg socket option. [ 953.944946][T13629] Use struct sctp_assoc_value instead [ 954.443211][T13623] sctp: failed to load transform for md5: -2 [ 955.840920][T13642] overlayfs: failed to resolve 'fowner>00000000000000000000': -2 [ 955.969366][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 956.037353][ T1084] team0 (unregistering): Port device team_slave_0 removed [ 957.156700][T13655] set match dimension is over the limit! [ 958.769658][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.779503][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.788546][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.797559][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.806530][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.815561][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.824671][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.833695][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.843080][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 958.852099][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 959.090313][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.143350][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.176969][T13486] bridge_slave_0: entered allmulticast mode [ 959.198235][T13486] bridge_slave_0: entered promiscuous mode [ 959.378521][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.425784][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.022130][T13486] bridge_slave_1: entered allmulticast mode [ 960.025312][T13668] overlayfs: failed to clone lowerpath [ 960.029970][T13486] bridge_slave_1: entered promiscuous mode [ 960.865675][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.920747][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.394339][T13699] bridge0: entered promiscuous mode [ 962.587022][T13486] team0: Port device team_slave_0 added [ 962.650504][T13486] team0: Port device team_slave_1 added [ 963.634700][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.681222][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.770982][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.824170][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.861339][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.904994][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.083070][T13486] hsr_slave_0: entered promiscuous mode [ 964.095565][T13486] hsr_slave_1: entered promiscuous mode [ 967.976027][T13751] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 967.988332][T13751] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 969.357726][ T30] audit: type=1326 audit(2000000128.817:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 970.609963][ T30] audit: type=1326 audit(2000000128.827:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 970.632700][ T30] audit: type=1326 audit(2000000128.827:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 970.712026][ T30] audit: type=1326 audit(2000000128.827:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 971.206131][ T30] audit: type=1326 audit(2000000128.827:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 971.455705][ T30] audit: type=1326 audit(2000000128.837:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 971.483135][ T30] audit: type=1326 audit(2000000128.837:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 971.533092][ T30] audit: type=1326 audit(2000000128.837:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 971.591374][ T30] audit: type=1326 audit(2000000128.837:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 971.750668][ T30] audit: type=1326 audit(2000000128.837:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13753 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ad98e969 code=0x7ffc0000 [ 972.630821][T13787] ceph: No mds server is up or the cluster is laggy [ 973.397705][ T5872] Process accounting resumed [ 976.167534][T13486] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 976.268966][T13486] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 976.391072][T13486] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 976.566492][T13837] __nla_validate_parse: 38 callbacks suppressed [ 976.566513][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1632'. [ 977.474506][T13486] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 977.598512][T13834] ALSA: mixer_oss: invalid OSS volume '`d#ètü&{W¯k¬ïsÓd:»ýEB|£åÃÓ' [ 978.154237][T13853] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 978.569556][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.654675][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.794764][ T3542] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.802075][ T3542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.042410][T13859] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 979.177101][T13854] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[13854] [ 979.228095][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.235328][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.613591][T13871] dns_resolver: Unsupported server list version (0) [ 979.689229][T13486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 980.870738][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 981.026058][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 981.048830][T13887] ceph: No mds server is up or the cluster is laggy [ 981.803286][T13894] xt_CT: You must specify a L4 protocol and not use inversions on it [ 984.046043][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.890668][T13941] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 990.527154][T13956] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 990.566637][T13956] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 990.676914][T13956] netlink: 'syz.0.1654': attribute type 8 has an invalid length. [ 990.735298][T13956] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.742803][T13956] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.469052][T13970] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 991.487121][T13970] overlayfs: failed to resolve './file1/file0': -2 [ 992.457382][T13486] veth0_vlan: entered promiscuous mode [ 992.493828][T13486] veth1_vlan: entered promiscuous mode [ 992.844797][T13486] veth0_macvtap: entered promiscuous mode [ 993.084107][T13486] veth1_macvtap: entered promiscuous mode [ 993.620774][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.664453][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.675381][ T31] INFO: task kworker/0:5:5875 blocked for more than 143 seconds. [ 993.701566][ T31] Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 [ 993.738823][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 993.743167][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 993.785261][ T31] task:kworker/0:5 state:D stack:23640 pid:5875 tgid:5875 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 993.825828][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.827112][ T31] Workqueue: usb_hub_wq hub_event [ 993.961546][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.964568][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.406057][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.557321][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.598359][ T31] [ 996.606351][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.607858][ T31] Call Trace: [ 996.637076][ T31] [ 996.646933][ T31] __schedule+0x168f/0x4c70 [ 996.665299][ T31] ? __lock_acquire+0xaac/0xd20 [ 996.684839][ T31] ? schedule+0x165/0x360 [ 996.703105][ T31] ? __pfx___schedule+0x10/0x10 [ 996.711637][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.720730][ T31] ? schedule+0x91/0x360 [ 996.729173][ T31] schedule+0x165/0x360 [ 996.748077][ T31] usb_kill_urb+0x1be/0x2d0 [ 996.753377][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.763133][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 996.785201][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 996.786237][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.808059][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 996.829887][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 996.850114][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.850682][ T31] ? __kmalloc_noprof+0x29b/0x4f0 [ 996.895813][ T31] usb_control_msg+0x232/0x3e0 [ 996.897007][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.917566][ T31] hub_port_init+0xbf9/0x2800 [ 996.939120][ T31] hub_event+0x2518/0x4a00 [ 996.944121][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.959993][ T31] ? __pfx_hub_event+0x10/0x10 [ 996.976227][T13486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.981117][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 997.006169][T13486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 997.028663][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 997.036654][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 997.052404][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 997.079725][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 997.092965][T13486] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.104834][ T31] process_scheduled_works+0xadb/0x17a0 [ 997.127207][T13486] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.130138][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 997.148518][T13486] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.173766][T13486] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 997.187619][ T31] worker_thread+0x8a0/0xda0 [ 997.206510][ T31] kthread+0x70e/0x8a0 [ 997.226166][ T31] ? __pfx_worker_thread+0x10/0x10 [ 997.248903][ T31] ? __pfx_kthread+0x10/0x10 [ 997.270672][ T31] ? __pfx_kthread+0x10/0x10 [ 997.292977][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 997.315998][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 997.339704][ T31] ? __pfx_kthread+0x10/0x10 [ 997.359148][ T31] ret_from_fork+0x4b/0x80 [ 997.378213][ T31] ? __pfx_kthread+0x10/0x10 [ 997.399646][ T31] ret_from_fork_asm+0x1a/0x30 [ 997.418574][ T31] [ 997.430497][ T31] [ 997.430497][ T31] Showing all locks held in the system: [ 997.461938][ T31] 3 locks held by kworker/u8:1/13: [ 997.497939][ T31] #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 997.540543][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 997.613037][ T31] #2: ffff8880b8825558 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 997.660718][ T31] 1 lock held by khungtaskd/31: [ 997.683321][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 997.723209][ T31] 3 locks held by kworker/1:2/2153: [ 997.728477][ T31] 2 locks held by getty/5584: [ 997.737088][ T31] #0: ffff88814d6820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 997.748918][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 997.763602][ T31] 2 locks held by syz-executor/5820: [ 997.769639][ T31] #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 997.779994][ T31] #1: ffff8880b8923b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 997.804694][ T31] 5 locks held by kworker/0:5/5875: [ 997.811900][ T31] #0: ffff888020a85148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 997.835056][ T31] #1: ffffc9000478fc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 997.847841][ T31] #2: ffff888146390198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 997.865463][ T31] #3: ffff888146393510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 997.890223][ T31] #4: ffff888145be1068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 997.916361][ T31] 3 locks held by kworker/u8:0/11903: [ 997.927619][ T31] #0: ffff88814cfd0948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 997.950310][ T31] #1: ffffc9000f097c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 997.968714][ T31] #2: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 997.988275][ T31] 3 locks held by syz-executor/13486: [ 997.996535][ T31] #0: ffffffff8f2e5008 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 998.010875][ T31] #1: ffff8880323d54e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_open+0x227/0x420 [ 998.023615][ T31] #2: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 998.037659][ T31] 2 locks held by dhcpcd/14007: [ 998.045638][ T31] #0: ffff888059218258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.066034][ T31] #1: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 998.085456][ T31] 1 lock held by dhcpcd/14008: [ 998.091461][ T31] #0: ffff88806505e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.108600][ T31] 1 lock held by dhcpcd/14009: [ 998.114409][ T31] #0: ffff88805921a258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.137605][ T31] 1 lock held by dhcpcd/14010: [ 998.143167][ T31] #0: ffff88805921c258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.157997][ T31] 1 lock held by dhcpcd/14011: [ 998.166309][ T31] #0: ffff88805921e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.183388][ T31] 1 lock held by dhcpcd/14012: [ 998.188257][ T31] #0: ffff88807a48e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.208192][ T31] 1 lock held by dhcpcd/14013: [ 998.215910][ T31] #0: ffff888067bb8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.231480][ T31] 1 lock held by dhcpcd/14014: [ 998.236335][ T31] #0: ffff888067bbc258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.251631][ T31] 1 lock held by dhcpcd/14015: [ 998.256496][ T31] #0: ffff88807ef40258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.274782][ T31] 1 lock held by dhcpcd/14016: [ 998.283555][ T31] #0: ffff88807ee6e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 998.302565][ T31] 3 locks held by cmp/14027: [ 998.307444][ T31] [ 998.341436][ T31] ============================================= [ 998.341436][ T31] [ 998.352330][ T31] NMI backtrace for cpu 1 [ 998.352349][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 998.352372][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 998.352384][ T31] Call Trace: [ 998.352392][ T31] [ 998.352399][ T31] dump_stack_lvl+0x189/0x250 [ 998.352427][ T31] ? __wake_up_klogd+0xd9/0x110 [ 998.352451][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.352476][ T31] ? __pfx__printk+0x10/0x10 [ 998.352517][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 998.352540][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 998.352556][ T31] ? _printk+0xcf/0x120 [ 998.352589][ T31] ? __pfx__printk+0x10/0x10 [ 998.352636][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 998.352657][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 998.352680][ T31] watchdog+0xfee/0x1030 [ 998.352709][ T31] ? watchdog+0x1de/0x1030 [ 998.352740][ T31] kthread+0x70e/0x8a0 [ 998.352771][ T31] ? __pfx_watchdog+0x10/0x10 [ 998.352792][ T31] ? __pfx_kthread+0x10/0x10 [ 998.352815][ T31] ? __pfx_kthread+0x10/0x10 [ 998.352835][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 998.352855][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.352878][ T31] ? __pfx_kthread+0x10/0x10 [ 998.352898][ T31] ret_from_fork+0x4b/0x80 [ 998.352915][ T31] ? __pfx_kthread+0x10/0x10 [ 998.352937][ T31] ret_from_fork_asm+0x1a/0x30 [ 998.352980][ T31] [ 998.353005][ T31] Sending NMI from CPU 1 to CPUs 0: [ 998.514697][ C0] NMI backtrace for cpu 0 [ 998.514715][ C0] CPU: 0 UID: 0 PID: 14015 Comm: dhcpcd Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 998.514735][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 998.514745][ C0] RIP: 0010:kasan_byte_accessible+0x0/0x30 [ 998.514766][ C0] Code: d6 f1 ff ff 34 01 e9 1c ff ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <66> 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df 0f b6 04 07 [ 998.514780][ C0] RSP: 0018:ffffc900043ef530 EFLAGS: 00000202 [ 998.514797][ C0] RAX: 0000000000000001 RBX: ffffffff81ceb517 RCX: e16bcc9489f93500 [ 998.514810][ C0] RDX: 0000000000000000 RSI: ffffffff81ceb517 RDI: ffffffff8df3dce0 [ 998.514823][ C0] RBP: ffffffff81ceb4f6 R08: 0000000000000000 R09: 0000000000000000 [ 998.514834][ C0] R10: 0000000000000000 R11: ffffffff81ab5c1d R12: 0000000000000002 [ 998.514846][ C0] R13: ffffffff8df3dce0 R14: ffffffff8df3dce0 R15: 0000000000000000 [ 998.514858][ C0] FS: 0000000000000000(0000) GS:ffff8881260fb000(0000) knlGS:0000000000000000 [ 998.514872][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 998.514885][ C0] CR2: 00005651ee831660 CR3: 000000007ff84000 CR4: 00000000003526f0 [ 998.514900][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 998.514910][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 998.514921][ C0] Call Trace: [ 998.514927][ C0] [ 998.514934][ C0] __kasan_check_byte+0x12/0x40 [ 998.514961][ C0] lock_acquire+0x8d/0x360 [ 998.514991][ C0] is_bpf_text_address+0x47/0x2b0 [ 998.515020][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 998.515043][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 998.515067][ C0] kernel_text_address+0xa5/0xe0 [ 998.515091][ C0] __kernel_text_address+0xd/0x40 [ 998.515113][ C0] unwind_get_return_address+0x4d/0x90 [ 998.515133][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 998.515152][ C0] arch_stack_walk+0xfc/0x150 [ 998.515179][ C0] stack_trace_save+0x9c/0xe0 [ 998.515197][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 998.515214][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 998.515237][ C0] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 998.515262][ C0] ? kmem_cache_free+0x169/0x3f0 [ 998.515285][ C0] ? exit_mmap+0x593/0xba0 [ 998.515300][ C0] ? __mmput+0x118/0x410 [ 998.515323][ C0] ? exit_mm+0x1da/0x2c0 [ 998.515341][ C0] ? do_exit+0x859/0x2550 [ 998.515359][ C0] ? do_group_exit+0x21c/0x2d0 [ 998.515379][ C0] kasan_save_stack+0x3e/0x60 [ 998.515401][ C0] ? kasan_save_stack+0x3e/0x60 [ 998.515422][ C0] ? kasan_record_aux_stack+0xbc/0xd0 [ 998.515440][ C0] ? kmem_cache_free+0x2ee/0x3f0 [ 998.515464][ C0] ? exit_mmap+0x593/0xba0 [ 998.515479][ C0] ? __mmput+0x118/0x410 [ 998.515500][ C0] ? exit_mm+0x1da/0x2c0 [ 998.515518][ C0] ? do_exit+0x859/0x2550 [ 998.515536][ C0] ? do_group_exit+0x21c/0x2d0 [ 998.515554][ C0] ? __x64_sys_exit_group+0x3f/0x40 [ 998.515578][ C0] ? x64_sys_call+0x21ba/0x21c0 [ 998.515603][ C0] ? do_syscall_64+0xf6/0x210 [ 998.515623][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.515663][ C0] ? __phys_addr+0xba/0x170 [ 998.515683][ C0] ? exit_mmap+0x593/0xba0 [ 998.515698][ C0] kasan_record_aux_stack+0xbc/0xd0 [ 998.515716][ C0] kmem_cache_free+0x2ee/0x3f0 [ 998.515745][ C0] exit_mmap+0x593/0xba0 [ 998.515762][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 998.515777][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 998.515807][ C0] ? __pfx_exit_aio+0x10/0x10 [ 998.515836][ C0] ? uprobe_clear_state+0x274/0x290 [ 998.515853][ C0] ? mm_update_next_owner+0xa7/0x870 [ 998.515875][ C0] __mmput+0x118/0x410 [ 998.515900][ C0] exit_mm+0x1da/0x2c0 [ 998.515921][ C0] ? __pfx_exit_mm+0x10/0x10 [ 998.515939][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 998.515962][ C0] ? taskstats_exit+0x43c/0xa30 [ 998.515983][ C0] ? tty_audit_exit+0x153/0x200 [ 998.516010][ C0] do_exit+0x859/0x2550 [ 998.516037][ C0] ? __pfx_do_exit+0x10/0x10 [ 998.516062][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 998.516081][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.516103][ C0] do_group_exit+0x21c/0x2d0 [ 998.516126][ C0] __x64_sys_exit_group+0x3f/0x40 [ 998.516146][ C0] x64_sys_call+0x21ba/0x21c0 [ 998.516171][ C0] do_syscall_64+0xf6/0x210 [ 998.516193][ C0] ? clear_bhb_loop+0x60/0xb0 [ 998.516213][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.516230][ C0] RIP: 0033:0x7fdc564826c5 [ 998.516245][ C0] Code: Unable to access opcode bytes at 0x7fdc5648269b. [ 998.516254][ C0] RSP: 002b:00007ffe561cfe48 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 998.516273][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdc564826c5 [ 998.516285][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 998.516298][ C0] RBP: 00007ffe561d0458 R08: 00005651fba902c0 R09: 0000000000000002 [ 998.516310][ C0] R10: 00000000000000e0 R11: 0000000000000206 R12: 00007ffe561cfe90 [ 998.516322][ C0] R13: 00005651fba91950 R14: 00007ffe561d00d0 R15: 00007ffe561cfe80 [ 998.516344][ C0] [ 999.017002][T13486] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 999.059834][T13486] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 999.076417][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.085574][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.095294][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 999.102216][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00047-ge9565e23cd89 #0 PREEMPT(full) [ 999.114198][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 999.124272][ T31] Call Trace: [ 999.127558][ T31] [ 999.130491][ T31] dump_stack_lvl+0x99/0x250 [ 999.135104][ T31] ? __asan_memcpy+0x40/0x70 [ 999.139793][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 999.145011][ T31] ? __pfx__printk+0x10/0x10 [ 999.149633][ T31] panic+0x2db/0x790 [ 999.153549][ T31] ? __pfx_panic+0x10/0x10 [ 999.157973][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 999.162734][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 999.168543][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 999.174004][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 999.180164][ T31] watchdog+0x102d/0x1030 [ 999.184498][ T31] ? watchdog+0x1de/0x1030 [ 999.189095][ T31] kthread+0x70e/0x8a0 [ 999.193170][ T31] ? __pfx_watchdog+0x10/0x10 [ 999.197844][ T31] ? __pfx_kthread+0x10/0x10 [ 999.202464][ T31] ? __pfx_kthread+0x10/0x10 [ 999.207070][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 999.212275][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 999.217659][ T31] ? __pfx_kthread+0x10/0x10 [ 999.222789][ T31] ret_from_fork+0x4b/0x80 [ 999.227236][ T31] ? __pfx_kthread+0x10/0x10 [ 999.231835][ T31] ret_from_fork_asm+0x1a/0x30 [ 999.236706][ T31] [ 999.240018][ T31] Kernel Offset: disabled [ 999.245580][ T31] Rebooting in 86400 seconds..