last executing test programs: 26.909269052s ago: executing program 1 (id=277): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) listen(r1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}, {0x0}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) bind(r3, &(0x7f0000000080)=@hci={0x1f, 0x3, 0x4}, 0x80) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="7daa0000000000007110110e00"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0xc, r7}) 23.557851306s ago: executing program 1 (id=283): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x1ff, &(0x7f00000005c0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r4, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000019140)=ANY=[@ANYRES16=0x0, @ANYRES64=r4, @ANYBLOB="04cd55dc388765861f333f9d8dcb52bf6a267b61a1928e21f6f421"], 0x9) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000190c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x78}}, 0x0) execve(0x0, 0x0, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$packet(0x11, 0x3, 0x300) clock_gettime(0x7, &(0x7f0000019080)={0x0, 0x0}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={r7, r8/1000+60000}) 21.731405824s ago: executing program 2 (id=287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4) close(r4) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$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") ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) socket$inet_tcp(0x2, 0x1, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x38, r8, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000894}, 0x24008800) 18.743081785s ago: executing program 2 (id=290): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r6, 0xffffffffffffffff, {0x2, 0x1, 0x1}, 0x2}, 0x18, &(0x7f0000000180)={0x0}}, 0x887e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r9, 0x29, 0x1a, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x10080, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0], 0x1, 0x158, &(0x7f0000000200)="$eJzszz9rGnEYwPHvef4praJQC7ZDK3TooVjPE7uVoqXSg9qDFpcOpaBXWtAqCuXGttCtQ1/ADUmETOKQ5AUYkyWJQjCv4yBDIGPC+TOEhEyZf59F7/s8PNy9eTnTSICK8LrT7vbsft9upj9YterHjS3RI8Cdxb92t+cvN0Ufl+Gb/xsE77fIOzH4+r1lP290Wv6zVwYNqNzzewgdsXvXb0mxW1g27SlMHohm3NCKy/YoCJW4aP69s1V4pkCAy3sngJPeFC9q5jLrn1X+mtkn9xVw3OxouP9+umfmMo/tf0b14SCaUqnbu2uLz3Tco7yaO8yPhvPZtPbOqlmzomG8KOoFXS/NrYOpWfr1n+Db6E/4dO1eOAzU4Y8CrgLDxdwbKzFgsnJqteORJHD8IwGK43rbFxO4Oml8SYUGr5KJAKqGgiRJkiRJkiRJkiTd0nkAAAD//4Y0Ysk=") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0) 14.992349191s ago: executing program 1 (id=292): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x507, 0x70bd2d, 0x25dfdbfc, {0x8, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x9, 0x15, 0x0, 0x0, @str='#[]-\x00'}]}]}, 0x30}}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r4}, 0x18) socket(0x10, 0x803, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0x0, 0x0, 0x8000, 0x2000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) renameat2(0xffffffffffffffff, &(0x7f0000000c00)='./file1\x00', 0xffffffffffffffff, 0x0, 0x2) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) inotify_init() inotify_add_watch(0xffffffffffffffff, 0x0, 0xb7000041) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 14.92283276s ago: executing program 0 (id=294): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = fsopen(&(0x7f0000000240)='tracefs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) listen(r1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd00000010000100050808004149004006040800", 0x58}, {0x0}], 0x2) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) bind(r3, &(0x7f0000000080)=@hci={0x1f, 0x3, 0x4}, 0x80) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="7daa0000000000007110110e00"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r6, 0x3b88, &(0x7f0000000200)={0xc, r7}) 14.817277899s ago: executing program 3 (id=295): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0xf8}}, 0x0) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000080)={0x2, 0xfa, 0xff92, 0x200a, 0x34, "000401600c00"}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 12.74846099s ago: executing program 2 (id=296): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) shutdown(r0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) 12.242757292s ago: executing program 1 (id=297): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x2, 0x5db1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r4) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="57eb2bbd7000fbdbdf254e"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000340)={0x0, 0x40, 0x6, &(0x7f0000000300)={0x1, "006295a86a0144063aa86b7a1631041bedc33b9b70c5fd45649869328e34b5e49c"}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 12.112261434s ago: executing program 0 (id=299): quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000901, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKDISCARDZEROES(r2, 0x127c, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x86) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003e000701feffffff00000000017c0000040042800c00018006000600800a000008000280040012"], 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) syz_mount_image$xfs(&(0x7f0000000340), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000300)={[{@swalloc}, {@dax}, {@grpid}]}, 0x0, 0x9732, &(0x7f0000013240)="$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") 11.971885808s ago: executing program 3 (id=300): syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) recvfrom(r4, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r4, &(0x7f0000005c40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)=',', 0x1}], 0x1}}], 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$inet(r9, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) 9.480195142s ago: executing program 2 (id=301): fanotify_init(0x0, 0x101000) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='sched\x00') lseek(r0, 0x10001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0xe20, 0x0, @remote, 0x1ff}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r5, 0x0, 0x20008000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, 0x0, 0x20008084) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x70) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x8000, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000200), 0x402, 0x2) r8 = dup2(r7, r7) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x5, 0x1, 0x0, "adbdeec74e8e4aea6adda300"}) 9.403996747s ago: executing program 3 (id=302): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0xf8}}, 0x0) ioctl$TCSETA(r8, 0x5406, &(0x7f0000000080)={0x2, 0xfa, 0xff92, 0x200a, 0x34, "000401600c00"}) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 8.575249953s ago: executing program 4 (id=303): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 8.430313393s ago: executing program 4 (id=304): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f0000000ec0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x4, 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x8}, 0x18) preadv(r3, 0x0, 0x0, 0x4000, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) shutdown(r6, 0x1) write$FUSE_STATFS(r5, &(0x7f0000000300)={0x60, 0x0, 0x0, {{0xfff, 0xffffffff, 0x40, 0x100000000, 0xbdd, 0x8001, 0x1, 0xd93}}}, 0x60) 7.343715551s ago: executing program 1 (id=305): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x103, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x4000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600016, 0x4) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000c0000000c0000000070000000400000004000004050000000600000000000000020000000400000003000000070000000200000005000000090000000000000001000000800000000a00000001000085020000008c000000050000000104000010000000060000930400000009000000a6760000050000000100000000100000060800000d0000000900000000000000070000006d00"], 0x0, 0xdf, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{0x1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000e00)=r2}, 0x20) ioctl$FITRIM(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000180)={0x0, 0x5, 0x4}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000ec0), 0x840, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000900000000000000040000001836000005000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018000000040008000000000010000000d9000c00f0ffffff9500000000000000fcdb4507d2daf963106fda221c2dbb4bd353b362b87ce61527d33844144ded75d50688c2b033a68e800248d1e0e2d63f0f2ecb77a223126c967cc1a8607c2827df17496e9bd39bad01822195cb29"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000640)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x3, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[r7, 0xffffffffffffffff, r8, r9], 0x0, 0x10, 0xe9}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x300, 0x448, 0x0, 0x0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 7.339817738s ago: executing program 2 (id=306): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r2 = socket(0x15, 0x5, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r5, 0x40184152, 0x0) recvfrom$ax25(r2, 0x0, 0x0, 0x105, &(0x7f0000001c00)={{0x3, @default}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @broadcast}, 0x10) r6 = socket(0x2b, 0x1, 0x1) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) sendmmsg(r1, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)='&', 0x1}], 0x1}}], 0x1, 0x2c000011) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.268040115s ago: executing program 4 (id=307): r0 = fanotify_init(0x0, 0x101000) syz_open_procfs(0x0, &(0x7f0000000680)='sched\x00') lseek(r0, 0x10001, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0xe20, 0x200, @remote, 0x1ff}, 0x80, 0x0}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r7, &(0x7f0000004380)=[{&(0x7f00000007c0)='e', 0x1}], 0x1) sendmsg$kcm(r5, 0x0, 0x20008000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, 0x0, 0x20008084) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0x2, 0x0, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x70) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', 0x0, 0x8000, 0x0) 5.324016637s ago: executing program 0 (id=308): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 4.528737633s ago: executing program 4 (id=309): socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x2, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x48, &(0x7f0000000080)={0x84, 0x4, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x8, 0x0, [0x6, 0x5, 0x9]}}]}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c000280"], 0x110}}, 0x40040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000), 0x4) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a80200003800500040001000000140005"], 0x40}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d616373656330000000000000000000080002400000000008000140000000001400000011"], 0xa0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.28969323s ago: executing program 3 (id=310): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x0, 0x4, 0x800001b0}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, 0x0, 0x1) syz_io_uring_submit(r3, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) lchown(&(0x7f0000000180)='./file0\x00', 0x0, r5) r6 = socket$inet(0x2, 0x6, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local, @remote}, 0xc) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x28) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0x34}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f0000000000)) 3.288620119s ago: executing program 0 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f005, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00e5288294ec3e84f85224c669"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000002c0)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000400)=0x10b) setuid(r7) 2.88828148s ago: executing program 4 (id=312): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)}], 0x1) shutdown(r0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.845677731s ago: executing program 0 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, 0x0}, 0xd57e}], 0x1, 0x60010020, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x7, @empty, 0x1}}, 0x3, 0x7, 0xb, 0x7, 0x7}, &(0x7f0000000000)=0x98) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000380)={r5, 0xe13}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000780)={r7, @in6={{0xa, 0x4e21, 0x8d, @dev={0xfe, 0x80, '\x00', 0x16}, 0x1000006}}}, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x7a, 0x46, &(0x7f00000000c0)="f0aead569118461ac19b35742a6b48b45efdbbfaa48b991e399dc32068fcdacc59fcd3207a7b163ea66b68abefc7ece1e66286658988c7925c4263aa0fe1f34f94fa5dbc422565664ea94d476d9392f5ee28e2a8fb1d53fa865eb5d528b65de796024bd64a7f7cbb8ed49c832f9f2d0ef9344ff560ff6251ed89", &(0x7f0000000380)=""/70, 0x34, 0x0, 0x0, 0xc00, 0x0, &(0x7f0000002040)="71cdb160f5df793d4090c3931e7d574bb6981e5b6892d4d7e428f8350f5c4f1b033e63f21f0da5fac6ccce120a276f815c663804ef6731f755b521f1646ff1476c7450b5cb457d126db1fcaa2f11f983c76d025df896840b6a113722902aa31ae9967582c1edf8ae25d1f44395b2a7a9c33f7645afe47bbd06bde9721edf3fc30a50815591d761a247db6123b4e974ba5f19b5e041f0d41c89f5e20d6adc8f1e558124ced25d1e050466d5492b3683d52ca56904cad65f2a993f79d3e395d72e4a806e6cc972505b08508ce394ec87daf5502fb5d737f746ed92a087d45cecd57b5e2cb9a5fae6d66f94f784effb24579cdad2f81a26659de21485f269d69c6868036c696a7065c7b205e05d882196cca23c682ead37ac0d90c1dc9156e53a1a3a85049b1a62d35847565bb0e0903b5b960e2542717747f9c19cfe184331fb395ccfb727429ef184a0a20dcfb67a145233616ca25074362523a416fa11f908837ad888c6251cafd695f387e7c17229c4cc1d6ed4e72bb4739ed47f4bd4adf8c26a5e75eb6f1a2d301b0378e417a9785dfda713a2bd8eb12efc44ae819d30ffb260ca8160d009dcb603eb7c4797f2a4227b97e4ceddb4506d99ffc3928b509be923d6f3b1715d695519c12121ce01e9d2b4a93643947fd037f10b9c632e14684368c9edb3e57665063f22e295e8d3be3dc305fce9ffce24b942109211394eeb503fbb3a2e5a1d8786db960730b9f42d9e3bc5c86997d951d038a7234530968aece958b4b0a63e8d73a7c3abdfbe1cecbc1f70e1e02f499a749b343e8180827eb21156d16be4b623b2af46945f875598c815b159b84280ed6b6c049536c29817851fe4c26182cab276b6e73835776845be1c9934f159f9f493ff8e289744118e2c0330108ee28c257b3f6de68a73442e5528a3636453a11282e63cf5dd5308f1e5d14d5ddfe83ba01fdff8eede9396b4c72062277af6541447c83b0e0d713b0c8eb9f11aa6bcd662753f8e42594432f95e299a1ba296ec1a6f12023440000dc4f32236fec81af6221713522e504ca2cec75c1eaa2fa3ba93eefb222f4d7278f213bfe7d3cf461ed3281f1859bd47bd2318f6a9bf0504ba4720c65469ebc59022771fa93291dbe7345a21c48bb732b7707f3d180e8be79e857b06474b803babf1671b4b2987db161f090893b92d7da5da1a8ce44feb924a5305c73539fe3523be01cc811ac329a748a0704d611d585965b9c1881370982ed8433792788e1bb183804320344e542c523be95a3e09287f6c243b287282062986e7173d8629bb6e7e8b24dfcaa5034425b225f30cab58675a25473ef0ae531e60c4c3f6f3ffd89b1a2fa0a9294d96a62aa93a4f22cf7f9affd9ab28c502d17149004abfd917063df464bd9e868bbcc31d36738be74be9786bc19b36d9bc56cb241e5bc2d3cc814c552f92de7f7a387f7096da7869c73f179a6eaba4b6b183968c6d27e2aae50ee3a747efe95a30626e1061e1e77537ecae63d72056ecc611ab1f2565bd28b9cc9afbd9492accf3024ca4c59de9dd3454fae9b46d17342955ffcf62199ba4f37b69f519d6c712aa0819d12e9ccf66f2f262c2f9c794ebb29d7b788048939391b4e2454f127638b9af26a28006e37237aa076ea2f025016497efa1ee7027dcbf8ca6327d7b0c93573829dc362dab9c0e7f5436933c7e980d26f1af91b6ba2acf446fed7a0909a07379069416abfb2b6a681d5937c9d49a82478b39293763e666e10dc70209bcb6a88ff7ec896e30494d5b35921c082003d92cce46037368693b54db5e3c0ff915c1f8f6ea04174aa0676335137592ba5876ce4cc638d1e886db024ca5535fc54a7388e50ccbfb693bef180742d0e10a8cf01d7dde236316287645b1a2860e1f1e06bd33c33277940e755c9b6258f8f3596fad953ba0e7cd3650ac470da89c40e67b472928ee7b7359ecb09f82ebc296cc17645039978205ba2c8315d9e2a3f926c79ad2d59945d34bc5492462826820021f5834a1a9c85263ade29c6f89ed1aacdc7bb7f8aa812955596567c1bf62caf826a18c2fa36b66aad2313d5603145742c2b46e9120df18d78228a929ae021d7a39a15149cca92489461ceb9d9d57fe22efae99c62384766d0ee64d31032a7c3ebdd115de03c7f45a05bbd9c1b7fcd2c5061e52816bf67f14c1a2af00a57b00a869df58baaefa0a4a78037e65b31fbb07ef1cf9f50188f3b805760125517c25c81ce4d2e6568ad581422c0c6cff6e689548b43ab451ae4b6111efb0733ebce7db74d2e2521ff44b608fc1b2caf436776e92ef1e2c15185194766846b5b94d53f26a11d3964fd1255867d057e671d51dc72f8675b21b7ff83da7dbe6edf9388fc03873b9f83a566d8d176044feabad3414046cfcf93f93a686b7a8cc51dca1214301dc4a1a1245261dd1c35a8197867574013f72bacb73d2589d34f4361e970009df3d2defd9b472aa8c656ef93b253ad7295f44d24faf1b5b344e8a8d8ec25962bade5088364b6036fab419cbad10bed377e6ae4c0caf6402d95af26cfe3595e0ebf7cee43726214e58308f290aaf1b73216f746f65a92675b2965db52e87ba3e4e7a56232d656f5a99133e042f0d33cd5713d15b5587d422dc78be2974207141c217fa3e27ba1786b6ed4ded8238d2a8d46abce66a6a95b2c4c5d5285dae8fee3ddeb657fdfe9e2d97c20d9a147f97c77a4f1e9f92b90d14706f1228c87c610de4ac64981631a76f83587d6dfb1856967e6b37ec6fce65e3eab3c39cf69f07a4c19aa79ce00cc9f632feb674ee1d879d8b2a043995869f13cd704546442d528cd95278093dd02dfedcb20ed6d918bec7a3b113c635adff37f3b0c7f1615b275a2f5d01ee9aa212c93ed1bd147aa86e36dd72d7fa0a60a0ba9b6176d82d7708e474031652b7735a363416b1f581557858955a89eec350fea377025a3e2b2729551573b840198a336d929d34fa0d2caaa9ece84179a7a4d27e41e745412fab4cf09f6df2d52349e1d9deb639762647e6785f14996635a7ced92965edf26982e03c872d256ae175b40eb5432a894718b67f0a37d4b8dff1b6a4a399e75f163a47b3ac4c36752a673a4f407ddb12973012aac21f60b6476193b95e34ccbc2ae2f4ca6860be56e1bb2ff4a49c7db7d36e0e9993e0c6bdb532a13f5e78b46fc24210f2af5ec1540abbde06e32556b71b61f482124e049488360ed5d9c39f080e69d9f63a5daa4d1da23b179838af729f966f2cc62b5741814028ca720a239ab59cec7012288cea3f307d717df6e20d5ea2ec0a24e6bee1c589ccf76b294dcf8d825f5795c24a62a235fa8a08e5fb956366fe52b45a4608f035e568bb1c2bc2bc668f64873c7178c408dacc325ab2f251ed7ec3d64db9fe85874cbb34d12237acbc27d2702ef8d18d56f6270ab98ef8a185f602abfc9d8b1407ea66a413f85911015605f9615a011d4f4b50b7e29d176c49079ec77da88bfcfe8a17c8ffa750320971d4c2bd5e88705fe749a6ac214ef4fd8ac934254729c0766ef4ba79c5da66635c4b784a37c4bb545f38026c13c9ef59098a42cdfe530e17cf4f76f54e1e337d6fd92e77e71ac52fa6912e56309b2164005762714a191c828525ca5bd5a512a73a31c76ec8384e4b375ac9287f11b73d39779b17612170df434be2c33c263bb12fc55c9df0fcb2f388a8aa7aff27e84b490309a9887f10a26dee3bd0d75df18bc02eb0b648e0aa03ff24397931a66a2b9d6cd65f377bd865c2762ea833e0695ad2f3c6ed9f7171dfbe81d2e5c6a48d2414bc2cf91cbb218bf96d2964f7ba20cbda0b75643cb61547757c04d80d0685bbaa43ed3bda02a6f0cd8d37fc23ccc2b83aa70cb953ccd5ded869cd0276ce971981d1e85b24932f3f3810ae949f8bd1d53912f65a90289e75852437e5030cf31de267824c0217b571f803d1e9cb2a03360db5d7784228bb496710cc5108e54e452731f98f2d2e7b59e805c5fa135a7d162f68b821c82bd54b772ac24813a9142040ce128d2b7d6aef8a96d37e974153c72fe8d65c6c6cdd4ee52671387a58882f33421461317832c0c8616b4a820e91c1428461b3f6a6214bba0526ea4376f361b7875907f8ca21d3cd712f5c13e642569baf95634976ab56d7406c10b692825565f6d985ce65fb3dd72aaa20b55426ed7baa7f765cbff11b16025325fa5b201e1e8f65bc6d2cecfab030992f9bca6c142032805fb39f0a80bc00e8eaee75ba417c11f4c5b8d854219a0c3af03a228abfebf1ffe12cb1e9266642c93c8c4110c7d7e40e93e5a43088dc2a37303e140e4a22dcc8dd4e206601c2b0e56f013873", 0x5, 0x0, 0xc0}, 0x50) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r3, 0x6, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb4aa468739b8508060001080006040001aaaaaaaaaaaa0a01"], 0x0) 1.719003674s ago: executing program 3 (id=314): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 1.525042963s ago: executing program 2 (id=315): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@i_version}, {@data_err_abort}, {@mblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@inlinecrypt}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x1e, 0x2, 0x5db1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001a00), r4) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="57eb2bbd7000fbdbdf254e"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0x48044) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000340)={0x0, 0x40, 0x6, &(0x7f0000000300)={0x1, "006295a86a0144063aa86b7a1631041bedc33b9b70c5fd45649869328e34b5e49c"}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x9d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 422.969751ms ago: executing program 4 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) semop(0x0, &(0x7f00000002c0), 0x0) semop(0x0, &(0x7f0000000200), 0x53) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x24040884) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x20000010) 264.212289ms ago: executing program 0 (id=317): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r4, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) ioctl$SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404) r5 = syz_open_dev$sg(0x0, 0x0, 0x8002) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x1a, 0x0, 0x0) r7 = fcntl$dupfd(r5, 0x0, r5) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = syz_io_uring_setup(0x4fae, 0x0, &(0x7f0000000500), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2287, &(0x7f0000000200)={0x0, 0x6e79, 0x400, 0x1, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000001540)) syz_io_uring_submit(r11, r10, 0x0) io_uring_enter(r9, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(r8, 0x540a, 0x3) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f00000018c0)) r12 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r12, 0x40045612, &(0x7f0000000080)=0x2) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 226.318164ms ago: executing program 3 (id=318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x2, @local, 0x7}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_mcast\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2, 0x0, 0xfffffffffffffffc}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xa20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$kvm(0x0, 0x0, 0x2382, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x50424752, 0x0, 0xd, [{}, {}, {}, {0xf, 0xd}, {}, {0x0, 0xfffffffe}, {0x7}], 0x0, 0x0, 0x0, 0x0, 0x6}}) syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, r1, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@fallback=r7, r1, 0x29, 0x0, 0x0, @void, @value=r2}, 0x20) 0s ago: executing program 1 (id=319): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x60f6000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6d2, &(0x7f00000004c0)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000001840)='.\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000300)='[\v\xdbX\xae\x04\x00\x00\x00\x00\x00\x00\x00d\xc8\x85HX\xa9%\f\x1a\x96\xaf\xfa\xe3\n\x19e\xe0\x00\x00X\xedH1iS\x80U_\x9a;GE\xf6\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+;p\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x95\xd5\x8f\xfc\xa2\x1fs~,\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\x00'/147, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x400, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r3 = semget(0x3, 0x4, 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f00000003c0)={'U+', 0xfffffffffffeffff}, 0x16, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x286, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x40008}]}, 0x40}}, 0x0) execveat(r2, 0x0, 0x0, 0x0, 0x1000) getdents(r1, 0xfffffffffffffffd, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.200' (ED25519) to the list of known hosts. [ 80.948742][ T5818] cgroup: Unknown subsys name 'net' [ 81.141420][ T5818] cgroup: Unknown subsys name 'cpuset' [ 81.151344][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.798425][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.486531][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.512053][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.520380][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.529236][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.537538][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.545667][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.554410][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.562734][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.570975][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.588654][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.606968][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.611794][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.622494][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.622761][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.639240][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.643724][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.646563][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.656369][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.662070][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.668374][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.683171][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.691220][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.698407][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.717608][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.743569][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.376827][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 86.500127][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 86.525972][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 86.577643][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 86.755575][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 86.840867][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.848943][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.856628][ T5829] bridge_slave_0: entered allmulticast mode [ 86.864705][ T5829] bridge_slave_0: entered promiscuous mode [ 86.875055][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.885210][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.892501][ T5829] bridge_slave_1: entered allmulticast mode [ 86.900647][ T5829] bridge_slave_1: entered promiscuous mode [ 86.987857][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.995395][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.003028][ T5844] bridge_slave_0: entered allmulticast mode [ 87.014808][ T5844] bridge_slave_0: entered promiscuous mode [ 87.064865][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.076140][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.084371][ T5831] bridge_slave_0: entered allmulticast mode [ 87.096597][ T5831] bridge_slave_0: entered promiscuous mode [ 87.124601][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.133055][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.140748][ T5844] bridge_slave_1: entered allmulticast mode [ 87.148927][ T5844] bridge_slave_1: entered promiscuous mode [ 87.213079][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.221179][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.228550][ T5831] bridge_slave_1: entered allmulticast mode [ 87.235808][ T5831] bridge_slave_1: entered promiscuous mode [ 87.259585][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.272801][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.295960][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.303744][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.311461][ T5828] bridge_slave_0: entered allmulticast mode [ 87.318851][ T5828] bridge_slave_0: entered promiscuous mode [ 87.372742][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.384816][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.392404][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.400124][ T5828] bridge_slave_1: entered allmulticast mode [ 87.407840][ T5828] bridge_slave_1: entered promiscuous mode [ 87.431126][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.456257][ T5829] team0: Port device team_slave_0 added [ 87.466528][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.520333][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.531426][ T5829] team0: Port device team_slave_1 added [ 87.554776][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.564217][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.571781][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.579166][ T5835] bridge_slave_0: entered allmulticast mode [ 87.586356][ T5835] bridge_slave_0: entered promiscuous mode [ 87.636439][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.673067][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.680508][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.688365][ T5835] bridge_slave_1: entered allmulticast mode [ 87.695776][ T5835] bridge_slave_1: entered promiscuous mode [ 87.734397][ T5844] team0: Port device team_slave_0 added [ 87.743633][ T5844] team0: Port device team_slave_1 added [ 87.751444][ T5828] team0: Port device team_slave_0 added [ 87.773177][ T5831] team0: Port device team_slave_0 added [ 87.780342][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.788817][ T5849] Bluetooth: hci2: command tx timeout [ 87.792044][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.794562][ T5849] Bluetooth: hci1: command tx timeout [ 87.820648][ T5846] Bluetooth: hci4: command tx timeout [ 87.825998][ T5849] Bluetooth: hci0: command tx timeout [ 87.831244][ T5847] Bluetooth: hci3: command tx timeout [ 87.838627][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.884736][ T5828] team0: Port device team_slave_1 added [ 87.919203][ T5831] team0: Port device team_slave_1 added [ 87.928704][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.938843][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.945824][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.972951][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.984959][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.992125][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.018533][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.058585][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.076120][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.083265][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.109782][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.129252][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.136245][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.162554][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.218671][ T5835] team0: Port device team_slave_0 added [ 88.225328][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.232757][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.258776][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.277646][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.284600][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.310645][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.323323][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.330378][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.356345][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.369847][ T5835] team0: Port device team_slave_1 added [ 88.413075][ T5844] hsr_slave_0: entered promiscuous mode [ 88.420532][ T5844] hsr_slave_1: entered promiscuous mode [ 88.507376][ T5829] hsr_slave_0: entered promiscuous mode [ 88.513809][ T5829] hsr_slave_1: entered promiscuous mode [ 88.520581][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 88.526396][ T5829] Cannot create hsr debugfs directory [ 88.624980][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.632460][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.658990][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.676924][ T5828] hsr_slave_0: entered promiscuous mode [ 88.683438][ T5828] hsr_slave_1: entered promiscuous mode [ 88.690253][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 88.696003][ T5828] Cannot create hsr debugfs directory [ 88.736237][ T5831] hsr_slave_0: entered promiscuous mode [ 88.742852][ T5831] hsr_slave_1: entered promiscuous mode [ 88.751852][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 88.757845][ T5831] Cannot create hsr debugfs directory [ 88.764174][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.771810][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.798082][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.021382][ T5835] hsr_slave_0: entered promiscuous mode [ 89.029545][ T5835] hsr_slave_1: entered promiscuous mode [ 89.035741][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 89.041545][ T5835] Cannot create hsr debugfs directory [ 89.474419][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.488473][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.510385][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.532079][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.594064][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.611690][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.634128][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.645417][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.719670][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.734620][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.755418][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.799949][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.867304][ T5846] Bluetooth: hci0: command tx timeout [ 89.871683][ T5833] Bluetooth: hci4: command tx timeout [ 89.872758][ T5846] Bluetooth: hci1: command tx timeout [ 89.878390][ T5849] Bluetooth: hci2: command tx timeout [ 89.889306][ T5847] Bluetooth: hci3: command tx timeout [ 89.942146][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.953672][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.989957][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.001803][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.110331][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.138468][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.150855][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.162983][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.174353][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.241889][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.254195][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.272058][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.309095][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.316821][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.333991][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.341208][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.352905][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.392296][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.404582][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.411831][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.424494][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.431724][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.463420][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.470676][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.542863][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.550126][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.574895][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.682965][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.794254][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.804291][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.823947][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.831203][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.958216][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.972346][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.979654][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.052084][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.059311][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.095019][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.114918][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.122177][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.330425][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.361159][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.412389][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.515781][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.650272][ T5828] veth0_vlan: entered promiscuous mode [ 91.689161][ T5844] veth0_vlan: entered promiscuous mode [ 91.764869][ T5844] veth1_vlan: entered promiscuous mode [ 91.773397][ T5828] veth1_vlan: entered promiscuous mode [ 91.862419][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.931443][ T5844] veth0_macvtap: entered promiscuous mode [ 91.948719][ T5833] Bluetooth: hci4: command tx timeout [ 91.954190][ T5833] Bluetooth: hci3: command tx timeout [ 91.960751][ T5839] Bluetooth: hci1: command tx timeout [ 91.961081][ T5847] Bluetooth: hci0: command tx timeout [ 91.966264][ T5849] Bluetooth: hci2: command tx timeout [ 91.977975][ T5828] veth0_macvtap: entered promiscuous mode [ 91.986240][ T977] cfg80211: failed to load regulatory.db [ 91.993943][ T5844] veth1_macvtap: entered promiscuous mode [ 92.018211][ T5829] veth0_vlan: entered promiscuous mode [ 92.051459][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.061544][ T5829] veth1_vlan: entered promiscuous mode [ 92.074700][ T5828] veth1_macvtap: entered promiscuous mode [ 92.091709][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.105305][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.137825][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.154657][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.166668][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.203942][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.213548][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.250283][ T4350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.264708][ T4350] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.294318][ T4350] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.303916][ T4350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.316334][ T5831] veth0_vlan: entered promiscuous mode [ 92.350134][ T4350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.381900][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.394946][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.435337][ T5829] veth0_macvtap: entered promiscuous mode [ 92.477847][ T5829] veth1_macvtap: entered promiscuous mode [ 92.485181][ T5831] veth1_vlan: entered promiscuous mode [ 92.492825][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.509871][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.553273][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.577900][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.585802][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.593398][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.619834][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.635886][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.650755][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.690150][ T5835] veth0_vlan: entered promiscuous mode [ 92.705269][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.721677][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.731047][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.751664][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.781833][ T5835] veth1_vlan: entered promiscuous mode [ 92.834387][ T5831] veth0_macvtap: entered promiscuous mode [ 92.879508][ T5831] veth1_macvtap: entered promiscuous mode [ 93.096108][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.126263][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.138714][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.027477][ T5833] Bluetooth: hci2: command tx timeout [ 94.027746][ T5835] veth0_macvtap: entered promiscuous mode [ 94.033034][ T5833] Bluetooth: hci4: command tx timeout [ 94.045065][ T5833] Bluetooth: hci3: command tx timeout [ 94.050726][ T5849] Bluetooth: hci0: command tx timeout [ 94.056908][ T5833] Bluetooth: hci1: command tx timeout [ 94.197029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.479418][ T5835] veth1_macvtap: entered promiscuous mode [ 94.524005][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.740140][ T4350] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.753103][ T4350] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.846374][ T5963] loop0: detected capacity change from 0 to 256 [ 94.923189][ T5963] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 94.995534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.097930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.200368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.302678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.398405][ T5958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.406666][ T5958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.478298][ T4350] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.512764][ T5963] veth0_vlan: left promiscuous mode [ 95.520316][ T5963] veth0_vlan: entered promiscuous mode [ 95.530417][ T5963] team0: Device veth0_vlan failed to register rx_handler [ 95.571673][ T4350] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.660369][ T5963] syz.0.6 (5963) used greatest stack depth: 18488 bytes left [ 95.698153][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.847950][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.096867][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.104817][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.168568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.177477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.367263][ T5972] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.397816][ T5972] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.453678][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.635500][ T5981] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9'. [ 97.658658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.862971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.011868][ T5984] loop4: detected capacity change from 0 to 512 [ 98.022345][ T5984] ======================================================= [ 98.022345][ T5984] WARNING: The mand mount option has been deprecated and [ 98.022345][ T5984] and is ignored by this kernel. Remove the mand [ 98.022345][ T5984] option from the mount to silence this warning. [ 98.022345][ T5984] ======================================================= [ 99.477672][ T5984] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 99.564762][ T5984] block device autoloading is deprecated and will be removed. [ 99.577563][ T5984] EXT4-fs (loop4): external journal has bad superblock [ 99.788851][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.856479][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.275752][ T4364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.249795][ T4364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.920826][ T6000] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 103.931491][ T6000] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 103.941586][ T6000] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 103.963021][ T6000] syz.0.11 (6000) used greatest stack depth: 17992 bytes left [ 104.150161][ T30] audit: type=1800 audit(1751471106.264:2): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 105.172868][ T6007] loop1: detected capacity change from 0 to 128 [ 105.264054][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.530726][ T6007] udf: Unknown parameter '.' [ 105.535765][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.070028][ T6015] hugetlbfs: syz.4.14 (6015): Using mlock ulimits for SHM_HUGETLB is obsolete [ 106.840975][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.864396][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.069121][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.680431][ T6025] vxfs: WRONG superblock magic 00000000 at 1 [ 108.687354][ T6025] vxfs: WRONG superblock magic 00000000 at 8 [ 108.693497][ T6025] vxfs: can't find superblock. [ 111.280590][ T6041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.116773][ T6058] loop3: detected capacity change from 0 to 512 [ 114.125191][ T6058] EXT4-fs: Ignoring removed bh option [ 114.471309][ T6058] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.484590][ T6058] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.493758][ T6058] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 114.808878][ T6064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.452865][ T6066] ubi31: attaching mtd0 [ 115.459997][ T6066] ubi31: scanning is finished [ 115.465227][ T6066] ubi31: empty MTD device detected [ 116.057453][ T6058] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 116.058467][ T6058] EXT4-fs: failed to create workqueue [ 116.073508][ T6058] EXT4-fs (loop3): mount failed [ 116.371830][ T6072] kAFS: No cell specified [ 117.328923][ T6081] Zero length message leads to an empty skb [ 117.457961][ T6081] loop4: detected capacity change from 0 to 128 [ 117.489127][ T6081] zonefs (loop4) ERROR: Not a zoned block device [ 118.541964][ T6066] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 120.654478][ T6094] netlink: 20 bytes leftover after parsing attributes in process `syz.4.29'. [ 120.843945][ T6102] loop2: detected capacity change from 0 to 256 [ 121.466939][ T6107] mmap: syz.1.32 (6107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 121.997646][ T6109] GUP no longer grows the stack in syz.3.31 (6109): 200000003000-20000000a000 (200000002000) [ 122.008167][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.3.31 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 122.008199][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.008220][ T6109] Call Trace: [ 122.008230][ T6109] [ 122.008239][ T6109] dump_stack_lvl+0x189/0x250 [ 122.008283][ T6109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.008315][ T6109] ? __pfx__printk+0x10/0x10 [ 122.008335][ T6109] ? find_vma+0xe7/0x160 [ 122.008382][ T6109] __get_user_pages+0x24d0/0x2ce0 [ 122.008416][ T6109] ? __lock_acquire+0xab9/0xd20 [ 122.008473][ T6109] __gup_longterm_locked+0xde9/0x1660 [ 122.008512][ T6109] ? __lock_acquire+0xab9/0xd20 [ 122.008553][ T6109] pin_user_pages_remote+0xd4/0x120 [ 122.008586][ T6109] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 122.008613][ T6109] ? gup_put_folio+0x100/0x240 [ 122.008644][ T6109] ? down_read+0x1ad/0x2e0 [ 122.008670][ T6109] process_vm_rw+0x59e/0xb40 [ 122.008717][ T6109] ? __pfx_process_vm_rw+0x10/0x10 [ 122.008744][ T6109] ? futex_wait+0x285/0x360 [ 122.008849][ T6109] ? rcu_is_watching+0x15/0xb0 [ 122.008883][ T6109] __x64_sys_process_vm_writev+0xe0/0x100 [ 122.008920][ T6109] do_syscall_64+0xfa/0x3b0 [ 122.008941][ T6109] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.008973][ T6109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.008993][ T6109] ? clear_bhb_loop+0x60/0xb0 [ 122.009019][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.009039][ T6109] RIP: 0033:0x7f906298e929 [ 122.009063][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.009081][ T6109] RSP: 002b:00007f90637eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 122.009113][ T6109] RAX: ffffffffffffffda RBX: 00007f9062bb6240 RCX: 00007f906298e929 [ 122.009129][ T6109] RDX: 0000000000000008 RSI: 0000200000001a00 RDI: 0000000000000011 [ 122.009142][ T6109] RBP: 00007f9062a10b39 R08: 0000000000000005 R09: 0000000000000000 [ 122.009155][ T6109] R10: 0000200000001dc0 R11: 0000000000000246 R12: 0000000000000000 [ 122.009168][ T6109] R13: 0000000000000000 R14: 00007f9062bb6240 R15: 00007ffd036aab18 [ 122.009201][ T6109] [ 122.258788][ T6102] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 124.171755][ T6124] loop3: detected capacity change from 0 to 256 [ 124.550117][ T6124] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.577540][ T6124] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 124.725776][ T6124] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 124.831898][ T6136] loop1: detected capacity change from 0 to 1024 [ 124.840291][ T6136] EXT4-fs: Ignoring removed i_version option [ 124.846358][ T6136] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.853267][ T6136] EXT4-fs: inline encryption not supported [ 124.878925][ T6136] EXT4-fs: Ignoring removed nobh option [ 124.884543][ T6136] EXT4-fs: Ignoring removed bh option [ 126.200414][ T6144] process 'syz.0.38' launched '/dev/fd/5' with NULL argv: empty string added [ 126.908924][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.661723][ T6168] netlink: 60 bytes leftover after parsing attributes in process `syz.3.41'. [ 131.992866][ T6181] warning: `syz.3.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 132.141868][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.921175][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.987966][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.469175][ T6005] libceph: connect (1)[c::]:6789 error -101 [ 133.855838][ T6191] ceph: No mds server is up or the cluster is laggy [ 133.890353][ T6197] loop2: detected capacity change from 0 to 512 [ 133.956030][ T6005] libceph: mon0 (1)[c::]:6789 connect error [ 134.250719][ T977] libceph: connect (1)[c::]:6789 error -101 [ 135.015895][ T977] libceph: mon0 (1)[c::]:6789 connect error [ 135.609723][ T6199] Can't find a SQUASHFS superblock on nullb0 [ 135.620401][ T6206] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 135.629470][ T6206] overlayfs: missing 'lowerdir' [ 136.682140][ T6213] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.925062][ T6201] loop0: detected capacity change from 0 to 4096 [ 138.627886][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.636193][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.998217][ T30] audit: type=1326 audit(1751471143.074:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.0.55" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6afad8e929 code=0x0 [ 141.461528][ T6225] bridge0: entered allmulticast mode [ 142.150089][ T6238] loop3: detected capacity change from 0 to 1024 [ 142.157815][ T6238] hfsplus: Unknown parameter '' [ 143.301004][ T6249] loop4: detected capacity change from 0 to 16 [ 143.830935][ T6249] erofs (device loop4): mounted with root inode @ nid 36. [ 144.063851][ T6253] loop3: detected capacity change from 0 to 512 [ 144.117848][ T6253] EXT4-fs: Ignoring removed oldalloc option [ 144.151446][ T6253] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.233757][ T6253] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 144.351206][ T6253] EXT4-fs (loop3): 1 truncate cleaned up [ 144.511543][ T6263] lo speed is unknown, defaulting to 1000 [ 144.518842][ T6263] lo speed is unknown, defaulting to 1000 [ 144.605688][ T6264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.638464][ T6263] lo speed is unknown, defaulting to 1000 [ 144.675464][ T6263] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.753002][ T6263] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 144.904550][ T6253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.140287][ T6263] lo speed is unknown, defaulting to 1000 [ 145.148120][ T6263] lo speed is unknown, defaulting to 1000 [ 145.155089][ T6263] lo speed is unknown, defaulting to 1000 [ 145.163665][ T6263] lo speed is unknown, defaulting to 1000 [ 145.173057][ T6263] lo speed is unknown, defaulting to 1000 [ 146.094564][ T6272] fuseblk: Unknown parameter 'user_i00000000000000000000' [ 147.131360][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.922594][ T6275] loop1: detected capacity change from 0 to 32768 [ 148.151907][ T6275] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 148.160613][ T6275] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 148.261335][ T6275] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 149.324655][ T6275] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 152.311468][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 152.330702][ T6306] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 153.690302][ T6314] loop3: detected capacity change from 0 to 2048 [ 153.712126][ T6316] kvm: user requested TSC rate below hardware speed [ 153.826649][ T6314] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 153.953192][ T6314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.716339][ T6332] kAFS: No cell specified [ 156.593155][ T6337] overlayfs: missing 'lowerdir' [ 158.812117][ T30] audit: type=1326 audit(1751471161.154:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 158.835900][ T30] audit: type=1326 audit(1751471161.154:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 158.858420][ T30] audit: type=1326 audit(1751471161.174:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 158.882726][ T30] audit: type=1326 audit(1751471161.174:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 158.914767][ T6340] netlink: 68 bytes leftover after parsing attributes in process `syz.1.79'. [ 158.935716][ T30] audit: type=1326 audit(1751471161.174:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 159.637149][ T30] audit: type=1326 audit(1751471161.224:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 159.669646][ T30] audit: type=1326 audit(1751471161.224:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 159.794511][ T6353] ALSA: mixer_oss: invalid OSS volume 'MON' [ 160.368441][ T30] audit: type=1326 audit(1751471161.224:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 160.470434][ T30] audit: type=1326 audit(1751471161.254:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 160.492711][ T30] audit: type=1326 audit(1751471161.254:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6336 comm="syz.1.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 160.513769][ T6355] loop2: detected capacity change from 0 to 512 [ 160.611914][ T6355] EXT4-fs error (device loop2): ext4_iget_extra_inode:5034: inode #15: comm syz.2.84: corrupted in-inode xattr: invalid ea_ino [ 160.780335][ T6355] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.84: couldn't read orphan inode 15 (err -117) [ 161.010541][ T6355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.524385][ T6368] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.84: invalid fast symlink length 39 [ 163.900404][ T6365] hub 6-0:1.0: USB hub found [ 163.908906][ T6365] hub 6-0:1.0: 1 port detected [ 163.963213][ T6370] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.84: invalid indirect mapped block 234881024 (level 0) [ 164.330135][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.435455][ T6371] sock: sock_timestamping_bind_phc: sock not bind to device [ 164.684736][ T6381] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 164.712950][ T6381] capability: warning: `syz.0.89' uses 32-bit capabilities (legacy support in use) [ 164.750551][ T6381] program syz.0.89 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.578073][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 165.578091][ T30] audit: type=1326 audit(1751471167.864:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 166.478055][ T30] audit: type=1326 audit(1751471167.864:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 166.962705][ T6395] netlink: 'syz.4.91': attribute type 10 has an invalid length. [ 167.533235][ T6395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.543245][ T6395] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 167.634396][ T30] audit: type=1326 audit(1751471167.864:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 167.884345][ T30] audit: type=1326 audit(1751471167.864:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 167.937878][ T30] audit: type=1326 audit(1751471167.864:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 168.187324][ T30] audit: type=1326 audit(1751471167.864:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 168.209693][ T30] audit: type=1326 audit(1751471167.864:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 168.234910][ T30] audit: type=1326 audit(1751471167.864:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 168.409597][ T6409] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 168.815809][ T977] IPVS: starting estimator thread 0... [ 169.113397][ T6415] loop0: detected capacity change from 0 to 1024 [ 169.121007][ T6415] hfsplus: Unknown parameter '' [ 169.401521][ T6397] trusted_key: encrypted_key: insufficient parameters specified [ 169.447178][ T6411] IPVS: using max 27 ests per chain, 64800 per kthread [ 172.993563][ T30] audit: type=1326 audit(1751471175.322:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6431 comm="syz.1.100" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe68138e929 code=0x0 [ 174.100953][ T6446] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 175.164543][ T6454] loop3: detected capacity change from 0 to 16 [ 176.636440][ T6461] loop3: detected capacity change from 0 to 1024 [ 176.658765][ T6461] EXT4-fs: Ignoring removed i_version option [ 176.664828][ T6461] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.787239][ T6461] EXT4-fs: inline encryption not supported [ 176.793141][ T6461] EXT4-fs: Ignoring removed nobh option [ 176.798887][ T6461] EXT4-fs: Ignoring removed bh option [ 178.103880][ T6461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.157859][ T6466] loop2: detected capacity change from 0 to 256 [ 178.175871][ T6466] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 178.972761][ T6476] exFAT-fs (loop2): error, data size is invalid(10) [ 178.989362][ T6476] exFAT-fs (loop2): error, data size is invalid(10) [ 179.587877][ T6457] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 179.587877][ T6457] program syz.1.107 not setting count and/or reply_len properly [ 179.617916][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.634876][ T6473] netlink: 260 bytes leftover after parsing attributes in process `syz.4.109'. [ 180.549421][ T6486] netlink: 830 bytes leftover after parsing attributes in process `syz.4.112'. [ 180.558746][ T6486] bond_slave_0: entered promiscuous mode [ 180.564749][ T6486] bond_slave_1: entered promiscuous mode [ 180.570603][ T6486] batadv0: entered promiscuous mode [ 182.699586][ T6484] loop2: detected capacity change from 0 to 256 [ 183.082679][ T6499] loop1: detected capacity change from 0 to 512 [ 183.094139][ T6499] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.120233][ T6499] EXT4-fs: test_dummy_encryption requires encrypt feature [ 184.199097][ T1209] IPVS: starting estimator thread 0... [ 184.253653][ T6497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.575955][ T6504] IPVS: using max 30 ests per chain, 72000 per kthread [ 184.702474][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 184.712957][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 185.489443][ T6519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.521827][ T6519] netlink: 'syz.0.118': attribute type 1 has an invalid length. [ 186.425277][ T6524] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 186.432171][ T6524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.455638][ T6522] loop3: detected capacity change from 0 to 512 [ 186.488718][ T6528] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(14) [ 186.495462][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 186.564339][ T6524] vhci_hcd vhci_hcd.0: Device attached [ 186.599528][ T6528] vhci_hcd vhci_hcd.0: Device attached [ 186.599607][ T6522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.652370][ T6524] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(13) [ 186.659017][ T6524] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 186.690748][ T6522] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.711532][ T6524] vhci_hcd vhci_hcd.0: Device attached [ 186.842691][ T6540] loop2: detected capacity change from 0 to 1024 [ 186.906238][ T5905] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 186.925171][ T6524] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 186.945289][ T6540] EXT4-fs: Ignoring removed i_version option [ 187.031120][ T6540] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.138576][ T6540] EXT4-fs: inline encryption not supported [ 187.209694][ T6528] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(20) [ 187.216348][ T6528] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 187.237728][ T6540] EXT4-fs: Ignoring removed nobh option [ 187.320191][ T6540] EXT4-fs: Ignoring removed bh option [ 187.429865][ T6524] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(19) [ 187.436540][ T6524] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 187.763749][ T6528] vhci_hcd vhci_hcd.0: Device attached [ 187.923517][ T6524] vhci_hcd vhci_hcd.0: Device attached [ 188.131607][ T6550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.489894][ T6522] af_packet: tpacket_rcv: packet too big, clamped from 65024 to 3952. macoff=96 [ 188.524714][ T6524] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.664595][ T6528] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 188.881169][ T6540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.908471][ T30] audit: type=1800 audit(1751471191.252:27): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.119" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 188.915917][ T6524] vhci_hcd vhci_hcd.0: port 0 already used [ 189.564617][ T6542] vhci_hcd: connection closed [ 189.565168][ T6537] vhci_hcd: connection closed [ 189.566379][ T6529] vhci_hcd: connection closed [ 189.577073][ T6526] vhci_hcd: connection reset by peer [ 189.587851][ T6544] vhci_hcd: connection closed [ 189.589254][ T13] vhci_hcd: stop threads [ 189.608701][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.638723][ T13] vhci_hcd: release socket [ 189.665465][ T13] vhci_hcd: disconnect device [ 189.691279][ T13] vhci_hcd: stop threads [ 189.695556][ T13] vhci_hcd: release socket [ 189.730565][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.752144][ T13] vhci_hcd: disconnect device [ 189.772637][ T13] vhci_hcd: stop threads [ 189.807795][ T13] vhci_hcd: release socket [ 189.826804][ T13] vhci_hcd: disconnect device [ 189.844906][ T13] vhci_hcd: stop threads [ 189.856721][ T13] vhci_hcd: release socket [ 189.864177][ T6563] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.892473][ T13] vhci_hcd: disconnect device [ 189.907350][ T13] vhci_hcd: stop threads [ 189.922701][ T13] vhci_hcd: release socket [ 190.089836][ T13] vhci_hcd: disconnect device [ 190.614726][ T6571] loop2: detected capacity change from 0 to 16 [ 190.931521][ T6571] erofs (device loop2): mounted with root inode @ nid 36. [ 190.971271][ T6567] overlayfs: missing 'lowerdir' [ 191.936243][ T6570] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 191.936243][ T6570] program syz.4.126 not setting count and/or reply_len properly [ 194.218177][ T5905] vhci_hcd: vhci_device speed not set [ 194.450200][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.550585][ T6583] loop2: detected capacity change from 0 to 128 [ 194.573305][ T6583] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 194.586329][ T6583] qnx6: wrong signature (magic) in superblock #1. [ 194.593066][ T6583] qnx6: unable to read the first superblock [ 195.384287][ T6579] loop1: detected capacity change from 0 to 2048 [ 196.024706][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.616371][ T6579] NILFS (loop1): ifile inode (checkpoint number=2) corrupted [ 196.626968][ T6579] NILFS (loop1): error -5 while loading last checkpoint (checkpoint number=2) [ 198.575380][ T5920] IPVS: starting estimator thread 0... [ 199.066901][ T6593] loop3: detected capacity change from 0 to 2048 [ 199.288488][ T6593] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.337601][ T6590] IPVS: using max 26 ests per chain, 62400 per kthread [ 199.393523][ T6603] ubi31: attaching mtd0 [ 199.411784][ T6603] ubi31: scanning is finished [ 200.003944][ T5957] usb usb34-port1: attempt power cycle [ 200.048706][ T6593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 200.102735][ T6601] loop2: detected capacity change from 0 to 1024 [ 200.142676][ T6603] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 200.149119][ T6601] EXT4-fs: Ignoring removed i_version option [ 200.150421][ T6603] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 200.164979][ T6603] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 200.172157][ T6603] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 200.179763][ T6603] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 200.186768][ T6603] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 200.191502][ T6601] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.194861][ T6603] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1874959541 [ 200.194887][ T6603] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 200.222686][ T6608] ubi31: background thread "ubi_bgt31d" started, PID 6608 [ 200.568872][ T6612] loop4: detected capacity change from 0 to 16 [ 200.583863][ T6601] EXT4-fs: inline encryption not supported [ 200.667474][ T6612] erofs (device loop4): mounted with root inode @ nid 36. [ 200.902612][ T5957] usb usb34-port1: unable to enumerate USB device [ 200.940976][ T6601] EXT4-fs: Ignoring removed nobh option [ 201.438332][ T6601] EXT4-fs: Ignoring removed bh option [ 202.488145][ T6601] EXT4-fs warning (device loop2): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop2. [ 202.567933][ T6617] libceph: resolve '+lc' (ret=-3): failed [ 203.048858][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.649859][ T6651] loop4: detected capacity change from 0 to 32768 [ 206.656924][ T6647] loop1: detected capacity change from 0 to 8 [ 206.686607][ T6647] squashfs: Unknown parameter 'ma}d' [ 206.894793][ T6651] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 206.894819][ T6651] allowing incompatible features above 0.0: (unknown version) [ 206.894832][ T6651] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 206.934650][ T6651] bcachefs (loop4): initializing new filesystem [ 206.948542][ T6651] bcachefs (loop4): going read-write [ 207.031194][ T6660] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 207.031194][ T6660] program syz.0.142 not setting count and/or reply_len properly [ 207.706483][ T6651] bcachefs (loop4): marking superblocks [ 207.723308][ T6651] bcachefs (loop4): initializing freespace [ 207.732184][ T6651] bcachefs (loop4): done initializing freespace [ 207.742612][ T6651] bcachefs (loop4): reading snapshots table [ 207.748717][ T6651] bcachefs (loop4): reading snapshots done [ 207.848235][ T6667] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 208.740523][ T6651] bcachefs (loop4): done starting filesystem [ 208.865273][ T6651] syz.4.144 (6651) used greatest stack depth: 16536 bytes left [ 209.013064][ T6670] loop1: detected capacity change from 0 to 1024 [ 211.806533][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 211.812940][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 212.013170][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 212.019443][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 213.687589][ T6692] loop2: detected capacity change from 0 to 1024 [ 213.742493][ T6692] EXT4-fs: Ignoring removed i_version option [ 213.839651][ T6692] EXT4-fs: Ignoring removed mblk_io_submit option [ 213.846292][ T6692] EXT4-fs: inline encryption not supported [ 214.375896][ T6692] EXT4-fs: Ignoring removed nobh option [ 214.428909][ T6692] EXT4-fs: Ignoring removed bh option [ 214.617813][ T6702] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 214.675100][ T6692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.030398][ T6702] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.039929][ T6702] bond0: (slave team0): Enslaving as an active interface with an up link [ 216.382877][ T6714] netlink: 16 bytes leftover after parsing attributes in process `syz.3.156'. [ 216.451657][ T6714] loop3: detected capacity change from 0 to 256 [ 216.478075][ T6714] vfat: Bad value for 'fmask' [ 217.001131][ T6714] batadv_slave_1: entered promiscuous mode [ 217.721400][ T6711] batadv_slave_1: left promiscuous mode [ 218.745252][ T5835] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.833039][ T6731] lo speed is unknown, defaulting to 1000 [ 218.851657][ T6731] lo speed is unknown, defaulting to 1000 [ 218.922880][ T6731] lo speed is unknown, defaulting to 1000 [ 221.464660][ T6744] loop1: detected capacity change from 0 to 256 [ 223.012192][ T6731] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 223.187133][ T6731] lo speed is unknown, defaulting to 1000 [ 223.207770][ T6731] lo speed is unknown, defaulting to 1000 [ 223.241804][ T6731] lo speed is unknown, defaulting to 1000 [ 223.262739][ T6758] loop1: detected capacity change from 0 to 128 [ 223.319001][ T6731] lo speed is unknown, defaulting to 1000 [ 223.407720][ T6731] lo speed is unknown, defaulting to 1000 [ 223.541674][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 223.808388][ T43] usb 3-1: device descriptor read/64, error -71 [ 223.833843][ T6758] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.972816][ T6758] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 224.144809][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 224.428712][ T43] usb 3-1: device descriptor read/64, error -71 [ 226.508962][ T6764] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.600006][ T43] usb usb3-port1: attempt power cycle [ 227.140502][ T5828] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.324461][ T6771] loop2: detected capacity change from 0 to 32768 [ 228.332227][ T6771] ocfs2: Unknown parameter '0' [ 228.721780][ T6779] : entered promiscuous mode [ 230.181386][ T6781] loop1: detected capacity change from 0 to 1024 [ 230.188790][ T6781] EXT4-fs: Ignoring removed i_version option [ 230.213696][ T6781] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.220706][ T6781] EXT4-fs: inline encryption not supported [ 230.226800][ T6781] EXT4-fs: Ignoring removed nobh option [ 230.233078][ T6781] EXT4-fs: Ignoring removed bh option [ 230.469660][ T6783] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 230.482881][ T6783] CUSE: unknown device info "3ܟ,̘" [ 230.488730][ T6783] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 230.488730][ T6783] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 230.507891][ T6783] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 230.519318][ T6783] CUSE: DEVNAME unspecified [ 230.612733][ T30] audit: type=1326 audit(1751471232.863:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6773 comm="syz.3.171" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906298e929 code=0x0 [ 231.008139][ T6781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.940789][ T6799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 233.131866][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.419679][ T6807] loop2: detected capacity change from 0 to 4096 [ 233.736036][ T43] IPVS: starting estimator thread 0... [ 234.127898][ T6815] loop1: detected capacity change from 0 to 4096 [ 234.188255][ T6815] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 234.529954][ T6814] IPVS: using max 24 ests per chain, 57600 per kthread [ 234.551029][ T6815] ntfs3(loop1): ino=19, mi_enum_attr [ 234.556590][ T6815] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 234.745011][ T6817] loop0: detected capacity change from 0 to 1024 [ 234.798161][ T6815] Process accounting resumed [ 236.170237][ T6817] EXT4-fs: Ignoring removed i_version option [ 236.176334][ T6817] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.203176][ T6817] EXT4-fs: inline encryption not supported [ 236.249720][ T6817] EXT4-fs: Ignoring removed nobh option [ 236.255344][ T6817] EXT4-fs: Ignoring removed bh option [ 236.933412][ T6817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.540410][ T6845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 238.698901][ T6846] capability: warning: `syz.2.184' uses deprecated v2 capabilities in a way that may be insecure [ 240.584759][ T6852] lo speed is unknown, defaulting to 1000 [ 241.010834][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.971202][ T6860] loop2: detected capacity change from 0 to 256 [ 241.983813][ T6860] FAT-fs (loop2): count of clusters too big (66845694) [ 241.991370][ T6860] FAT-fs (loop2): Can't find a valid FAT filesystem [ 242.004191][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 243.460757][ T6876] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 243.460757][ T6876] program syz.0.186 not setting count and/or reply_len properly [ 244.130007][ T6867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 244.430363][ T6883] loop1: detected capacity change from 0 to 256 [ 244.437961][ T6883] exfat: Unknown parameter '' [ 244.651753][ T6880] loop3: detected capacity change from 0 to 512 [ 245.491254][ T6878] xt_CT: No such helper "snmp" [ 245.558660][ T6880] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 245.676999][ T6894] binder: 6893:6894 unknown command 76 [ 245.682776][ T6894] binder: 6893:6894 ioctl c0306201 200000000340 returned -22 [ 246.053720][ T6880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.171891][ T6898] netlink: 'syz.1.193': attribute type 2 has an invalid length. [ 247.625449][ T6906] xt_connbytes: Forcing CT accounting to be enabled [ 247.632220][ T6906] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 247.644987][ T6906] xt_bpf: check failed: parse error [ 248.763792][ T6911] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 248.763792][ T6911] program syz.4.196 not setting count and/or reply_len properly [ 249.075985][ T6911] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.813143][ T6917] loop0: detected capacity change from 0 to 1024 [ 249.854439][ T6917] EXT4-fs: Ignoring removed i_version option [ 250.512400][ T6917] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.528452][ T6917] EXT4-fs: inline encryption not supported [ 250.534733][ T6917] EXT4-fs: Ignoring removed nobh option [ 250.540317][ T6917] EXT4-fs: Ignoring removed bh option [ 251.389042][ T6917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.423433][ T5831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.998694][ T6955] loop3: detected capacity change from 0 to 1024 [ 254.012186][ T6955] EXT4-fs (loop3): Cannot use DAX on a filesystem that may contain inline data [ 255.082006][ T6961] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 256.152684][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.607383][ T6960] netlink: 48 bytes leftover after parsing attributes in process `syz.4.204'. [ 257.118974][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.132939][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.946127][ T6980] netlink: 'syz.3.210': attribute type 4 has an invalid length. [ 257.953922][ T6980] netlink: 17 bytes leftover after parsing attributes in process `syz.3.210'. [ 258.429547][ T6978] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 260.132439][ T6995] xt_TCPMSS: Only works on TCP SYN packets [ 260.975837][ T7002] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 260.982499][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.046357][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 261.104880][ T7006] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 261.111719][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 261.152560][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 261.174487][ T7002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 261.278246][ T7002] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(18) [ 261.285001][ T7002] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.651405][ T7002] vhci_hcd vhci_hcd.0: Device attached [ 261.758427][ T7006] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(22) [ 261.765096][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 261.962792][ T5923] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 261.977976][ T7002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.008903][ T7002] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.024139][ T7014] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 262.038038][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 262.189863][ T7006] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(24) [ 262.196532][ T7006] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.242441][ T7006] vhci_hcd vhci_hcd.0: Device attached [ 263.194434][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 263.349391][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 266.813893][ T7030] loop1: detected capacity change from 0 to 8 [ 266.863083][ T30] audit: type=1326 audit(1751471269.138:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 267.638233][ T30] audit: type=1326 audit(1751471269.138:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 267.672231][ T30] audit: type=1326 audit(1751471269.138:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 267.758639][ T7021] vhci_hcd: connection closed [ 267.766075][ T7004] vhci_hcd: connection reset by peer [ 267.768900][ T7010] vhci_hcd: connection closed [ 267.779016][ T7007] vhci_hcd: connection closed [ 267.783722][ T7016] vhci_hcd: connection closed [ 267.793369][ T30] audit: type=1326 audit(1751471269.138:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 267.798651][ T59] vhci_hcd: stop threads [ 268.059244][ T59] vhci_hcd: release socket [ 268.098451][ T59] vhci_hcd: disconnect device [ 268.111062][ T59] vhci_hcd: stop threads [ 268.118839][ T30] audit: type=1326 audit(1751471269.138:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 268.150709][ T59] vhci_hcd: release socket [ 268.156486][ T59] vhci_hcd: disconnect device [ 268.166199][ T59] vhci_hcd: stop threads [ 268.170596][ T59] vhci_hcd: release socket [ 268.189328][ T59] vhci_hcd: disconnect device [ 268.357046][ T59] vhci_hcd: stop threads [ 268.361685][ T59] vhci_hcd: release socket [ 268.368066][ T59] vhci_hcd: disconnect device [ 268.377206][ T59] vhci_hcd: stop threads [ 268.382034][ T59] vhci_hcd: release socket [ 268.393941][ T6005] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 268.414333][ T5923] vhci_hcd: vhci_device speed not set [ 268.626819][ T7043] loop6: detected capacity change from 0 to 524287999 [ 269.319717][ T30] audit: type=1326 audit(1751471269.138:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe68138e929 code=0x7ffc0000 [ 269.364479][ T59] vhci_hcd: disconnect device [ 269.442839][ T30] audit: type=1326 audit(1751471269.138:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe68138e963 code=0x7ffc0000 [ 269.615868][ T6005] usb 3-1: not running at top speed; connect to a high speed hub [ 269.625290][ T6005] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 269.634396][ T6005] usb 3-1: config 1 has no interface number 1 [ 269.640592][ T6005] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 269.658368][ T6005] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.667567][ T6005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.677303][ T30] audit: type=1326 audit(1751471269.138:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe68138d3df code=0x7ffc0000 [ 270.234462][ T6005] usb 3-1: Product: syz [ 270.241713][ T6005] usb 3-1: Manufacturer: syz [ 270.246825][ T6005] usb 3-1: SerialNumber: syz [ 270.369480][ T7035] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 270.369480][ T7035] program syz.4.219 not setting count and/or reply_len properly [ 270.683186][ T7035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 270.786322][ T30] audit: type=1326 audit(1751471269.138:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe68138e9b7 code=0x7ffc0000 [ 270.800435][ T5840] usb usb34-port1: attempt power cycle [ 270.923243][ T30] audit: type=1326 audit(1751471269.138:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe68138d290 code=0x7ffc0000 [ 271.866487][ T6005] usb 3-1: failed to enable PITCH for EP 0x82 [ 271.887604][ T7053] block device autoloading is deprecated and will be removed. [ 271.894377][ T30] audit: type=1326 audit(1751471269.138:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe68138e52b code=0x7ffc0000 [ 272.107924][ T5840] usb usb34-port1: unable to enumerate USB device [ 272.118030][ T30] audit: type=1326 audit(1751471269.148:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe68138d58a code=0x7ffc0000 [ 272.456428][ T30] audit: type=1326 audit(1751471269.148:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe68138d58a code=0x7ffc0000 [ 272.766844][ T7063] Invalid ELF header magic: != ELF [ 272.788571][ T7063] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 272.796416][ T7063] netlink: 224 bytes leftover after parsing attributes in process `syz.1.227'. [ 273.404259][ T6005] usb 3-1: USB disconnect, device number 5 [ 273.404321][ T30] audit: type=1326 audit(1751471269.148:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe68138d197 code=0x7ffc0000 [ 273.611288][ T7067] veth1_macvtap: left promiscuous mode [ 273.616930][ T7067] macsec0: entered allmulticast mode [ 274.254316][ T30] audit: type=1326 audit(1751471269.148:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7025 comm="syz.1.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe6813900ca code=0x7ffc0000 [ 274.338222][ T7068] veth1_macvtap: entered promiscuous mode [ 274.344132][ T7068] veth1_macvtap: entered allmulticast mode [ 274.350501][ T7068] macsec0: left allmulticast mode [ 274.355832][ T7068] veth1_macvtap: left allmulticast mode [ 274.460164][ T7072] netem: change failed [ 274.496720][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.550097][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 274.587428][ T7073] bridge_slave_1: left allmulticast mode [ 274.593186][ T7073] bridge_slave_1: left promiscuous mode [ 274.620563][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.974735][ T7082] vivid-000: disconnect [ 274.995195][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.229'. [ 275.086293][ T7083] vivid-000: reconnect [ 275.755216][ T7073] bridge_slave_0: left allmulticast mode [ 275.762876][ T7073] bridge_slave_0: left promiscuous mode [ 275.800671][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.977548][ T7087] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 275.977548][ T7087] program syz.0.231 not setting count and/or reply_len properly [ 276.406204][ T5849] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 276.418234][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: kworker/u9:9 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 276.418285][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.418300][ T5849] Workqueue: hci3 hci_rx_work [ 276.418378][ T5849] Call Trace: [ 276.418388][ T5849] [ 276.418398][ T5849] dump_stack_lvl+0x189/0x250 [ 276.418434][ T5849] ? kernfs_path_from_node+0x2c/0x260 [ 276.418461][ T5849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.418493][ T5849] ? __pfx__printk+0x10/0x10 [ 276.418525][ T5849] ? kernfs_path_from_node+0x2c/0x260 [ 276.418549][ T5849] ? kernfs_path_from_node+0x2c/0x260 [ 276.418575][ T5849] ? kernfs_path_from_node+0x22c/0x260 [ 276.418612][ T5849] ? kernfs_path_from_node+0x2c/0x260 [ 276.418646][ T5849] sysfs_create_dir_ns+0x259/0x280 [ 276.418673][ T5849] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 276.418700][ T5849] ? do_raw_spin_unlock+0x122/0x240 [ 276.418727][ T5849] kobject_add_internal+0x59f/0xb40 [ 276.418762][ T5849] kobject_add+0x155/0x220 [ 276.418790][ T5849] ? __pfx_kobject_add+0x10/0x10 [ 276.418814][ T5849] ? _raw_spin_unlock+0x28/0x50 [ 276.418848][ T5849] ? get_device_parent+0x366/0x3a0 [ 276.418884][ T5849] device_add+0x408/0xb50 [ 276.418918][ T5849] hci_conn_add_sysfs+0xd5/0x1e0 [ 276.418951][ T5849] le_conn_complete_evt+0xc3a/0x1220 [ 276.418989][ T5849] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 276.419012][ T5849] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 276.419031][ T5849] ? __asan_memcpy+0x40/0x70 [ 276.419061][ T5849] ? __pfx___mutex_lock+0x10/0x10 [ 276.419082][ T5849] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.419101][ T5849] ? skb_pull_data+0xfb/0x200 [ 276.419137][ T5849] hci_le_conn_complete_evt+0x187/0x450 [ 276.419168][ T5849] hci_event_packet+0x78f/0x1200 [ 276.419202][ T5849] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 276.419226][ T5849] ? __pfx_hci_event_packet+0x10/0x10 [ 276.419266][ T5849] ? kcov_remote_start+0x4d3/0x7f0 [ 276.419289][ T5849] ? lockdep_hardirqs_on+0x80/0x150 [ 276.419326][ T5849] ? hci_send_to_monitor+0xe2/0x570 [ 276.419353][ T5849] hci_rx_work+0x46a/0xe80 [ 276.419392][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 276.419423][ T5849] process_scheduled_works+0xae1/0x17b0 [ 276.419484][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 276.419533][ T5849] worker_thread+0x8a0/0xda0 [ 276.419566][ T5849] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 276.419606][ T5849] ? __kthread_parkme+0x7b/0x200 [ 276.419647][ T5849] kthread+0x70e/0x8a0 [ 276.419671][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 276.419699][ T5849] ? __pfx_kthread+0x10/0x10 [ 276.419721][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.419750][ T5849] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.419779][ T5849] ? __pfx_kthread+0x10/0x10 [ 276.419800][ T5849] ret_from_fork+0x3fc/0x770 [ 276.419831][ T5849] ? __pfx_ret_from_fork+0x10/0x10 [ 276.419866][ T5849] ? __switch_to_asm+0x39/0x70 [ 276.419885][ T5849] ? __switch_to_asm+0x33/0x70 [ 276.419904][ T5849] ? __pfx_kthread+0x10/0x10 [ 276.419944][ T5849] ret_from_fork_asm+0x1a/0x30 [ 276.419985][ T5849] [ 276.420017][ T5849] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 276.788817][ T5849] Bluetooth: hci3: failed to register connection device [ 278.927019][ T7082] vcan0: entered promiscuous mode [ 278.932109][ T7082] vcan0: entered allmulticast mode [ 280.175275][ T7111] netlink: 12 bytes leftover after parsing attributes in process `syz.4.236'. [ 281.746881][ T7114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.715483][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.888763][ T7114] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 283.888763][ T7114] program syz.1.237 not setting count and/or reply_len properly [ 283.914834][ T7126] netlink: 14 bytes leftover after parsing attributes in process `syz.2.240'. [ 285.000328][ T7136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.766483][ T7148] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 288.912031][ T7126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.947949][ T7126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.078434][ T7126] bond0 (unregistering): Released all slaves [ 289.374329][ T30] audit: type=1326 audit(1751471291.666:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 290.192558][ T30] audit: type=1326 audit(1751471291.666:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 290.396035][ T7168] loop1: detected capacity change from 0 to 32768 [ 290.440843][ T30] audit: type=1326 audit(1751471291.666:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 290.477484][ T30] audit: type=1326 audit(1751471291.666:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 290.606879][ T30] audit: type=1326 audit(1751471291.666:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 290.692168][ T30] audit: type=1326 audit(1751471291.716:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 290.715306][ T30] audit: type=1326 audit(1751471291.716:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 290.759815][ T7168] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 290.759834][ T7168] allowing incompatible features above 0.0: (unknown version) [ 290.759843][ T7168] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 290.797744][ T7168] bcachefs (loop1): initializing new filesystem [ 290.810648][ T7168] bcachefs (loop1): going read-write [ 291.037602][ T30] audit: type=1326 audit(1751471291.716:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 291.060434][ T7168] bcachefs (loop1): marking superblocks [ 291.072915][ T7168] bcachefs (loop1): initializing freespace [ 291.083157][ T7168] bcachefs (loop1): done initializing freespace [ 291.092537][ T7168] bcachefs (loop1): reading snapshots table [ 291.098630][ T7168] bcachefs (loop1): reading snapshots done [ 291.146475][ T7183] ubi: mtd0 is already attached to ubi31 [ 291.295577][ T7168] bcachefs (loop1): loop1: Superblock write was silently dropped! (seq 0 expected 42) [ 291.321010][ T7168] bcachefs (loop1): done starting filesystem [ 291.751228][ T30] audit: type=1326 audit(1751471291.716:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 291.773855][ T30] audit: type=1326 audit(1751471291.716:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7159 comm="syz.0.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6afad8e929 code=0x7ffc0000 [ 292.859449][ T5828] bcachefs (loop1): shutting down [ 292.931078][ T5828] bcachefs (loop1): going read-only [ 293.084864][ T5828] bcachefs (loop1): finished waiting for writes to stop [ 293.143028][ T5828] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4 [ 294.248019][ T5828] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5 [ 295.098531][ T5828] bcachefs (loop1): clean shutdown complete, journal seq 6 [ 295.122489][ T5828] bcachefs (loop1): marking filesystem clean [ 296.594355][ T5828] bcachefs (loop1): shutdown complete [ 296.829266][ T7219] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 296.829266][ T7219] program syz.3.256 not setting count and/or reply_len properly [ 297.457792][ T7221] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 297.479545][ T7209] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.770651][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 302.611596][ T7249] loop3: detected capacity change from 0 to 40427 [ 303.475465][ T7249] F2FS-fs (loop3): build fault injection rate: 690 [ 303.482758][ T7249] F2FS-fs (loop3): Image doesn't support compression [ 303.489631][ T7249] F2FS-fs (loop3): Image doesn't support compression [ 303.497813][ T7249] F2FS-fs (loop3): build fault injection type: 0x4 [ 303.511189][ T7249] F2FS-fs (loop3): invalid crc value [ 303.603471][ T7249] F2FS-fs (loop3): Start checkpoint disabled! [ 303.625642][ T7249] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 306.027606][ T7268] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 306.055421][ T7268] CIFS: Unable to determine destination address [ 308.119256][ T6005] IPVS: starting estimator thread 0... [ 308.719062][ T7278] IPVS: using max 24 ests per chain, 57600 per kthread [ 308.885327][ T7282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'. [ 310.157575][ T7288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.197143][ T7288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 313.904777][ T7300] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.806066][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 314.806081][ T30] audit: type=1326 audit(1751471317.133:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 315.004818][ T30] audit: type=1326 audit(1751471317.133:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 315.046346][ T7303] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 315.046346][ T7303] program syz.1.277 not setting count and/or reply_len properly [ 315.049649][ T30] audit: type=1326 audit(1751471317.363:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 315.085572][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.481336][ T30] audit: type=1326 audit(1751471317.363:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 315.510748][ T30] audit: type=1326 audit(1751471317.363:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 315.533143][ T30] audit: type=1326 audit(1751471317.363:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 315.563263][ T30] audit: type=1326 audit(1751471317.363:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 315.586777][ T30] audit: type=1326 audit(1751471317.363:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f906298d290 code=0x7ffc0000 [ 315.725622][ T30] audit: type=1326 audit(1751471317.363:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 315.748590][ T30] audit: type=1326 audit(1751471317.363:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7308 comm="syz.3.270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f906298e929 code=0x7ffc0000 [ 317.991324][ T7335] loop1: detected capacity change from 0 to 64 [ 317.998040][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.004731][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.203894][ T7338] bfs: Unknown parameter ''-' [ 320.806040][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 320.806093][ T30] audit: type=1800 audit(1751471321.422:94): pid=7345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.286" name="dmabuf" dev="dmabuf" ino=4 res=0 errno=0 [ 320.862100][ T7346] loop2: detected capacity change from 0 to 128 [ 323.345253][ T5972] Bluetooth: hci5: Frame reassembly failed (-84) [ 323.396392][ T5972] Bluetooth: hci5: Frame reassembly failed (-84) [ 323.532357][ T977] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 323.661832][ T7381] loop2: detected capacity change from 0 to 8 [ 323.674645][ T7381] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 325.330399][ T5849] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 325.401042][ T6100] udevd[6100]: incorrect cramfs checksum on /dev/loop2 [ 325.482496][ T6053] udevd[6053]: incorrect cramfs checksum on /dev/loop2 [ 325.602879][ T7378] cramfs: Error -3 while decompressing! [ 325.608960][ T7378] cramfs: ffffffff99bedb68(26)->ffff888056642000(4096) [ 325.617330][ T7378] cramfs: Error -5 while decompressing! [ 325.622980][ T7378] cramfs: ffffffff99bedb82(26)->ffff888056641000(4096) [ 325.629937][ T7378] cramfs: Error -3 while decompressing! [ 325.635548][ T7378] cramfs: ffffffff99bedb9c(16)->ffff888056640000(4096) [ 325.642794][ T7378] cramfs: Error -3 while decompressing! [ 325.648399][ T7378] cramfs: ffffffff99bedb68(26)->ffff888056642000(4096) [ 325.656131][ T30] audit: type=1800 audit(1751471327.981:95): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.290" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 325.832803][ T7389] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 325.832803][ T7389] program syz.0.294 not setting count and/or reply_len properly [ 328.597304][ T7405] loop1: detected capacity change from 0 to 1024 [ 328.631799][ T7405] EXT4-fs: Ignoring removed i_version option [ 329.667103][ T7405] EXT4-fs: Ignoring removed mblk_io_submit option [ 329.901282][ T7405] EXT4-fs: inline encryption not supported [ 329.907195][ T7405] EXT4-fs: Ignoring removed nobh option [ 330.951158][ T7405] EXT4-fs: Ignoring removed bh option [ 331.172218][ T7420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.311687][ T7421] openvswitch: netlink: Actions may not be safe on all matching packets [ 331.818020][ T7405] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 331.820493][ T7405] EXT4-fs: failed to create workqueue [ 331.886375][ T7405] EXT4-fs (loop1): mount failed [ 332.344421][ T7435] syz.2.301: attempt to access beyond end of device [ 332.344421][ T7435] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 332.358510][ T7435] syz.2.301: attempt to access beyond end of device [ 332.358510][ T7435] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 340.044029][ T7489] loop2: detected capacity change from 0 to 1024 [ 340.093163][ T7489] EXT4-fs: Ignoring removed i_version option [ 340.099256][ T7489] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.303001][ T7489] EXT4-fs: inline encryption not supported [ 340.308929][ T7489] EXT4-fs: Ignoring removed nobh option [ 340.315021][ T7489] EXT4-fs: Ignoring removed bh option [ 341.217434][ C1] ================================================================== [ 341.225564][ C1] BUG: KASAN: out-of-bounds in __cpa_flush_tlb+0x46/0x270 [ 341.232721][ C1] Read of size 8 at addr ffffc90003e4f920 by task syz.4.316/7495 [ 341.240465][ C1] [ 341.242828][ C1] CPU: 1 UID: 0 PID: 7495 Comm: syz.4.316 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 341.242852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.242872][ C1] Call Trace: [ 341.242880][ C1] [ 341.242888][ C1] dump_stack_lvl+0x189/0x250 [ 341.242916][ C1] ? __cpa_flush_tlb+0x46/0x270 [ 341.242940][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.242963][ C1] ? __pfx__printk+0x10/0x10 [ 341.242980][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 341.243004][ C1] ? __virt_addr_valid+0xdc/0x5c0 [ 341.243019][ C1] print_report+0xd2/0x2b0 [ 341.243039][ C1] ? __cpa_flush_tlb+0x46/0x270 [ 341.243059][ C1] kasan_report+0x118/0x150 [ 341.243074][ C1] ? __cpa_flush_tlb+0x46/0x270 [ 341.243098][ C1] __cpa_flush_tlb+0x46/0x270 [ 341.243120][ C1] ? rcu_is_watching+0x15/0xb0 [ 341.243141][ C1] ? __pfx___cpa_flush_tlb+0x10/0x10 [ 341.243163][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 341.243186][ C1] ? __pfx___cpa_flush_tlb+0x10/0x10 [ 341.243209][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 341.243226][ C1] sysvec_call_function_single+0x9e/0xc0 [ 341.243250][ C1] [ 341.243255][ C1] [ 341.243262][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 341.243279][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 341.243298][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 4f 9b e0 09 e8 8a 17 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 341.243311][ C1] RSP: 0018:ffffc90003e2f558 EFLAGS: 00000282 [ 341.243329][ C1] RAX: 8494aaab8b169100 RBX: 0000000000000000 RCX: 8494aaab8b169100 [ 341.243341][ C1] RDX: 0000000000000007 RSI: ffffffff8d993fd3 RDI: ffffffff8be326c0 [ 341.243352][ C1] RBP: ffffc90003e2f5b0 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 341.243363][ C1] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: ffff88802fb31e00 [ 341.243375][ C1] R13: dffffc0000000000 R14: ffff88801ceada00 R15: ffff8880b873ab18 [ 341.243395][ C1] ? finish_task_switch+0x266/0x950 [ 341.243415][ C1] __schedule+0x16fd/0x4d00 [ 341.243445][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 341.243469][ C1] ? __pfx___schedule+0x10/0x10 [ 341.243489][ C1] ? __unix_dgram_recvmsg+0xa2f/0xde0 [ 341.243513][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 341.243544][ C1] preempt_schedule_irq+0xb5/0x150 [ 341.243567][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 341.243594][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 341.243615][ C1] irqentry_exit+0x6f/0x90 [ 341.243628][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 341.243643][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 341.243661][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 4b 97 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 341.243674][ C1] RSP: 0018:ffffc90003e2f948 EFLAGS: 00000206 [ 341.243686][ C1] RAX: 8494aaab8b169100 RBX: 0000000000000000 RCX: 8494aaab8b169100 [ 341.243697][ C1] RDX: 0000000000000000 RSI: ffffffff8db8215e RDI: ffffffff8be326c0 [ 341.243708][ C1] RBP: ffffffff820c6010 R08: 0000000000000000 R09: ffffffff820c6010 [ 341.243718][ C1] R10: ffffc90003e2faa0 R11: fffff520007c5f5b R12: 0000000000000001 [ 341.243728][ C1] R13: ffff888020f99760 R14: 0000000000000001 R15: 0000000000000246 [ 341.243740][ C1] ? __might_fault+0xb0/0x130 [ 341.243763][ C1] ? __might_fault+0xb0/0x130 [ 341.243802][ C1] ? __might_fault+0xb0/0x130 [ 341.243825][ C1] __might_fault+0xcc/0x130 [ 341.243847][ C1] ? __might_fault+0xb0/0x130 [ 341.243870][ C1] _copy_from_user+0x28/0xb0 [ 341.243891][ C1] ___sys_recvmsg+0x12e/0x510 [ 341.243910][ C1] ? trace_irq_disable+0x37/0x110 [ 341.243928][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 341.243962][ C1] ? __might_fault+0xb0/0x130 [ 341.243986][ C1] do_recvmmsg+0x307/0x770 [ 341.244009][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 341.244036][ C1] ? count_memcg_event_mm+0x21/0x260 [ 341.244057][ C1] ? count_memcg_event_mm+0x21/0x260 [ 341.244083][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 341.244105][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 341.244130][ C1] ? do_syscall_64+0xbe/0x3b0 [ 341.244147][ C1] do_syscall_64+0xfa/0x3b0 [ 341.244161][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.244184][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.244199][ C1] ? clear_bhb_loop+0x60/0xb0 [ 341.244216][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.244231][ C1] RIP: 0033:0x7f68bb98e929 [ 341.244245][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.244257][ C1] RSP: 002b:00007f68bc8b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 341.244279][ C1] RAX: ffffffffffffffda RBX: 00007f68bbbb6080 RCX: 00007f68bb98e929 [ 341.244290][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 341.244300][ C1] RBP: 00007f68bba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 341.244310][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 341.244319][ C1] R13: 0000000000000001 R14: 00007f68bbbb6080 R15: 00007ffe35234d58 [ 341.244336][ C1] [ 341.244342][ C1] [ 341.755020][ C1] The buggy address belongs to the virtual mapping at [ 341.755020][ C1] [ffffc90003e48000, ffffc90003e51000) created by: [ 341.755020][ C1] copy_process+0x54b/0x3c00 [ 341.772658][ C1] [ 341.774992][ C1] The buggy address belongs to the physical page: [ 341.781400][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888053be1000 pfn:0x53be1 [ 341.791480][ C1] memcg:ffff888032f52782 [ 341.795735][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 341.802867][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 341.811458][ C1] raw: ffff888053be1000 0000000000000000 00000001ffffffff ffff888032f52782 [ 341.820045][ C1] page dumped because: kasan: bad access detected [ 341.826470][ C1] page_owner tracks the page as allocated [ 341.832186][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7476, tgid 7476 (syz.4.312), ts 338835728857, free_ts 338704536445 [ 341.851339][ C1] post_alloc_hook+0x240/0x2a0 [ 341.856119][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 341.861668][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 341.867476][ C1] alloc_pages_mpol+0x232/0x4a0 [ 341.872340][ C1] alloc_pages_noprof+0xa9/0x190 [ 341.877277][ C1] __vmalloc_node_range_noprof+0x97d/0x12f0 [ 341.883174][ C1] __vmalloc_node_noprof+0xc2/0x110 [ 341.888371][ C1] dup_task_struct+0x3e7/0x860 [ 341.893141][ C1] copy_process+0x54b/0x3c00 [ 341.897743][ C1] kernel_clone+0x21e/0x870 [ 341.902273][ C1] __se_sys_clone3+0x256/0x2d0 [ 341.907053][ C1] do_syscall_64+0xfa/0x3b0 [ 341.911675][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.917571][ C1] page last free pid 23 tgid 23 stack trace: [ 341.923553][ C1] __free_frozen_pages+0xb80/0xd80 [ 341.928695][ C1] __tlb_remove_table+0x2d2/0x3b0 [ 341.933725][ C1] tlb_remove_table_rcu+0x85/0x100 [ 341.938839][ C1] rcu_core+0xca5/0x1710 [ 341.943085][ C1] handle_softirqs+0x286/0x870 [ 341.947856][ C1] run_ksoftirqd+0x9b/0x100 [ 341.952368][ C1] smpboot_thread_fn+0x53f/0xa60 [ 341.957310][ C1] kthread+0x70e/0x8a0 [ 341.961382][ C1] ret_from_fork+0x3fc/0x770 [ 341.965978][ C1] ret_from_fork_asm+0x1a/0x30 [ 341.970751][ C1] [ 341.973093][ C1] Memory state around the buggy address: [ 341.978742][ C1] ffffc90003e4f800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 341.986820][ C1] ffffc90003e4f880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 341.994903][ C1] >ffffc90003e4f900: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 00 00 00 [ 342.002982][ C1] ^ [ 342.008368][ C1] ffffc90003e4f980: 00 00 00 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 342.016437][ C1] ffffc90003e4fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 342.024512][ C1] ================================================================== [ 342.032671][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 342.039915][ C1] CPU: 1 UID: 0 PID: 7495 Comm: syz.4.316 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 342.051319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.061396][ C1] Call Trace: [ 342.064700][ C1] [ 342.067578][ C1] dump_stack_lvl+0x99/0x250 [ 342.072196][ C1] ? __asan_memcpy+0x40/0x70 [ 342.076805][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.082015][ C1] ? __pfx__printk+0x10/0x10 [ 342.086618][ C1] panic+0x2db/0x790 [ 342.090532][ C1] ? __pfx_panic+0x10/0x10 [ 342.094962][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 342.100163][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 342.106074][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 342.112423][ C1] ? __cpa_flush_tlb+0x46/0x270 [ 342.117304][ C1] check_panic_on_warn+0x89/0xb0 [ 342.122253][ C1] ? __cpa_flush_tlb+0x46/0x270 [ 342.127129][ C1] end_report+0x78/0x160 [ 342.131374][ C1] kasan_report+0x129/0x150 [ 342.135882][ C1] ? __cpa_flush_tlb+0x46/0x270 [ 342.140747][ C1] __cpa_flush_tlb+0x46/0x270 [ 342.145432][ C1] ? rcu_is_watching+0x15/0xb0 [ 342.150214][ C1] ? __pfx___cpa_flush_tlb+0x10/0x10 [ 342.155508][ C1] __flush_smp_call_function_queue+0x370/0xaa0 [ 342.161672][ C1] ? __pfx___cpa_flush_tlb+0x10/0x10 [ 342.166970][ C1] __sysvec_call_function_single+0xa8/0x3d0 [ 342.172870][ C1] sysvec_call_function_single+0x9e/0xc0 [ 342.178516][ C1] [ 342.181456][ C1] [ 342.184389][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 342.190421][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 342.196241][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 e9 27 05 00 00 4c 8b 75 d0 4c 89 e7 e8 4f 9b e0 09 e8 8a 17 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 18 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 342.215853][ C1] RSP: 0018:ffffc90003e2f558 EFLAGS: 00000282 [ 342.221933][ C1] RAX: 8494aaab8b169100 RBX: 0000000000000000 RCX: 8494aaab8b169100 [ 342.229911][ C1] RDX: 0000000000000007 RSI: ffffffff8d993fd3 RDI: ffffffff8be326c0 [ 342.237889][ C1] RBP: ffffc90003e2f5b0 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 342.245864][ C1] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: ffff88802fb31e00 [ 342.253838][ C1] R13: dffffc0000000000 R14: ffff88801ceada00 R15: ffff8880b873ab18 [ 342.261924][ C1] ? finish_task_switch+0x266/0x950 [ 342.267141][ C1] __schedule+0x16fd/0x4d00 [ 342.271672][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 342.276973][ C1] ? __pfx___schedule+0x10/0x10 [ 342.281829][ C1] ? __unix_dgram_recvmsg+0xa2f/0xde0 [ 342.287212][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 342.292508][ C1] preempt_schedule_irq+0xb5/0x150 [ 342.297633][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 342.303369][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 342.309191][ C1] irqentry_exit+0x6f/0x90 [ 342.313612][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 342.319080][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 342.324382][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 4b 97 02 11 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 342.344080][ C1] RSP: 0018:ffffc90003e2f948 EFLAGS: 00000206 [ 342.350158][ C1] RAX: 8494aaab8b169100 RBX: 0000000000000000 RCX: 8494aaab8b169100 [ 342.358137][ C1] RDX: 0000000000000000 RSI: ffffffff8db8215e RDI: ffffffff8be326c0 [ 342.366112][ C1] RBP: ffffffff820c6010 R08: 0000000000000000 R09: ffffffff820c6010 [ 342.374089][ C1] R10: ffffc90003e2faa0 R11: fffff520007c5f5b R12: 0000000000000001 [ 342.382064][ C1] R13: ffff888020f99760 R14: 0000000000000001 R15: 0000000000000246 [ 342.390043][ C1] ? __might_fault+0xb0/0x130 [ 342.394735][ C1] ? __might_fault+0xb0/0x130 [ 342.399444][ C1] ? __might_fault+0xb0/0x130 [ 342.404132][ C1] __might_fault+0xcc/0x130 [ 342.408659][ C1] ? __might_fault+0xb0/0x130 [ 342.413387][ C1] _copy_from_user+0x28/0xb0 [ 342.418020][ C1] ___sys_recvmsg+0x12e/0x510 [ 342.422732][ C1] ? trace_irq_disable+0x37/0x110 [ 342.427782][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 342.433009][ C1] ? __might_fault+0xb0/0x130 [ 342.437725][ C1] do_recvmmsg+0x307/0x770 [ 342.442176][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 342.447138][ C1] ? count_memcg_event_mm+0x21/0x260 [ 342.452443][ C1] ? count_memcg_event_mm+0x21/0x260 [ 342.457760][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 342.462841][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 342.468401][ C1] ? do_syscall_64+0xbe/0x3b0 [ 342.473086][ C1] do_syscall_64+0xfa/0x3b0 [ 342.477604][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.482816][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.488886][ C1] ? clear_bhb_loop+0x60/0xb0 [ 342.493572][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.499469][ C1] RIP: 0033:0x7f68bb98e929 [ 342.503903][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.523528][ C1] RSP: 002b:00007f68bc8b8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 342.531957][ C1] RAX: ffffffffffffffda RBX: 00007f68bbbb6080 RCX: 00007f68bb98e929 [ 342.539942][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 342.547926][ C1] RBP: 00007f68bba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 342.555905][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 342.563887][ C1] R13: 0000000000000001 R14: 00007f68bbbb6080 R15: 00007ffe35234d58 [ 342.571879][ C1] [ 342.575168][ C1] Kernel Offset: disabled [ 342.579503][ C1] Rebooting in 86400 seconds..