last executing test programs: 6m54.048929376s ago: executing program 3 (id=9): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000400)={0x14, 0x88, 0xfa00, {r1, 0x1c, 0x0, @in6={0xa, 0x4e24, 0xfff, @loopback, 0x4}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x4e23, 0x2, @empty, 0x3}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0x0, 0x6}}}, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$qrtrtun(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x3c, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0x9, 0x2, 0x0, 0x0, @binary="b27d9adc61"}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20004005) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r7, 0x4b40, &(0x7f0000000a40)=""/4096) 6m52.810832255s ago: executing program 3 (id=11): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140, 0x83) readahead(r5, 0x7fffffff, 0x10000) 6m51.17609592s ago: executing program 3 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40890) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019380)=""/102400, 0x19000) syz_open_dev$sndctrl(0x0, 0x0, 0x883) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) close_range(0xffffffffffffffff, r1, 0x2) mq_notify(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600), 0xfec8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xcb, 0x0) 6m47.272123042s ago: executing program 3 (id=16): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 6m44.8599264s ago: executing program 3 (id=22): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x9, 0x3, 0x3b0, 0x0, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x2e0, 0xffffffff, 0xffffffff, 0x2e0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@dst={{0x48}, {0x8, 0x5, 0x1, [0xfffc, 0xff, 0xd, 0x2d11, 0x9, 0x67, 0x2, 0x4f02, 0x4, 0x7f, 0x9, 0x800, 0xf, 0x1dd, 0x7, 0x1ff], 0xe}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x100}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, [0xff000000, 0xffffffff, 0xffffff00], [0x0, 0xff, 0xffffff00], 'veth1_to_team\x00', '\x00', {}, {}, 0x5c, 0xf, 0x2}, 0x0, 0x180, 0x1a0, 0x0, {}, [@common=@srh1={{0x90}, {0x2b, 0x5, 0x10, 0x0, 0xb5, @empty, @empty, @private2, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], [0x0, 0xff000000, 0xff], [0x0, 0xffffffff, 0xff000000, 0xffffffff], 0x8, 0xa0}}, @common=@hbh={{0x48}, {0x6, 0x2, 0x1, [0xfffb, 0x7, 0xfff7, 0x7, 0x7, 0x80, 0x0, 0x5, 0x3, 0x80, 0x4, 0xfffd, 0x5, 0x2, 0xf]}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r4 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0xffffff14, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) recvmmsg(0xffffffffffffffff, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, 0x0, 0x2, 0x45, 0x0, "00000000000000000000000000000000000000f300000000000000000000000000000000350d0000000000000000000083c0d55760b2d13d000c00cbcd00800000000000000000080000008000"}, 0xd8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r5, 0x81}, 0x8) 6m39.787908204s ago: executing program 3 (id=29): socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 6m38.973436664s ago: executing program 32 (id=29): socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff030060010000009e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='vxfs\x00', 0x1000080, 0x0) 21.113989964s ago: executing program 5 (id=663): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fsopen(0x0, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(0x0, 0x480, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) ioctl$KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount$pvfs2(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8184c, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 18.498030116s ago: executing program 2 (id=668): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7d68c906) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000540)=""/102400, 0x19000) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) syz_open_procfs(0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) 17.250826427s ago: executing program 5 (id=670): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="93fc85ff30d2", @random="2ecafcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0x10, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}, "f439992d"}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1, 0x5, 0xffffffff, 0x30000, 0x80000001, 0x8, 0x4, 0x5e5e}, &(0x7f0000000480), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r3, &(0x7f0000000180)={0x27}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) clock_getres(0x2, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)=@keyring) syz_emit_ethernet(0x46, &(0x7f0000000780)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x7}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800efe000000000000000000a00000000000000000000000c00090008", @ANYRES32=0x0, @ANYBLOB="1400050000000000000000000000000000000002"], 0x3c}, 0x1, 0x11}, 0x0) 17.250037567s ago: executing program 1 (id=671): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x44000268) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x78) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f0000000180)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) 16.313860961s ago: executing program 2 (id=672): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = io_uring_setup(0x6e0e, &(0x7f0000000280)={0x0, 0xe9f9, 0x2, 0x5, 0x54}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x2404c140) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f00000002c0)="428280f46aa1d3f08a90b1e2e0", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x41) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) r5 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r5, 0x0) setfsgid(0xee01) faccessat(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x1, {0x0}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.676906641s ago: executing program 1 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc2, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x88S`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x200000}, 0x1f00) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x801}, 0x20040001) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$afs(&(0x7f0000000100)=ANY=[@ANYBLOB='#syz1:syz0'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 14.676259689s ago: executing program 4 (id=675): socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) openat$autofs(0xffffffffffffff9c, 0x0, 0x8e8c1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r6}) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) close(r0) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) 14.474510447s ago: executing program 5 (id=676): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x1) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.220075672s ago: executing program 2 (id=677): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x80000, 0x2) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, 0x0, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, 0x0, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="e0000000130001ffe18f6bcad3e1489944b20971c4f816f8b5ae7fd8818dc8dc6d1f1006192590a86a083bead859a5"], 0xe0}}, 0x0) 12.13514529s ago: executing program 1 (id=678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tgkill(0x0, 0x0, 0x1d) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) pwritev(r3, &(0x7f0000000600), 0x0, 0xfa2c, 0x6) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_clone(0x84007100, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)="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") getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r6, 0x0, 0x0, 0x10042, 0x0) getsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000200), 0x0) 10.753705053s ago: executing program 4 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0xfffffe28, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001e7a2d7587f0000000080"], 0x24}}, 0x8d0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) shutdown(r4, 0x2) getuid() r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r6, 0x0, 0x0) write$FUSE_INIT(r6, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) 10.573959845s ago: executing program 5 (id=681): syz_usbip_server_init(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r1}}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0x10, 0x5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r7, 0x0, 0xa0028000}, 0x38) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000c40)={0x2000000b}) accept(r3, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000180)=0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f00000001c0)=0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) write(r8, 0x0, 0x0) connect$unix(r9, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 9.371647251s ago: executing program 4 (id=682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleav']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000003c0), 0xb315) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x80000001}) io_uring_setup(0x7551, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x8000}) 8.981466319s ago: executing program 0 (id=683): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x10040) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) socket$pppl2tp(0x18, 0x1, 0x1) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r6, 0x4008ae48, &(0x7f0000000240)=0xf000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 8.779410088s ago: executing program 2 (id=684): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000100)=0x3, 0x4) sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000000000), 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, 0x0, 0x0) unshare(0x68040200) 6.600077598s ago: executing program 4 (id=685): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioperm(0x0, 0x6, 0x2da3b9f3) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fchown(r1, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b21, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 6.497822442s ago: executing program 0 (id=686): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x20000000}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@printk={@d}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x7b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="85e3de50d5b66bd8f1ff08251a6c", 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r5, 0x40101286, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(0x0, 0xffffffffffffff4b, 0x10000000000001) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$smackfs_netlabel(r8, 0x0, 0x57) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r9, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYRES16, @ANYBLOB="03070000000000000000080000006800"], 0x7c}}, 0x0) 5.452857289s ago: executing program 1 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r4, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272f874ee3b5c6e56", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) shutdown(r4, 0x1) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1f) read$watch_queue(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r5) socket$packet(0x11, 0x2, 0x300) 5.311248271s ago: executing program 2 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8}, 0x94) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x7d1e02, 0x90) sendfile(r3, r3, 0x0, 0x101) socket$inet6(0xa, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x97) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240)="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", 0x12d, r4) 5.100896079s ago: executing program 0 (id=689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x4040090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r6, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r7, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x3f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) truncate(0x0, 0xbf39) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000080000000d) 4.128561596s ago: executing program 1 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x200, 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x8, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0xf9, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0xfc, 0x3, 0x41, 0x0, 0xfc, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1003fe, 0x9, 0x0, 0xfd, 0x20, 0x5, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0xb82e}], 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000380)="b8010000000f01c126420f38cb0c0666baf80cb8523f8186ef66bafc0c66b84a0066efc74424005b000000c7442402b569ccacff1c2466baf80cb80861128def66bafc0cb800480000ef420f017fa00fc7b1800000002666430f3881050a0000000fc75f006666460f383521", 0x6c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r4}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x3, @remote}, r4, 0x2}}, 0x48) 4.127494618s ago: executing program 5 (id=691): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x28, 0xf4, 0x0, 0xfffff034}]}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x1) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.124972728s ago: executing program 0 (id=692): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @dev={0xfe, 0x80, '\x00', 0x10}, 0x3a}, 0x1c) r7 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r7, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x86\x81\t\n\xac\"\xff4l\xaa\x91\xec\x99M.p\xdc4\x0e\x1c\xdf\xd3\xd4\x8d\xad\x99\x1c\xae\xb2vt\r@0K\x989\x1c\xd7%\x82\x94\x05\x06\xbeJ\x90\xd8&\xa6?~\x88\x01;\r7\xdf\xb7\xfb\x85\x133\x17I\xb4\xbc`7\xda\x91\xefP0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x4000) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x12}], 0x1}, 0x0) 1.924558644s ago: executing program 4 (id=695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleav']) chdir(&(0x7f0000000240)='./file0\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000003c0), 0xb315) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x300, 0x80000001}) io_uring_setup(0x7551, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x8000}) 847.396563ms ago: executing program 0 (id=696): r0 = syz_io_uring_complete(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) sendmsg$netlink(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0xc0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000febbdf250b00020073797a3100000000080041007369770014003300626f6e643000"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000) 602.528364ms ago: executing program 0 (id=697): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) socket$nl_route(0x10, 0x3, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.780684ms ago: executing program 5 (id=698): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) tgkill(0x0, 0x0, 0x1d) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080)=0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r1, 0x5420, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) pwritev(r3, &(0x7f0000000600), 0x0, 0xfa2c, 0x6) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) syz_clone(0x84007100, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)="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") getsockopt$llc_int(r4, 0x10c, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r6, 0x0, 0x0, 0x10042, 0x0) getsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000000200), 0x0) 0s ago: executing program 1 (id=708): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x28, 0xf4, 0x0, 0xfffff034}]}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x1) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.52' (ED25519) to the list of known hosts. [ 88.217026][ T5806] cgroup: Unknown subsys name 'net' [ 88.325824][ T5806] cgroup: Unknown subsys name 'cpuset' [ 88.334854][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.811512][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.588165][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.610263][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.622669][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.631541][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.631654][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.644793][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.655626][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.665423][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.670610][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.680711][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.684801][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.693568][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.701209][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.715644][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.738190][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.747154][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.755329][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.762559][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.764121][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.781052][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.790923][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.822140][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.832555][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.842067][ T5821] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.855596][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.401459][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 94.522892][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 94.634652][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 94.752283][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.759932][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.775452][ T5825] bridge_slave_0: entered allmulticast mode [ 94.785607][ T5825] bridge_slave_0: entered promiscuous mode [ 94.856307][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.864310][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.872600][ T5825] bridge_slave_1: entered allmulticast mode [ 94.880669][ T5825] bridge_slave_1: entered promiscuous mode [ 94.894869][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 94.905785][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.913645][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.921321][ T5822] bridge_slave_0: entered allmulticast mode [ 94.928935][ T5822] bridge_slave_0: entered promiscuous mode [ 94.936652][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.944954][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.952919][ T5822] bridge_slave_1: entered allmulticast mode [ 94.959976][ T5822] bridge_slave_1: entered promiscuous mode [ 95.008970][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 95.086254][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.127496][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.139048][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.184069][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.208070][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.216091][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.223887][ T5835] bridge_slave_0: entered allmulticast mode [ 95.230948][ T5835] bridge_slave_0: entered promiscuous mode [ 95.272878][ T5825] team0: Port device team_slave_0 added [ 95.279610][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.287395][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.295625][ T5835] bridge_slave_1: entered allmulticast mode [ 95.304423][ T5835] bridge_slave_1: entered promiscuous mode [ 95.341778][ T5825] team0: Port device team_slave_1 added [ 95.360638][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.368444][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.376437][ T5817] bridge_slave_0: entered allmulticast mode [ 95.384356][ T5817] bridge_slave_0: entered promiscuous mode [ 95.407002][ T5822] team0: Port device team_slave_0 added [ 95.438052][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.445543][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.454281][ T5817] bridge_slave_1: entered allmulticast mode [ 95.461278][ T5817] bridge_slave_1: entered promiscuous mode [ 95.480951][ T5822] team0: Port device team_slave_1 added [ 95.501452][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.537462][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.546346][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.554847][ T5816] bridge_slave_0: entered allmulticast mode [ 95.564115][ T5816] bridge_slave_0: entered promiscuous mode [ 95.595456][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.603219][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.630851][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.644650][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.652145][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.678913][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.692928][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.705442][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.719873][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.729972][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.737521][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.745053][ T5816] bridge_slave_1: entered allmulticast mode [ 95.752834][ T5816] bridge_slave_1: entered promiscuous mode [ 95.760635][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.767749][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.772813][ T5828] Bluetooth: hci3: command tx timeout [ 95.794454][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.851973][ T5824] Bluetooth: hci1: command tx timeout [ 95.857786][ T5828] Bluetooth: hci0: command tx timeout [ 95.878812][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.886335][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.913538][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.935515][ T5828] Bluetooth: hci4: command tx timeout [ 95.935523][ T5824] Bluetooth: hci2: command tx timeout [ 95.956764][ T5817] team0: Port device team_slave_0 added [ 95.983538][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.997591][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.011240][ T5835] team0: Port device team_slave_0 added [ 96.022540][ T5817] team0: Port device team_slave_1 added [ 96.070646][ T5835] team0: Port device team_slave_1 added [ 96.122650][ T5825] hsr_slave_0: entered promiscuous mode [ 96.128954][ T5825] hsr_slave_1: entered promiscuous mode [ 96.174933][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.182887][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.210720][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.242803][ T5816] team0: Port device team_slave_0 added [ 96.249918][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.259186][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.289287][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.301880][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.310591][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.346453][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.383150][ T5822] hsr_slave_0: entered promiscuous mode [ 96.390406][ T5822] hsr_slave_1: entered promiscuous mode [ 96.396757][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.406052][ T5822] Cannot create hsr debugfs directory [ 96.448290][ T5816] team0: Port device team_slave_1 added [ 96.455167][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.462821][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.490242][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.628297][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.636543][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.670308][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.690891][ T5817] hsr_slave_0: entered promiscuous mode [ 96.700650][ T5817] hsr_slave_1: entered promiscuous mode [ 96.709251][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.719354][ T5817] Cannot create hsr debugfs directory [ 96.747385][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.758124][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.790341][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.899824][ T5835] hsr_slave_0: entered promiscuous mode [ 96.909149][ T5835] hsr_slave_1: entered promiscuous mode [ 96.917912][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.927736][ T5835] Cannot create hsr debugfs directory [ 97.092166][ T5816] hsr_slave_0: entered promiscuous mode [ 97.098773][ T5816] hsr_slave_1: entered promiscuous mode [ 97.105856][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.115364][ T5816] Cannot create hsr debugfs directory [ 97.452231][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.465710][ T24] cfg80211: failed to load regulatory.db [ 97.493088][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.550961][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.585941][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.672765][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.697681][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.710947][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.723451][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.853266][ T5824] Bluetooth: hci3: command tx timeout [ 97.861635][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.899370][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.927522][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.942268][ T5824] Bluetooth: hci0: command tx timeout [ 97.942355][ T5828] Bluetooth: hci1: command tx timeout [ 97.971112][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.989320][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.012493][ T5828] Bluetooth: hci2: command tx timeout [ 98.015678][ T5824] Bluetooth: hci4: command tx timeout [ 98.025458][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.055072][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.089764][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.110751][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.121378][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.186800][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.215276][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.250107][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.260719][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.276674][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.298608][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.307829][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.320150][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.364196][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.372171][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.395274][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.404914][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.424001][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.433644][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.608317][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.689509][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.709331][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.769557][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.777298][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.830652][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.839818][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.918803][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.950214][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.997019][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.006132][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.050247][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.057669][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.134550][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.202803][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.210038][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.231302][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.264219][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.271987][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.337063][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.406818][ T5816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.423820][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.555208][ T5822] veth0_vlan: entered promiscuous mode [ 99.583910][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.639551][ T5822] veth1_vlan: entered promiscuous mode [ 99.786656][ T5817] veth0_vlan: entered promiscuous mode [ 99.821074][ T5822] veth0_macvtap: entered promiscuous mode [ 99.860923][ T5822] veth1_macvtap: entered promiscuous mode [ 99.885362][ T5817] veth1_vlan: entered promiscuous mode [ 99.932385][ T5824] Bluetooth: hci3: command tx timeout [ 99.965796][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.992758][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.006536][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.015088][ T5828] Bluetooth: hci0: command tx timeout [ 100.015550][ T5824] Bluetooth: hci1: command tx timeout [ 100.031503][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.050170][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.061315][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.072133][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.080948][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.094307][ T5824] Bluetooth: hci2: command tx timeout [ 100.100610][ T5824] Bluetooth: hci4: command tx timeout [ 100.123495][ T5817] veth0_macvtap: entered promiscuous mode [ 100.153147][ T5817] veth1_macvtap: entered promiscuous mode [ 100.257331][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.275761][ T5835] veth0_vlan: entered promiscuous mode [ 100.325374][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.334096][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.335471][ T5825] veth0_vlan: entered promiscuous mode [ 100.355028][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.357116][ T5816] veth0_vlan: entered promiscuous mode [ 100.381427][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.392040][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.401445][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.410984][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.430187][ T5825] veth1_vlan: entered promiscuous mode [ 100.450367][ T5835] veth1_vlan: entered promiscuous mode [ 100.478202][ T5816] veth1_vlan: entered promiscuous mode [ 100.491626][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.508519][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.570653][ T5825] veth0_macvtap: entered promiscuous mode [ 100.608716][ T5825] veth1_macvtap: entered promiscuous mode [ 100.616677][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.638193][ T5816] veth0_macvtap: entered promiscuous mode [ 100.669721][ T5835] veth0_macvtap: entered promiscuous mode [ 100.690529][ T5835] veth1_macvtap: entered promiscuous mode [ 100.728662][ T5816] veth1_macvtap: entered promiscuous mode [ 100.785464][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.801630][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.424908][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.437149][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.476600][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.489407][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.500380][ T5825] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.510493][ T5825] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.521071][ T5825] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.531080][ T5825] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.558624][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.560564][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.574476][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.719307][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.754393][ T5816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.768695][ T5816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.780156][ T5816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.795836][ T5816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.838354][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.873518][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.886720][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.897872][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.172215][ T5824] Bluetooth: hci3: command tx timeout [ 102.178789][ T5824] Bluetooth: hci1: command tx timeout [ 102.185294][ T5824] Bluetooth: hci0: command tx timeout [ 102.191794][ T5824] Bluetooth: hci4: command tx timeout [ 102.198219][ T5824] Bluetooth: hci2: command tx timeout [ 102.841985][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.896798][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.920181][ T5956] Cannot find add_set index 0 as target [ 103.391714][ T10] libceph: connect (1)[c::]:6789 error -101 [ 103.408428][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 103.589860][ T5955] ceph: No mds server is up or the cluster is laggy [ 103.852948][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 103.880154][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 103.979819][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.030848][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.666328][ T5969] syz.3.9 (5969): /proc/5964/oom_adj is deprecated, please use /proc/5964/oom_score_adj instead. [ 104.694947][ T5969] netlink: 'syz.3.9': attribute type 2 has an invalid length. [ 104.998589][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.008688][ T4117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.040177][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.048265][ T4117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.284611][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.327784][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.296557][ T5981] atomic_op ffff88807e510998 conn xmit_atomic 0000000000000000 [ 106.771441][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.806255][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.562317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.572829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.581568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.590218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.602910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.611355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 108.620507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.629383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.639296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.648224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.077014][ T6004] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 110.988974][ T6012] ======================================================= [ 110.988974][ T6012] WARNING: The mand mount option has been deprecated and [ 110.988974][ T6012] and is ignored by this kernel. Remove the mand [ 110.988974][ T6012] option from the mount to silence this warning. [ 110.988974][ T6012] ======================================================= [ 114.636887][ T6034] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.407775][ T6066] netlink: 104 bytes leftover after parsing attributes in process `syz.1.27'. [ 118.262673][ T5822] syz-executor (5822) used greatest stack depth: 19928 bytes left [ 118.879144][ T4117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.140301][ T4117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.401875][ T6089] Bluetooth: MGMT ver 1.23 [ 120.407581][ T6089] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 121.381372][ T6093] kAFS: No cell specified [ 121.433533][ T4117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.476738][ T4117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.722000][ T6115] xt_hashlimit: max too large, truncated to 1048576 [ 123.733306][ T6115] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 127.662563][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.926791][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.938299][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.954200][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.970069][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 128.843141][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.070535][ T4117] bridge_slave_1: left allmulticast mode [ 129.084809][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.109835][ T4117] bridge_slave_1: left promiscuous mode [ 129.150146][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.163418][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 129.255194][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.283008][ T4117] bridge_slave_0: left allmulticast mode [ 129.305105][ T4117] bridge_slave_0: left promiscuous mode [ 129.314394][ T10] usb 1-1: config 0 descriptor?? [ 129.332077][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.882073][ T10] logitech 0003:046D:C295.0001: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.0-1/input0 [ 129.930416][ T10] logitech 0003:046D:C295.0001: no inputs found [ 130.572795][ T5824] Bluetooth: hci2: command tx timeout [ 131.089991][ T5935] usb 1-1: USB disconnect, device number 2 [ 131.387806][ T6176] trusted_key: encrypted_key: insufficient parameters specified [ 132.510809][ T4117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.702365][ T5824] Bluetooth: hci2: command tx timeout [ 132.816761][ T6192] capability: warning: `syz.1.47' uses 32-bit capabilities (legacy support in use) [ 132.835777][ T6192] program syz.1.47 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.425886][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.433767][ T4117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.442409][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.493555][ T4117] bond0 (unregistering): Released all slaves [ 134.581218][ T6183] sp0: Synchronizing with TNC [ 134.695433][ T6205] random: crng reseeded on system resumption [ 134.732032][ T5828] Bluetooth: hci2: command tx timeout [ 136.812346][ T5828] Bluetooth: hci2: command tx timeout [ 137.967129][ T4117] hsr_slave_0: left promiscuous mode [ 137.979701][ T6234] ip6t_srh: unknown srh invflags 7D00 [ 138.025342][ T4117] hsr_slave_1: left promiscuous mode [ 138.116910][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.125111][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.150837][ T4117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.160327][ T4117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.212704][ T4117] veth1_macvtap: left promiscuous mode [ 138.320845][ T4117] veth0_macvtap: left promiscuous mode [ 138.326808][ T4117] veth1_vlan: left promiscuous mode [ 138.336315][ T4117] veth0_vlan: left promiscuous mode [ 138.519285][ T6243] process 'syz.4.58' launched './file0' with NULL argv: empty string added [ 139.261630][ T6229] Process accounting resumed [ 141.260006][ T6262] capability: warning: `syz.0.63' uses deprecated v2 capabilities in a way that may be insecure [ 143.236402][ T4117] team0 (unregistering): Port device team_slave_1 removed [ 144.084374][ T4117] team0 (unregistering): Port device team_slave_0 removed [ 147.144825][ T6284] lo speed is unknown, defaulting to 1000 [ 147.151020][ T6284] lo speed is unknown, defaulting to 1000 [ 147.158813][ T6284] lo speed is unknown, defaulting to 1000 [ 147.168388][ T6284] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 147.180963][ T6284] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 147.204898][ T6284] lo speed is unknown, defaulting to 1000 [ 147.212151][ T6284] lo speed is unknown, defaulting to 1000 [ 147.219882][ T6284] lo speed is unknown, defaulting to 1000 [ 147.228448][ T6284] lo speed is unknown, defaulting to 1000 [ 147.236255][ T6284] lo speed is unknown, defaulting to 1000 [ 147.926496][ T6316] tipc: Started in network mode [ 147.934754][ T6316] tipc: Node identity ac141425, cluster identity 4711 [ 148.083540][ T6316] tipc: New replicast peer: 0.0.0.0 [ 148.089353][ T6316] tipc: Enabled bearer , priority 10 [ 148.237489][ T6324] dlm: no local IP address has been set [ 148.243438][ T6324] dlm: cannot start dlm midcomms -107 [ 149.099218][ T5829] tipc: Node number set to 2886997029 [ 150.291950][ T6337] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 150.643777][ T6131] chnl_net:caif_netlink_parms(): no params data found [ 151.666638][ T6131] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.739674][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.765923][ T6131] bridge_slave_0: entered allmulticast mode [ 151.793007][ T6131] bridge_slave_0: entered promiscuous mode [ 151.810854][ T6131] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.833057][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.859971][ T6131] bridge_slave_1: entered allmulticast mode [ 151.970738][ T6131] bridge_slave_1: entered promiscuous mode [ 152.866812][ T6131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.905776][ T6131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.665738][ T6373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.82'. [ 153.677842][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 153.727466][ T6131] team0: Port device team_slave_0 added [ 155.719336][ T6131] team0: Port device team_slave_1 added [ 155.742391][ T6373] Zero length message leads to an empty skb [ 156.226485][ T30] audit: type=1326 audit(1751320488.137:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6384 comm="syz.0.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x0 [ 158.450681][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.461621][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.491215][ T6131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.505989][ T6131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.529154][ T6131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.626843][ T6131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.354971][ T6435] siw: device registration error -23 [ 161.369199][ T6439] ipt_REJECT: TCP_RESET invalid for non-tcp [ 161.370282][ T6131] hsr_slave_0: entered promiscuous mode [ 161.442952][ T6131] hsr_slave_1: entered promiscuous mode [ 161.469738][ T6131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.558305][ T6131] Cannot create hsr debugfs directory [ 164.836991][ T6463] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 164.846588][ T6463] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 166.906970][ T6131] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.965512][ T6131] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.040892][ T6131] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.237241][ T6131] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.582855][ T6506] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.829233][ T6131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.850649][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.858517][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.865666][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.646885][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.654047][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.537078][ T6131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.404345][ T6549] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 175.430804][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.438115][ T6549] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 177.266972][ T10] libceph: connect (1)[c::]:6789 error -101 [ 177.273362][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 177.390078][ T6565] ceph: No mds server is up or the cluster is laggy [ 177.729244][ T10] libceph: connect (1)[c::]:6789 error -101 [ 177.735843][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 178.206423][ T6131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.718190][ T6597] ieee802154 phy0 wpan0: encryption failed: -22 [ 179.562747][ T6604] x_tables: duplicate underflow at hook 3 [ 180.354063][ T6614] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 180.363142][ T6614] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 180.415262][ T5935] IPVS: starting estimator thread 0... [ 180.992089][ T6615] IPVS: using max 36 ests per chain, 86400 per kthread [ 181.321524][ T5824] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.331920][ T5824] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.339648][ T5824] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.354452][ T5824] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.409476][ T6630] kAFS: unparsable volume name [ 181.892116][ T5824] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 182.466582][ T6635] syz.0.129: attempt to access beyond end of device [ 182.466582][ T6635] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 182.479801][ T6635] vxfs: unable to read disk superblock at 1 [ 182.487328][ T6635] syz.0.129: attempt to access beyond end of device [ 182.487328][ T6635] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 182.500545][ T6635] vxfs: unable to read disk superblock at 8 [ 182.506575][ T6635] vxfs: can't find superblock. [ 182.769287][ T6627] lo speed is unknown, defaulting to 1000 [ 183.509031][ T5828] Bluetooth: hci0: Malformed LE Event: 0x1b [ 183.933015][ T5828] Bluetooth: hci5: command tx timeout [ 186.254130][ T5828] Bluetooth: hci5: command tx timeout [ 188.204142][ T6691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.258100][ T6691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.598723][ T5828] Bluetooth: hci5: command tx timeout [ 188.895913][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 190.653641][ T5828] Bluetooth: hci5: command tx timeout [ 190.884674][ T6627] chnl_net:caif_netlink_parms(): no params data found [ 193.578959][ T6627] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.606099][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.806383][ T6627] bridge_slave_0: entered allmulticast mode [ 193.844033][ T6627] bridge_slave_0: entered promiscuous mode [ 193.879899][ T6627] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.938587][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.262074][ T6627] bridge_slave_1: entered allmulticast mode [ 194.270018][ T6627] bridge_slave_1: entered promiscuous mode [ 194.744483][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.758844][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.158368][ T6758] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.153'. [ 195.172617][ T6755] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.153'. [ 195.315592][ T6627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.487872][ T6627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.554726][ T6768] sg_write: data in/out 2387/42 bytes for SCSI command 0x0-- guessing data in; [ 195.554726][ T6768] program syz.1.155 not setting count and/or reply_len properly [ 196.210472][ T12] bridge_slave_1: left allmulticast mode [ 196.218443][ T12] bridge_slave_1: left promiscuous mode [ 196.408196][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.426356][ T12] bridge_slave_0: left allmulticast mode [ 196.444966][ T12] bridge_slave_0: left promiscuous mode [ 197.417217][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.477991][ T6806] syz.0.162: attempt to access beyond end of device [ 201.477991][ T6806] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 201.496599][ T6806] gfs2: error -5 reading superblock [ 202.882131][ T5946] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 202.891541][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.906189][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.917198][ T12] bond0 (unregistering): Released all slaves [ 202.985715][ T6819] xt_HMARK: proto mask must be zero with L3 mode [ 203.482340][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 203.511745][ T6627] team0: Port device team_slave_0 added [ 203.526399][ T5946] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 203.548665][ T6627] team0: Port device team_slave_1 added [ 203.556192][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.569493][ T5946] usb 5-1: Product: syz [ 203.678967][ T5946] usb 5-1: Manufacturer: syz [ 203.743572][ T5946] usb 5-1: SerialNumber: syz [ 203.789931][ T12] hsr_slave_0: left promiscuous mode [ 203.965743][ T5946] usb 5-1: config 0 descriptor?? [ 203.985184][ T5946] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 204.018791][ T12] hsr_slave_1: left promiscuous mode [ 204.027096][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.057060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.192999][ T5946] gspca_stk1135: reg_w 0x0 err -110 [ 205.225790][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 205.235458][ T5946] gspca_stk1135: Sensor write failed [ 205.243847][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 205.250251][ T5946] gspca_stk1135: Sensor write failed [ 205.278258][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 205.298828][ T5946] gspca_stk1135: Sensor read failed [ 205.323711][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 205.340284][ T5946] gspca_stk1135: Sensor read failed [ 205.356052][ T5946] gspca_stk1135: Detected sensor type unknown (0x0) [ 205.377025][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 205.403254][ T5946] gspca_stk1135: Sensor read failed [ 205.410853][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 205.427263][ T5946] gspca_stk1135: Sensor read failed [ 205.436764][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 205.458782][ T5946] gspca_stk1135: Sensor write failed [ 205.466396][ T5946] gspca_stk1135: serial bus timeout: status=0x00 [ 205.491298][ T5946] gspca_stk1135: Sensor write failed [ 205.508768][ T5946] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 205.602433][ T6837] binder: 6834:6837 ioctl c0306201 200000000480 returned -14 [ 206.229048][ T5946] usb 5-1: USB disconnect, device number 2 [ 206.771186][ T12] team0 (unregistering): Port device team_slave_1 removed [ 207.132432][ T12] team0 (unregistering): Port device team_slave_0 removed [ 209.003400][ T6858] tipc: Started in network mode [ 209.008364][ T6858] tipc: Node identity ac1414aa, cluster identity 4711 [ 209.016971][ T6858] tipc: Enabled bearer , priority 10 [ 209.284266][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.411913][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.438566][ T6627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.452345][ T6627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.491982][ T6627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.994738][ T6627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.220512][ T121] tipc: Node number set to 2886997162 [ 211.139862][ T6853] lo speed is unknown, defaulting to 1000 [ 211.144706][ T9] IPVS: starting estimator thread 0... [ 211.241953][ T6873] IPVS: using max 29 ests per chain, 69600 per kthread [ 211.262374][ T6627] hsr_slave_0: entered promiscuous mode [ 211.269034][ T6627] hsr_slave_1: entered promiscuous mode [ 211.285482][ T6627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.294071][ T6627] Cannot create hsr debugfs directory [ 212.984644][ T5828] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 213.037129][ T5828] Bluetooth: hci0: Injecting HCI hardware error event [ 213.047069][ T5828] Bluetooth: hci0: hardware error 0x00 [ 214.020913][ T6891] warning: `syz.4.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 216.012433][ T6919] sctp: [Deprecated]: syz.2.186 (pid 6919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.012433][ T6919] Use struct sctp_sack_info instead [ 216.468420][ T5828] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 216.811717][ T6927] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 217.304411][ T5828] Bluetooth: hci3: command 0x0406 tx timeout [ 217.310490][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 217.316772][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 217.456637][ T6934] input: syz1 as /devices/virtual/input/input5 [ 221.520811][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 222.360909][ T6627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 223.448495][ T6627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 223.678990][ T6999] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 223.722922][ T6627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.228409][ T6627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.426208][ T6999] xt_CT: No such helper "syz1" [ 226.250055][ T7049] netlink: 'syz.2.205': attribute type 1 has an invalid length. [ 226.461465][ T7049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.720812][ T7052] gretap1: entered promiscuous mode [ 226.745759][ T7052] bond1: (slave gretap1): making interface the new active one [ 226.760748][ T7052] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 226.770813][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.208'. [ 227.020464][ T7049] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 227.121022][ T6627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.188884][ T6627] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.225582][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.232853][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.441164][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.448416][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.776263][ T7080] overlayfs: missing 'lowerdir' [ 227.822013][ T7080] overlayfs: missing 'lowerdir' [ 228.560129][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 230.399314][ T6627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.633030][ T7099] x_tables: duplicate underflow at hook 3 [ 232.138360][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 232.886305][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 233.025524][ T9] usb 1-1: config 0 has an invalid interface number: 15 but max is 0 [ 233.033828][ T9] usb 1-1: config 0 has no interface number 0 [ 233.043538][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=e7da, bcdDevice=4b.a9 [ 233.052747][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.060875][ T9] usb 1-1: Product: syz [ 233.066906][ T9] usb 1-1: Manufacturer: syz [ 233.071615][ T9] usb 1-1: SerialNumber: syz [ 233.939307][ T9] usb 1-1: config 0 descriptor?? [ 233.978009][ T9] usb 1-1: can't set config #0, error -71 [ 234.002210][ T9] usb 1-1: USB disconnect, device number 3 [ 235.303165][ T6627] veth0_vlan: entered promiscuous mode [ 235.356458][ T6627] veth1_vlan: entered promiscuous mode [ 236.426477][ T6627] veth0_macvtap: entered promiscuous mode [ 236.437064][ T6627] veth1_macvtap: entered promiscuous mode [ 236.457132][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.474642][ T6627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.579653][ T6627] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.618344][ T6627] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.641100][ T6627] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.652827][ T6627] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.671185][ T7180] x_tables: duplicate underflow at hook 3 [ 238.969443][ T7019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.000954][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.008161][ T7019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.050925][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.479881][ T30] audit: type=1326 audit(1751320573.337:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 241.601963][ T30] audit: type=1326 audit(1751320573.337:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 241.658581][ T30] audit: type=1326 audit(1751320573.337:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 241.802714][ T30] audit: type=1326 audit(1751320573.337:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 242.552172][ T30] audit: type=1326 audit(1751320573.337:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 243.423522][ T30] audit: type=1326 audit(1751320573.337:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 244.153100][ T30] audit: type=1326 audit(1751320573.347:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 244.292669][ T30] audit: type=1326 audit(1751320573.347:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 244.689988][ T30] audit: type=1326 audit(1751320573.347:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12c378e929 code=0x7ffc0000 [ 244.723282][ T30] audit: type=1326 audit(1751320573.347:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7201 comm="syz.2.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f12c3790847 code=0x7ffc0000 [ 245.170164][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 245.429990][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.439301][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.449743][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.653523][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.687093][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.995515][ T10] usb 2-1: config 0 has no interfaces? [ 246.025826][ T10] usb 2-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 246.053814][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.084310][ T10] usb 2-1: Product: syz [ 246.104438][ T10] usb 2-1: Manufacturer: syz [ 246.109091][ T10] usb 2-1: SerialNumber: syz [ 246.165335][ T10] usb 2-1: config 0 descriptor?? [ 246.189218][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.769044][ T7236] lo speed is unknown, defaulting to 1000 [ 246.831315][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.936671][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.164081][ T10] usb 2-1: USB disconnect, device number 2 [ 247.188535][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.102954][ T5824] Bluetooth: hci2: command tx timeout [ 249.432154][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 250.679991][ T5824] Bluetooth: hci2: command tx timeout [ 252.123531][ T7300] ipt_REJECT: TCP_RESET invalid for non-tcp [ 252.500331][ T36] bridge_slave_1: left allmulticast mode [ 252.516746][ T36] bridge_slave_1: left promiscuous mode [ 252.529023][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.678586][ T36] bridge_slave_0: left allmulticast mode [ 252.721905][ T36] bridge_slave_0: left promiscuous mode [ 252.733272][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.747633][ T5824] Bluetooth: hci2: command tx timeout [ 253.061170][ T7319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.256'. [ 253.074851][ T7319] netlink: 'syz.1.256': attribute type 7 has an invalid length. [ 253.782618][ T7320] af_packet: tpacket_rcv: packet too big, clamped from 32820 to 3952. macoff=96 [ 254.176136][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.197495][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.215230][ T36] bond0 (unregistering): Released all slaves [ 254.232468][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.239595][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.247500][ T7236] bridge_slave_0: entered allmulticast mode [ 254.258462][ T7236] bridge_slave_0: entered promiscuous mode [ 254.287461][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.298091][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.307898][ T7236] bridge_slave_1: entered allmulticast mode [ 254.319297][ T7236] bridge_slave_1: entered promiscuous mode [ 255.131692][ T5824] Bluetooth: hci2: command tx timeout [ 255.366315][ T7319] : entered promiscuous mode [ 256.178048][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.184904][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.301247][ T7340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.260'. [ 256.714741][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.436748][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.847781][ T7359] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 258.902405][ T7359] xt_CT: No such helper "syz1" [ 259.677134][ T7236] team0: Port device team_slave_0 added [ 259.737998][ T7236] team0: Port device team_slave_1 added [ 259.811167][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 259.890368][ T5824] Bluetooth: hci3: unexpected event for opcode 0x040d [ 260.015339][ T7386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.268'. [ 260.024686][ T7386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.268'. [ 260.033629][ T7386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.268'. [ 260.042845][ T7386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.268'. [ 260.149614][ T36] hsr_slave_0: left promiscuous mode [ 260.168493][ T36] hsr_slave_1: left promiscuous mode [ 261.147470][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.439150][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.461613][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.488485][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.531727][ T36] veth1_macvtap: left promiscuous mode [ 261.540677][ T36] veth0_macvtap: left promiscuous mode [ 261.547015][ T36] veth1_vlan: left promiscuous mode [ 261.552955][ T36] veth0_vlan: left promiscuous mode [ 261.938658][ T36] team0 (unregistering): Port device team_slave_1 removed [ 261.973710][ T36] team0 (unregistering): Port device team_slave_0 removed [ 262.405641][ T7392] lo speed is unknown, defaulting to 1000 [ 262.523050][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.530042][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.573835][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.803957][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.812626][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.854090][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.819544][ T7236] hsr_slave_0: entered promiscuous mode [ 263.826606][ T7236] hsr_slave_1: entered promiscuous mode [ 263.833526][ T7236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.841144][ T7236] Cannot create hsr debugfs directory [ 265.147020][ T7413] xt_hashlimit: size too large, truncated to 1048576 [ 265.317792][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 270.308922][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 270.308940][ T30] audit: type=1326 audit(1751320602.577:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 270.568457][ T7466] loop9: detected capacity change from 0 to 7 [ 270.579785][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.588182][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.596554][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.605205][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.613779][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.622348][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.630657][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.638861][ T7466] ldm_validate_partition_table(): Disk read failed. [ 270.645783][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.655167][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.683888][ T7466] Buffer I/O error on dev loop9, logical block 0, async page read [ 270.692752][ T7466] Dev loop9: unable to read RDB block 0 [ 270.699708][ T7466] loop9: unable to read partition table [ 270.706241][ T7466] loop9: partition table beyond EOD, truncated [ 270.712777][ T7466] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 270.712777][ T7466] ) failed (rc=-5) [ 271.325523][ T7469] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 271.336656][ T7469] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 271.678456][ T30] audit: type=1326 audit(1751320602.577:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 271.794003][ T30] audit: type=1326 audit(1751320602.577:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 272.026408][ T30] audit: type=1326 audit(1751320602.577:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 272.580220][ T30] audit: type=1326 audit(1751320602.577:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 272.629229][ T30] audit: type=1326 audit(1751320602.577:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 272.661432][ T30] audit: type=1326 audit(1751320602.577:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 272.732046][ T30] audit: type=1326 audit(1751320602.577:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 272.814119][ T30] audit: type=1326 audit(1751320602.737:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 272.859536][ T7485] sctp: [Deprecated]: syz.1.288 (pid 7485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.859536][ T7485] Use struct sctp_sack_info instead [ 273.412016][ T30] audit: type=1326 audit(1751320602.747:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7459 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 273.900786][ T7494] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 274.292037][ T7499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.628196][ T7545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.295'. [ 275.983775][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.295'. [ 278.838362][ T7236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 279.186912][ T7236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 280.157954][ T121] IPVS: starting estimator thread 0... [ 280.254955][ T7236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 280.511937][ T7582] IPVS: using max 32 ests per chain, 76800 per kthread [ 280.543941][ T7236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.722126][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 285.119837][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 285.559151][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.726465][ T9] usb 3-1: config 0 descriptor?? [ 285.745094][ T9] usb 3-1: can't set config #0, error -71 [ 286.482438][ T9] usb 3-1: USB disconnect, device number 2 [ 286.573806][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.690459][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.165025][ T7016] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.172260][ T7016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.468892][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.476162][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.531782][ T7236] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.571715][ T7236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.023720][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.495015][ T7730] ALSA: mixer_oss: invalid OSS volume 'V3' [ 298.501311][ T7730] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 298.509263][ T7730] ALSA: mixer_oss: invalid OSS volume '11' [ 298.515590][ T7730] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 298.522632][ T7730] ALSA: mixer_oss: invalid OSS volume '12' [ 298.529733][ T7730] ALSA: mixer_oss: invalid OSS volume '' [ 300.413401][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 301.443688][ T7768] use of bytesused == 0 is deprecated and will be removed in the future, [ 301.453277][ T7768] use the actual size instead. [ 301.943530][ T7762] delete_channel: no stack [ 302.492358][ T7766] futex_wake_op: syz.1.335 tries to shift op by 535; fix this program [ 302.504678][ T7766] netlink: 'syz.1.335': attribute type 1 has an invalid length. [ 302.787333][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 302.997242][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.008250][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.024055][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.036621][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 304.324926][ T7779] lo speed is unknown, defaulting to 1000 [ 305.132778][ T5821] Bluetooth: hci5: command tx timeout [ 306.010088][ T7815] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 306.016739][ T7815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 306.043236][ T7815] vhci_hcd vhci_hcd.0: Device attached [ 306.926737][ T24] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 306.944221][ T7815] netlink: 'syz.1.346': attribute type 10 has an invalid length. [ 307.145277][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 307.486431][ T5821] Bluetooth: hci5: command tx timeout [ 308.078202][ T7815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.096342][ T7815] team0: Port device bond0 added [ 308.105433][ T7830] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 308.675707][ T7820] team0 (unregistering): Port device team_slave_0 removed [ 308.696137][ T7820] team0 (unregistering): Port device team_slave_1 removed [ 308.717048][ T7820] team0 (unregistering): Port device bond0 removed [ 308.826646][ T7817] vhci_hcd: connection reset by peer [ 308.845834][ T7022] vhci_hcd: stop threads [ 308.866176][ T7022] vhci_hcd: release socket [ 308.895882][ T7022] vhci_hcd: disconnect device [ 309.015811][ T7779] chnl_net:caif_netlink_parms(): no params data found [ 310.021996][ T5821] Bluetooth: hci5: command tx timeout [ 310.410802][ T7869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.354'. [ 312.282135][ T5824] Bluetooth: hci5: command tx timeout [ 312.342054][ T24] vhci_hcd: vhci_device speed not set [ 312.911636][ T7882] i2c i2c-0: Invalid block write size 35 [ 314.898422][ T7779] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.004184][ T7901] program syz.2.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.014096][ T7901] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 315.577460][ T7903] loop9: detected capacity change from 0 to 8 [ 315.857031][ T7779] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.864466][ T7779] bridge_slave_0: entered allmulticast mode [ 315.872659][ T7779] bridge_slave_0: entered promiscuous mode [ 315.881408][ T7779] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.888734][ T7779] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.917463][ T7903] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 315.922904][ T7903] loop9: partition table partially beyond EOD, truncated [ 315.930190][ T7903] loop9: p1 size 81768186 extends beyond EOD, truncated [ 316.073345][ T7779] bridge_slave_1: entered allmulticast mode [ 316.081128][ T7779] bridge_slave_1: entered promiscuous mode [ 317.627262][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.640880][ T6524] udevd[6524]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 317.650819][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.846890][ T7779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.867977][ T7918] lo speed is unknown, defaulting to 1000 [ 318.004041][ T7779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.034743][ T7919] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.040889][ T7919] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 318.875378][ T7919] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 319.068807][ T7919] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 319.359527][ T1138] bridge_slave_1: left allmulticast mode [ 319.427314][ T7919] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.433810][ T7919] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 319.522329][ T1138] bridge_slave_1: left promiscuous mode [ 319.542818][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.605384][ T7919] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 319.611557][ T7919] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 319.635471][ T7919] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 319.671393][ T7946] syz.1.365: attempt to access beyond end of device [ 319.671393][ T7946] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 319.684445][ T7946] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 319.914479][ T1138] bridge_slave_0: left allmulticast mode [ 319.967290][ T1138] bridge_slave_0: left promiscuous mode [ 320.001424][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.333607][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 321.409775][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 321.461971][ T5824] Bluetooth: hci4: command 0x0406 tx timeout [ 321.691971][ T5824] Bluetooth: hci5: command 0x0c1a tx timeout [ 322.413022][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 322.647056][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.671690][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.695810][ T1138] bond0 (unregistering): Released all slaves [ 323.555317][ T7779] team0: Port device team_slave_0 added [ 323.613869][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 323.620302][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 323.632278][ T7975] binder: 7973:7975 ioctl c0306201 0 returned -14 [ 323.771950][ T5824] Bluetooth: hci5: command 0x0c1a tx timeout [ 323.881555][ T1138] hsr_slave_0: left promiscuous mode [ 324.044211][ T7986] netlink: 'syz.0.373': attribute type 21 has an invalid length. [ 324.052042][ T7986] netlink: 128 bytes leftover after parsing attributes in process `syz.0.373'. [ 325.374252][ T1138] hsr_slave_1: left promiscuous mode [ 325.393976][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.436550][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.576457][ T5824] Bluetooth: hci5: command 0x0c1a tx timeout [ 329.820387][ T8015] ubi31: attaching mtd0 [ 329.827288][ T8015] ubi31: scanning is finished [ 329.832051][ T8015] ubi31: empty MTD device detected [ 330.098356][ T8021] x_tables: duplicate underflow at hook 3 [ 330.234533][ T8015] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 330.244001][ T8015] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 330.251318][ T8015] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 330.258482][ T8015] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 330.266424][ T8015] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 330.273343][ T8015] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 330.281526][ T8015] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3777023870 [ 330.291643][ T8015] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 330.331136][ T8023] ubi31: background thread "ubi_bgt31d" started, PID 8023 [ 331.866897][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 332.817677][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 337.305971][ T7779] team0: Port device team_slave_1 added [ 337.327881][ T7986] netlink: 'syz.0.373': attribute type 6 has an invalid length. [ 337.335696][ T7986] netlink: 3 bytes leftover after parsing attributes in process `syz.0.373'. [ 337.877061][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.891986][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.959080][ T7779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.988887][ T7779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.010429][ T7779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.120371][ T7779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.755819][ T8092] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 340.459285][ T8097] trusted_key: syz.0.400 sent an empty control message without MSG_MORE. [ 341.555973][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 341.567962][ T7779] hsr_slave_0: entered promiscuous mode [ 341.584977][ T7779] hsr_slave_1: entered promiscuous mode [ 341.591296][ T7779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.599556][ T7779] Cannot create hsr debugfs directory [ 342.255528][ T8104] tty tty4: ldisc open failed (-12), clearing slot 3 [ 342.382019][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 342.408776][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.450759][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.809462][ T8112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 343.218072][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 343.267600][ T9] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 344.581198][ T9] usb 2-1: Product: syz [ 344.591882][ T9] usb 2-1: Manufacturer: syz [ 344.596558][ T9] usb 2-1: SerialNumber: syz [ 344.642189][ T8118] netlink: 68 bytes leftover after parsing attributes in process `syz.0.403'. [ 345.209825][ T9] usb 2-1: can't set config #1, error -71 [ 345.353122][ T8123] vivid-000: disconnect [ 345.383379][ T9] usb 2-1: USB disconnect, device number 3 [ 346.477386][ T8121] vivid-000: reconnect [ 348.115587][ T8154] vivid-000: kernel_thread() failed [ 348.979725][ T8167] kAFS: unparsable volume name [ 349.403421][ T8173] netlink: 52 bytes leftover after parsing attributes in process `syz.4.414'. [ 350.479779][ T7779] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 350.727759][ T7779] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 350.768706][ T7779] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 351.403635][ T8196] /dev/nullb0: Can't open blockdev [ 351.626030][ T8193] evm: overlay not supported [ 352.438327][ T7779] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 353.655563][ T7779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.775504][ T7779] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.806943][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.814169][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.883969][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.891166][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.730596][ T7779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.561633][ T8299] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 364.228089][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.242082][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.254286][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.266643][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.276065][ T5824] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.335842][ T8335] lo speed is unknown, defaulting to 1000 [ 366.333851][ T5824] Bluetooth: hci2: command tx timeout [ 367.408637][ T8366] random: crng reseeded on system resumption [ 368.456015][ T5821] Bluetooth: hci2: command tx timeout [ 370.268535][ T8379] kthread_run failed with err -4 [ 370.276522][ T8385] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 370.503780][ T5824] Bluetooth: hci2: command tx timeout [ 373.053829][ T5824] Bluetooth: hci2: command tx timeout [ 374.632747][ T6885] bridge_slave_1: left allmulticast mode [ 374.638740][ T6885] bridge_slave_1: left promiscuous mode [ 374.645068][ T6885] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.723215][ T6885] bridge_slave_0: left allmulticast mode [ 374.735937][ T6885] bridge_slave_0: left promiscuous mode [ 374.757383][ T6885] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.134132][ T8448] blktrace: Concurrent blktraces are not allowed on loop4 [ 376.624280][ T8448] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 377.094868][ T8454] program syz.1.460 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 377.340561][ T8459] syz.2.459: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 377.355891][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.2.459 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 377.355916][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 377.355934][ T8459] Call Trace: [ 377.355946][ T8459] [ 377.355955][ T8459] dump_stack_lvl+0x189/0x250 [ 377.355984][ T8459] ? lockdep_hardirqs_on+0x9c/0x150 [ 377.356010][ T8459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.356052][ T8459] warn_alloc+0x214/0x310 [ 377.356076][ T8459] ? stack_depot_save_flags+0x429/0x900 [ 377.356101][ T8459] ? __pfx_warn_alloc+0x10/0x10 [ 377.356126][ T8459] ? kasan_save_track+0x4f/0x80 [ 377.356147][ T8459] ? xskq_create+0x56/0x170 [ 377.356168][ T8459] ? xsk_init_queue+0xb0/0x110 [ 377.356187][ T8459] ? xsk_setsockopt+0x43f/0x710 [ 377.356206][ T8459] ? do_sock_setsockopt+0x25a/0x3e0 [ 377.356223][ T8459] ? __x64_sys_setsockopt+0x18b/0x220 [ 377.356248][ T8459] ? do_syscall_64+0xfa/0x3b0 [ 377.356270][ T8459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.356297][ T8459] __vmalloc_node_range_noprof+0x125/0x12f0 [ 377.356351][ T8459] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 377.356380][ T8459] ? __kasan_kmalloc+0x93/0xb0 [ 377.356404][ T8459] vmalloc_user_noprof+0xad/0xf0 [ 377.356426][ T8459] ? xskq_create+0xbf/0x170 [ 377.356448][ T8459] xskq_create+0xbf/0x170 [ 377.356473][ T8459] xsk_init_queue+0xb0/0x110 [ 377.356497][ T8459] xsk_setsockopt+0x43f/0x710 [ 377.356521][ T8459] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.356545][ T8459] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.356562][ T8459] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.356583][ T8459] ? do_sock_setsockopt+0x236/0x3e0 [ 377.356603][ T8459] ? __pfx_xsk_setsockopt+0x10/0x10 [ 377.356623][ T8459] do_sock_setsockopt+0x25a/0x3e0 [ 377.356645][ T8459] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 377.356669][ T8459] ? __fget_files+0x2a/0x420 [ 377.356713][ T8459] __x64_sys_setsockopt+0x18b/0x220 [ 377.356746][ T8459] do_syscall_64+0xfa/0x3b0 [ 377.356776][ T8459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.356792][ T8459] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 377.356809][ T8459] ? clear_bhb_loop+0x60/0xb0 [ 377.356831][ T8459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.356847][ T8459] RIP: 0033:0x7f12c378e929 [ 377.356868][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.356883][ T8459] RSP: 002b:00007f12c15f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 377.356901][ T8459] RAX: ffffffffffffffda RBX: 00007f12c39b6160 RCX: 00007f12c378e929 [ 377.356915][ T8459] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 377.356926][ T8459] RBP: 00007f12c3810b39 R08: 0000000000000052 R09: 0000000000000000 [ 377.356937][ T8459] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.356948][ T8459] R13: 0000000000000000 R14: 00007f12c39b6160 R15: 00007ffcdbdc37c8 [ 377.356979][ T8459] [ 377.357040][ T8459] Mem-Info: [ 377.651911][ T8459] active_anon:3159 inactive_anon:9761 isolated_anon:0 [ 377.651911][ T8459] active_file:5641 inactive_file:35806 isolated_file:0 [ 377.651911][ T8459] unevictable:768 dirty:214 writeback:0 [ 377.651911][ T8459] slab_reclaimable:10649 slab_unreclaimable:98023 [ 377.651911][ T8459] mapped:34501 shmem:7867 pagetables:1353 [ 377.651911][ T8459] sec_pagetables:0 bounce:0 [ 377.651911][ T8459] kernel_misc_reclaimable:0 [ 377.651911][ T8459] free:1323280 free_pcp:12107 free_cma:0 [ 377.723870][ T8459] Node 0 active_anon:12636kB inactive_anon:44044kB active_file:22364kB inactive_file:143224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143004kB dirty:856kB writeback:0kB shmem:34932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12984kB pagetables:5268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.757712][ T8459] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 377.789487][ T8459] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 377.818472][ T8459] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 377.824335][ T8459] Node 0 DMA32 free:1369616kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12632kB inactive_anon:47600kB active_file:20604kB inactive_file:143156kB unevictable:1536kB writepending:852kB present:3129332kB managed:2561452kB mlocked:0kB bounce:0kB free_pcp:22936kB local_pcp:14296kB free_cma:0kB [ 377.857012][ T8459] lowmem_reserve[]: 0 0 1 1 1 [ 377.861769][ T8459] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1760kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 377.891020][ T8459] lowmem_reserve[]: 0 0 0 0 0 [ 377.895809][ T8459] Node 1 Normal free:3908124kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16876kB local_pcp:6924kB free_cma:0kB [ 377.927007][ T8459] lowmem_reserve[]: 0 0 0 0 0 [ 377.931759][ T8459] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 377.944578][ T8459] Node 0 DMA32: 9*4kB (UE) 196*8kB (UME) 344*16kB (ME) 342*32kB (UM) 116*64kB (UME) 93*128kB (UM) 38*256kB (UM) 9*512kB (UM) 3*1024kB (UME) 4*2048kB (UM) 319*4096kB (UM) = 1369604kB [ 377.962783][ T8459] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 377.975157][ T8459] Node 1 Normal: 177*4kB (UE) 53*8kB (UME) 35*16kB (UME) 110*32kB (UME) 33*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 950*4096kB (UM) = 3908124kB [ 377.993463][ T8459] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.003085][ T8459] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.012470][ T8459] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 378.022043][ T8459] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 378.031326][ T8459] 51435 total pagecache pages [ 378.036037][ T8459] 0 pages in swap cache [ 378.040190][ T8459] Free swap = 124996kB [ 378.044380][ T8459] Total swap = 124996kB [ 378.048538][ T8459] 2097051 pages RAM [ 378.052368][ T8459] 0 pages HighMem/MovableOnly [ 378.057042][ T8459] 424581 pages reserved [ 378.061202][ T8459] 0 pages cma reserved [ 378.627976][ T8470] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 378.639724][ T8470] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 379.094402][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.100736][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.341393][ T6885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.364177][ T6885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.385791][ T6885] bond0 (unregistering): Released all slaves [ 379.474673][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 380.203433][ T8481] x_tables: duplicate underflow at hook 3 [ 380.421552][ T6885] hsr_slave_0: left promiscuous mode [ 380.446979][ T6885] hsr_slave_1: left promiscuous mode [ 380.477191][ T6885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.738333][ T8494] Cannot find del_set index 3 as target [ 380.986462][ T6885] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.558323][ T8513] ptrace attach of "./syz-executor exec"[8514] was attempted by "./syz-executor exec"[8513] [ 386.802476][ T8530] xt_hashlimit: size too large, truncated to 1048576 [ 387.337511][ T8537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 387.383340][ T8537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.617316][ T43] IPVS: starting estimator thread 0... [ 390.802579][ T8550] IPVS: using max 27 ests per chain, 64800 per kthread [ 390.972244][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.015725][ T6885] team0 (unregistering): Port device team_slave_1 removed [ 392.011887][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.103322][ T6885] team0 (unregistering): Port device team_slave_0 removed [ 393.051902][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.091896][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.131916][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.013386][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.142003][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.171899][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 396.355118][ T8335] bridge_slave_0: entered allmulticast mode [ 397.123668][ T8335] bridge_slave_0: entered promiscuous mode [ 397.135427][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.144696][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.152000][ T8335] bridge_slave_1: entered allmulticast mode [ 397.158951][ T8335] bridge_slave_1: entered promiscuous mode [ 397.211897][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.252020][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.127031][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.291931][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.591667][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 400.331886][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.839293][ T8641] overlayfs: failed to resolve './file0': -2 [ 400.885964][ T8595] syz.2.487 (8595): drop_caches: 2 [ 401.371932][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.067972][ T8633] bond0: (slave bond_slave_1): Releasing backup interface [ 402.411886][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.635744][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.813142][ T8639] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 402.870017][ T8335] team0: Port device team_slave_0 added [ 402.921126][ T8335] team0: Port device team_slave_1 added [ 403.178099][ T5946] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 403.451984][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.192582][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 404.350473][ T5946] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 404.366758][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.408655][ T5946] usb 5-1: config 0 has no interfaces? [ 404.491921][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.658238][ T5946] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 404.720566][ T8670] ubi: mtd0 is already attached to ubi31 [ 405.197756][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.261560][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.440452][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.462227][ T5946] usb 5-1: config 0 descriptor?? [ 405.531912][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.231952][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.571918][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.865509][ T8684] kthread_run failed with err -4 [ 406.997397][ T5946] usb 5-1: can't set config #0, error -71 [ 407.025202][ T5946] usb 5-1: USB disconnect, device number 3 [ 407.035201][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.069234][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.143417][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.612020][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 408.651898][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.691915][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.309652][ T8335] hsr_slave_0: entered promiscuous mode [ 410.346760][ T8335] hsr_slave_1: entered promiscuous mode [ 410.381917][ T8335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.389520][ T8335] Cannot create hsr debugfs directory [ 410.731890][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.772030][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.188576][ T8733] tipc: Enabled bearer , priority 10 [ 412.811951][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.802872][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.518'. [ 413.851894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 414.521465][ T8768] loop9: detected capacity change from 0 to 8 [ 414.622163][ T8768] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 414.627921][ T8768] loop9: partition table partially beyond EOD, truncated [ 414.637518][ T8768] loop9: p1 size 81768186 extends beyond EOD, truncated [ 414.892457][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.147284][ T6524] udevd[6524]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 415.932150][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 416.114520][ T8785] overlayfs: failed to resolve './file0': -2 [ 416.129619][ T8775] delete_channel: no stack [ 416.408894][ T8798] block device autoloading is deprecated and will be removed. [ 416.971892][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 418.011926][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 419.061924][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.083736][ T8831] ntfs3(nullb0): Primary boot signature is not NTFS. [ 420.091899][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.099433][ T8831] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 420.836373][ T8839] kAFS: unparsable volume name [ 421.052207][ T8335] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 421.141883][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.198081][ T8335] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 421.345502][ T8335] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 421.467268][ T8849] binder: 8844:8849 ioctl c0306201 0 returned -14 [ 422.092354][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 422.171887][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 422.330628][ T8864] netlink: 84 bytes leftover after parsing attributes in process `syz.1.535'. [ 422.402069][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 422.425581][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 422.830702][ T24] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 422.875439][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.901058][ T24] usb 3-1: Product: syz [ 422.914477][ T24] usb 3-1: Manufacturer: syz [ 422.929565][ T24] usb 3-1: SerialNumber: syz [ 422.952760][ T24] usb 3-1: config 0 descriptor?? [ 422.977751][ T24] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 423.222020][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.816401][ T5821] Bluetooth: hci5: command 0x1003 tx timeout [ 423.824682][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 424.251937][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.106789][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 425.124809][ T5821] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 425.139242][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 425.148961][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 425.159957][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 425.301897][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.396085][ T8883] lo speed is unknown, defaulting to 1000 [ 425.417512][ T5907] usb 3-1: USB disconnect, device number 3 [ 426.341893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.862101][ T43] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 427.144989][ T43] usb 2-1: device descriptor read/64, error -71 [ 427.212031][ T5824] Bluetooth: hci2: command tx timeout [ 427.371893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 427.572840][ T43] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 427.623089][ T8904] netlink: 'syz.0.541': attribute type 10 has an invalid length. [ 427.792616][ T8904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.928885][ T43] usb 2-1: device descriptor read/64, error -71 [ 428.175329][ T43] usb usb2-port1: attempt power cycle [ 428.253267][ T8904] team0: Port device bond0 added [ 428.411924][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.792429][ T43] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 428.922088][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 428.951945][ T43] usb 2-1: device descriptor read/8, error -71 [ 429.142150][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 429.179446][ T24] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 429.231562][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.317944][ T5824] Bluetooth: hci2: command tx timeout [ 429.329252][ T24] usb 1-1: Product: syz [ 429.410590][ T24] usb 1-1: Manufacturer: syz [ 429.432281][ T24] usb 1-1: SerialNumber: syz [ 429.451913][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 429.581459][ T8919] kAFS: unparsable volume name [ 430.491941][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 431.477417][ T5824] Bluetooth: hci2: command tx timeout [ 431.532025][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 431.556278][ T24] usb 1-1: can't set config #1, error -71 [ 431.568356][ T24] usb 1-1: USB disconnect, device number 4 [ 432.572021][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 433.451337][ T14] bridge_slave_1: left allmulticast mode [ 433.505189][ T14] bridge_slave_1: left promiscuous mode [ 433.533494][ T5824] Bluetooth: hci2: command tx timeout [ 433.565932][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.612189][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 433.720294][ T14] bridge_slave_0: left allmulticast mode [ 433.769035][ T14] bridge_slave_0: left promiscuous mode [ 433.838542][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.436720][ T7016] Bluetooth: hci5: Frame reassembly failed (-84) [ 434.652109][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.497229][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.518349][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.530088][ T14] bond0 (unregistering): Released all slaves [ 435.691909][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 435.717921][ T8883] chnl_net:caif_netlink_parms(): no params data found [ 436.031669][ T14] hsr_slave_0: left promiscuous mode [ 436.038271][ T14] hsr_slave_1: left promiscuous mode [ 436.047925][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.057141][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.132662][ T8967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 436.152004][ T5887] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 436.333262][ T5821] Bluetooth: hci5: command 0xfc11 tx timeout [ 436.340146][ T5824] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 436.487624][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 436.565317][ T5887] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 436.591501][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.614421][ T5887] usb 3-1: config 0 has no interface number 0 [ 436.624281][ T5887] usb 3-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 436.640939][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.652958][ T5887] usb 3-1: Product: syz [ 436.731890][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 436.766587][ T5887] usb 3-1: Manufacturer: syz [ 436.771280][ T5887] usb 3-1: SerialNumber: syz [ 436.794112][ T5887] usb 3-1: config 0 descriptor?? [ 437.263922][ T5887] usb 3-1: Found UVC 0.00 device syz (046c:14e8) [ 437.281160][ T5887] usb 3-1: No valid video chain found. [ 437.574594][ T5887] usb 3-1: USB disconnect, device number 4 [ 437.771916][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.679997][ T14] team0 (unregistering): Port device team_slave_1 removed [ 438.811921][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 438.879984][ T14] team0 (unregistering): Port device team_slave_0 removed [ 439.155043][ T8998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.557'. [ 439.173468][ T8998] IPv6: NLM_F_REPLACE set, but no existing node found! [ 439.851884][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 440.496289][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.530903][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.881931][ T8996] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 440.889385][ T8996] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 440.891898][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 441.036972][ T8996] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 441.931925][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 442.229996][ T9029] kAFS: unparsable volume name [ 442.803334][ T8883] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.848188][ T8883] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.868533][ T8883] bridge_slave_0: entered allmulticast mode [ 442.876529][ T8883] bridge_slave_0: entered promiscuous mode [ 442.971946][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 443.015335][ T8883] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.432539][ T8883] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.439728][ T8883] bridge_slave_1: entered allmulticast mode [ 443.473171][ T8883] bridge_slave_1: entered promiscuous mode [ 444.011931][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 444.238659][ T8883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.253925][ T8883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.331186][ T8883] team0: Port device team_slave_0 added [ 444.351056][ T8883] team0: Port device team_slave_1 added [ 445.051885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.091885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 446.188223][ T9054] misc userio: Invalid payload size [ 446.196417][ T9054] misc userio: No port type given on /dev/userio [ 446.205578][ T9054] misc userio: The device must be registered before sending interrupts [ 447.131899][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 447.501580][ T8883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.519459][ T8883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.891950][ T8883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.021866][ T8883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.037981][ T8883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.095870][ T8883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.171946][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 449.211906][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 450.251905][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 450.513413][ T8883] hsr_slave_0: entered promiscuous mode [ 451.291901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 451.568679][ T8883] hsr_slave_1: entered promiscuous mode [ 451.574890][ T8883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.582709][ T8883] Cannot create hsr debugfs directory [ 451.598724][ T9097] x_tables: duplicate underflow at hook 3 [ 452.331935][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 452.470619][ T9111] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3538537105/3538537107 [ 452.764784][ T9112] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3538537105/3538537107 [ 452.774620][ T9112] tipc: Failed to remove unknown binding: 66,1,1/2886997162:3538537105/3538537107 [ 453.371889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 454.411894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.358857][ T9132] kAFS: unparsable volume name [ 455.451923][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 455.894727][ T9145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.912757][ T9145] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 456.492206][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.246248][ T9154] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 457.254577][ T9154] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 457.264532][ T9154] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 457.272429][ T9154] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 457.531960][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 458.571894][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.314407][ T8883] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 459.612023][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 459.614565][ T8883] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 460.225778][ T8883] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 460.302198][ T9177] netlink: 300 bytes leftover after parsing attributes in process `syz.4.591'. [ 460.652040][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 461.356442][ T8883] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.691914][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.480607][ T9193] .: renamed from bond0 [ 462.731961][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 462.782319][ T8883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.826537][ T8883] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.738847][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.746103][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.771910][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 463.870977][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.878249][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.593888][ T9221] loop6: detected capacity change from 0 to 524287999 [ 464.811989][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 465.843498][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 465.861882][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.891917][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 466.993077][ T9242] x_tables: duplicate underflow at hook 3 [ 467.932052][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 468.821724][ T9269] netlink: 44 bytes leftover after parsing attributes in process `syz.1.607'. [ 468.853686][ T8883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.972000][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 469.083667][ T9273] netlink: 116 bytes leftover after parsing attributes in process `syz.4.606'. [ 469.218499][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 469.275032][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.608'. [ 469.306537][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 469.306906][ T30] audit: type=1326 audit(1751320801.457:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 469.569197][ T30] audit: type=1326 audit(1751320801.467:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 469.728476][ T30] audit: type=1326 audit(1751320801.477:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 470.012054][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 470.227617][ T30] audit: type=1326 audit(1751320801.477:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 470.317443][ T30] audit: type=1326 audit(1751320801.477:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 470.879327][ T30] audit: type=1326 audit(1751320801.487:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 470.901053][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.978214][ T30] audit: type=1326 audit(1751320801.487:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 470.999567][ C0] vkms_vblank_simulate: vblank timer overrun [ 471.051888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 471.509817][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.518791][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.527753][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.537379][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.546482][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.555444][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.564377][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.573741][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.582674][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 471.591571][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 472.054899][ T30] audit: type=1326 audit(1751320801.487:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 472.101916][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 472.298820][ T30] audit: type=1326 audit(1751320801.487:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 472.351279][ T9311] x_tables: duplicate underflow at hook 3 [ 472.402459][ T30] audit: type=1326 audit(1751320801.507:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9270 comm="syz.0.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb6018e929 code=0x7ffc0000 [ 473.131915][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 473.713804][ T8883] veth0_vlan: entered promiscuous mode [ 473.726661][ T8883] veth1_vlan: entered promiscuous mode [ 474.076895][ T8883] veth0_macvtap: entered promiscuous mode [ 474.091526][ T8883] veth1_macvtap: entered promiscuous mode [ 474.116479][ T8883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.171893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 474.347840][ T8883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.582154][ T8883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.582231][ T8883] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.582256][ T8883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.582279][ T8883] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.211892][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 475.607008][ T9341] tty tty4: ldisc open failed (-12), clearing slot 3 [ 476.111972][ T5821] Bluetooth: hci2: command 0x0405 tx timeout [ 476.251980][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.292002][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 477.460839][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.580279][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.149387][ T6885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.167478][ T6885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.167586][ T9373] __nla_validate_parse: 41 callbacks suppressed [ 478.167599][ T9373] netlink: 632 bytes leftover after parsing attributes in process `syz.0.628'. [ 478.207029][ T9377] x_tables: duplicate underflow at hook 3 [ 478.331989][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.512065][ T5887] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 479.216664][ T5887] usb 1-1: config 0 has an invalid interface number: 57 but max is 0 [ 479.307498][ T5887] usb 1-1: config 0 has no interface number 0 [ 479.372007][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 479.388037][ T5887] usb 1-1: config 0 interface 57 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 480.411980][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 481.452009][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 481.563437][ T5887] usb 1-1: config 0 interface 57 altsetting 0 has an endpoint descriptor with address 0x54, changing to 0x4 [ 481.590422][ T5887] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has an invalid bInterval 44, changing to 7 [ 481.609563][ T5887] usb 1-1: config 0 interface 57 altsetting 0 endpoint 0x4 has invalid maxpacket 50877, setting to 1024 [ 481.773577][ T5887] usb 1-1: config 0 interface 57 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.787274][ T5887] usb 1-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 481.801910][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.812606][ T5887] usb 1-1: config 0 descriptor?? [ 481.833852][ T5887] usb 1-1: can't set config #0, error -71 [ 481.987687][ T5887] usb 1-1: USB disconnect, device number 5 [ 482.492020][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.531903][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 483.971028][ T9416] block device autoloading is deprecated and will be removed. [ 483.995144][ T9416] syz.4.636: attempt to access beyond end of device [ 483.995144][ T9416] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 484.571907][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 485.611888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 486.037887][ T9433] netlink: 76 bytes leftover after parsing attributes in process `syz.0.641'. [ 486.651889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 487.691901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.731910][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 488.752062][ T5887] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 489.364532][ T9460] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 489.373453][ T9460] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 489.388456][ T9460] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 489.396731][ T9460] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 489.670411][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.772554][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 489.844009][ T5887] usb 1-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 490.090132][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.674644][ T9471] tmpfs: Bad value for 'mpol' [ 490.811902][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 490.991540][ T9473] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 491.383528][ T5887] usb 1-1: config 0 descriptor?? [ 491.422427][ T5887] usb 1-1: can't set config #0, error -71 [ 491.445066][ T5887] usb 1-1: USB disconnect, device number 6 [ 491.851901][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 492.891918][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 492.997136][ T9495] siw: device registration error -23 [ 493.931892][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 494.971916][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 496.012002][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 497.051889][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 497.694853][ T9525] random: crng reseeded on system resumption [ 497.809779][ T9523] set match dimension is over the limit! [ 498.091890][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 499.132063][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 499.287091][ T9530] netlink: 144 bytes leftover after parsing attributes in process `syz.0.664'. [ 499.677955][ T9541] loop6: detected capacity change from 0 to 524287999 [ 500.171899][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 501.211906][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 502.110714][ T9566] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 502.118482][ T9566] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.671'. [ 502.145373][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.166970][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.251885][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 503.292562][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 504.331935][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 505.371898][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 506.412177][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 507.451919][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 508.491886][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 509.315008][ T9618] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 509.321580][ T9618] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 509.531890][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 509.552420][ T9618] vhci_hcd vhci_hcd.0: Device attached [ 510.571914][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 510.692033][ T9633] tmpfs: Bad value for 'mpol' [ 511.320978][ T9628] lo speed is unknown, defaulting to 1000 [ 511.526791][ T43] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 511.611893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 512.590199][ T9642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.686'. [ 512.651903][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 513.691893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 513.941948][ T9620] vhci_hcd: connection reset by peer [ 514.504548][ T7016] vhci_hcd: stop threads [ 514.731893][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 514.751995][ T7016] vhci_hcd: release socket [ 514.765491][ T7016] vhci_hcd: disconnect device [ 515.296690][ T9673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 515.771887][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 516.811921][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 517.000070][ T43] vhci_hcd: vhci_device speed not set [ 517.344930][ T9690] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 517.577132][ T9694] tmpfs: Bad value for 'mpol' [ 517.851895][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.612039][ T5483] sched: DL replenish lagged too much [ 623.121830][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 623.128824][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5816/1:b..l [ 623.137194][ C0] rcu: (detected by 0, t=10504 jiffies, g=29013, q=403 ncpus=2) [ 623.144925][ C0] task:syz-executor state:R running task stack:21928 pid:5816 tgid:5816 ppid:5812 task_flags:0x400140 flags:0x00004000 [ 623.159272][ C0] Call Trace: [ 623.162560][ C0] [ 623.165504][ C0] __schedule+0x16a2/0x4cb0 [ 623.170026][ C0] ? __lock_acquire+0xab9/0xd20 [ 623.174893][ C0] ? preempt_schedule_common+0x83/0xd0 [ 623.180367][ C0] ? __pfx___schedule+0x10/0x10 [ 623.185244][ C0] ? irqentry_exit+0x74/0x90 [ 623.189839][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.195058][ C0] ? preempt_schedule+0xae/0xc0 [ 623.199931][ C0] preempt_schedule_common+0x83/0xd0 [ 623.205222][ C0] preempt_schedule+0xae/0xc0 [ 623.209901][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 623.215307][ C0] preempt_schedule_thunk+0x16/0x30 [ 623.220527][ C0] _raw_spin_unlock+0x3f/0x50 [ 623.225217][ C0] ? copy_pmd_range+0x66f1/0x7000 [ 623.230254][ C0] copy_pmd_range+0x6727/0x7000 [ 623.235126][ C0] ? arch_stack_walk+0xfc/0x150 [ 623.240024][ C0] ? __pfx_copy_pmd_range+0x10/0x10 [ 623.245246][ C0] copy_page_range+0xc46/0x1270 [ 623.250117][ C0] ? __lock_acquire+0xab9/0xd20 [ 623.254998][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 623.260299][ C0] ? up_write+0x1c4/0x420 [ 623.264626][ C0] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 623.271401][ C0] dup_mmap+0xf57/0x1ac0 [ 623.275845][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 623.280539][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 623.286441][ C0] ? mm_init+0xccc/0xf20 [ 623.290703][ C0] copy_mm+0x13c/0x4b0 [ 623.294783][ C0] copy_process+0x1706/0x3c00 [ 623.299507][ C0] ? copy_process+0x97f/0x3c00 [ 623.304314][ C0] ? __pfx_copy_process+0x10/0x10 [ 623.309364][ C0] kernel_clone+0x224/0x7f0 [ 623.313879][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 623.318930][ C0] __x64_sys_clone+0x18b/0x1e0 [ 623.323702][ C0] ? count_memcg_event_mm+0x21/0x260 [ 623.329004][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 623.334310][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 623.339606][ C0] ? do_syscall_64+0xbe/0x3b0 [ 623.344293][ C0] do_syscall_64+0xfa/0x3b0 [ 623.348802][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.354007][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.360074][ C0] ? clear_bhb_loop+0x60/0xb0 [ 623.364763][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.370657][ C0] RIP: 0033:0x7fce24b85193 [ 623.375073][ C0] RSP: 002b:00007ffca4d6f9e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 623.383495][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fce24b85193 [ 623.391467][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 623.399441][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 623.407415][ C0] R10: 00005555691c47d0 R11: 0000000000000246 R12: 0000000000000000 [ 623.415387][ C0] R13: 00000000000927c0 R14: 000000000007dec4 R15: 00007ffca4d6fb80 [ 623.423389][ C0] [ 623.426408][ C0] rcu: rcu_preempt kthread starved for 10492 jiffies! g29013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 623.437688][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 623.447651][ C0] rcu: RCU grace-period kthread stack dump: [ 623.453534][ C0] task:rcu_preempt state:R running task stack:27232 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 623.467032][ C0] Call Trace: [ 623.470310][ C0] [ 623.473244][ C0] __schedule+0x16a2/0x4cb0 [ 623.477790][ C0] ? schedule+0x165/0x360 [ 623.482144][ C0] ? __pfx___schedule+0x10/0x10 [ 623.487035][ C0] ? schedule+0x91/0x360 [ 623.491290][ C0] schedule+0x165/0x360 [ 623.495458][ C0] schedule_timeout+0x12b/0x270 [ 623.500317][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 623.505693][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 623.511594][ C0] ? __pfx_process_timeout+0x10/0x10 [ 623.516893][ C0] ? prepare_to_swait_event+0x341/0x380 [ 623.522446][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 623.527320][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.532525][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 623.538691][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 623.543980][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 623.549197][ C0] rcu_gp_kthread+0x99/0x390 [ 623.553792][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 623.558997][ C0] ? __kthread_parkme+0x7b/0x200 [ 623.563944][ C0] ? __kthread_parkme+0x1a1/0x200 [ 623.568979][ C0] kthread+0x711/0x8a0 [ 623.573139][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 623.578346][ C0] ? __pfx_kthread+0x10/0x10 [ 623.582945][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 623.588147][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.593351][ C0] ? __pfx_kthread+0x10/0x10 [ 623.597946][ C0] ret_from_fork+0x3fc/0x770 [ 623.602553][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 623.607762][ C0] ? __switch_to_asm+0x39/0x70 [ 623.612538][ C0] ? __switch_to_asm+0x33/0x70 [ 623.617396][ C0] ? __pfx_kthread+0x10/0x10 [ 623.622025][ C0] ret_from_fork_asm+0x1a/0x30 [ 623.626809][ C0] [ 623.629831][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 623.636168][ C0] Sending NMI from CPU 0 to CPUs 1: [ 623.641397][ C1] NMI backtrace for cpu 1 [ 623.641412][ C1] CPU: 1 UID: 0 PID: 9697 Comm: syz.0.697 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 623.641428][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 623.641438][ C1] RIP: 0010:debug_lockdep_rcu_enabled+0xd/0x40 [ 623.641459][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 31 c0 83 3d 47 fc 3f 04 00 <74> 1e 83 3d 6a 2c 40 04 00 74 15 65 48 8b 0c 25 08 c0 99 92 31 c0 [ 623.641472][ C1] RSP: 0018:ffffc90000a08c68 EFLAGS: 00000002 [ 623.641485][ C1] RAX: 0000000000000000 RBX: ffff8880772e4036 RCX: dffffc0000000000 [ 623.641496][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a08be0 [ 623.641505][ C1] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 623.641514][ C1] R10: dffffc0000000000 R11: fffff5200014117c R12: ffff888074c1b340 [ 623.641525][ C1] R13: ffff888074c1b000 R14: dffffc0000000000 R15: ffff8880279ce4d8 [ 623.641536][ C1] FS: 00007feb5dfd56c0(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 623.641549][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 623.641559][ C1] CR2: 0000001b2f508ff8 CR3: 00000000335a0000 CR4: 00000000003526f0 [ 623.641572][ C1] Call Trace: [ 623.641579][ C1] [ 623.641585][ C1] advance_sched+0xc9/0xc90 [ 623.641605][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 623.641621][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 623.641641][ C1] ? __pfx_advance_sched+0x10/0x10 [ 623.641655][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 623.641682][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 623.641698][ C1] ? read_tsc+0x9/0x20 [ 623.641717][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 623.641747][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 623.641768][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 623.641785][ C1] [ 623.641790][ C1] [ 623.641796][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 623.641811][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 623.641827][ C1] Code: 74 05 e8 7b 74 65 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f3 5d 2e f6 65 8b 05 cc 5a 37 07 85 c0 74 40 48 c7 04 24 0e 36 [ 623.641839][ C1] RSP: 0018:ffffc90003e8fb60 EFLAGS: 00000206 [ 623.641851][ C1] RAX: 8d58c50782b97900 RBX: 0000000000000a06 RCX: 8d58c50782b97900 [ 623.641861][ C1] RDX: 0000000000000007 RSI: ffffffff8d96e743 RDI: 0000000000000001 [ 623.641871][ C1] RBP: ffffc90003e8fbf0 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 623.641881][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: dffffc0000000000 [ 623.641891][ C1] R13: ffff8880b8627ac0 R14: ffff8880b8627ac0 R15: 1ffff920007d1f6c [ 623.641918][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 623.641933][ C1] ? read_tsc+0x9/0x20 [ 623.641952][ C1] clock_was_set+0x63b/0x7c0 [ 623.641971][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.641988][ C1] ? __pfx_clock_was_set+0x10/0x10 [ 623.642003][ C1] ? do_settimeofday64+0x2d1/0x5e0 [ 623.642019][ C1] ? timekeeping_update_from_shadow+0x2b1/0x350 [ 623.642035][ C1] do_settimeofday64+0x2ec/0x5e0 [ 623.642052][ C1] ? __pfx_do_settimeofday64+0x10/0x10 [ 623.642065][ C1] ? amd_sfh_work_buffer+0x26/0x4d0 [ 623.642080][ C1] ? bpf_lsm_settime+0x9/0x20 [ 623.642092][ C1] ? security_settime64+0x76/0x290 [ 623.642111][ C1] ? do_sys_settimeofday64+0x163/0x260 [ 623.642128][ C1] __x64_sys_clock_settime+0x22c/0x280 [ 623.642145][ C1] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 623.642160][ C1] ? rcu_is_watching+0x15/0xb0 [ 623.642180][ C1] ? do_syscall_64+0xbe/0x3b0 [ 623.642200][ C1] do_syscall_64+0xfa/0x3b0 [ 623.642218][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.642230][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 623.642243][ C1] ? clear_bhb_loop+0x60/0xb0 [ 623.642259][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.642273][ C1] RIP: 0033:0x7feb6018e929 [ 623.642287][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.642298][ C1] RSP: 002b:00007feb5dfd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 623.642312][ C1] RAX: ffffffffffffffda RBX: 00007feb603b6080 RCX: 00007feb6018e929 [ 623.642323][ C1] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 623.642332][ C1] RBP: 00007feb60210b39 R08: 0000000000000000 R09: 0000000000000000 [ 623.642341][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.642350][ C1] R13: 0000000000000000 R14: 00007feb603b6080 R15: 00007fffc620edb8 [ 623.642367][ C1]