last executing test programs: 2.501400609s ago: executing program 2 (id=3): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = geteuid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) setsockopt(r2, 0x84, 0x75, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a) fstat(0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f00000010c0)={0x7, 0x0, [{0x0, 0x9, 0x1, 0x8, 0x200000, 0xfffffffb, 0x1}, {0x80000007, 0x7, 0x6, 0x0, 0x7, 0xfffffffd, 0x7b87a9e1}, {0xa, 0xffffffff, 0x0, 0xfffffffd, 0x4, 0x80000001, 0x8}, {0x80000000, 0xffffffff, 0x7, 0x1007, 0x4, 0x2000110, 0xbf62}, {0x80000008, 0x5dd3, 0x5, 0xfc6b, 0x1000e231, 0x1, 0x7fff}, {0x7, 0x4, 0x5, 0x3, 0x6, 0x803, 0x9}, {0x40000001, 0x28, 0x7, 0x1, 0x4, 0x100, 0x2}]}) r8 = fanotify_init(0x0, 0x101000) setns(0xc9, 0x0) r9 = socket(0x2a, 0x2, 0x9) connect(r9, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) write$nbd(r9, 0x0, 0x0) fanotify_mark(r8, 0x1, 0x2, r4, 0x0) fanotify_mark(r8, 0x22, 0x8001020, r4, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x10800, &(0x7f0000000380)={'trans=virtio,', {[{@noextend}, {@msize={'msize', 0x3d, 0x3}}, {@noxattr}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00Nf8\xba\x04'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r1}}]}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f00000000c0)={0x1ff, r0, 'id1\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x100004, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d6c4ea13c1422a18b38143a06ea2b26bf558e656b0598393bc806b60046504f1d", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',aname=,pcr=00000000000000000060,context=system_u,\x00']) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07032d0c"], 0xa) 2.465966048s ago: executing program 3 (id=5): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) r1 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtaction={0x130, 0x30, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{0x11c, 0x1, [@m_connmark={0x118, 0x1a, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4277, 0x8001, 0x6, 0x6, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xce, 0x1, 0x8, 0x80000001}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x1000, 0x7, 0x1000, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x5, 0x4, 0xc10f, 0x6e5f}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x6, 0x7, 0x4}, 0x20}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x3, 0xffffffffffffffff, 0xf5e4, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x6, 0x6821, 0x1}, 0x7f}}]}, {0x21, 0x6, "78407263c64905d35f44e091cbbcfce6192919861bda69481ab7d6fbb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x130}}, 0x0) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) syz_open_procfs(r1, &(0x7f0000000780)='fdinfo/4\x00') 2.421829754s ago: executing program 0 (id=1): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffff7fa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_open_dev$dvb_frontend(0x0, 0xb, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 2.407167768s ago: executing program 1 (id=2): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000090000010080000001000005d6"], 0x50) sched_setattr(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x11) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x10, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r7, &(0x7f0000000180)='p:s/p ./file0:', 0xe) 2.194717041s ago: executing program 2 (id=4): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x2397c219}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="0000000000000000000000b82ab73f1f281e6bf2541ddf618b7d000040000000000000", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x1c, &(0x7f0000000440)=ANY=[@ANYRESOCT=r3, @ANYRES8=0x0, @ANYRES8, @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000462e8af9d340375b830ca81a2608f1ff76000000bf9800000000000056080000000000008502000000000000b7000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000001a00"/24], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x1001080, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r5, @ANYRESHEX=r2, @ANYRES64=r2, @ANYRESOCT=r6, @ANYRES8=r6]) mkdir(&(0x7f0000000100)='./file1\x00', 0x30) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r8 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r8, 0xc02c}], 0x1, 0x0, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r9, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x2}, 0xe) r10 = dup2(r7, r1) getsockopt$sock_buf(r10, 0x1, 0x1a, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x2, 0x34005, 0x0, 0x20000014}, 0x0) mkdirat(r10, &(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='efs\x00', 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000028c0)={0x14, &(0x7f0000002780)={0x20, 0x7, 0x75, {0x75, 0xc, "20dfbba209cd9fa7e96490c71b4724637be9dc4a26ef21e912fd47e7c00aa71dd29413094a775b5685d6a2d7ad2fbfe744308efabb83ad5a60e3a1c33146dcc8f9ef2dd8dcb4c5fe71d77c81d8146428f6d292b533010490ead41df82f89df202557da8f81976d52c1b8222777d0b24826225b"}}, &(0x7f0000002800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41e}}, &(0x7f0000002840)={0x0, 0x22, 0x3, {[@global=@item_012={0x0, 0x1, 0xa}, @local=@item_012={0x1, 0x2, 0x4, 'Z'}]}}, &(0x7f0000002880)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfff9, 0xaa, 0x1, {0x22, 0x11d}}}}, &(0x7f0000002a80)={0x18, &(0x7f0000002900)={0x0, 0xe, 0x6c, "fc86561b1ead3b76c15020dbac73ca2c61f4d62dcbe8e2228f81a77ffe78320a1f0a637bd72ccc3a43945b22530f9e698e3d2b51ec90ab51843facdc5f000bf710c1048e4786da2a9b8ef410844c98dba76de4bfe497d0f0433b173df67a7fd5f7ff8f92578d53c44a57130a"}, &(0x7f0000002980)={0x0, 0xa, 0x1, 0x3}, &(0x7f00000029c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002a00)={0x20, 0x1, 0x2c, "e90c42baf25d96097b84003c45728c3c42d136444cc0283da97c5d354985912bbb073faf504b4f40baa118bc"}, &(0x7f0000002a40)={0x20, 0x3, 0x1, 0x6}}) 2.192144157s ago: executing program 3 (id=6): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffff7fa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) ftruncate(r7, 0x2007ffb) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$setsig(r8, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_open_dev$dvb_frontend(0x0, 0xb, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 2.167574079s ago: executing program 1 (id=7): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000090000010080000001000005d6"], 0x50) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x11) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x10, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r7, &(0x7f0000000180)='p:s/p ./file0:', 0xe) 1.543388037s ago: executing program 0 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f00000014c0)={{&(0x7f0000000900), 0x0, 0x40, 0x800, 0x1}, {&(0x7f0000000880)=[{0x1cc, 0x4}, {0x2, 0x800}, {0x5, 0xff}, {0x5, 0x4}], 0x4, 0x10, 0x4, 0x828}, {&(0x7f00000013c0)=[0x7ff, 0x4], 0x2, 0x8, 0x4, 0x3}, {&(0x7f0000001400)=[{0x40, 0x3, 0x5, 0x3, 0x3}], 0x1, 0x28, 0xc, 0x1}, {&(0x7f0000000340)=[0x3, 0x3, 0xffffffffffffffff, 0x3, 0xfffffffffffffffe, 0x8, 0xd0, 0x94f9, 0x46, 0x1, 0xcc5, 0x4], 0xc, 0x8, 0x800, 0x3}}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r2, 0x0, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r7, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc4c03d12, &(0x7f0000000280)={0x2006, 0x17}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x36}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) socket$packet(0x11, 0x3, 0x300) 1.402878521s ago: executing program 3 (id=9): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffff7fa]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xf0c, &(0x7f0000000400)={0x0, 0x595d, 0x8, 0x1, 0x1000051}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3208}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) pause() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0xa) fchdir(r6) open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x0) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) fcntl$setsig(r7, 0xa, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_open_dev$dvb_frontend(0x0, 0xb, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 788.777451ms ago: executing program 2 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r5, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) bind(r3, &(0x7f0000000400)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) connect(r9, &(0x7f0000000300)=@ethernet={0x1, @local}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x6000, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x2312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 585.208219ms ago: executing program 0 (id=11): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000940)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x0, 0x110, 0x110, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x2, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {0xff}}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x2, 0x1}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x40, 0xd, {@empty, {[0x0, 0xff]}}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x28}, 0xffffff00, 0xffffffff, 0x6, 0x2d, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0xff, 0x5, 0x10, 0xe, 0x3ff, 0x3, 'bond_slave_1\x00', 'hsr0\x00', {}, {0xff}, 0x0, 0x2f6}, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r2], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2001) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000400)={0x1f00, 0x1, 0xbe}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffe, 0x100, &(0x7f0000006680)) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_GUEST_MEMFD(r6, 0xc040aed4, &(0x7f0000000040)={0x1000200001fe0000, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000240)={0x2710, 0x4, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x8100000000000000, r7}) r8 = dup(0xffffffffffffffff) getsockopt$inet_tcp_int(r8, 0x6, 0x6, 0x0, &(0x7f0000000100)) getsockname$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xfff1, 0xffff}, {0x7}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 585.006423ms ago: executing program 2 (id=12): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000cb4000/0x4000)=nil, 0x4000, 0x1) r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="680000004a000b0000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000200000014000100fe8000000000000000000000000000aa0d"], 0x68}}, 0x400800c) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080)) r2 = openat$audio1(0xffffff9c, &(0x7f0000000100), 0x90600, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000180)) r3 = socket(0x29, 0x5, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000140)=0xc, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) dup3(r3, 0xffffffffffffffff, 0x80000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f0000b31000/0x4000)=nil, 0x4000) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f00000001c0)='#^\xe7P[.,[*^\x00', &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 447.607828ms ago: executing program 0 (id=13): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) r1 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newtaction={0x130, 0x30, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{0x11c, 0x1, [@m_connmark={0x118, 0x1a, 0x0, 0x0, {{0xd}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4277, 0x8001, 0x6, 0x6, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0xce, 0x1, 0x8, 0x80000001}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x1000, 0x7, 0x1000, 0x8}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x5, 0x4, 0xc10f, 0x6e5f}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x6, 0x7, 0x4}, 0x20}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fff, 0x3, 0xffffffffffffffff, 0xf5e4, 0x7}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x6, 0x6821, 0x1}, 0x7f}}]}, {0x21, 0x6, "78407263c64905d35f44e091cbbcfce6192919861bda69481ab7d6fbb9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x130}}, 0x0) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) syz_open_procfs(r1, &(0x7f0000000780)='fdinfo/4\x00') 447.24819ms ago: executing program 3 (id=14): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = geteuid() r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) setsockopt(r2, 0x84, 0x75, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a) fstat(0xffffffffffffffff, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f00000010c0)={0x7, 0x0, [{0x0, 0x9, 0x1, 0x8, 0x200000, 0xfffffffb, 0x1}, {0x80000007, 0x7, 0x6, 0x0, 0x7, 0xfffffffd, 0x7b87a9e1}, {0xa, 0xffffffff, 0x0, 0xfffffffd, 0x4, 0x80000001, 0x8}, {0x80000000, 0xffffffff, 0x7, 0x1007, 0x4, 0x2000110, 0xbf62}, {0x80000008, 0x5dd3, 0x5, 0xfc6b, 0x1000e231, 0x1, 0x7fff}, {0x7, 0x4, 0x5, 0x3, 0x6, 0x803, 0x9}, {0x40000001, 0x28, 0x7, 0x1, 0x4, 0x100, 0x2}]}) r8 = fanotify_init(0x0, 0x101000) setns(0xc9, 0x0) r9 = socket(0x2a, 0x2, 0x9) connect(r9, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x80) write$nbd(r9, 0x0, 0x0) fanotify_mark(r8, 0x1, 0x2, r4, 0x0) fanotify_mark(r8, 0x22, 0x8001020, r4, 0x0) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x10800, &(0x7f0000000380)={'trans=virtio,', {[{@noextend}, {@msize={'msize', 0x3d, 0x3}}, {@noxattr}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00Nf8\xba\x04'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r1}}]}}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f00000000c0)={0x1ff, r0, 'id1\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x100004, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d6c4ea13c1422a18b38143a06ea2b26bf558e656b0598393bc806b60046504f1d", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',aname=,pcr=00000000000000000060,context=system_u,\x00']) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1000000, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e07032d0c"], 0xa) 325.913178ms ago: executing program 3 (id=15): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000090000010080000001000005d6"], 0x50) sched_setattr(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x11) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x10, 0x6000, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x521c, 0x1, 0x61, 0x0, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_RESET(r6, 0x4141, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r7, &(0x7f0000000180)='p:s/p ./file0:', 0xe) 323.957354ms ago: executing program 0 (id=16): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00"/18], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0xffffffff, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x800, 0x0, 0x0, 0x0, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002140)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002100)={r4, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) read(r3, &(0x7f00000000c0)=""/131, 0x83) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r5 = socket(0x2b, 0x1, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, 0x0, 0x18) syslog(0x4, &(0x7f00000001c0)=""/90, 0x5a) r6 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000001080)={0x20000009}) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000140)='./file1\x00') 319.728972ms ago: executing program 2 (id=17): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) setns(0xc9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0086e2f51fece6a460e0fccedf376bb8601ad8c63f213d6d7947ed3254cf66f39f7cecc4f46c19f26566ce3b99a76d99321590909dd702a148948036beede8c257491d8efb42ff3c0ce0c654c903949a69e85de209", @ANYRES16=r5, @ANYBLOB="000100000000fcdbdf253900000008000300", @ANYRES32=r6, @ANYBLOB="0c005a800800038004000100"], 0x28}}, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000180)={0x10080000001ff, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x2, 0x20000008) r8 = openat$autofs(0xffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) readv(r9, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/197, 0xc5}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./lower2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/dir1\x00', 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/hibernate_compression_threads', 0x160802, 0x184) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500"], 0x4c}}, 0x0) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r5 = dup(r2) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004) sendfile(r1, r1, 0x0, 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000a1c0)={0x1c, 0x2a, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000210001002bb27000fbdbdf25022000dd000000000400010008000100ac1414aa0c000c400000000000000091"], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c93018002c00050019801000ff"], 0x1d) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30574' (ED25519) to the list of known hosts. [ 42.135360][ T5683] cgroup: Unknown subsys name 'net' [ 42.225374][ T5683] cgroup: Unknown subsys name 'cpuset' [ 42.229178][ T5683] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.188396][ T5683] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.327975][ T5735] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.330657][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.337564][ T5742] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.341568][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.344035][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.346014][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.348934][ T5742] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.350582][ T5746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.352028][ T5742] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.353422][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.354516][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.355493][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.356001][ T5742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.356403][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.356864][ T5746] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.357771][ T5088] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.360907][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.368018][ T5742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.374939][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.382672][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.932181][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.944444][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.948182][ T5740] bridge_slave_0: entered allmulticast mode [ 47.953698][ T5740] bridge_slave_0: entered promiscuous mode [ 47.992988][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.995277][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.997545][ T5740] bridge_slave_1: entered allmulticast mode [ 48.000144][ T5740] bridge_slave_1: entered promiscuous mode [ 48.028324][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.031144][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.034056][ T5730] bridge_slave_0: entered allmulticast mode [ 48.036851][ T5730] bridge_slave_0: entered promiscuous mode [ 48.060492][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.063120][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.065440][ T5730] bridge_slave_1: entered allmulticast mode [ 48.068070][ T5730] bridge_slave_1: entered promiscuous mode [ 48.078501][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.083228][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.098103][ T5728] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.100984][ T5728] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.104469][ T5728] bridge_slave_0: entered allmulticast mode [ 48.107363][ T5728] bridge_slave_0: entered promiscuous mode [ 48.110997][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.113600][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.115935][ T5729] bridge_slave_0: entered allmulticast mode [ 48.118727][ T5729] bridge_slave_0: entered promiscuous mode [ 48.123009][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.125612][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.128054][ T5729] bridge_slave_1: entered allmulticast mode [ 48.130875][ T5729] bridge_slave_1: entered promiscuous mode [ 48.153766][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.157570][ T5728] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.160790][ T5728] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.164833][ T5728] bridge_slave_1: entered allmulticast mode [ 48.168829][ T5728] bridge_slave_1: entered promiscuous mode [ 48.204936][ T5740] team0: Port device team_slave_0 added [ 48.209890][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.226334][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.231863][ T5740] team0: Port device team_slave_1 added [ 48.240377][ T5728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.244931][ T5728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.249565][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.286217][ T5730] team0: Port device team_slave_0 added [ 48.317471][ T5730] team0: Port device team_slave_1 added [ 48.320164][ T5729] team0: Port device team_slave_0 added [ 48.322716][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.325411][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.333408][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.341775][ T5728] team0: Port device team_slave_0 added [ 48.347872][ T5728] team0: Port device team_slave_1 added [ 48.361191][ T5729] team0: Port device team_slave_1 added [ 48.364127][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.366391][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.375643][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.404023][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.406202][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.414163][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.418548][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.420705][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.428821][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.449765][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.452274][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.461303][ T5728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.467094][ T5728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.469840][ T5728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.478267][ T5728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.495115][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.497440][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.507532][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.532859][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.535064][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.543315][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.554652][ T5730] hsr_slave_0: entered promiscuous mode [ 48.557471][ T5730] hsr_slave_1: entered promiscuous mode [ 48.563172][ T5740] hsr_slave_0: entered promiscuous mode [ 48.565401][ T5740] hsr_slave_1: entered promiscuous mode [ 48.567793][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 48.570055][ T5740] Cannot create hsr debugfs directory [ 48.587251][ T5728] hsr_slave_0: entered promiscuous mode [ 48.589769][ T5728] hsr_slave_1: entered promiscuous mode [ 48.592285][ T5728] debugfs: 'hsr0' already exists in 'hsr' [ 48.594169][ T5728] Cannot create hsr debugfs directory [ 48.651399][ T5729] hsr_slave_0: entered promiscuous mode [ 48.653783][ T5729] hsr_slave_1: entered promiscuous mode [ 48.655798][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 48.657574][ T5729] Cannot create hsr debugfs directory [ 48.891743][ T5740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.900059][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.903050][ T5740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.907109][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.909817][ T5740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.916479][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.919372][ T5740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.923843][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.970989][ T5729] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.975249][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.978197][ T5729] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.981993][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.985544][ T5729] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.990420][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.998050][ T5729] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.003703][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.061921][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.066949][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.069920][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.076504][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.080591][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.085079][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.088586][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.095479][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.142606][ T5728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.146707][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.149469][ T5728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.154816][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.157427][ T5728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.161687][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.172489][ T5728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.177261][ T5728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.215135][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.234645][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.249943][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.253345][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.260639][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.263106][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.271114][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.307648][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.320665][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.327314][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.330137][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.342846][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.345696][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.359309][ T5728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.363659][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.379595][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.382566][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.393167][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.395430][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.400133][ T5728] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.413191][ T5741] Bluetooth: hci2: command tx timeout [ 49.413286][ T5088] Bluetooth: hci3: command tx timeout [ 49.415386][ T5732] Bluetooth: hci1: command tx timeout [ 49.417096][ T64] Bluetooth: hci0: command tx timeout [ 49.420107][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.420345][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.437005][ T5729] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.440214][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.448405][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.451014][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.705431][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.713192][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.757953][ T5740] veth0_vlan: entered promiscuous mode [ 49.770453][ T5729] veth0_vlan: entered promiscuous mode [ 49.776291][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.779488][ T5740] veth1_vlan: entered promiscuous mode [ 49.790405][ T5728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.794669][ T5729] veth1_vlan: entered promiscuous mode [ 49.821802][ T5740] veth0_macvtap: entered promiscuous mode [ 49.833272][ T5740] veth1_macvtap: entered promiscuous mode [ 49.845290][ T5730] veth0_vlan: entered promiscuous mode [ 49.861810][ T5729] veth0_macvtap: entered promiscuous mode [ 49.868556][ T5728] veth0_vlan: entered promiscuous mode [ 49.875346][ T5730] veth1_vlan: entered promiscuous mode [ 49.880838][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.887307][ T5729] veth1_macvtap: entered promiscuous mode [ 49.900673][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.904959][ T5728] veth1_vlan: entered promiscuous mode [ 49.920368][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.929219][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.978669][ T5730] veth0_macvtap: entered promiscuous mode [ 49.982943][ T5728] veth0_macvtap: entered promiscuous mode [ 49.992495][ T5728] veth1_macvtap: entered promiscuous mode [ 49.999995][ T5730] veth1_macvtap: entered promiscuous mode [ 50.030197][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.038096][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.039950][ T5728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.040914][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.041048][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.047576][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.067377][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.067442][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.072908][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.085903][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.109951][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.113639][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.125083][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.175396][ T5809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.175954][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.181369][ T5809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.198619][ T5729] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.207791][ T5729] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.210940][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.212219][ T5809] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.215882][ T5729] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.218248][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.219139][ T206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.219151][ T206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.236574][ T5729] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.244170][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.247221][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.269050][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.275505][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.303495][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.306807][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.322480][ T5809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.326651][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.362506][ T5809] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.367922][ T5809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.375850][ T5809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.403868][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.413738][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.420809][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.431571][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.453114][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.726177][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4'. [ 50.737136][ T5898] bridge_slave_1: left allmulticast mode [ 50.738957][ T5898] bridge_slave_1: left promiscuous mode [ 50.745220][ T5898] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.757584][ T5898] bridge_slave_0: left allmulticast mode [ 50.761512][ T5898] bridge_slave_0: left promiscuous mode [ 50.763631][ T5898] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.493581][ T64] Bluetooth: hci0: command tx timeout [ 51.493682][ T5741] Bluetooth: hci2: command tx timeout [ 51.493726][ T5088] Bluetooth: hci3: command tx timeout [ 51.994190][ T5920] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 52.206530][ T5924] Zero length message leads to an empty skb [ 52.223048][ T5924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 52.532286][ T5088] Bluetooth: hci1: command tx timeout [ 52.677677][ T5938] scsi host6: ata_generic [ 52.702404][ T5938] scsi host7: ata_generic [ 52.719722][ T5938] ata7: PATA max UDMA/100 cmd 0xc0a0 ctl 0xfeaf5000 bmdma 0xfe200000 irq 23 lpm-pol 0 [ 52.729219][ T5938] ata8: DUMMY [ 52.908613][ T27] process 5933 (syz.0.16) no longer affine to cpu1 [ 52.908740][ T27] process 5946 (syz.0.16) no longer affine to cpu1 [ 52.909052][ T27] process 5932 (syz.0.16) no longer affine to cpu1 [ 52.979235][ T5949] smpboot: CPU 1 is now offline [ 53.003120][ T5951] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 53.004600][ T5949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 53.009026][ T5932] ------------[ cut here ]------------ [ 53.009426][ T5932] [ 53.009432][ T5932] ====================================================== [ 53.009437][ T5932] WARNING: possible circular locking dependency detected [ 53.009443][ T5932] syzkaller #0 Not tainted [ 53.009449][ T5932] ------------------------------------------------------ [ 53.009454][ T5932] syz.0.16/5932 is trying to acquire lock: [ 53.009460][ T5932] ffffffff8ecf5a00 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 53.009502][ T5932] [ 53.009502][ T5932] but task is already holding lock: [ 53.009506][ T5932] ffff88802b23c0a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 53.009539][ T5932] [ 53.009539][ T5932] which lock already depends on the new lock. [ 53.009539][ T5932] [ 53.009543][ T5932] [ 53.009543][ T5932] the existing dependency chain (in reverse order) is: [ 53.009547][ T5932] [ 53.009547][ T5932] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 53.009563][ T5932] lock_acquire+0x1b9/0x370 [ 53.009579][ T5932] _raw_spin_lock_nested+0x31/0x40 [ 53.009593][ T5932] raw_spin_rq_lock_nested+0x2c/0x140 [ 53.009610][ T5932] _task_rq_lock+0xcf/0x500 [ 53.009626][ T5932] cgroup_move_task+0x81/0x320 [ 53.009639][ T5932] css_set_move_task+0x285/0x600 [ 53.009656][ T5932] cgroup_post_fork+0x1f9/0x9a0 [ 53.009671][ T5932] copy_process+0x64da/0x8370 [ 53.009689][ T5932] kernel_clone+0x176/0x9d0 [ 53.009706][ T5932] rest_init+0xa3/0x2e0 [ 53.009725][ T5932] start_kernel+0x48e/0x490 [ 53.009741][ T5932] x86_64_start_reservations+0x24/0x30 [ 53.009757][ T5932] x86_64_start_kernel+0x12b/0x130 [ 53.009773][ T5932] common_startup_64+0x13e/0x158 [ 53.009787][ T5932] [ 53.009787][ T5932] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 53.009803][ T5932] lock_acquire+0x1b9/0x370 [ 53.009817][ T5932] _raw_spin_lock_irq_disable+0x5e/0x90 [ 53.009831][ T5932] try_to_wake_up+0xc1/0x1c90 [ 53.009848][ T5932] __queue_work+0x4a6/0x1370 [ 53.009864][ T5932] queue_work_on+0x1a9/0x1e0 [ 53.009877][ T5932] rpm_suspend+0xf6b/0x1220 [ 53.009893][ T5932] rpm_idle+0x60c/0x790 [ 53.009907][ T5932] __pm_runtime_idle+0xba/0x1a0 [ 53.009921][ T5932] __device_attach+0x37e/0x4d0 [ 53.009937][ T5932] device_initial_probe+0xaf/0xd0 [ 53.009952][ T5932] bus_probe_device+0x64/0x160 [ 53.009964][ T5932] device_add+0x121d/0x1970 [ 53.009981][ T5932] serial_base_port_add+0x227/0x2b0 [ 53.010002][ T5932] serial_core_register_port+0x13c/0x16f0 [ 53.010020][ T5932] serial8250_register_8250_port+0x15af/0x2330 [ 53.010034][ T5932] serial_pnp_probe+0x436/0x930 [ 53.010047][ T5932] pnp_device_probe+0x2b3/0x4a0 [ 53.010065][ T5932] really_probe+0x241/0xa60 [ 53.010079][ T5932] __driver_probe_device+0x210/0x460 [ 53.010093][ T5932] driver_probe_device+0x4a/0x140 [ 53.010107][ T5932] __driver_attach+0x21f/0x5b0 [ 53.010121][ T5932] bus_for_each_dev+0x13e/0x1d0 [ 53.010141][ T5932] bus_add_driver+0x305/0x5b0 [ 53.010153][ T5932] driver_register+0x1e2/0x360 [ 53.010168][ T5932] serial8250_init+0xcc/0x1c0 [ 53.010182][ T5932] do_one_initcall+0x11c/0x6f0 [ 53.010203][ T5932] kernel_init_freeable+0x6ea/0x7b0 [ 53.010218][ T5932] kernel_init+0x21/0x1e0 [ 53.010236][ T5932] ret_from_fork+0x730/0xd60 [ 53.010254][ T5932] ret_from_fork_asm+0x1a/0x30 [ 53.010265][ T5932] [ 53.010265][ T5932] -> #2 (&dev->power.lock){-...}-{3:3}: [ 53.010281][ T5932] lock_acquire+0x1b9/0x370 [ 53.010295][ T5932] _raw_spin_lock_irqsave+0x3a/0x60 [ 53.010308][ T5932] __pm_runtime_resume+0xa9/0x170 [ 53.010323][ T5932] __uart_start+0x1b0/0x510 [ 53.010336][ T5932] uart_write+0x211/0xb20 [ 53.010356][ T5932] n_tty_write+0x431/0x1160 [ 53.010375][ T5932] file_tty_write.isra.0+0x4d2/0x890 [ 53.010392][ T5932] redirected_tty_write+0xd4/0x120 [ 53.010407][ T5932] vfs_write+0x6af/0x1050 [ 53.010425][ T5932] ksys_write+0x12a/0x250 [ 53.010442][ T5932] do_syscall_64+0x121/0x770 [ 53.010457][ T5932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.010470][ T5932] [ 53.010470][ T5932] -> #1 (&port_lock_key){-...}-{3:3}: [ 53.010487][ T5932] lock_acquire+0x1b9/0x370 [ 53.010501][ T5932] _raw_spin_lock_irqsave+0x3a/0x60 [ 53.010514][ T5932] serial8250_console_write+0x177/0x1a50 [ 53.010533][ T5932] console_flush_one_record+0x78e/0xf10 [ 53.010553][ T5932] console_unlock+0x103/0x260 [ 53.010571][ T5932] vprintk_emit+0x407/0x6b0 [ 53.010589][ T5932] _printk+0xcf/0x110 [ 53.010600][ T5932] register_console.cold+0xc0/0x248 [ 53.010613][ T5932] univ8250_console_init+0x6f/0x80 [ 53.010626][ T5932] console_init+0x3d5/0x5b0 [ 53.010645][ T5932] start_kernel+0x314/0x490 [ 53.010659][ T5932] x86_64_start_reservations+0x24/0x30 [ 53.010676][ T5932] x86_64_start_kernel+0x12b/0x130 [ 53.010692][ T5932] common_startup_64+0x13e/0x158 [ 53.010704][ T5932] [ 53.010704][ T5932] -> #0 (console_owner){-...}-{0:0}: [ 53.010720][ T5932] check_prev_add+0xeb/0xe60 [ 53.010734][ T5932] __lock_acquire+0x1492/0x1ec0 [ 53.010748][ T5932] lock_acquire+0x1b9/0x370 [ 53.010762][ T5932] console_lock_spinning_enable+0x72/0x80 [ 53.010781][ T5932] console_flush_one_record+0x737/0xf10 [ 53.010800][ T5932] console_unlock+0x103/0x260 [ 53.010817][ T5932] vprintk_emit+0x407/0x6b0 [ 53.010836][ T5932] _printk+0xcf/0x110 [ 53.010846][ T5932] __report_bug.cold+0x34/0x141 [ 53.010861][ T5932] report_bug+0xb3/0x220 [ 53.010875][ T5932] handle_bug+0x16a/0x2a0 [ 53.010892][ T5932] exc_invalid_op+0x17/0x50 [ 53.010908][ T5932] asm_exc_invalid_op+0x1a/0x20 [ 53.010920][ T5932] update_rq_clock+0x40a/0xd20 [ 53.010937][ T5932] __schedule+0x1c69/0x6920 [ 53.010950][ T5932] schedule+0xdd/0x2c0 [ 53.010962][ T5932] irqentry_exit+0x37f/0xa10 [ 53.010976][ T5932] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 53.010989][ T5932] [ 53.010989][ T5932] other info that might help us debug this: [ 53.010989][ T5932] [ 53.010994][ T5932] Chain exists of: [ 53.010994][ T5932] console_owner --> &p->pi_lock --> &rq->__lock [ 53.010994][ T5932] [ 53.011012][ T5932] Possible unsafe locking scenario: [ 53.011012][ T5932] [ 53.011016][ T5932] CPU0 CPU1 [ 53.011020][ T5932] ---- ---- [ 53.011023][ T5932] lock(&rq->__lock); [ 53.011031][ T5932] lock(&p->pi_lock); [ 53.011039][ T5932] lock(&rq->__lock); [ 53.011048][ T5932] lock(console_owner); [ 53.011056][ T5932] [ 53.011056][ T5932] *** DEADLOCK *** [ 53.011056][ T5932] [ 53.011059][ T5932] locks held by syz.0.16/5932: 3, last CPU#0: [ 53.011069][ T5932] #0: ffff88802b23c0a0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 53.011103][ T5932] #1: ffffffff8edd5e40 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 53.011131][ T5932] #2: ffffffff8edd5eb8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 53.011168][ T5932] [ 53.011168][ T5932] stack backtrace: [ 53.011175][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 53.011190][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.011198][ T5932] Call Trace: [ 53.011203][ T5932] [ 53.011208][ T5932] dump_stack_lvl+0x100/0x190 [ 53.011225][ T5932] print_circular_bug.cold+0x178/0x1be [ 53.011248][ T5932] check_noncircular+0x146/0x160 [ 53.011264][ T5932] check_prev_add+0xeb/0xe60 [ 53.011280][ T5932] __lock_acquire+0x1492/0x1ec0 [ 53.011299][ T5932] lock_acquire+0x1b9/0x370 [ 53.011314][ T5932] ? console_lock_spinning_enable+0x61/0x80 [ 53.011334][ T5932] ? console_lock_spinning_enable+0x4a/0x80 [ 53.011360][ T5932] console_lock_spinning_enable+0x72/0x80 [ 53.011379][ T5932] ? console_lock_spinning_enable+0x61/0x80 [ 53.011398][ T5932] console_flush_one_record+0x737/0xf10 [ 53.011420][ T5932] ? __pfx_console_flush_one_record+0x10/0x10 [ 53.011443][ T5932] ? is_printk_cpu_sync_owner+0x32/0x40 [ 53.011457][ T5932] console_unlock+0x103/0x260 [ 53.011476][ T5932] ? __pfx_console_unlock+0x10/0x10 [ 53.011496][ T5932] ? do_raw_spin_unlock+0x145/0x1e0 [ 53.011516][ T5932] ? _printk+0xcf/0x110 [ 53.011529][ T5932] vprintk_emit+0x407/0x6b0 [ 53.011549][ T5932] ? __pfx_vprintk_emit+0x10/0x10 [ 53.011572][ T5932] _printk+0xcf/0x110 [ 53.011583][ T5932] ? __pfx__printk+0x10/0x10 [ 53.011596][ T5932] ? do_raw_spin_unlock+0x145/0x1e0 [ 53.011615][ T5932] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 53.011630][ T5932] ? __report_bug.cold+0x24/0x141 [ 53.011647][ T5932] __report_bug.cold+0x34/0x141 [ 53.011662][ T5932] ? update_rq_clock+0x40a/0xd20 [ 53.011680][ T5932] ? __pfx___report_bug+0x10/0x10 [ 53.011696][ T5932] ? __lock_acquire+0x4c5/0x1ec0 [ 53.011712][ T5932] ? find_held_lock+0x2b/0x80 [ 53.011725][ T5932] ? update_rq_clock+0x40a/0xd20 [ 53.011743][ T5932] report_bug+0xb3/0x220 [ 53.011758][ T5932] ? update_rq_clock+0x40a/0xd20 [ 53.011776][ T5932] handle_bug+0x16a/0x2a0 [ 53.011794][ T5932] exc_invalid_op+0x17/0x50 [ 53.011812][ T5932] asm_exc_invalid_op+0x1a/0x20 [ 53.011824][ T5932] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 53.011844][ T5932] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 28 f6 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 53.011857][ T5932] RSP: 0000:ffffc9000683fd30 EFLAGS: 00010046 [ 53.011867][ T5932] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 53.011876][ T5932] RDX: 0000000000000046 RSI: ffffffff8e3c0f3c RDI: ffffffff8c61bb80 [ 53.011884][ T5932] RBP: ffffc9000683fed0 R08: 0000000000000001 R09: 0000000000000001 [ 53.011892][ T5932] R10: ffff88802b23cbd8 R11: 0000000000000000 R12: ffffffff9144db64 [ 53.011901][ T5932] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 53.011915][ T5932] __schedule+0x1c69/0x6920 [ 53.011933][ T5932] ? __pfx___schedule+0x10/0x10 [ 53.011946][ T5932] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 53.011962][ T5932] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 53.011983][ T5932] schedule+0xdd/0x2c0 [ 53.011997][ T5932] irqentry_exit+0x37f/0xa10 [ 53.012014][ T5932] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 53.012027][ T5932] RIP: 0023:0xf70b0559 [ 53.012038][ T5932] Code: 74 24 1c 8b 44 24 18 8b 7c 24 04 8b 4c 24 08 8b 5c 24 0c 81 e6 ff 1f 00 00 89 4c f5 00 89 5c f5 04 88 04 37 31 c0 83 c4 24 5b <5e> 5f 5d c3 8d 76 00 8b 7c 24 04 8b 44 24 18 38 04 17 74 15 88 04 [ 53.012050][ T5932] RSP: 002b:00000000ff8e6a50 EFLAGS: 00000282 [ 53.012062][ T5932] RAX: 0000000000000001 RBX: 000000000002a01c RCX: 000000008202e732 [ 53.012070][ T5932] RDX: 0000000000000732 RSI: 00000000ffffffff RDI: 00000000f7470000 [ 53.012081][ T5932] RBP: 00000000f7472000 R08: 0000000000000000 R09: 0000000000000000 [ 53.012089][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.012097][ T5932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.012113][ T5932] [ 53.373583][ T5932] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 53.373597][ T5932] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#0: syz.0.16/5932 [ 53.379699][ T5932] Modules linked in: [ 53.380952][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 53.383731][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.386802][ T5932] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 53.388504][ T5932] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 28 f6 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 53.394372][ T5932] RSP: 0000:ffffc9000683fd30 EFLAGS: 00010046 [ 53.396225][ T5932] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 53.398638][ T5932] RDX: 0000000000000046 RSI: ffffffff8e3c0f3c RDI: ffffffff8c61bb80 [ 53.401090][ T5932] RBP: ffffc9000683fed0 R08: 0000000000000001 R09: 0000000000000001 [ 53.403519][ T5932] R10: ffff88802b23cbd8 R11: 0000000000000000 R12: ffffffff9144db64 [ 53.405964][ T5932] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 53.408364][ T5932] FS: 0000000000000000(0000) GS:ffff888096982000(0063) knlGS:000000005753b480 [ 53.411099][ T5932] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 53.413245][ T5932] CR2: 0000000032e08ff8 CR3: 000000006cb52000 CR4: 0000000000352ef0 [ 53.415985][ T5932] Call Trace: [ 53.417055][ T5932] [ 53.417987][ T5932] __schedule+0x1c69/0x6920 [ 53.419414][ T5932] ? __pfx___schedule+0x10/0x10 [ 53.420942][ T5932] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 53.422813][ T5932] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 53.424723][ T5932] schedule+0xdd/0x2c0 [ 53.426008][ T5932] irqentry_exit+0x37f/0xa10 [ 53.427449][ T5932] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 53.429139][ T5932] RIP: 0023:0xf70b0559 [ 53.430420][ T5932] Code: 74 24 1c 8b 44 24 18 8b 7c 24 04 8b 4c 24 08 8b 5c 24 0c 81 e6 ff 1f 00 00 89 4c f5 00 89 5c f5 04 88 04 37 31 c0 83 c4 24 5b <5e> 5f 5d c3 8d 76 00 8b 7c 24 04 8b 44 24 18 38 04 17 74 15 88 04 [ 53.436265][ T5932] RSP: 002b:00000000ff8e6a50 EFLAGS: 00000282 [ 53.438145][ T5932] RAX: 0000000000000001 RBX: 000000000002a01c RCX: 000000008202e732 [ 53.440579][ T5932] RDX: 0000000000000732 RSI: 00000000ffffffff RDI: 00000000f7470000 [ 53.443103][ T5932] RBP: 00000000f7472000 R08: 0000000000000000 R09: 0000000000000000 [ 53.445574][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.448027][ T5932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.450484][ T5932] [ 53.451469][ T5932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 53.453733][ T5932] CPU: 0 UID: 0 PID: 5932 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(full) [ 53.456904][ T5932] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.460363][ T5932] Call Trace: [ 53.461431][ T5932] [ 53.462368][ T5932] dump_stack_lvl+0x100/0x190 [ 53.463842][ T5932] vpanic+0x553/0x970 [ 53.465113][ T5932] ? __pfx_vpanic+0x10/0x10 [ 53.466776][ T5932] ? lock_release+0x24d/0x310 [ 53.468265][ T5932] panic+0xd1/0xe0 [ 53.469468][ T5932] ? __pfx_panic+0x10/0x10 [ 53.470907][ T5932] check_panic_on_warn.cold+0x19/0x34 [ 53.472585][ T5932] ? update_rq_clock+0x40a/0xd20 [ 53.474286][ T5932] __warn.cold+0x191/0x318 [ 53.475773][ T5932] __report_bug+0x30f/0x440 [ 53.477264][ T5932] ? update_rq_clock+0x40a/0xd20 [ 53.478850][ T5932] ? __pfx___report_bug+0x10/0x10 [ 53.480497][ T5932] ? __lock_acquire+0x4c5/0x1ec0 [ 53.482067][ T5932] ? find_held_lock+0x2b/0x80 [ 53.483591][ T5932] ? update_rq_clock+0x40a/0xd20 [ 53.485226][ T5932] report_bug+0xb3/0x220 [ 53.487019][ T5932] ? update_rq_clock+0x40a/0xd20 [ 53.489161][ T5932] handle_bug+0x16a/0x2a0 [ 53.491206][ T5932] exc_invalid_op+0x17/0x50 [ 53.493033][ T5932] asm_exc_invalid_op+0x1a/0x20 [ 53.495063][ T5932] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 53.497002][ T5932] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 08 28 f6 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 53.503779][ T5932] RSP: 0000:ffffc9000683fd30 EFLAGS: 00010046 [ 53.506361][ T5932] RAX: 0000000000000000 RBX: ffff88802b33c040 RCX: 0000000000000001 [ 53.509872][ T5932] RDX: 0000000000000046 RSI: ffffffff8e3c0f3c RDI: ffffffff8c61bb80 [ 53.513352][ T5932] RBP: ffffc9000683fed0 R08: 0000000000000001 R09: 0000000000000001 [ 53.516539][ T5932] R10: ffff88802b23cbd8 R11: 0000000000000000 R12: ffffffff9144db64 [ 53.519351][ T5932] R13: ffff88802b33cf20 R14: ffff88802b33c040 R15: 0000000000000001 [ 53.521871][ T5932] __schedule+0x1c69/0x6920 [ 53.523320][ T5932] ? __pfx___schedule+0x10/0x10 [ 53.524917][ T5932] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 53.526903][ T5932] ? trace_irq_enable.constprop.0+0x2f/0x160 [ 53.528986][ T5932] schedule+0xdd/0x2c0 [ 53.530624][ T5932] irqentry_exit+0x37f/0xa10 [ 53.532203][ T5932] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 53.534117][ T5932] RIP: 0023:0xf70b0559 [ 53.535625][ T5932] Code: 74 24 1c 8b 44 24 18 8b 7c 24 04 8b 4c 24 08 8b 5c 24 0c 81 e6 ff 1f 00 00 89 4c f5 00 89 5c f5 04 88 04 37 31 c0 83 c4 24 5b <5e> 5f 5d c3 8d 76 00 8b 7c 24 04 8b 44 24 18 38 04 17 74 15 88 04 [ 53.542010][ T5932] RSP: 002b:00000000ff8e6a50 EFLAGS: 00000282 [ 53.544163][ T5932] RAX: 0000000000000001 RBX: 000000000002a01c RCX: 000000008202e732 [ 53.547260][ T5932] RDX: 0000000000000732 RSI: 00000000ffffffff RDI: 00000000f7470000 [ 53.550201][ T5932] RBP: 00000000f7472000 R08: 0000000000000000 R09: 0000000000000000 [ 53.552919][ T5932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 53.555484][ T5932] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 53.558229][ T5932] [ 53.559950][ T5932] Kernel Offset: disabled [ 53.561633][ T5932] Rebooting in 86400 seconds..