last executing test programs: 44.161056076s ago: executing program 2 (id=46): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000ac1e0001000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000002000400000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000a0027bd70002bbd700000000000240009000700000000000000fdffffffffffffff0900000000000000050000000000"], 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x40082) mq_timedsend(r3, 0x0, 0x0, 0x4, 0x0) r5 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) setresuid(0xee01, r5, r6) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, 0x0, 0x0, 0x0) 43.042828909s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000000d000)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) vmsplice(r3, 0x0, 0x0, 0xd) ioprio_get$uid(0x3, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) eventfd(0x7) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)) 41.730141523s ago: executing program 2 (id=49): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 30.499797993s ago: executing program 2 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) syz_open_dev$loop(0x0, 0x4, 0x901) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}}, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, 0x0) unshare(0x20000600) setrlimit(0x2, &(0x7f00000000c0)={0xe, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x280c02, 0x48) signalfd4(r3, &(0x7f0000000100)={[0xc35]}, 0x8, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) epoll_create(0x8) unshare(0x20000000) 29.202623142s ago: executing program 2 (id=66): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sigaltstack(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7fff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 27.834078971s ago: executing program 2 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c804) socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) 24.118094319s ago: executing program 3 (id=71): socket$inet(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x40000009}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)=0xf3b, 0x4) io_uring_enter(r3, 0x2219, 0xb, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet(0xffffffffffffffff, 0x0, 0x0) 22.894770582s ago: executing program 1 (id=74): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 21.769592582s ago: executing program 1 (id=76): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x3, {{0xa, 0x4e23, 0x3, @mcast2, 0x10000000}}}, 0x88) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x44) 19.55141801s ago: executing program 4 (id=77): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r5 = socket$inet6(0xa, 0x1, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000300)='1', 0x1) 18.53734947s ago: executing program 1 (id=78): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x21000e, &(0x7f0000000140), 0x1, 0x553, &(0x7f0000000d00)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x290, 0x0, 0xb, 0xd0e0011, 0x120, 0xc6, 0x1f8, 0x1d8, 0x190, 0x1f8, 0x1d8, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'nr0\x00', '\x00', {}, {}, 0x1}, 0x0, 0xd8, 0x120, 0x7000000, {}, [@common=@icmp={{0x28}, {0x0, "0010"}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48}}, {{@ip={@remote, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'virt_wifi0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x20000, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42000, 0x83) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f0000000340)=@v1={0x0, @aes128, 0x3, @desc2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000001880)={0x2, 0x0, 0xfff, 0x3ff, 0x80000001, 0x944, 0x80000}) lseek(r0, 0x10001, 0x0) 18.38225791s ago: executing program 3 (id=79): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/bus/input/handlers\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) rename(&(0x7f0000000580)='./file0\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000040)='./file0\x00') accept4(r2, 0x0, 0x0, 0x80000) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0xf0b, 0x2000, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x4000) 17.112594129s ago: executing program 3 (id=80): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) socket$inet_udp(0x2, 0x2, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) 17.109204211s ago: executing program 4 (id=81): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3c1, 0x0, 0x14a, 0xa}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0x10000, 0xef89, 0x7fa, 0xb2, "35969809006e24a7446d8073145e6c31c267a0", 0x100, 0x200008}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x2000004, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe140f580000dfff0000080000040031623e1a0000000008", [0x7a, 0xd]}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 15.215656376s ago: executing program 4 (id=83): syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$l2tp(0x2, 0x2, 0x73) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)=' /new_domain\nfile read /etc/passwd task.uid=0 task.euid=0\nselect domain= /new_d', 0x5f) read(r3, &(0x7f0000000500)=""/10, 0xa) read(r3, &(0x7f0000000500)=""/10, 0xa) read(r3, &(0x7f0000000500)=""/10, 0xa) read(r3, &(0x7f0000000500)=""/10, 0xa) 14.03443857s ago: executing program 3 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) socket(0x1e, 0x1, 0x0) r4 = creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d2) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 12.433503716s ago: executing program 32 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c804) socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) 11.36831119s ago: executing program 0 (id=87): syz_open_dev$evdev(0x0, 0x3ff, 0x21c0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000002200)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) eventfd2(0x50, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='testdomain / 2147483647\n', 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000414010000000000020000000800010000000000080003"], 0x20}}, 0x0) 10.490107449s ago: executing program 1 (id=88): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r0, r0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x3000007, 0x401d032, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/timers\x00', 0x0, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) timer_create(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) timer_gettime(0x0, 0x0) read$char_usb(r1, &(0x7f00000000c0)=""/104, 0x12) sendfile(r2, r1, 0x0, 0x3fffff) 9.346778894s ago: executing program 3 (id=89): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r3 = getpgrp(r2) sched_setaffinity(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) fcntl$addseals(r1, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x11, r7, 0x0) 7.679585181s ago: executing program 1 (id=90): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b000000"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB="01022abd7000000000000f0000000c0099004a2dec0753000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000014}, 0x48000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000340)=0x1, 0x4) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0)=0x45, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setxattr(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000540)=@random={'trusted.', '\'*$\'$&{#]-+/({:.-}+]\'\x00'}, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/prop1\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002080)=0x64, 0x12) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01}, &(0x7f0000000280)={0x77359400}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/rndis.usb0/os_desc/interface.rndis/prop1\x00', 0x1ff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) write(r0, &(0x7f0000000480)='2', 0x1) 7.668456143s ago: executing program 0 (id=91): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xd, [0xc, 0xe, 0x5, 0x1, 0xa, 0xd, 0x3, 0xa, 0x4, 0xf, 0xc, 0x5, 0xa, 0x10, 0xe, 0x4], 0x0, [0x1, 0x2, 0x4, 0x5, 0x9, 0x3, 0x1, 0x6, 0x0, 0x81, 0x2, 0x1000, 0x4, 0xc, 0x0, 0x7], [0xfffd, 0xd, 0xd96c, 0x0, 0x2, 0x2, 0x3ff, 0x2, 0x9, 0x7, 0xfff, 0x891d, 0x4, 0xd, 0x8, 0x5]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffeb5, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0xd, 0x6, 0x8, 0x8, 0x2, 0x0, 0x21, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x103, 0x4, 0x2002, 0x1, 0x4, 0x1853, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0x2, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0xf7ff, 0x2, 0xc, 0x6, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 6.376489925s ago: executing program 4 (id=92): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000680)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0xe, 0x492f, 0x7f, 0x101, 0x1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/udp\x00') lseek(r4, 0x1000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x147) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000f0)='devtmpfs\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002b00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6f1c, r6}, 0x38) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) 5.372065303s ago: executing program 0 (id=93): r0 = socket$inet_smc(0x2b, 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) socket$tipc(0x1e, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000040)={0x1}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x98, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x6, 0x0, 0x61}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'macvlan0\x00', 'gretap0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x5, 0x2, 0x6, 0x1, 0x0, 0x1], 0x3, 0x1}, {0x1, [0x4, 0x3, 0x6697e4e8f2a2b31b, 0x5, 0x5, 0x1], 0x4, 0xa}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 5.364072483s ago: executing program 4 (id=94): openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000002c0)='1', 0x1) 4.183446739s ago: executing program 3 (id=95): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x2000000000, {0x2, 0x0, 0x3}, 0x2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESOCT=r2, @ANYBLOB="67c50e678237221744d1e78034f716522e5039b79137f1e43d43e060cd54b919d9b0ec7e51efd5", @ANYRES8, @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x4, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) syz_open_procfs(0x0, &(0x7f0000000500)='net/mcfilter\x00') r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r6, 0x5437, 0x0) 2.170757072s ago: executing program 4 (id=96): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_tree(0xffffffffffffff9c, 0x0, 0x89901) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x8, r3) wait4(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.16888586s ago: executing program 0 (id=97): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000001cc0)={0x0, 0x5, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 1.097481212s ago: executing program 0 (id=98): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 1.011304975s ago: executing program 1 (id=99): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_debug_messages', 0x20001, 0xca) io_setup(0x9, &(0x7f0000000100)=0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4bf, &(0x7f0000000740)="$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") r3 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x0, 0x0, 0x2004c011}, 0x90) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x40, r0, &(0x7f00000003c0)="05", 0x1, 0x81, 0x0, 0x1}]) 0s ago: executing program 0 (id=100): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x1c48}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f0000000200)={0x6010, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.55' (ED25519) to the list of known hosts. [ 67.691077][ T5594] cgroup: Unknown subsys name 'net' [ 67.801187][ T5594] cgroup: Unknown subsys name 'cpuset' [ 67.809797][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.085323][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.405063][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.405764][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.411234][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.411298][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.415394][ T5614] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.416419][ T5614] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.418639][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.419297][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.421079][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.421643][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.426327][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.426677][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.428757][ T4927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.429974][ T4927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.430276][ T4927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.431360][ T4927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.432910][ T4927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.438507][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.440010][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.448504][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.449376][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.456758][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.471593][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.478946][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.491375][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.493136][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.508761][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.132319][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.132472][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.132594][ T5607] bridge_slave_0: entered allmulticast mode [ 73.134075][ T5607] bridge_slave_0: entered promiscuous mode [ 73.138052][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.138145][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.138258][ T5607] bridge_slave_1: entered allmulticast mode [ 73.139778][ T5607] bridge_slave_1: entered promiscuous mode [ 73.251044][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.251218][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.251289][ T5606] bridge_slave_0: entered allmulticast mode [ 73.252184][ T5606] bridge_slave_0: entered promiscuous mode [ 73.274305][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.304295][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.304389][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.304494][ T5606] bridge_slave_1: entered allmulticast mode [ 73.306051][ T5606] bridge_slave_1: entered promiscuous mode [ 73.343908][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.394753][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.394845][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.395194][ T5605] bridge_slave_0: entered allmulticast mode [ 73.396468][ T5605] bridge_slave_0: entered promiscuous mode [ 73.416483][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.416578][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.417227][ T5608] bridge_slave_0: entered allmulticast mode [ 73.424218][ T5608] bridge_slave_0: entered promiscuous mode [ 73.429038][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.429155][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.429272][ T5608] bridge_slave_1: entered allmulticast mode [ 73.431002][ T5608] bridge_slave_1: entered promiscuous mode [ 73.459768][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.459864][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.460222][ T5605] bridge_slave_1: entered allmulticast mode [ 73.462550][ T5605] bridge_slave_1: entered promiscuous mode [ 73.480602][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.489576][ T54] Bluetooth: hci0: command tx timeout [ 73.489732][ T54] Bluetooth: hci1: command tx timeout [ 73.489933][ T5611] Bluetooth: hci2: command tx timeout [ 73.494355][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.494451][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.494794][ T5604] bridge_slave_0: entered allmulticast mode [ 73.496598][ T5604] bridge_slave_0: entered promiscuous mode [ 73.502692][ T5607] team0: Port device team_slave_0 added [ 73.519750][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.539663][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.539869][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.539966][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.540368][ T5604] bridge_slave_1: entered allmulticast mode [ 73.544174][ T5604] bridge_slave_1: entered promiscuous mode [ 73.576552][ T5611] Bluetooth: hci3: command tx timeout [ 73.576706][ T5607] team0: Port device team_slave_1 added [ 73.576723][ T5611] Bluetooth: hci4: command tx timeout [ 73.593974][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.610253][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.627655][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.644707][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.682317][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.683218][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.683230][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.683250][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.697727][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.697739][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.697760][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.701168][ T5606] team0: Port device team_slave_0 added [ 73.704072][ T5608] team0: Port device team_slave_0 added [ 73.806672][ T5605] team0: Port device team_slave_0 added [ 73.813953][ T5606] team0: Port device team_slave_1 added [ 73.815245][ T5608] team0: Port device team_slave_1 added [ 73.816893][ T5604] team0: Port device team_slave_0 added [ 73.821414][ T5604] team0: Port device team_slave_1 added [ 73.824596][ T5605] team0: Port device team_slave_1 added [ 73.883002][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.883017][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.883038][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.938773][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.938788][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.938809][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.940309][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.940321][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.940344][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.941165][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.941175][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.941196][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.947465][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.947477][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.947500][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.986554][ T5606] hsr_slave_0: entered promiscuous mode [ 73.988518][ T5606] hsr_slave_1: entered promiscuous mode [ 73.997428][ T5607] hsr_slave_0: entered promiscuous mode [ 73.998943][ T5607] hsr_slave_1: entered promiscuous mode [ 73.999636][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 73.999713][ T5607] Cannot create hsr debugfs directory [ 74.001535][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.001546][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.001569][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.003841][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.003853][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.003875][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.062167][ T5605] hsr_slave_0: entered promiscuous mode [ 74.064594][ T5605] hsr_slave_1: entered promiscuous mode [ 74.067457][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 74.067475][ T5605] Cannot create hsr debugfs directory [ 74.068513][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.068523][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.068546][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.135911][ T5604] hsr_slave_0: entered promiscuous mode [ 74.136836][ T5604] hsr_slave_1: entered promiscuous mode [ 74.137565][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 74.137581][ T5604] Cannot create hsr debugfs directory [ 74.397742][ T5608] hsr_slave_0: entered promiscuous mode [ 74.399681][ T5608] hsr_slave_1: entered promiscuous mode [ 74.400294][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 74.400310][ T5608] Cannot create hsr debugfs directory [ 74.732546][ T5604] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.750373][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.751836][ T5604] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.756407][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.760355][ T5604] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.769953][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.771421][ T5604] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.775282][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.860687][ T5605] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.864882][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.867050][ T5605] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.887881][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.889161][ T5605] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.893826][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.907282][ T5605] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.915280][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.983432][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.996181][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.996954][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.008639][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.021264][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.026643][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.027265][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.030907][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.146945][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.154969][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.168715][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.173750][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.177200][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.177827][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.196834][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.213207][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.219487][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.267571][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.294919][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.323539][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.326768][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.344179][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.344302][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.356624][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.365855][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.366591][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.376730][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.377444][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.391215][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.406910][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.406967][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.425673][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.450523][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.450633][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.507122][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.507185][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.531249][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.569556][ T5615] Bluetooth: hci2: command tx timeout [ 75.569585][ T5615] Bluetooth: hci1: command tx timeout [ 75.569596][ T5611] Bluetooth: hci0: command tx timeout [ 75.601193][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.622257][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.648213][ T54] Bluetooth: hci4: command tx timeout [ 75.648241][ T54] Bluetooth: hci3: command tx timeout [ 75.670210][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.670528][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.703766][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.703822][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.730174][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.767304][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.767398][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.790414][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.790509][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.852393][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.925719][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.961204][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.961862][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.999906][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.000017][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.832856][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.946913][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.947767][ T5604] veth0_vlan: entered promiscuous mode [ 77.012889][ T5604] veth1_vlan: entered promiscuous mode [ 77.117160][ T5605] veth0_vlan: entered promiscuous mode [ 77.160694][ T5604] veth0_macvtap: entered promiscuous mode [ 77.167887][ T5605] veth1_vlan: entered promiscuous mode [ 77.194233][ T5604] veth1_macvtap: entered promiscuous mode [ 77.214704][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.220598][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.283919][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.322043][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.344965][ T5605] veth0_macvtap: entered promiscuous mode [ 77.361076][ T5607] veth0_vlan: entered promiscuous mode [ 77.383396][ T5605] veth1_macvtap: entered promiscuous mode [ 77.387790][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.388663][ T1175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.388792][ T1175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.388833][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.388865][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.482667][ T5606] veth0_vlan: entered promiscuous mode [ 77.484004][ T5607] veth1_vlan: entered promiscuous mode [ 77.520911][ T5606] veth1_vlan: entered promiscuous mode [ 77.525456][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.563595][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.624155][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.624180][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.648351][ T5615] Bluetooth: hci0: command tx timeout [ 77.648378][ T5615] Bluetooth: hci2: command tx timeout [ 77.649500][ T54] Bluetooth: hci1: command tx timeout [ 77.677831][ T5607] veth0_macvtap: entered promiscuous mode [ 77.720459][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.720479][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.727113][ T5607] veth1_macvtap: entered promiscuous mode [ 77.728557][ T5615] Bluetooth: hci4: command tx timeout [ 77.728633][ T54] Bluetooth: hci3: command tx timeout [ 77.810367][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.810427][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.810460][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.810493][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.838624][ T5606] veth0_macvtap: entered promiscuous mode [ 77.866024][ T5606] veth1_macvtap: entered promiscuous mode [ 77.885133][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.930890][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.941467][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.941484][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.982464][ T1175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.982795][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.982832][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.982865][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.987688][ T5604] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.997190][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.055630][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.115999][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.116019][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.199032][ T5608] veth0_vlan: entered promiscuous mode [ 78.228241][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.228260][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.240652][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.265791][ T5608] veth1_vlan: entered promiscuous mode [ 78.292194][ T1175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.292251][ T1175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.347419][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.347439][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.388045][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.432249][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.432267][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.449600][ T5608] veth0_macvtap: entered promiscuous mode [ 78.486038][ T5806] ======================================================= [ 78.486038][ T5806] WARNING: The mand mount option has been deprecated and [ 78.486038][ T5806] and is ignored by this kernel. Remove the mand [ 78.486038][ T5806] option from the mount to silence this warning. [ 78.486038][ T5806] ======================================================= [ 78.511971][ T5608] veth1_macvtap: entered promiscuous mode [ 78.582482][ T5812] loop3: detected capacity change from 0 to 1024 [ 78.586358][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.586376][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.674690][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.715294][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.751729][ T5815] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 79.194477][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.226903][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.244598][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.244926][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.551764][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.551784][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.687509][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.687529][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.728904][ T54] Bluetooth: hci1: command tx timeout [ 79.728936][ T54] Bluetooth: hci2: command tx timeout [ 79.728957][ T54] Bluetooth: hci0: command tx timeout [ 79.790976][ T5824] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 79.790991][ T5824] CIFS mount error: No usable UNC path provided in device string! [ 79.790991][ T5824] [ 79.791071][ T5824] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 80.218147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 81.139750][ T54] Bluetooth: hci4: command tx timeout [ 81.139798][ T5615] Bluetooth: hci3: command tx timeout [ 81.273495][ T33] audit: type=1800 audit(1791568060.117:2): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6" name=08 dev="sda1" ino=2047 res=0 errno=-22 [ 82.778146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 83.472831][ T5834] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.677306][ T33] audit: type=1326 audit(1791568064.527:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5855 comm="syz.1.14" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f5752197f57 code=0x0 [ 86.779574][ T58] cfg80211: failed to load regulatory.db [ 87.139707][ T5861] syz.0.12 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 87.139754][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz.0.12 Not tainted syzkaller #0 PREEMPT(full) [ 87.139780][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.139798][ T5861] Call Trace: [ 87.139806][ T5861] [ 87.139824][ T5861] dump_stack_lvl+0xe8/0x150 [ 87.139851][ T5861] dump_header+0xd3/0x4b0 [ 87.139875][ T5861] oom_kill_process+0x3ab/0x9e0 [ 87.139899][ T5861] out_of_memory+0xfb1/0x13b0 [ 87.139916][ T5861] ? try_charge_memcg+0xc16/0x15f0 [ 87.139947][ T5861] ? __pfx_out_of_memory+0x10/0x10 [ 87.139963][ T5861] ? do_raw_spin_unlock+0xf5/0x200 [ 87.139992][ T5861] try_charge_memcg+0xccc/0x15f0 [ 87.140030][ T5861] ? __pfx_try_charge_memcg+0x10/0x10 [ 87.140058][ T5861] ? percpu_ref_tryget+0x15/0x180 [ 87.140088][ T5861] ? __obj_cgroup_charge+0x36/0x2d0 [ 87.140112][ T5861] __obj_cgroup_charge+0x20a/0x2d0 [ 87.140131][ T5861] ? __obj_cgroup_charge+0x36/0x2d0 [ 87.140154][ T5861] __memcg_slab_post_alloc_hook+0x772/0xdb0 [ 87.140194][ T5861] __kmalloc_noprof+0x3cf/0x710 [ 87.140213][ T5861] ? fast_dput+0x481/0x690 [ 87.140229][ T5861] ? __kmalloc_noprof+0x1a6/0x710 [ 87.140245][ T5861] ? kvm_create_vm_debugfs+0x28b/0x8f0 [ 87.140263][ T5861] ? kvm_create_vm_debugfs+0x28b/0x8f0 [ 87.140290][ T5861] kvm_create_vm_debugfs+0x28b/0x8f0 [ 87.140309][ T5861] ? policy_nodemask+0x2cc/0x8e0 [ 87.140333][ T5861] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 87.140366][ T5861] kvm_dev_ioctl+0x1245/0x1700 [ 87.140394][ T5861] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 87.140418][ T5861] ? bpf_lsm_file_ioctl+0x9/0x20 [ 87.140436][ T5861] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 87.140454][ T5861] __se_sys_ioctl+0xfc/0x170 [ 87.140476][ T5861] do_syscall_64+0x166/0x520 [ 87.140494][ T5861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.140514][ T5861] ? clear_bhb_loop+0x70/0xc0 [ 87.140535][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.140554][ T5861] RIP: 0033:0x7f534339e1d9 [ 87.140576][ T5861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.140591][ T5861] RSP: 002b:00007f5344261028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.140616][ T5861] RAX: ffffffffffffffda RBX: 00007f5343626090 RCX: 00007f534339e1d9 [ 87.140630][ T5861] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 87.140641][ T5861] RBP: 00007f5343435888 R08: 0000000000000000 R09: 0000000000000000 [ 87.140653][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.140664][ T5861] R13: 00007f5343626128 R14: 00007f5343626090 R15: 00007ffd6f6952d8 [ 87.140697][ T5861] [ 88.560456][ T5861] memory: usage 96kB, limit 96kB, failcnt 104 [ 88.560476][ T5861] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 88.560489][ T5861] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 88.560500][ T5861] Memory cgroup stats for /syz0/test: [ 88.560764][ T5861] cache 0 [ 88.560771][ T5861] rss 0 [ 88.560777][ T5861] rss_huge 0 [ 88.560783][ T5861] shmem 0 [ 88.560789][ T5861] mapped_file 0 [ 88.560795][ T5861] dirty 0 [ 88.560800][ T5861] writeback 0 [ 88.560806][ T5861] workingset_refault_anon 0 [ 88.560813][ T5861] workingset_refault_file 0 [ 88.560820][ T5861] swap 0 [ 88.560826][ T5861] swapcached 0 [ 88.560832][ T5861] pgpgin 0 [ 88.560837][ T5861] pgpgout 0 [ 88.560843][ T5861] pgfault 0 [ 88.560849][ T5861] pgmajfault 0 [ 88.560855][ T5861] inactive_anon 0 [ 88.560861][ T5861] active_anon 0 [ 88.560867][ T5861] inactive_file 0 [ 88.560873][ T5861] active_file 0 [ 88.560878][ T5861] unevictable 0 [ 88.560884][ T5861] hierarchical_memory_limit 98304 [ 88.560892][ T5861] hierarchical_memsw_limit 9223372036854771712 [ 88.560899][ T5861] total_cache 0 [ 88.560910][ T5861] total_rss 0 [ 88.560916][ T5861] total_rss_huge 0 [ 88.560923][ T5861] total_shmem 0 [ 88.560929][ T5861] total_mapped_file 0 [ 88.560935][ T5861] total_dirty 0 [ 88.560941][ T5861] total_writeback 0 [ 88.560947][ T5861] total_workingset_refault_anon 0 [ 88.560954][ T5861] total_workingset_refault_file 0 [ 88.560961][ T5861] total_swap 0 [ 88.560967][ T5861] total_swapcached 0 [ 88.560973][ T5861] total_pgpgin 0 [ 88.560979][ T5861] total_pgpgout 0 [ 88.560985][ T5861] total_pgfault 0 [ 88.560992][ T5861] total_pgmajfault 0 [ 88.560998][ T5861] total_inactive_anon 0 [ 88.561005][ T5861] total_active_anon 0 [ 88.561011][ T5861] total_inactive_file 0 [ 88.561018][ T5861] total_active_file 0 [ 88.561024][ T5861] total_unevictable 0 [ 88.561031][ T5861] anon_cost 0 [ 88.561037][ T5861] file_cost 0 [ 88.561044][ T5861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.12,pid=5848,uid=0 [ 88.561694][ T5861] Memory cgroup out of memory: Killed process 5849 (syz.0.12) total-vm:202748kB, anon-rss:1436kB, file-rss:21852kB, shmem-rss:5344kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 89.775846][ T5883] syz.1.19 (5883) used greatest stack depth: 17616 bytes left [ 92.489428][ T5723] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.803236][ T5723] usb 1-1: New USB device found: idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 92.971971][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.971992][ T5723] usb 1-1: Product: syz [ 92.971999][ T5723] usb 1-1: Manufacturer: syz [ 92.972006][ T5723] usb 1-1: SerialNumber: syz [ 92.976337][ T5723] usb 1-1: config 0 descriptor?? [ 93.041456][ T5723] hub 1-1:0.0: bad descriptor, ignoring hub [ 93.041484][ T5723] hub 1-1:0.0: probe with driver hub failed with error -5 [ 93.277307][ T5911] loop4: detected capacity change from 0 to 256 [ 93.666504][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7973 instead [ 93.666590][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0003 instead [ 93.666680][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x0003 instead [ 93.666728][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x001e instead [ 93.666816][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000005c: 0x387a instead [ 93.666863][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000060: 0x0400 instead [ 93.666948][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000064: 0xf9dc instead [ 93.667010][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000068: 0x000d instead [ 93.667313][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000006c: 0x8b48 instead [ 93.667375][ T5912] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x0003 instead [ 93.667752][ T5912] jffs2: Further such events for this erase block will not be printed [ 93.679820][ T5912] jffs2: Empty flash at 0x00000420 ends at 0x00000424 [ 93.690669][ T5912] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 93.690726][ T5912] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 94.079216][ T5911] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x2af3664b, utbl_chksum : 0xe619d30d) [ 95.411578][ T5723] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 95.536204][ T5723] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 95.536273][ T5723] dib0700: firmware download failed at 7 with -22 [ 95.609082][ T5723] usb 1-1: USB disconnect, device number 2 [ 97.727966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.365611][ T5957] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 102.848441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 102.907712][ T51] IPVS: starting estimator thread 0... [ 104.181527][ T5973] IPVS: using max 31 ests per chain, 74400 per kthread [ 105.300880][ T5977] loop1: detected capacity change from 0 to 32768 [ 105.304822][ T5977] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 105.344498][ T5977] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.40 (5977) [ 105.818216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 109.788385][ T6022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.45'. [ 113.181568][ T6037] loop4: detected capacity change from 0 to 128 [ 113.230645][ T6037] omfs: sysblock size (-58445445) is out of range [ 118.156126][ T6068] loop0: detected capacity change from 0 to 256 [ 118.408855][ T6076] mmap: syz.2.63 (6076): VmData 37650432 exceed data ulimit 14. Update limits or use boot option ignore_rlimit_data. [ 119.315648][ T6083] loop4: detected capacity change from 0 to 32768 [ 120.528193][ T6083] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 124.214717][ T5608] ocfs2: Unmounting device (7,4) on (node local) [ 127.875578][ T6129] Zero length message leads to an empty skb [ 128.858118][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 130.427446][ T6145] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 133.081796][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.081844][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.978182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 136.370748][ T33] audit: type=1400 audit(1791568115.217:4): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=6167 comm="syz.0.85" [ 136.836887][ T6172] loop1: detected capacity change from 0 to 512 [ 136.961100][ T6172] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.961121][ T6172] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 137.001316][ T6172] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 137.004879][ T6172] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 137.005118][ T6172] System zones: 0-2, 18-18, 34-34 [ 137.040819][ T6172] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.78: bad orphan inode 15 [ 137.040997][ T6172] loop1: lost filesystem error report for type 5 error -117 [ 137.041881][ T6172] ext4_test_bit(bit=14, block=18) = 1 [ 137.041896][ T6172] is_bad_inode(inode)=0 [ 137.041904][ T6172] NEXT_ORPHAN(inode)=2264924160 [ 137.041909][ T6172] max_ino=32 [ 137.041915][ T6172] i_nlink=0 [ 137.048864][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 137.048883][ C1] EXT4-fs (loop1): initial error at time 1791568115: ext4_orphan_get:1429 [ 137.048903][ C1] EXT4-fs (loop1): last error at time 1791568115: ext4_orphan_get:1429 [ 137.065775][ T6172] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.78: corrupted inode contents [ 137.065881][ T6172] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.076048][ T6172] EXT4-fs error (device loop1): ext4_dirty_inode:6733: inode #15: comm syz.1.78: mark_inode_dirty error [ 137.076074][ T6172] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.076554][ T6172] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.78: corrupted inode contents [ 137.076579][ T6172] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.076887][ T6172] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.78: mark_inode_dirty error [ 137.076911][ T6172] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.077199][ T6172] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2965: inode #15: comm syz.1.78: mark inode dirty (error -117) [ 137.077223][ T6172] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 137.077514][ T6172] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 137.098647][ T6172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.338123][ T6175] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 80: padding at end of block bitmap is not set [ 137.342973][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 137.362677][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 137.431907][ T6183] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.771463][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 137.789301][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 137.789908][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.688569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 139.130419][ T5604] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.928505][ T5615] Bluetooth: hci5: command tx timeout [ 141.992566][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.931782][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.008644][ T5615] Bluetooth: hci5: command tx timeout [ 143.808503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 145.331980][ T5615] Bluetooth: hci5: command tx timeout [ 146.336036][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.417695][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x7973 instead [ 146.417727][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000050: 0x0003 instead [ 146.417743][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000054: 0x0003 instead [ 146.417759][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000058: 0x001e instead [ 146.417774][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000005c: 0x387a instead [ 146.417789][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000060: 0x0400 instead [ 146.417804][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000064: 0xf9dc instead [ 146.417819][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000068: 0x000d instead [ 146.417834][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000006c: 0x8b48 instead [ 146.417849][ T6230] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000070: 0x0003 instead [ 146.417869][ T6230] jffs2: Further such events for this erase block will not be printed [ 146.418032][ T6230] jffs2: Empty flash at 0x00000420 ends at 0x00000424 [ 146.418103][ T6230] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 146.418111][ T6230] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 147.234369][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.407967][ T5615] Bluetooth: hci5: command tx timeout [ 148.267296][ T6242] loop1: detected capacity change from 0 to 512 [ 148.326077][ T6242] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 148.403698][ T6242] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.99: bg 0: block 4: invalid block bitmap [ 148.403731][ T6242] loop1: lost filesystem error report for type 5 error -117 [ 148.408126][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 148.408146][ C0] EXT4-fs (loop1): initial error at time 1791568127: ext4_validate_block_bitmap:436 [ 148.408166][ C0] EXT4-fs (loop1): last error at time 1791568127: ext4_validate_block_bitmap:436 [ 148.455585][ T6242] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 148.455608][ T6242] loop1: lost filesystem error report for type 5 error -117 [ 148.467028][ T6242] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.99: invalid indirect mapped block 1 (level 1) [ 148.467063][ T6242] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 148.494156][ T6242] EXT4-fs (loop1): 1 truncate cleaned up [ 148.496869][ T6242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.697841][ T6251] ------------[ cut here ]------------ [ 148.697856][ T6251] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 148.697969][ T6251] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#1: syz.0.100/6251 [ 148.722312][ T6251] Modules linked in: [ 148.727554][ T6251] CPU: 1 UID: 0 PID: 6251 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT(full) [ 148.737769][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.747916][ T6251] RIP: 0010:__fortify_report+0x89/0xa0 [ 148.753394][ T6251] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 148.773227][ T6251] RSP: 0018:ffffc90005547dc8 EFLAGS: 00010246 [ 148.779398][ T6251] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 148.787374][ T6251] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 148.795430][ T6251] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100b535771 [ 148.803457][ T6251] R10: dffffc0000000000 R11: ffffed100b535772 R12: 0000000000000000 [ 148.811480][ T6251] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 148.819494][ T6251] FS: 00007f53442826c0(0000) GS:ffff888123bb6000(0000) knlGS:0000000000000000 [ 148.829916][ T6251] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.836515][ T6251] CR2: 000000110c3303c5 CR3: 000000003322a000 CR4: 00000000003526f0 [ 148.845426][ T6251] Call Trace: [ 148.849262][ T6251] [ 148.852207][ T6251] __fortify_panic+0x9/0x10 [ 148.856716][ T6251] landlock_merge_ruleset+0xc46/0xc90 [ 148.862403][ T6251] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 148.868615][ T6251] do_syscall_64+0x166/0x520 [ 148.873211][ T6251] ? trace_irq_disable+0x3b/0x140 [ 148.878271][ T6251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.884343][ T6251] ? clear_bhb_loop+0x70/0xc0 [ 148.889091][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.894990][ T6251] RIP: 0033:0x7f534339e1d9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 148.899538][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.919240][ T6251] RSP: 002b:00007f5344282028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 148.929063][ T6251] RAX: ffffffffffffffda RBX: 00007f5343625fa0 RCX: 00007f534339e1d9 [ 148.939191][ T6251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 148.947184][ T6251] RBP: 00007f5343435888 R08: 0000000000000000 R09: 0000000000000000 [ 148.956572][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.964638][ T6251] R13: 00007f5343626038 R14: 00007f5343625fa0 R15: 00007ffd6f6952d8 [ 148.972713][ T6251] [ 148.975742][ T6251] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.983023][ T6251] CPU: 1 UID: 0 PID: 6251 Comm: syz.0.100 Not tainted syzkaller #0 PREEMPT(full) [ 148.992225][ T6251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 149.002279][ T6251] Call Trace: [ 149.005554][ T6251] [ 149.008467][ T6251] vpanic+0x26f/0x710 [ 149.012446][ T6251] panic+0xc5/0xd0 [ 149.016142][ T6251] ? __pfx_panic+0x10/0x10 [ 149.020544][ T6251] __warn+0x315/0x4c0 [ 149.024504][ T6251] ? __fortify_report+0x6b/0xa0 [ 149.029345][ T6251] ? __fortify_report+0x6b/0xa0 [ 149.034209][ T6251] __report_bug+0x276/0x570 [ 149.038722][ T6251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.044803][ T6251] ? __fortify_report+0x6b/0xa0 [ 149.049670][ T6251] ? __pfx___report_bug+0x10/0x10 [ 149.054720][ T6251] report_bug_entry+0x19b/0x290 [ 149.059577][ T6251] ? __fortify_report+0x89/0xa0 [ 149.064436][ T6251] ? __fortify_report+0x8e/0xa0 [ 149.069290][ T6251] handle_bug+0xce/0x200 [ 149.073535][ T6251] exc_invalid_op+0x1a/0x50 [ 149.078042][ T6251] asm_exc_invalid_op+0x1a/0x20 [ 149.082898][ T6251] RIP: 0010:__fortify_report+0x89/0xa0 [ 149.088366][ T6251] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 149.108010][ T6251] RSP: 0018:ffffc90005547dc8 EFLAGS: 00010246 [ 149.114073][ T6251] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 149.122044][ T6251] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 149.130012][ T6251] RBP: 000000000000000e R08: 0000000000000000 R09: 1ffff1100b535771 [ 149.137974][ T6251] R10: dffffc0000000000 R11: ffffed100b535772 R12: 0000000000000000 [ 149.145936][ T6251] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 149.153942][ T6251] ? __fortify_report+0x2c/0xa0 [ 149.158784][ T6251] __fortify_panic+0x9/0x10 [ 149.163276][ T6251] landlock_merge_ruleset+0xc46/0xc90 [ 149.168644][ T6251] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 149.174795][ T6251] do_syscall_64+0x166/0x520 [ 149.179374][ T6251] ? trace_irq_disable+0x3b/0x140 [ 149.184387][ T6251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.190439][ T6251] ? clear_bhb_loop+0x70/0xc0 [ 149.195106][ T6251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.200994][ T6251] RIP: 0033:0x7f534339e1d9 [ 149.205396][ T6251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.224985][ T6251] RSP: 002b:00007f5344282028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 149.233389][ T6251] RAX: ffffffffffffffda RBX: 00007f5343625fa0 RCX: 00007f534339e1d9 [ 149.241352][ T6251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 149.249312][ T6251] RBP: 00007f5343435888 R08: 0000000000000000 R09: 0000000000000000 [ 149.257271][ T6251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.265230][ T6251] R13: 00007f5343626038 R14: 00007f5343625fa0 R15: 00007ffd6f6952d8 [ 149.273201][ T6251] [ 149.276497][ T6251] Kernel Offset: disabled [ 149.280811][ T6251] Rebooting in 86400 seconds..