last executing test programs: 19.113026799s ago: executing program 4 (id=77): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 18.301036384s ago: executing program 3 (id=78): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r2 = socket(0x2d, 0x2, 0x0) connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 18.111030491s ago: executing program 4 (id=80): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabb8, 0x400, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000500)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000b00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x2000, 0x1, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) 14.718896466s ago: executing program 0 (id=82): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff}, 0x10}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000240)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b90, &(0x7f0000000200)="2800000000000000efbeadde0300000005") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14.549377179s ago: executing program 1 (id=83): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, '\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 14.547372069s ago: executing program 2 (id=84): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 14.46068279s ago: executing program 3 (id=85): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 13.272197932s ago: executing program 2 (id=86): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 12.873728958s ago: executing program 1 (id=87): mknod(0x0, 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 12.851383805s ago: executing program 4 (id=88): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r5, &(0x7f0000000400)=""/1, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_GET_INFO(r6, 0x80a86f3d, &(0x7f00000001c0)) 11.076236307s ago: executing program 3 (id=89): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r5, &(0x7f0000000400)=""/1, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_GET_INFO(r6, 0x80a86f3d, &(0x7f00000001c0)) 10.532040184s ago: executing program 0 (id=90): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 8.215109599s ago: executing program 0 (id=91): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r2 = socket(0x2d, 0x2, 0x0) connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 8.088544402s ago: executing program 3 (id=92): r0 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c5760af21822ed33fc12b88222be6b3b70d8595ba08893f644fa53c1c55ad648952a80f17ece8bff775682c9a5167111725b5484fd0ab5d334dcfbe28eb0e02bd0fa90c776e4997388fc9442fd3e8657ac92601fd61a184cf49d513b7bf7cdcebe6423101690e5269a5b2be351ef182d84744d9664f21b1c4bd8c72c0905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002880)={0x44, &(0x7f0000002680)={0x40, 0x9, 0x6, "723cde0c6f34"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)={0x20, 0x83, 0x2}, 0x0, 0x0}) 8.063541744s ago: executing program 4 (id=93): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r5, &(0x7f0000000400)=""/1, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_GET_INFO(r6, 0x80a86f3d, &(0x7f00000001c0)) 8.050013343s ago: executing program 2 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2710, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x38, 0xfff, 0x3fff9, 0x17e, 0x2, 0x0, 0xf1, 0x0, 0x81, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffeffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.048365641s ago: executing program 1 (id=95): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r2 = socket(0x2d, 0x2, 0x0) connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 5.273112175s ago: executing program 4 (id=96): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 5.171908061s ago: executing program 2 (id=97): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, '\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 5.169638394s ago: executing program 0 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0xa000, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x7, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5.098516562s ago: executing program 1 (id=99): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r3 = socket(0x2d, 0x2, 0x0) connect$netlink(r3, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r4, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 1.353744336s ago: executing program 2 (id=100): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1", 0x7}], 0x1, 0x0, 0x0, 0x40088c5}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x20000020, 0x0) 1.329562443s ago: executing program 3 (id=101): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) setns(0xc9, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.296873594s ago: executing program 1 (id=102): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r5, &(0x7f0000000400)=""/1, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_GET_INFO(r6, 0x80a86f3d, &(0x7f00000001c0)) 1.26032378s ago: executing program 0 (id=103): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r5, &(0x7f0000000400)=""/1, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_GET_INFO(r6, 0x80a86f3d, &(0x7f00000001c0)) 1.258233896s ago: executing program 4 (id=104): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) inotify_init() writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x3, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r1, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r1, 0x40026f33, &(0x7f0000000140)=0xc0) add_key(&(0x7f0000000640)='pkcs7_test\x00', 0x0, &(0x7f00000006c0)="3fce3668", 0x1b, 0xfffffffffffffffe) r2 = socket(0x2d, 0x2, 0x0) connect$netlink(r2, &(0x7f0000000140)=@unspec={0x2d}, 0xc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 199.71198ms ago: executing program 0 (id=105): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x24000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) 90.690298ms ago: executing program 3 (id=106): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x8004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt/net/can/rcvlist_sff\x00', 0x0, 0x0) read(r5, &(0x7f0000000400)=""/1, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_GET_INFO(r6, 0x80a86f3d, &(0x7f00000001c0)) 76.923847ms ago: executing program 1 (id=107): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x1, 0x0, 0x2c00}, 0x30, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2102, r0}, 0x1) landlock_restrict_self(r1, 0x5) landlock_restrict_self(r1, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x22) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x101043, 0x1) 0s ago: executing program 2 (id=108): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 79.744731][ T5595] cgroup: Unknown subsys name 'net' [ 79.854121][ T5595] cgroup: Unknown subsys name 'cpuset' [ 79.862795][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.460498][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.012807][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.028986][ T4926] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.037541][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.050861][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.053876][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.054661][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.056688][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.057049][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.074638][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.075200][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.083811][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.084517][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.085294][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.087247][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.088318][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.102150][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.104712][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.106547][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.114715][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.119235][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.121835][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.130108][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.138089][ T5614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.139126][ T5614] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.163597][ T5614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.006634][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.006868][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.007258][ T5609] bridge_slave_0: entered allmulticast mode [ 86.008969][ T5609] bridge_slave_0: entered promiscuous mode [ 86.094178][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.094325][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.095961][ T5609] bridge_slave_1: entered allmulticast mode [ 86.097232][ T5609] bridge_slave_1: entered promiscuous mode [ 86.180982][ T5611] Bluetooth: hci0: command tx timeout [ 86.181325][ T5622] Bluetooth: hci3: command tx timeout [ 86.181505][ T5622] Bluetooth: hci2: command tx timeout [ 86.182327][ T4926] Bluetooth: hci4: command tx timeout [ 86.249640][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.249742][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.250913][ T5613] bridge_slave_0: entered allmulticast mode [ 86.265203][ T4926] Bluetooth: hci1: command tx timeout [ 86.265528][ T5613] bridge_slave_0: entered promiscuous mode [ 86.286156][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.316651][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.316755][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.316872][ T5613] bridge_slave_1: entered allmulticast mode [ 86.318350][ T5613] bridge_slave_1: entered promiscuous mode [ 86.351354][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.424628][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.424736][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.424862][ T5607] bridge_slave_0: entered allmulticast mode [ 86.426531][ T5607] bridge_slave_0: entered promiscuous mode [ 86.461419][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.477134][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.477477][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.481299][ T5606] bridge_slave_0: entered allmulticast mode [ 86.492698][ T5606] bridge_slave_0: entered promiscuous mode [ 86.508525][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.509170][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.509284][ T5607] bridge_slave_1: entered allmulticast mode [ 86.512491][ T5607] bridge_slave_1: entered promiscuous mode [ 86.555323][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.557517][ T5609] team0: Port device team_slave_0 added [ 86.558216][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.558344][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.558692][ T5606] bridge_slave_1: entered allmulticast mode [ 86.560468][ T5606] bridge_slave_1: entered promiscuous mode [ 86.614772][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.614883][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.615302][ T5608] bridge_slave_0: entered allmulticast mode [ 86.616787][ T5608] bridge_slave_0: entered promiscuous mode [ 86.652139][ T5609] team0: Port device team_slave_1 added [ 86.673893][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.674196][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.674301][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.674710][ T5608] bridge_slave_1: entered allmulticast mode [ 86.676609][ T5608] bridge_slave_1: entered promiscuous mode [ 86.730010][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.739646][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.750811][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.768768][ T5613] team0: Port device team_slave_0 added [ 86.818679][ T5613] team0: Port device team_slave_1 added [ 86.819554][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.819566][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.819588][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.888780][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.889584][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.889598][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.889626][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.904168][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.984442][ T5606] team0: Port device team_slave_0 added [ 86.987835][ T5607] team0: Port device team_slave_0 added [ 87.030011][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.030032][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.060695][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.076795][ T5606] team0: Port device team_slave_1 added [ 87.099127][ T5607] team0: Port device team_slave_1 added [ 87.135753][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.135772][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.135800][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.184850][ T5608] team0: Port device team_slave_0 added [ 87.250036][ T5608] team0: Port device team_slave_1 added [ 87.250758][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.250773][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.250801][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.325481][ T5609] hsr_slave_0: entered promiscuous mode [ 87.326682][ T5609] hsr_slave_1: entered promiscuous mode [ 87.355905][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.355925][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.355953][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.418093][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.418112][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.418139][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.472209][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.472227][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.472250][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.475002][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.475016][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.475039][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.509427][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.509487][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.509568][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.676758][ T5613] hsr_slave_0: entered promiscuous mode [ 87.678070][ T5613] hsr_slave_1: entered promiscuous mode [ 87.678662][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 87.678738][ T5613] Cannot create hsr debugfs directory [ 87.766437][ T5606] hsr_slave_0: entered promiscuous mode [ 87.767173][ T5606] hsr_slave_1: entered promiscuous mode [ 87.767722][ T5606] debugfs: 'hsr0' already exists in 'hsr' [ 87.767742][ T5606] Cannot create hsr debugfs directory [ 87.831563][ T5608] hsr_slave_0: entered promiscuous mode [ 87.832601][ T5608] hsr_slave_1: entered promiscuous mode [ 87.833144][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 87.833163][ T5608] Cannot create hsr debugfs directory [ 87.867075][ T5607] hsr_slave_0: entered promiscuous mode [ 87.868096][ T5607] hsr_slave_1: entered promiscuous mode [ 87.868633][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 87.868655][ T5607] Cannot create hsr debugfs directory [ 88.260250][ T4926] Bluetooth: hci4: command tx timeout [ 88.260286][ T4926] Bluetooth: hci2: command tx timeout [ 88.260741][ T4926] Bluetooth: hci0: command tx timeout [ 88.260768][ T4926] Bluetooth: hci3: command tx timeout [ 88.340859][ T4926] Bluetooth: hci1: command tx timeout [ 88.386387][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.399726][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.406549][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.417877][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.418797][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.436602][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.437706][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.454106][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.534339][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.538341][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.539430][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.565682][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.566920][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.572311][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.595445][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.598323][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.690620][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.695512][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.696798][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.704165][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.733487][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.737764][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.755903][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.766377][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.870774][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.895747][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.899474][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.933371][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.937010][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.938204][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.949587][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.973455][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.976594][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.036258][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.062964][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.063100][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.066379][ T5607] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.090346][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.097662][ T5607] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.108793][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.126473][ T5607] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.129600][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.147512][ T5607] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.159789][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.183871][ T498] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.183945][ T498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.269538][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.358545][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.374073][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.431098][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.431216][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.468222][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.468464][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.516786][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.564533][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.564643][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.630908][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.639942][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.640460][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.708134][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.758411][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.801398][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.803321][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.803460][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.836839][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.836948][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.883249][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.883373][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.933050][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.933194][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.341137][ T4926] Bluetooth: hci3: command tx timeout [ 90.341175][ T4926] Bluetooth: hci2: command tx timeout [ 90.341200][ T4926] Bluetooth: hci4: command tx timeout [ 90.341223][ T4926] Bluetooth: hci0: command tx timeout [ 90.421006][ T5611] Bluetooth: hci1: command tx timeout [ 90.853356][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.128112][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.194244][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.423389][ T5606] veth0_vlan: entered promiscuous mode [ 91.479049][ T5613] veth0_vlan: entered promiscuous mode [ 91.515740][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.528393][ T5606] veth1_vlan: entered promiscuous mode [ 91.557519][ T5613] veth1_vlan: entered promiscuous mode [ 91.618607][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.657647][ T5606] veth0_macvtap: entered promiscuous mode [ 91.677394][ T5606] veth1_macvtap: entered promiscuous mode [ 91.701530][ T5613] veth0_macvtap: entered promiscuous mode [ 91.703265][ T5608] veth0_vlan: entered promiscuous mode [ 91.738987][ T5613] veth1_macvtap: entered promiscuous mode [ 91.757204][ T5608] veth1_vlan: entered promiscuous mode [ 91.793385][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.796494][ T5609] veth0_vlan: entered promiscuous mode [ 91.826208][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.841338][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.874259][ T5609] veth1_vlan: entered promiscuous mode [ 91.889495][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.908654][ T5607] veth0_vlan: entered promiscuous mode [ 91.945555][ T1045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.946541][ T1045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.946751][ T1045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.977904][ T5607] veth1_vlan: entered promiscuous mode [ 91.991622][ T5608] veth0_macvtap: entered promiscuous mode [ 92.026874][ T9] cfg80211: failed to load regulatory.db [ 92.054990][ T5608] veth1_macvtap: entered promiscuous mode [ 92.128302][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.128323][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.165188][ T5609] veth0_macvtap: entered promiscuous mode [ 92.186306][ T5609] veth1_macvtap: entered promiscuous mode [ 92.189472][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.246466][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.246793][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.246813][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.281449][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.282267][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.282313][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.282353][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.282392][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.304992][ T5607] veth0_macvtap: entered promiscuous mode [ 92.349324][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.405025][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.419969][ T5607] veth1_macvtap: entered promiscuous mode [ 92.421192][ T5611] Bluetooth: hci0: command tx timeout [ 92.421223][ T5611] Bluetooth: hci4: command tx timeout [ 92.421246][ T5611] Bluetooth: hci2: command tx timeout [ 92.421269][ T5611] Bluetooth: hci3: command tx timeout [ 92.437718][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.437788][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.500492][ T4926] Bluetooth: hci1: command tx timeout [ 92.504084][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.506906][ T235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.506970][ T235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.584423][ T5606] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.615120][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.650902][ T63] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.650957][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.650996][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.651035][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.659657][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.661880][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.661937][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.803742][ T5806] loop3: detected capacity change from 0 to 16 [ 92.805453][ T5806] ======================================================= [ 92.805453][ T5806] WARNING: The mand mount option has been deprecated and [ 92.805453][ T5806] and is ignored by this kernel. Remove the mand [ 92.805453][ T5806] option from the mount to silence this warning. [ 92.805453][ T5806] ======================================================= [ 92.870202][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.872602][ T5806] erofs (device loop3): mounted with root inode @ nid 36. [ 92.965582][ T4926] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000 [ 92.967886][ T5806] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 92.967922][ T5806] erofs (device loop3): read error -117 @ 0 of nid 89 [ 92.969201][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.969221][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.099252][ T235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.099276][ T235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.218431][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.218452][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.320225][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.320285][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.321162][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.321181][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.420902][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.420957][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.477804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.477826][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.477826][ T5815] syz_tun: entered allmulticast mode [ 93.536345][ T193] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.574820][ T5815] syz_tun (unregistering): left allmulticast mode [ 93.696933][ T193] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 93.736026][ T193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.746344][ T193] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.746374][ T193] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.746422][ T193] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.749827][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.749846][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.853320][ T193] usb 4-1: config 0 descriptor?? [ 93.868330][ T5821] loop1: detected capacity change from 0 to 8 [ 93.992121][ T5821] SQUASHFS error: Failed to read block 0x8f: -5 [ 94.012457][ T32] audit: type=1800 audit(1791566315.861:2): pid=5821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=5 res=0 errno=-5 [ 94.154806][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.467473][ T193] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 94.788961][ T5842] loop3: detected capacity change from 0 to 1024 [ 94.925197][ T5842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.260084][ T5851] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 95.289957][ T5854] FAULT_INJECTION: forcing a failure. [ 95.289957][ T5854] name failslab, interval 1, probability 0, space 0, times 1 [ 95.290004][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 95.290035][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.290061][ T5854] Call Trace: [ 95.290070][ T5854] [ 95.290085][ T5854] dump_stack_lvl+0xe8/0x150 [ 95.290116][ T5854] should_fail_ex+0x3eb/0x540 [ 95.290145][ T5854] should_failslab+0xa8/0x100 [ 95.290170][ T5854] __kmalloc_noprof+0xf9/0x710 [ 95.290195][ T5854] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 95.290218][ T5854] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 95.290248][ T5854] __memcg_list_lru_alloc+0x1d9/0x760 [ 95.290278][ T5854] ? xa_load+0x60/0x210 [ 95.290299][ T5854] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 95.290339][ T5854] zswap_store+0x7a4/0x2200 [ 95.290366][ T5854] ? zswap_store+0x53d/0x2200 [ 95.290407][ T5854] ? __pfx_zswap_store+0x10/0x10 [ 95.290429][ T5854] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 95.290461][ T5854] ? do_raw_spin_unlock+0xf5/0x200 [ 95.290486][ T5854] swap_writeout+0x9bf/0x15d0 [ 95.290516][ T5854] ? try_to_unmap_flush_dirty+0x96/0x100 [ 95.290542][ T5854] shrink_folio_list+0x3039/0x4d90 [ 95.290597][ T5854] ? __pfx_shrink_folio_list+0x10/0x10 [ 95.290620][ T5854] ? rcu_is_watching+0x16/0xb0 [ 95.290643][ T5854] ? lock_release+0x4b/0x3c0 [ 95.290663][ T5854] ? lock_release+0x4b/0x3c0 [ 95.290690][ T5854] ? is_bpf_text_address+0x292/0x2b0 [ 95.290712][ T5854] ? is_bpf_text_address+0x26/0x2b0 [ 95.290762][ T5854] ? stack_trace_save+0xa9/0x100 [ 95.290785][ T5854] ? __pfx_stack_trace_save+0x10/0x10 [ 95.290813][ T5854] ? check_noncircular+0xdb/0x150 [ 95.290839][ T5854] ? __pfx___css_rstat_updated+0x10/0x10 [ 95.290871][ T5854] reclaim_folio_list+0x100/0x430 [ 95.290919][ T5854] ? __pfx_reclaim_folio_list+0x10/0x10 [ 95.290961][ T5854] reclaim_pages+0x452/0x530 [ 95.290994][ T5854] ? __pfx_reclaim_pages+0x10/0x10 [ 95.291025][ T5854] ? madvise_cold_or_pageout_pte_range+0x1b69/0x2400 [ 95.291056][ T5854] madvise_cold_or_pageout_pte_range+0x1b8e/0x2400 [ 95.291102][ T5854] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 95.291128][ T5854] ? lru_gen_update_size+0x719/0xd00 [ 95.291166][ T5854] walk_pgd_range+0x102d/0x1dc0 [ 95.291230][ T5854] ? __pfx_walk_pgd_range+0x10/0x10 [ 95.291253][ T5854] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 95.291283][ T5854] __walk_page_range+0x16d/0x720 [ 95.291328][ T5854] walk_page_range_vma_unsafe+0x309/0x410 [ 95.291360][ T5854] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 95.291390][ T5854] ? mlock_drain_local+0x79/0x490 [ 95.291415][ T5854] ? walk_page_range_vma+0x6b/0x90 [ 95.291439][ T5854] madvise_vma_behavior+0x2f63/0x5180 [ 95.291474][ T5854] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 95.291506][ T5854] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.291537][ T5854] ? rcu_is_watching+0x16/0xb0 [ 95.291559][ T5854] ? trace_hrtimer_start+0x82/0x200 [ 95.291584][ T5854] ? hrtimer_start_range_ns_common+0x7cd/0xb60 [ 95.291623][ T5854] ? finish_task_switch+0x40e/0xc60 [ 95.291645][ T5854] ? lockdep_hardirqs_on+0x7b/0x110 [ 95.291670][ T5854] ? rcu_is_watching+0x16/0xb0 [ 95.291692][ T5854] ? trace_sched_exit_tp+0x3a/0x130 [ 95.291718][ T5854] ? __lock_acquire+0x747/0x2de0 [ 95.291764][ T5854] ? mas_prev_slot+0xb76/0xbf0 [ 95.291804][ T5854] ? find_vma_prev+0x123/0x1b0 [ 95.291829][ T5854] ? __pfx_find_vma_prev+0x10/0x10 [ 95.291865][ T5854] ? __pfx___futex_wait+0x10/0x10 [ 95.291892][ T5854] madvise_walk_vmas+0x57d/0xb70 [ 95.291936][ T5854] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 95.291964][ T5854] ? blk_start_plug+0x6e/0x1b0 [ 95.291990][ T5854] madvise_do_behavior+0x385/0x540 [ 95.292021][ T5854] ? __pfx_madvise_do_behavior+0x10/0x10 [ 95.292053][ T5854] ? down_read+0x2b9/0x320 [ 95.292082][ T5854] do_madvise+0x26f/0x330 [ 95.292109][ T5854] ? __pfx_do_madvise+0x10/0x10 [ 95.292135][ T5854] ? rcu_is_watching+0x16/0xb0 [ 95.292164][ T5854] __x64_sys_madvise+0xa6/0xc0 [ 95.292185][ T5854] do_syscall_64+0x166/0x520 [ 95.292205][ T5854] ? trace_irq_disable+0x3b/0x140 [ 95.292224][ T5854] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.292247][ T5854] ? clear_bhb_loop+0x70/0xc0 [ 95.292272][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.292294][ T5854] RIP: 0033:0x7f6831d9e1d9 [ 95.292327][ T5854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.292346][ T5854] RSP: 002b:00007f6832c52028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 95.292377][ T5854] RAX: ffffffffffffffda RBX: 00007f6832025fa0 RCX: 00007f6831d9e1d9 [ 95.292394][ T5854] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 95.292408][ T5854] RBP: 00007f6831e35888 R08: 0000000000000000 R09: 0000000000000000 [ 95.292422][ T5854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.292435][ T5854] R13: 00007f6832026038 R14: 00007f6832025fa0 R15: 00007ffc9405d0b8 [ 95.292471][ T5854] [ 95.625176][ T5845] loop2: detected capacity change from 0 to 32768 [ 96.326755][ T5866] FAULT_INJECTION: forcing a failure. [ 96.326755][ T5866] name failslab, interval 1, probability 0, space 0, times 0 [ 96.326788][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT(full) [ 96.326814][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 96.326826][ T5866] Call Trace: [ 96.326834][ T5866] [ 96.326843][ T5866] dump_stack_lvl+0xe8/0x150 [ 96.326883][ T5866] should_fail_ex+0x3eb/0x540 [ 96.326913][ T5866] should_failslab+0xa8/0x100 [ 96.326939][ T5866] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 96.326966][ T5866] ? __d_alloc+0x37/0x7f0 [ 96.326986][ T5866] ? __d_alloc+0x37/0x7f0 [ 96.327013][ T5866] __d_alloc+0x37/0x7f0 [ 96.327039][ T5866] d_alloc+0x4b/0x190 [ 96.327058][ T5866] ? lookup_one_qstr_excl+0xc4/0x360 [ 96.327084][ T5866] lookup_one_qstr_excl+0xd8/0x360 [ 96.327105][ T5866] ? lookup_noperm_common+0x245/0x430 [ 96.327131][ T5866] start_dirop+0x5c/0x90 [ 96.327154][ T5866] simple_start_creating+0xcc/0x110 [ 96.327177][ T5866] ? __pfx_simple_start_creating+0x10/0x10 [ 96.327200][ T5866] ? do_raw_spin_unlock+0xf5/0x200 [ 96.327227][ T5866] ? mntput+0x65/0xc0 [ 96.327255][ T5866] debugfs_start_creating+0xca/0x1b0 [ 96.327279][ T5866] __debugfs_create_file+0x6f/0x400 [ 96.327307][ T5866] debugfs_create_file_full+0x3f/0x60 [ 96.327334][ T5866] kvm_create_vm_debugfs+0x6ec/0x8f0 [ 96.327368][ T5866] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 96.327406][ T5866] kvm_dev_ioctl+0x1245/0x1700 [ 96.327439][ T5866] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 96.327465][ T5866] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.327499][ T5866] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 96.327519][ T5866] __se_sys_ioctl+0xfc/0x170 [ 96.327542][ T5866] do_syscall_64+0x166/0x520 [ 96.327563][ T5866] ? trace_irq_disable+0x3b/0x140 [ 96.327581][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.327602][ T5866] ? clear_bhb_loop+0x70/0xc0 [ 96.327622][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.327643][ T5866] RIP: 0033:0x7f63a619e1d9 [ 96.327662][ T5866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.327680][ T5866] RSP: 002b:00007f63a7102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.327703][ T5866] RAX: ffffffffffffffda RBX: 00007f63a6425fa0 RCX: 00007f63a619e1d9 [ 96.327718][ T5866] RDX: 0000000000000001 RSI: 000000000000ae01 RDI: 0000000000000004 [ 96.327731][ T5866] RBP: 00007f63a6235888 R08: 0000000000000000 R09: 0000000000000000 [ 96.327744][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.327756][ T5866] R13: 00007f63a6426038 R14: 00007f63a6425fa0 R15: 00007fffb4651b88 [ 96.327792][ T5866] [ 96.736318][ T5606] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.862431][ T5802] usb 4-1: USB disconnect, device number 2 [ 96.878992][ T5876] loop0: detected capacity change from 0 to 1024 [ 96.967131][ T5876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 96.993639][ T5876] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.024835][ T5885] warning: `syz.4.26' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.126070][ T5876] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.24: lblock 3 mapped to illegal pblock 3 (length 3) [ 97.170509][ T5876] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 97.170544][ T5876] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.170544][ T5876] [ 97.251947][ T5876] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.24: Freeing blocks not in datazone - block = 3, count = 1 [ 97.364359][ T5891] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 97.423544][ T235] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 97.448560][ T235] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 97.448594][ T235] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.448594][ T235] [ 97.494306][ T5613] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 97.663506][ T5895] FAULT_INJECTION: forcing a failure. [ 97.663506][ T5895] name failslab, interval 1, probability 0, space 0, times 0 [ 97.663539][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: syz.2.31 Not tainted syzkaller #0 PREEMPT(full) [ 97.663564][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.663577][ T5895] Call Trace: [ 97.663585][ T5895] [ 97.663594][ T5895] dump_stack_lvl+0xe8/0x150 [ 97.663623][ T5895] should_fail_ex+0x3eb/0x540 [ 97.663652][ T5895] should_failslab+0xa8/0x100 [ 97.663677][ T5895] __kmalloc_noprof+0xf9/0x710 [ 97.663699][ T5895] ? netlink_realloc_groups+0xf4/0x310 [ 97.663720][ T5895] ? netlink_realloc_groups+0xf4/0x310 [ 97.663750][ T5895] netlink_realloc_groups+0xf4/0x310 [ 97.663772][ T5895] ? aa_sk_perm+0x6ff/0x8f0 [ 97.663797][ T5895] netlink_bind+0x2ab/0xda0 [ 97.663826][ T5895] ? __pfx_netlink_bind+0x10/0x10 [ 97.663857][ T5895] ? bpf_lsm_socket_bind+0x9/0x20 [ 97.663884][ T5895] __sys_bind+0x2e3/0x410 [ 97.663914][ T5895] ? __pfx___sys_bind+0x10/0x10 [ 97.663949][ T5895] ? rcu_is_watching+0x16/0xb0 [ 97.663981][ T5895] __x64_sys_bind+0x7a/0x90 [ 97.664003][ T5895] do_syscall_64+0x166/0x520 [ 97.664023][ T5895] ? trace_irq_disable+0x3b/0x140 [ 97.664043][ T5895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.664067][ T5895] ? clear_bhb_loop+0x70/0xc0 [ 97.664091][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.664114][ T5895] RIP: 0033:0x7fd133d9e1d9 [ 97.664135][ T5895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.664154][ T5895] RSP: 002b:00007fd134c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 97.664178][ T5895] RAX: ffffffffffffffda RBX: 00007fd134025fa0 RCX: 00007fd133d9e1d9 [ 97.664194][ T5895] RDX: 000000000000000c RSI: 0000200000514ff4 RDI: 0000000000000003 [ 97.664208][ T5895] RBP: 00007fd133e35888 R08: 0000000000000000 R09: 0000000000000000 [ 97.664222][ T5895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.664235][ T5895] R13: 00007fd134026038 R14: 00007fd134025fa0 R15: 00007fff6c880358 [ 97.664271][ T5895] [ 99.252620][ T5920] FAULT_INJECTION: forcing a failure. [ 99.252620][ T5920] name failslab, interval 1, probability 0, space 0, times 0 [ 99.252657][ T5920] CPU: 1 UID: 0 PID: 5920 Comm: syz.3.39 Not tainted syzkaller #0 PREEMPT(full) [ 99.252684][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.252697][ T5920] Call Trace: [ 99.252706][ T5920] [ 99.252716][ T5920] dump_stack_lvl+0xe8/0x150 [ 99.252748][ T5920] should_fail_ex+0x3eb/0x540 [ 99.252778][ T5920] should_failslab+0xa8/0x100 [ 99.252803][ T5920] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 99.252829][ T5920] ? irqentry_exit+0x218/0x920 [ 99.252849][ T5920] ? kobject_set_name_vargs+0x61/0x110 [ 99.252874][ T5920] ? kobject_set_name_vargs+0x61/0x110 [ 99.252905][ T5920] kstrdup+0x42/0x100 [ 99.252929][ T5920] kobject_set_name_vargs+0x61/0x110 [ 99.252955][ T5920] dev_set_name+0xe2/0x140 [ 99.252985][ T5920] ? __pfx_dev_set_name+0x10/0x10 [ 99.253008][ T5920] ? __init_waitqueue_head+0xa8/0x150 [ 99.253036][ T5920] ? device_initialize+0x394/0x470 [ 99.253061][ T5920] netdev_register_kobject+0xb7/0x350 [ 99.253091][ T5920] register_netdevice+0x17be/0x2280 [ 99.253133][ T5920] ? __pfx_register_netdevice+0x10/0x10 [ 99.253152][ T5920] ? preempt_schedule_thunk+0x16/0x40 [ 99.253185][ T5920] ? rcu_is_watching+0x16/0xb0 [ 99.253208][ T5920] ? kfree+0x4d/0x650 [ 99.253237][ T5920] slip_open+0xbbb/0xe60 [ 99.253274][ T5920] ? __pfx_slip_open+0x10/0x10 [ 99.253299][ T5920] ? up_write+0x19d/0x4a0 [ 99.253326][ T5920] tty_ldisc_open+0xa1/0x100 [ 99.253351][ T5920] tty_set_ldisc+0x365/0x540 [ 99.253377][ T5920] tty_ioctl+0xc30/0xde0 [ 99.253400][ T5920] ? __pfx_tty_ioctl+0x10/0x10 [ 99.253422][ T5920] __se_sys_ioctl+0xfc/0x170 [ 99.253448][ T5920] do_syscall_64+0x166/0x520 [ 99.253469][ T5920] ? trace_irq_disable+0x3b/0x140 [ 99.253489][ T5920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.253512][ T5920] ? clear_bhb_loop+0x70/0xc0 [ 99.253537][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.253560][ T5920] RIP: 0033:0x7f9b5359e1d9 [ 99.253581][ T5920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.253600][ T5920] RSP: 002b:00007f9b54514028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.253625][ T5920] RAX: ffffffffffffffda RBX: 00007f9b53825fa0 RCX: 00007f9b5359e1d9 [ 99.253642][ T5920] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 99.253656][ T5920] RBP: 00007f9b53635888 R08: 0000000000000000 R09: 0000000000000000 [ 99.253670][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.253682][ T5920] R13: 00007f9b53826038 R14: 00007f9b53825fa0 R15: 00007ffdb70ba5e8 [ 99.253721][ T5920] [ 99.566039][ T5925] evm: overlay not supported [ 99.682126][ T5930] netlink: 36 bytes leftover after parsing attributes in process `syz.3.43'. [ 99.683071][ T5930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.43'. [ 99.807213][ T5934] FAULT_INJECTION: forcing a failure. [ 99.807213][ T5934] name failslab, interval 1, probability 0, space 0, times 0 [ 99.807248][ T5934] CPU: 0 UID: 0 PID: 5934 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 99.807275][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.807289][ T5934] Call Trace: [ 99.807298][ T5934] [ 99.807308][ T5934] dump_stack_lvl+0xe8/0x150 [ 99.807338][ T5934] should_fail_ex+0x3eb/0x540 [ 99.807367][ T5934] should_failslab+0xa8/0x100 [ 99.807391][ T5934] __kmalloc_cache_noprof+0x9e/0x600 [ 99.807415][ T5934] ? snd_mixer_oss_open+0xdb/0x230 [ 99.807435][ T5934] ? snd_mixer_oss_open+0xdb/0x230 [ 99.807457][ T5934] ? snd_card_file_add+0x20e/0x250 [ 99.807483][ T5934] snd_mixer_oss_open+0xdb/0x230 [ 99.807508][ T5934] chrdev_open+0x4d9/0x600 [ 99.807533][ T5934] ? __pfx_chrdev_open+0x10/0x10 [ 99.807557][ T5934] ? devcgroup_check_permission+0x31/0x8f0 [ 99.807585][ T5934] ? __pfx_chrdev_open+0x10/0x10 [ 99.807606][ T5934] do_dentry_open+0x80e/0x1360 [ 99.807639][ T5934] vfs_open_consume+0x4a/0x350 [ 99.807658][ T5934] ? path_openat+0x148a/0x1da0 [ 99.807682][ T5934] path_openat+0x14a6/0x1da0 [ 99.807724][ T5934] do_file_open+0x23e/0x4a0 [ 99.807752][ T5934] ? __pfx_do_file_open+0x10/0x10 [ 99.807797][ T5934] ? _raw_spin_unlock+0x28/0x50 [ 99.807818][ T5934] ? alloc_fd+0x6af/0x760 [ 99.807851][ T5934] do_sys_openat2+0x115/0x200 [ 99.807872][ T5934] ? __se_sys_futex+0x3a8/0x450 [ 99.807894][ T5934] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.807920][ T5934] ? rcu_is_watching+0x16/0xb0 [ 99.807946][ T5934] __x64_sys_openat+0x138/0x170 [ 99.807972][ T5934] do_syscall_64+0x166/0x520 [ 99.807993][ T5934] ? trace_irq_disable+0x3b/0x140 [ 99.808013][ T5934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.808036][ T5934] ? clear_bhb_loop+0x70/0xc0 [ 99.808061][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.808083][ T5934] RIP: 0033:0x7f6831d9e1d9 [ 99.808104][ T5934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.808123][ T5934] RSP: 002b:00007f6832c52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 99.808149][ T5934] RAX: ffffffffffffffda RBX: 00007f6832025fa0 RCX: 00007f6831d9e1d9 [ 99.808169][ T5934] RDX: 0000000000000400 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 99.808184][ T5934] RBP: 00007f6831e35888 R08: 0000000000000000 R09: 0000000000000000 [ 99.808209][ T5934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.808222][ T5934] R13: 00007f6832026038 R14: 00007f6832025fa0 R15: 00007ffc9405d0b8 [ 99.808259][ T5934] [ 99.810283][ T5936] io-wq is not configured for unbound workers [ 100.407215][ T5950] tipc: Started in network mode [ 100.407255][ T5950] tipc: Node identity c6d12401a32f, cluster identity 4711 [ 100.407502][ T5950] tipc: Enabled bearer , priority 1 [ 100.448546][ T5949] tipc: Resetting bearer [ 100.484477][ T5949] tipc: Disabling bearer [ 100.505452][ T5952] loop0: detected capacity change from 0 to 64 [ 100.633500][ T5952] syz.0.52: attempt to access beyond end of device [ 100.633500][ T5952] loop0: rw=8388608, sector=1024, nr_sectors = 2 limit=64 [ 100.633686][ T5952] Buffer I/O error on dev loop0, logical block 512, async page read [ 100.633750][ T5952] syz.0.52: attempt to access beyond end of device [ 100.633750][ T5952] loop0: rw=8388608, sector=32768, nr_sectors = 2 limit=64 [ 100.633774][ T5952] Buffer I/O error on dev loop0, logical block 16384, async page read [ 100.842917][ T5960] process 'syz.4.54' launched './file0' with NULL argv: empty string added [ 101.023209][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 101.208307][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 101.305567][ T5965] Zero length message leads to an empty skb [ 103.128516][ T5997] bond0: (slave bond_slave_1): Releasing backup interface [ 105.583934][ T6004] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 113.234847][ T6063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.152652][ T6080] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 120.391487][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.707926][ T46] usb 4-1: Using ep0 maxpacket: 16 [ 120.717529][ T46] usb 4-1: New USB device found: idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 120.802992][ T46] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 120.803024][ T46] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.803044][ T46] usb 4-1: config 0 has no interface number 0 [ 120.803085][ T46] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 120.803118][ T46] usb 4-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.803143][ T46] usb 4-1: config 0 interface 98 has no altsetting 0 [ 120.819519][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.819549][ T46] usb 4-1: Product: syz [ 120.819565][ T46] usb 4-1: Manufacturer: syz [ 120.819580][ T46] usb 4-1: SerialNumber: syz [ 120.838641][ T46] usb 4-1: config 0 descriptor?? [ 120.860425][ T6110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 120.860597][ T6110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.203119][ T6110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.227844][ T6110] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.953173][ T6136] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 125.627979][ T46] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 125.628014][ T46] asix 4-1:0.98 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 125.628879][ T46] asix 4-1:0.98: probe with driver asix failed with error -71 [ 126.357726][ T46] usb 4-1: USB disconnect, device number 3 [ 128.174263][ T6166] ------------[ cut here ]------------ [ 128.174280][ T6166] memcpy: detected buffer overflow: 16 byte read of buffer size 0 [ 128.174308][ T6166] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#0: syz.1.107/6166 [ 128.198796][ T6166] Modules linked in: [ 128.202915][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 128.212238][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.222476][ T6166] RIP: 0010:__fortify_report+0x89/0xa0 [ 128.228000][ T6166] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 128.249280][ T6166] RSP: 0018:ffffc900088afdc8 EFLAGS: 00010246 [ 128.256407][ T6166] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 128.264470][ T6166] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 128.272579][ T6166] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 128.280842][ T6166] R10: ffff8880295bcb88 R11: ffffed10052b7973 R12: 0000000000000000 [ 128.288874][ T6166] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 128.296926][ T6166] FS: 00007fdf6dbb96c0(0000) GS:ffff888123ab6000(0000) knlGS:0000000000000000 [ 128.305927][ T6166] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.312630][ T6166] CR2: 000000110c335837 CR3: 0000000013008000 CR4: 00000000003526f0 [ 128.320713][ T6166] Call Trace: [ 128.324034][ T6166] [ 128.327035][ T6166] __fortify_panic+0x9/0x10 [ 128.331621][ T6166] landlock_merge_ruleset+0xc46/0xc90 [ 128.337047][ T6166] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 128.343309][ T6166] do_syscall_64+0x166/0x520 [ 128.349330][ T6166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.356306][ T6166] ? clear_bhb_loop+0x70/0xc0 [ 128.361089][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.367025][ T6166] RIP: 0033:0x7fdf6cd9e1d9 [ 128.371549][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.391268][ T6166] RSP: 002b:00007fdf6dbb9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 128.399905][ T6166] RAX: ffffffffffffffda RBX: 00007fdf6d025fa0 RCX: 00007fdf6cd9e1d9 [ 128.407978][ T6166] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 128.416025][ T6166] RBP: 00007fdf6ce35888 R08: 0000000000000000 R09: 0000000000000000 [ 128.424225][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.432275][ T6166] R13: 00007fdf6d026038 R14: 00007fdf6d025fa0 R15: 00007ffe87775c18 [ 128.440451][ T6166] [ 128.443523][ T6166] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.450836][ T6166] CPU: 0 UID: 0 PID: 6166 Comm: syz.1.107 Not tainted syzkaller #0 PREEMPT(full) [ 128.460070][ T6166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.470247][ T6166] Call Trace: [ 128.473558][ T6166] [ 128.476518][ T6166] vpanic+0x26f/0x710 [ 128.480575][ T6166] panic+0xc5/0xd0 [ 128.484334][ T6166] ? __pfx_panic+0x10/0x10 [ 128.488808][ T6166] __warn+0x315/0x4c0 [ 128.492821][ T6166] ? __fortify_report+0x6b/0xa0 [ 128.497722][ T6166] ? __fortify_report+0x6b/0xa0 [ 128.502608][ T6166] __report_bug+0x276/0x570 [ 128.507154][ T6166] ? __fortify_report+0x6b/0xa0 [ 128.512099][ T6166] ? __pfx___report_bug+0x10/0x10 [ 128.517169][ T6166] ? __fortify_report+0x8e/0xa0 [ 128.522060][ T6166] report_bug_entry+0x19b/0x290 [ 128.526952][ T6166] ? __fortify_report+0x89/0xa0 [ 128.531837][ T6166] ? __fortify_report+0x8e/0xa0 [ 128.536754][ T6166] handle_bug+0xce/0x200 [ 128.541044][ T6166] exc_invalid_op+0x1a/0x50 [ 128.545584][ T6166] asm_exc_invalid_op+0x1a/0x20 [ 128.550475][ T6166] RIP: 0010:__fortify_report+0x89/0xa0 [ 128.555987][ T6166] Code: e8 5c 9a 55 fd 48 8d 3d 45 ed 9e 0c 45 84 e4 49 8b 37 48 c7 c0 00 2b 6c 8c 48 c7 c1 20 2b 6c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc [ 128.575633][ T6166] RSP: 0018:ffffc900088afdc8 EFLAGS: 00010246 [ 128.581738][ T6166] RAX: ffffffff8c6c2b00 RBX: 0000000000000000 RCX: ffffffff8c6c2b00 [ 128.589744][ T6166] RDX: 0000000000000010 RSI: ffffffff8c6c29e0 RDI: ffffffff9184da00 [ 128.597751][ T6166] RBP: 000000000000000e R08: 0000000000000000 R09: 0000000000000000 [ 128.605758][ T6166] R10: ffff8880295bcb88 R11: ffffed10052b7973 R12: 0000000000000000 [ 128.613763][ T6166] R13: 0000000000000000 R14: 0000000000000010 R15: ffffffff8c6c2838 [ 128.621876][ T6166] ? __fortify_report+0x2c/0xa0 [ 128.626777][ T6166] __fortify_panic+0x9/0x10 [ 128.631322][ T6166] landlock_merge_ruleset+0xc46/0xc90 [ 128.636743][ T6166] __se_sys_landlock_restrict_self+0x2bc/0xd40 [ 128.642943][ T6166] do_syscall_64+0x166/0x520 [ 128.647577][ T6166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.653716][ T6166] ? clear_bhb_loop+0x70/0xc0 [ 128.658445][ T6166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.664381][ T6166] RIP: 0033:0x7fdf6cd9e1d9 [ 128.668832][ T6166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.688468][ T6166] RSP: 002b:00007fdf6dbb9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 128.696938][ T6166] RAX: ffffffffffffffda RBX: 00007fdf6d025fa0 RCX: 00007fdf6cd9e1d9 [ 128.704944][ T6166] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 128.712947][ T6166] RBP: 00007fdf6ce35888 R08: 0000000000000000 R09: 0000000000000000 [ 128.720950][ T6166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.728955][ T6166] R13: 00007fdf6d026038 R14: 00007fdf6d025fa0 R15: 00007ffe87775c18 [ 128.737008][ T6166] [ 128.740662][ T6166] Kernel Offset: disabled [ 128.745015][ T6166] Rebooting in 86400 seconds..