last executing test programs: 30m2.353215401s ago: executing program 3 (id=423): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000480)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) shutdown(r4, 0x0) socket$inet6(0xa, 0x3, 0x9) syz_open_dev$dri(&(0x7f00000002c0), 0xf2da, 0x100) syz_open_procfs(0x0, 0x0) getuid() 29m56.173543709s ago: executing program 3 (id=433): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 29m52.041871279s ago: executing program 3 (id=439): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000980)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000199c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000019a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}], 0x1, 0x20008000) 29m50.706646555s ago: executing program 3 (id=440): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pnp/drivers/serial\x00', 0x80, 0x0) r1 = openat(r0, &(0x7f0000000200)='unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='00:03', 0x5) 29m46.991725512s ago: executing program 3 (id=448): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000000980)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000199c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000019a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0x18}}], 0x1, 0x20008000) 29m45.501957533s ago: executing program 3 (id=449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001640)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001280, 0x0, 0x0, 0x2000000012b0, 0x2000000012e0], 0x6000000, 0x0, &(0x7f0000001280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 29m30.042113364s ago: executing program 32 (id=449): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001640)=@nat={'nat\x00', 0x19, 0x2, 0x90, [0x200000001280, 0x0, 0x0, 0x2000000012b0, 0x2000000012e0], 0x6000000, 0x0, &(0x7f0000001280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 28m57.255293616s ago: executing program 0 (id=509): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) epoll_create1(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019680)=@bpf_ext={0x1a, 0xf, &(0x7f0000019740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000197c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write(0xffffffffffffffff, &(0x7f0000019640)="2e000000010002", 0x7) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000500)={0x48}) ioctl(r7, 0x3b8e, &(0x7f0000000580)="10") ioctl(r7, 0x3b89, &(0x7f00000005c0)="3000000004000000030000000100000000000000000000000000000000000000000000000000000005") close_range(r0, 0xffffffffffffffff, 0x0) 28m55.725127691s ago: executing program 0 (id=510): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc_mnt\x00', 0x1ff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x178, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@snap_origin={0x0, 0x1000, 0x0, 0x40, 'snapshot-origin\x00', @ram_num={'1:', 0x0}}]}) ioctl$DM_DEV_SUSPEND(r0, 0xc138fd06, &(0x7f0000000580)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) mknodat$dm(0xffffffffffffff9c, 0x0, 0x6180, r1) r2 = openat$dm_dev(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) pwrite64(r2, &(0x7f0000000740)="010203", 0x3, 0x1000) 28m50.061178917s ago: executing program 0 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) r4 = inotify_init1(0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000019280)='/proc/self/clear_refs\x00', 0x1, 0x0) inotify_add_watch(r4, &(0x7f0000019300)='.\x00', 0x50007a2) 28m47.366775661s ago: executing program 0 (id=520): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000003c0), 0x2, 0x141102) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000440)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000500)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000540)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x100000000000000}, 0x0, 0x0) 28m40.837934694s ago: executing program 0 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x6) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000840)=""/102368, 0x18fe0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r4 = getpid() r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r6, @ANYBLOB="1700ee050a000200"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) sendmsg(r0, &(0x7f000001ba40)={&(0x7f0000000400)=@ll={0x11, 0x2, r6, 0x1, 0x9, 0x6, @link_local}, 0x80, &(0x7f000001a940)=[{0x0}], 0x1, 0x0, 0x10a0}, 0x355fb35a2586e421) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x810) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r7, 0x80e85411, &(0x7f0000000080)) sched_setscheduler(r4, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000019880), 0x0) ptrace$pokeuser(0x6, r2, 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000198c0)='./cgroup\x00', 0x8000, 0x5a) openat$cgroup_int(r8, &(0x7f0000019900)='cpu.max\x00', 0x2, 0x0) 28m39.509785729s ago: executing program 0 (id=529): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) epoll_create1(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019680)=@bpf_ext={0x1a, 0xf, &(0x7f0000019740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000197c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write(0xffffffffffffffff, &(0x7f0000019640)="2e000000010002", 0x7) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000500)={0x48}) ioctl(r7, 0x3b8e, &(0x7f0000000580)="10") ioctl(r7, 0x3b89, &(0x7f00000005c0)="3000000004000000030000000100000000000000000000000000000000000000000000000000000005") close_range(r0, 0xffffffffffffffff, 0x0) 28m23.577771868s ago: executing program 33 (id=529): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) epoll_create1(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000019680)=@bpf_ext={0x1a, 0xf, &(0x7f0000019740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000197c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) write(0xffffffffffffffff, &(0x7f0000019640)="2e000000010002", 0x7) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000500)={0x48}) ioctl(r7, 0x3b8e, &(0x7f0000000580)="10") ioctl(r7, 0x3b89, &(0x7f00000005c0)="3000000004000000030000000100000000000000000000000000000000000000000000000000000005") close_range(r0, 0xffffffffffffffff, 0x0) 26m11.347445934s ago: executing program 1 (id=711): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28) 26m6.577032359s ago: executing program 1 (id=717): r0 = fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000000340)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019340)=0x80000000000003) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f00000194c0)={0x400100, 0x142, 0x4}, 0x18) openat(0xffffffffffffffff, 0x0, 0x1b3001, 0x48) r5 = socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000019380)={0x1, &(0x7f00000193c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000019400), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000019440)={0x4, r6, 0x1}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r8, &(0x7f0000019480)={0xa000201e}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 26m0.935990942s ago: executing program 1 (id=723): syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000000280)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xfffffe84, &(0x7f0000000100)=[{&(0x7f0000000140)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000020006fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 25m52.637819915s ago: executing program 1 (id=732): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4fb49000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000000240)=""/102392, 0x18ff8) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000019280)={0x0, 0x0, &(0x7f00000192c0)={&(0x7f0000019300)=@newsa={0x148, 0x16, 0x633, 0x0, 0x25dfdbfd, {{@in=@private=0xa010102, @in=@broadcast, 0x0, 0x3ffb, 0x4e24, 0x8001, 0x0, 0x80, 0x0, 0x2f}, {@in6=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x10000, 0x0, 0x200000000}, {0x0, 0x9}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_max_qsize={0x8, 0x28, 0x1ff}]}, 0x148}}, 0x200080d4) 25m48.821443203s ago: executing program 1 (id=734): openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000000600)=""/102392, 0x18ff8) epoll_create1(0x80000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000"], 0x0, 0x34}, 0x28) 25m44.62062448s ago: executing program 1 (id=739): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x7) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES64=r4], 0x0, 0x32, 0x0, 0x1000000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x5) write$dsp(r5, &(0x7f0000000100)="5cba91a4", 0xffffffd9) 25m28.219447742s ago: executing program 34 (id=739): ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000400)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x6) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x8031, 0xffffffffffffffff, 0x498fe000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0) read$msr(r3, &(0x7f0000000940)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x7) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRES64=r4], 0x0, 0x32, 0x0, 0x1000000}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000000c0)=0x5) write$dsp(r5, &(0x7f0000000100)="5cba91a4", 0xffffffd9) 14m17.138330242s ago: executing program 2 (id=1783): r0 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x2, {0xe7ff, 0xb2ed, 0x1, 0xfffffffe}}) 14m15.077867962s ago: executing program 2 (id=1787): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000400)={0x19980330}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000b1917b", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25280000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 14m11.587026398s ago: executing program 2 (id=1791): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f00000073c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000203c0)=0x4000007) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000011c0)={0x552, {0x28, 0xf7ed, 0xffff, 0x80000001, 0x44}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000020400), &(0x7f0000020440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) landlock_create_ruleset(&(0x7f0000000800)={0x7f6e}, 0x18, 0x0) add_key(&(0x7f0000020480)='asymmetric\x00', 0x0, &(0x7f0000000980)="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", 0x559, r4) 14m9.351935066s ago: executing program 2 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@filename='mtd0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x800000, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xfffffee2) ioctl$TCSBRK(r0, 0x5409, 0x5) ftruncate(r0, 0xb) 14m4.585839123s ago: executing program 2 (id=1802): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x4}) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000003c0)=0x2, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40010041, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x22008dc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000ac0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000b00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000b40), 0x0, 0x0) read$msr(r3, &(0x7f0000000b80)=""/102392, 0x18ff8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r4, 0x89e1, &(0x7f0000019bc0)='lapb0') 14m3.353067429s ago: executing program 2 (id=1803): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpgid(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019180)=0x7) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e22, @empty}}) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f0000019200)=[{0x0, 0x1000}, {0x3, 0x0, 0x1800}, {0x0, 0x101, 0x2000}], 0x3) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000192c0)=r1) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0xf) mount(0x0, 0x0, &(0x7f0000019240)='proc\x00', 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000019300)={0x9, 0x6f, 0x1}, 0x9) unshare(0x64000600) 13m48.145089571s ago: executing program 35 (id=1803): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) r1 = getpgid(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f0000000180)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000019180)=0x7) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'sit0\x00', {0x2, 0x4e22, @empty}}) r6 = semget$private(0x0, 0x6, 0x0) semop(r6, &(0x7f0000019200)=[{0x0, 0x1000}, {0x3, 0x0, 0x1800}, {0x0, 0x101, 0x2000}], 0x3) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f00000192c0)=r1) mkdirat(0xffffffffffffff9c, &(0x7f00000191c0)='./proc\x00', 0xf) mount(0x0, 0x0, &(0x7f0000019240)='proc\x00', 0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000019300)={0x9, 0x6f, 0x1}, 0x9) unshare(0x64000600) 35.852765999s ago: executing program 6 (id=3028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "73a94c5c6d2f7589", "efad65c40695ec9b39f84cc3bc6dc374459d01c7a5d06f40cd2aa8db040c2a3c", '\x00', "d2533af444859ea8"}, 0x38) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x8000, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019380)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000193c0)={&(0x7f0000019400)=ANY=[], 0x0, 0x80}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000019480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000194c0)='./file0\x00', &(0x7f0000019500)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019600)='./file0\x00', &(0x7f0000019640), 0x0, &(0x7f0000019680)={[{@xino_on}], [], 0x2f}) chdir(&(0x7f00000196c0)='./file0\x00') r5 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x40000) 34.731176084s ago: executing program 6 (id=3029): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xb3b2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000880)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x47, &(0x7f0000019880)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 30.297706837s ago: executing program 6 (id=3033): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000680)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000006c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000700), 0x0, 0x0) read$msr(r3, &(0x7f00000073c0)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000203c0)=0x4000007) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000011c0)={0x552, {0x28, 0xf7ed, 0xffff, 0x80000001, 0x44}}) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000020400), &(0x7f0000020440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) landlock_create_ruleset(&(0x7f0000000800)={0x7f6e}, 0x18, 0x0) add_key(&(0x7f0000020480)='asymmetric\x00', 0x0, &(0x7f0000000980)="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", 0x559, r4) 27.072455286s ago: executing program 7 (id=3036): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f3200000000010200000004020200000000"], 0x0) 24.361907043s ago: executing program 6 (id=3039): socket$inet(0x2, 0x3, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001040)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001a040)=0x400003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000001a080)={0x0, 0x0, &(0x7f000001a0c0)={&(0x7f000001a100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000001a180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f000001a280)={0x0, 0x0, &(0x7f000001a2c0)={&(0x7f000001a300)={{0x68, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 21.695273935s ago: executing program 7 (id=3042): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) r7 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000400)={0x19980330}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000b1917b", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25280000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000540)='.\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 20.776717018s ago: executing program 4 (id=3043): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/52, 0x34, 0x10000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={0xffffffffffffffff, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400442ffffc000000c72800000000000000000000ff020000000000000000000000000001042081000000892f00000800000086dd88a888be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) getsockopt$inet_buf(r4, 0x118, 0x1, 0x0, &(0x7f00000001c0)=0xf) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="b45615428c78aaaaaaaaaaaa08004a00003c0000000000069078000000007f000001441477830a01010100000003ac1414bb0000000800004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="79de591249bd8e5c"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x86100) openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) 20.76186841s ago: executing program 6 (id=3044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f00000008c0)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000198c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl(r5, 0x3b8e, &(0x7f0000000780)="10") write$FUSE_IOCTL(r6, 0x0, 0x48) r7 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000019940)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x410) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 19.151497615s ago: executing program 6 (id=3045): prlimit64(0x0, 0xe, &(0x7f0000001940)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001980)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000019c0)=0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000001a00)={0x0, &(0x7f0000001a40)}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0x40082104, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001ac0)=0x6) openat$autofs(0xffffffffffffff9c, &(0x7f0000001b00), 0x4840, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001b40), 0x0, 0x0) read$msr(r3, &(0x7f0000001b80)=""/102368, 0x18fe0) write(0xffffffffffffffff, &(0x7f000001ab80), 0x11000) ppoll(0x0, 0x0, &(0x7f000001ac40)={0x0, 0x3938700}, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 19.033891267s ago: executing program 7 (id=3046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "73a94c5c6d2f7589", "efad65c40695ec9b39f84cc3bc6dc374459d01c7a5d06f40cd2aa8db040c2a3c", '\x00', "d2533af444859ea8"}, 0x38) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x8000, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019380)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000193c0)={&(0x7f0000019400)=ANY=[], 0x0, 0x80}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000019480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000194c0)='./file0\x00', &(0x7f0000019500)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019600)='./file0\x00', &(0x7f0000019640), 0x0, &(0x7f0000019680)={[{@xino_on}], [], 0x2f}) chdir(&(0x7f00000196c0)='./file0\x00') r5 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1}, 0x40000) 17.62918446s ago: executing program 7 (id=3048): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x4}) r0 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f00000003c0)=0x2, 0x4) recvfrom$inet6(r0, 0x0, 0x0, 0x40010041, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='.\x00', 0x0, 0x22008dc, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a80)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000ac0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000b00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000b40), 0x0, 0x0) read$msr(r4, &(0x7f0000000b80)=""/102392, 0x18ff8) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r5, 0x89e1, &(0x7f0000019bc0)='lapb0') 15.934200753s ago: executing program 4 (id=3050): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f3200000000010200000004020200000000"], 0x0) 15.049409793s ago: executing program 5 (id=3051): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xb3b2}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000340)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000880)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019880)=0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x24, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x24}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 14.909121117s ago: executing program 4 (id=3052): socket$inet(0x2, 0x3, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001040)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001a040)=0x400003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000001a080)={0x0, 0x0, &(0x7f000001a0c0)={&(0x7f000001a100)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000001a180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f000001a280)={0x0, 0x0, &(0x7f000001a2c0)={&(0x7f000001a300)={{0x68, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 13.520629229s ago: executing program 4 (id=3053): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4000000}, 0x850) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x100000000002) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000840)=""/102368, 0x18fe0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) getpid() r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES16=r3, @ANYBLOB="010800000000000000000b0000000800", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee33908f8eef16f162471f4000000050002000100000005000900010000000800030005ac0f002341039f76edcdb04e832888dd8d670c703e2668649646e7c373f22d5ead8fdb50b280f64a89ec9e0aa81201f8fd87941d892fd3b842a85c637786fd71a0552060104df63734e731be4d1307b6bd8a471734e46fe20fd282f73408841589164560e3fb4502f49c48351a564d09dd866dc9bcabbcf5ee0d"], 0x58}}, 0x0) r6 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 11.196690556s ago: executing program 5 (id=3054): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000280)=0x39cb, 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x121602, 0x0) socket$kcm(0x1e, 0x5, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='PHONEOUT\nMONITOR \'Synth\' 00000000000000000002\nSYNTH \'Master'], 0xc1) r7 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r7, r6, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) capset(&(0x7f0000000400)={0x19980330}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000b1917b", @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf25280000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_rssi={{0x4f}, {0x6, 0xc9, 0x2}}}}, 0xa) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) open(&(0x7f0000000540)='.\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {0x0, 0x2000000000000}, [@common=@ipv6header={{0x28}, {0x6, 0x4d, 0x1}}, @common=@inet=@l2tp={{0x30}, {0x3, 0x3, 0x3, 0x1, 0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x5, 0x8, 0x401, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x160, 0x180, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x2, 0x0, 0x7}}}, @common=@srh1={{0x90}, {0x2f, 0x11, 0x0, 0xd, 0x1c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @dev={0xfe, 0x80, '\x00', 0x1e}, [0xffffffff, 0x0, 0xffffffff, 0xff], [0xff000000, 0x0, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0x7fffff00], 0x0, 0x1000}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) 9.533855506s ago: executing program 4 (id=3055): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x80020100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000580)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f00000008c0)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000198c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl(r5, 0x3b8e, &(0x7f0000000780)="10") write$FUSE_IOCTL(r6, 0x0, 0x48) r7 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000019940)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x410) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 9.056107305s ago: executing program 7 (id=3056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "73a94c5c6d2f7589", "efad65c40695ec9b39f84cc3bc6dc374459d01c7a5d06f40cd2aa8db040c2a3c", '\x00', "d2533af444859ea8"}, 0x38) sendto$inet6(r0, &(0x7f0000000240), 0x0, 0x8000, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f0000019380)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000193c0)={&(0x7f0000019400)=ANY=[], 0x0, 0x80}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000019480)='./file0\x00', 0x0) mount(0x0, &(0x7f00000194c0)='./file0\x00', &(0x7f0000019500)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000019540)='./file0\x00', &(0x7f0000019580), 0x0, &(0x7f00000195c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000019600)='./file0\x00', &(0x7f0000019640), 0x0, &(0x7f0000019680)={[{@xino_on}], [], 0x2f}) chdir(&(0x7f00000196c0)='./file0\x00') r5 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)}], 0x1}, 0x40000) 6.688892157s ago: executing program 7 (id=3057): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000240)=0xff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000000480)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x3, 0x9) connect$inet6(r5, &(0x7f0000000040)={0xa, 0xffff, 0x800000, @local, 0x5}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') write$binfmt_script(r6, &(0x7f0000019480)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r0, &(0x7f0000000280), 0x4003) r7 = gettid() ptrace$getsig(0x4202, r7, 0x8, &(0x7f00000002c0)) sendmmsg$inet6(r5, &(0x7f0000000280), 0x40000000000017d, 0x888) 6.617941424s ago: executing program 5 (id=3058): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000180)=""/52, 0x34, 0x10000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x1fffff51, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60381f3400442ffffc000000c72800000000000000000000ff020000000000000000000000000001042081000000892f00000800000086dd88a888be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4000) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60) getsockopt$inet_buf(r3, 0x118, 0x1, 0x0, &(0x7f00000001c0)=0xf) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="b45615428c78aaaaaaaaaaaa08004a00003c0000000000069078000000007f000001441477830a01010100000003ac1414bb0000000800004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="79de591249bd8e5c"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) setrlimit(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) syz_open_dev$loop(&(0x7f0000000340), 0x5, 0x86100) openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x802, 0x0) 3.22641181s ago: executing program 36 (id=3045): prlimit64(0x0, 0xe, &(0x7f0000001940)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001980)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000019c0)=0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000001a00)={0x0, &(0x7f0000001a40)}) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0x40082104, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001ac0)=0x6) openat$autofs(0xffffffffffffff9c, &(0x7f0000001b00), 0x4840, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001b40), 0x0, 0x0) read$msr(r3, &(0x7f0000001b80)=""/102368, 0x18fe0) write(0xffffffffffffffff, &(0x7f000001ab80), 0x11000) ppoll(0x0, 0x0, &(0x7f000001ac40)={0x0, 0x3938700}, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) 3.192953614s ago: executing program 5 (id=3060): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0200000000024305000f3200000000010200000004020200000000"], 0x0) 2.864130127s ago: executing program 5 (id=3061): socket$inet(0x2, 0x3, 0x101) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001040)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f000001a040)=0x400003) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000001a080)={0x0, 0x0, &(0x7f000001a0c0)={&(0x7f000001a100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000001a180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f000001a280)={0x0, 0x0, &(0x7f000001a2c0)={&(0x7f000001a300)={{0x68, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.591961288s ago: executing program 4 (id=3062): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x1ff, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="40001100010029bd71000000000000232f94c7c5820acbff35f41cc511df6ff5e9e650a69f63be38d678761c", @ANYRES32=0x0, @ANYBLOB="c5af07000f0e0000140003007465616d3000000000000000000000000a000100ffffffffffff0000"], 0x40}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000004a40)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000600), 0x232002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010000000000"], &(0x7f0000000300)=""/166, 0x1a, 0xa6, 0x1}, 0x28) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'bridge_slave_0\x00'}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x6) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x1, 0x2}, 0x10) 0s ago: executing program 5 (id=3063): r0 = socket(0x2b, 0x1, 0x0) listen(r0, 0x0) ppoll(&(0x7f0000000980)=[{r0, 0xa0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000280), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xc) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r4, 0xc008561b, &(0x7f0000000280)={0x1, 0x4}) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f0000000340)='1\x00', 0x2) write$sysctl(r5, &(0x7f0000000380)='2\x00', 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f00000004c0)={r4, &(0x7f00000003c0)='1\x00', 0x210400, &(0x7f0000000400)={@_ha_fsid={[0x6, 0x6]}, {0x85, 0x0, 0x9, 0x4}}, 0x5cd1, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0xaed7}) sendmsg$sock(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000003010000100002007664706173696d5f6e6574000a000400766470613000", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.140' (ED25519) to the list of known hosts. [ 73.738595][ T5774] cgroup: Unknown subsys name 'net' [ 73.884270][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.308373][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.711518][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.729228][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.737543][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.748028][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.755571][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.765317][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.778271][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.786197][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.794105][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.796239][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.825582][ T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.833139][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.880129][ T5788] (null): rxe_set_mtu: Set mtu to 1024 [ 76.888632][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.896769][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.914411][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 76.918221][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.953721][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.014867][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.025983][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.034585][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.049073][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.058024][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.065188][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.073652][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.081398][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.089748][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.089793][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.105722][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.113631][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.198121][ T5794] (null): rxe_set_mtu: Set mtu to 1024 [ 77.204497][ T5794] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 77.216497][ T5788] infiniband rxe0: set active [ 77.221987][ T5796] rxe0: rxe_newlink: already configured on rxe_eth0 [ 77.222515][ T57] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.244211][ T5788] infiniband rxe0: added rxe_eth0 [ 77.293463][ T5794] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.359935][ T5788] RDS/IB: rxe0: added [ 77.364704][ T5788] smc: adding ib device rxe0 with port count 1 [ 77.402123][ T5788] smc: ib device rxe0 port 1 has pnetid [ 77.439102][ T175] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.543265][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 77.594321][ T5796] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.801726][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.814859][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.827749][ T5785] bridge_slave_0: entered allmulticast mode [ 77.835213][ T5785] bridge_slave_0: entered promiscuous mode [ 77.862625][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.883431][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.891653][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.899004][ T5785] bridge_slave_1: entered allmulticast mode [ 77.906312][ T5785] bridge_slave_1: entered promiscuous mode [ 77.968458][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.985632][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.072400][ T5785] team0: Port device team_slave_0 added [ 78.083636][ T5785] team0: Port device team_slave_1 added [ 78.135128][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.143104][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.169841][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.186918][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.194691][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.220904][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.261700][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.276689][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 78.392045][ T5785] hsr_slave_0: entered promiscuous mode [ 78.420042][ T5785] hsr_slave_1: entered promiscuous mode [ 78.517997][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 78.700958][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.708921][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.716179][ T5794] bridge_slave_0: entered allmulticast mode [ 78.723976][ T5794] bridge_slave_0: entered promiscuous mode [ 78.768959][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.776145][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.784682][ T5794] bridge_slave_1: entered allmulticast mode [ 78.794567][ T5794] bridge_slave_1: entered promiscuous mode [ 78.858344][ T5097] Bluetooth: hci0: command tx timeout [ 78.864088][ T5097] Bluetooth: hci1: command tx timeout [ 78.884076][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.892049][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.899573][ T5796] bridge_slave_0: entered allmulticast mode [ 78.906323][ T5796] bridge_slave_0: entered promiscuous mode [ 78.920998][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.951971][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.959488][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.966770][ T5796] bridge_slave_1: entered allmulticast mode [ 78.973826][ T5796] bridge_slave_1: entered promiscuous mode [ 78.980734][ T57] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.002347][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.070723][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.084802][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.129442][ T5794] team0: Port device team_slave_0 added [ 79.185027][ T5794] team0: Port device team_slave_1 added [ 79.190938][ T5787] Bluetooth: hci2: command tx timeout [ 79.196769][ T5097] Bluetooth: hci3: command tx timeout [ 79.273095][ T5796] team0: Port device team_slave_0 added [ 79.289887][ T5796] team0: Port device team_slave_1 added [ 79.322344][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.330688][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.358985][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.376669][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.388267][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.420356][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.522034][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.541238][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.558165][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.586716][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.601854][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.611822][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.638728][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.662053][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.671728][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.683567][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.706784][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 79.757572][ T5796] hsr_slave_0: entered promiscuous mode [ 79.764029][ T5796] hsr_slave_1: entered promiscuous mode [ 79.770622][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.778830][ T5796] Cannot create hsr debugfs directory [ 79.795413][ T5794] hsr_slave_0: entered promiscuous mode [ 79.803273][ T5794] hsr_slave_1: entered promiscuous mode [ 79.810042][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.817719][ T5794] Cannot create hsr debugfs directory [ 79.825091][ T5447] infiniband rxe0: set active [ 79.880315][ T57] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.981922][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.989305][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.996475][ T5788] bridge_slave_0: entered allmulticast mode [ 80.003582][ T5788] bridge_slave_0: entered promiscuous mode [ 80.031477][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.040034][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.047888][ T5788] bridge_slave_1: entered allmulticast mode [ 80.054744][ T5788] bridge_slave_1: entered promiscuous mode [ 80.099223][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.111960][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.178038][ T5788] team0: Port device team_slave_0 added [ 80.188866][ T5788] team0: Port device team_slave_1 added [ 80.254287][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.261564][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.287693][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.331535][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.338732][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.365176][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.500510][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.517909][ T5788] hsr_slave_0: entered promiscuous mode [ 80.524578][ T5788] hsr_slave_1: entered promiscuous mode [ 80.530751][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.539167][ T5788] Cannot create hsr debugfs directory [ 80.558431][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.587707][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.599126][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.615801][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.661156][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.672908][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.682682][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.719618][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.801414][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.851503][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.858893][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.873796][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.880979][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.939318][ T5097] Bluetooth: hci1: command tx timeout [ 80.944818][ T5787] Bluetooth: hci0: command tx timeout [ 80.996085][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.005569][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.027683][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.039582][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.065588][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.091461][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.170940][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.193634][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.248297][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.255475][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.257476][ T5787] Bluetooth: hci3: command tx timeout [ 81.269500][ T5097] Bluetooth: hci2: command tx timeout [ 81.277365][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.284526][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.323317][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.362893][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.370192][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.381118][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.388332][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.456571][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.473959][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.496637][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.585185][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.663211][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.670475][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.696216][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.703455][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.766180][ T5785] veth0_vlan: entered promiscuous mode [ 81.857987][ T5785] veth1_vlan: entered promiscuous mode [ 81.903693][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.925366][ T5785] veth0_macvtap: entered promiscuous mode [ 81.955185][ T5785] veth1_macvtap: entered promiscuous mode [ 82.061026][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.074787][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.108810][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.140256][ T5796] veth0_vlan: entered promiscuous mode [ 82.163873][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.175583][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.187171][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.196757][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.227128][ T5796] veth1_vlan: entered promiscuous mode [ 82.306486][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.323611][ T5794] veth0_vlan: entered promiscuous mode [ 82.334532][ T5794] veth1_vlan: entered promiscuous mode [ 82.398443][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.406519][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.475097][ T5796] veth0_macvtap: entered promiscuous mode [ 82.485365][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.507033][ T5796] veth1_macvtap: entered promiscuous mode [ 82.514916][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.531384][ T5794] veth0_macvtap: entered promiscuous mode [ 82.550004][ T5794] veth1_macvtap: entered promiscuous mode [ 82.596663][ T5788] veth0_vlan: entered promiscuous mode [ 82.608429][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.622102][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.635949][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.646597][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.663366][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.665846][ T5785] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.695763][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.708761][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.720242][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.736738][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.747806][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.760325][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.771473][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.782458][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.793063][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.804612][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.815791][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.831995][ T5788] veth1_vlan: entered promiscuous mode [ 82.856692][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.878259][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.887160][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.899364][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.913134][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.923435][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.932954][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.944122][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.965717][ T5895] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.020985][ T5787] Bluetooth: hci0: command tx timeout [ 83.027486][ T5097] Bluetooth: hci1: command tx timeout [ 83.337721][ T5787] Bluetooth: hci3: command tx timeout [ 83.343277][ T5787] Bluetooth: hci2: command tx timeout [ 84.088643][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.122820][ T5788] veth0_macvtap: entered promiscuous mode [ 84.151779][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.391046][ T5788] veth1_macvtap: entered promiscuous mode [ 84.589401][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.606970][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.098045][ T5097] Bluetooth: hci1: command tx timeout [ 85.103542][ T5787] Bluetooth: hci0: command tx timeout [ 85.106808][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.200738][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.226194][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.258394][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.379824][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.418508][ T5097] Bluetooth: hci3: command tx timeout [ 85.424015][ T5787] Bluetooth: hci2: command tx timeout [ 85.431501][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.536912][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.552499][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.572674][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.595585][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.617047][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.627044][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.637786][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.647904][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.659632][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.679790][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.698497][ T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.713500][ T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.754697][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.784776][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.798899][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.808005][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.638536][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.687921][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.830142][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.867389][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.205212][ T5927] syz.0.9[5927]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.248327][ T5787] Bluetooth: hci3: unexpected event 0x04 length: 12 > 10 [ 91.272005][ T5787] Bluetooth: hci3: command tx timeout [ 92.276153][ T23] cfg80211: failed to load regulatory.db [ 95.027211][ C0] sched: RT throttling activated [ 95.703510][ T5994] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 95.712934][ T5994] bridge: RTM_NEWNEIGH with invalid ether address [ 97.139140][ T5892] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.013215][ T6015] ======================================================= [ 98.013215][ T6015] WARNING: The mand mount option has been deprecated and [ 98.013215][ T6015] and is ignored by this kernel. Remove the mand [ 98.013215][ T6015] option from the mount to silence this warning. [ 98.013215][ T6015] ======================================================= [ 98.142733][ T6015] jffs2: notice: (6015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.876583][ T6027] netlink: 80 bytes leftover after parsing attributes in process `syz.0.33'. [ 100.359778][ T6032] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.34'. [ 100.369114][ T6032] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 105.095005][ T6063] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 108.542537][ T6094] autofs4:pid:6094:autofs_fill_super: called with bogus options [ 108.811027][ T6098] FAULT_INJECTION: forcing a failure. [ 108.811027][ T6098] name failslab, interval 1, probability 0, space 0, times 1 [ 108.823908][ T6098] CPU: 0 PID: 6098 Comm: syz.2.52 Not tainted syzkaller #0 [ 108.831140][ T6098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.841249][ T6098] Call Trace: [ 108.844639][ T6098] [ 108.847589][ T6098] dump_stack_lvl+0x18c/0x250 [ 108.852319][ T6098] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 108.857983][ T6098] ? show_regs_print_info+0x20/0x20 [ 108.863220][ T6098] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 108.868998][ T6098] should_fail_ex+0x394/0x4c0 [ 108.873715][ T6098] should_failslab+0x9/0x20 [ 108.878244][ T6098] slab_pre_alloc_hook+0x59/0x300 [ 108.883306][ T6098] ? __kasan_kmalloc+0x8f/0xa0 [ 108.888114][ T6098] ? __se_sys_fsopen+0x135/0x2c0 [ 108.893102][ T6098] __kmem_cache_alloc_node+0x53/0x260 [ 108.898517][ T6098] ? __se_sys_fsopen+0x135/0x2c0 [ 108.903489][ T6098] kmalloc_trace+0x2a/0xe0 [ 108.907938][ T6098] __se_sys_fsopen+0x135/0x2c0 [ 108.912740][ T6098] do_syscall_64+0x55/0xb0 [ 108.917187][ T6098] ? clear_bhb_loop+0x40/0x90 [ 108.921890][ T6098] ? clear_bhb_loop+0x40/0x90 [ 108.926599][ T6098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 108.932569][ T6098] RIP: 0033:0x7f1e9db9fb19 [ 108.937028][ T6098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.956754][ T6098] RSP: 002b:00007f1e9eae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 108.965197][ T6098] RAX: ffffffffffffffda RBX: 00007f1e9de26090 RCX: 00007f1e9db9fb19 [ 108.973190][ T6098] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 108.981183][ T6098] RBP: 00007f1e9dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 108.989175][ T6098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.997168][ T6098] R13: 00007f1e9de26128 R14: 00007f1e9de26090 R15: 00007ffe16065d98 [ 109.005181][ T6098] [ 113.261427][ T6132] jffs2: notice: (6132) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 113.625666][ T6137] FAULT_INJECTION: forcing a failure. [ 113.625666][ T6137] name failslab, interval 1, probability 0, space 0, times 0 [ 113.638456][ T6137] CPU: 1 PID: 6137 Comm: syz.2.64 Not tainted syzkaller #0 [ 113.645769][ T6137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.655853][ T6137] Call Trace: [ 113.659164][ T6137] [ 113.662111][ T6137] dump_stack_lvl+0x18c/0x250 [ 113.666826][ T6137] ? show_regs_print_info+0x20/0x20 [ 113.672106][ T6137] ? load_image+0x420/0x420 [ 113.676647][ T6137] ? __might_sleep+0xe0/0xe0 [ 113.681357][ T6137] ? __lock_acquire+0x7eb0/0x7eb0 [ 113.686450][ T6137] should_fail_ex+0x394/0x4c0 [ 113.691226][ T6137] should_failslab+0x9/0x20 [ 113.695769][ T6137] slab_pre_alloc_hook+0x59/0x300 [ 113.700827][ T6137] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 113.706518][ T6137] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 113.712188][ T6137] __kmem_cache_alloc_node+0x53/0x260 [ 113.717620][ T6137] ? memcg_alloc_slab_cgroups+0x85/0x120 [ 113.723284][ T6137] __kmalloc_node+0xa6/0x240 [ 113.727908][ T6137] ? schedule_preempt_disabled+0x20/0x20 [ 113.733575][ T6137] memcg_alloc_slab_cgroups+0x85/0x120 [ 113.739073][ T6137] slab_post_alloc_hook+0xec/0x4d0 [ 113.744225][ T6137] __kmem_cache_alloc_node+0x197/0x260 [ 113.749898][ T6137] ? alloc_fs_context+0x63/0x7a0 [ 113.754961][ T6137] ? alloc_fs_context+0x63/0x7a0 [ 113.759925][ T6137] kmalloc_trace+0x2a/0xe0 [ 113.764375][ T6137] alloc_fs_context+0x63/0x7a0 [ 113.769180][ T6137] ? __se_sys_fsopen+0x91/0x2c0 [ 113.774062][ T6137] ? __kmem_cache_free+0xba/0x1f0 [ 113.779289][ T6137] __se_sys_fsopen+0xa0/0x2c0 [ 113.784006][ T6137] do_syscall_64+0x55/0xb0 [ 113.788452][ T6137] ? clear_bhb_loop+0x40/0x90 [ 113.793204][ T6137] ? clear_bhb_loop+0x40/0x90 [ 113.797991][ T6137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 113.803917][ T6137] RIP: 0033:0x7f1e9db9fb19 [ 113.808353][ T6137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.827987][ T6137] RSP: 002b:00007f1e9eae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 113.836690][ T6137] RAX: ffffffffffffffda RBX: 00007f1e9de26090 RCX: 00007f1e9db9fb19 [ 113.844690][ T6137] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 113.852791][ T6137] RBP: 00007f1e9dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 113.864375][ T6137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.872563][ T6137] R13: 00007f1e9de26128 R14: 00007f1e9de26090 R15: 00007ffe16065d98 [ 113.881466][ T6137] [ 114.513381][ T6138] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 114.849412][ T6146] autofs4:pid:6146:autofs_fill_super: called with bogus options [ 119.453819][ T6163] binder: 6161:6163 ioctl 5000940a 2000000028c0 returned -22 [ 119.667456][ T5787] Bluetooth: hci3: command tx timeout [ 120.597020][ T6170] FAULT_INJECTION: forcing a failure. [ 120.597020][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 120.611365][ T6170] CPU: 1 PID: 6170 Comm: syz.3.74 Not tainted syzkaller #0 [ 120.618696][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.628967][ T6170] Call Trace: [ 120.632276][ T6170] [ 120.635232][ T6170] dump_stack_lvl+0x18c/0x250 [ 120.639952][ T6170] ? show_regs_print_info+0x20/0x20 [ 120.646317][ T6170] ? load_image+0x420/0x420 [ 120.650853][ T6170] ? __lock_acquire+0x7eb0/0x7eb0 [ 120.655917][ T6170] should_fail_ex+0x394/0x4c0 [ 120.660809][ T6170] should_failslab+0x9/0x20 [ 120.665454][ T6170] slab_pre_alloc_hook+0x59/0x300 [ 120.670512][ T6170] ? legacy_init_fs_context+0x51/0xc0 [ 120.676018][ T6170] __kmem_cache_alloc_node+0x53/0x260 [ 120.681423][ T6170] ? legacy_init_fs_context+0x51/0xc0 [ 120.686916][ T6170] kmalloc_trace+0x2a/0xe0 [ 120.691382][ T6170] legacy_init_fs_context+0x51/0xc0 [ 120.697096][ T6170] alloc_fs_context+0x618/0x7a0 [ 120.702078][ T6170] __se_sys_fsopen+0xa0/0x2c0 [ 120.706815][ T6170] do_syscall_64+0x55/0xb0 [ 120.711319][ T6170] ? clear_bhb_loop+0x40/0x90 [ 120.716044][ T6170] ? clear_bhb_loop+0x40/0x90 [ 120.720762][ T6170] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.726690][ T6170] RIP: 0033:0x7f8b9619fb19 [ 120.731421][ T6170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.751149][ T6170] RSP: 002b:00007f8b943f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 120.759681][ T6170] RAX: ffffffffffffffda RBX: 00007f8b96426090 RCX: 00007f8b9619fb19 [ 120.767887][ T6170] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 120.776332][ T6170] RBP: 00007f8b96237b70 R08: 0000000000000000 R09: 0000000000000000 [ 120.784331][ T6170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.792338][ T6170] R13: 00007f8b96426128 R14: 00007f8b96426090 R15: 00007ffe63f8e408 [ 120.800721][ T6170] [ 120.917274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 121.367700][ T6170] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 125.981781][ T6199] binder: 6197:6199 ioctl 5000940a 2000000028c0 returned -22 [ 127.071628][ T6204] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 129.105949][ T6213] FAULT_INJECTION: forcing a failure. [ 129.105949][ T6213] name failslab, interval 1, probability 0, space 0, times 0 [ 129.119347][ T6213] CPU: 1 PID: 6213 Comm: syz.1.85 Not tainted syzkaller #0 [ 129.126585][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 129.136666][ T6213] Call Trace: [ 129.139966][ T6213] [ 129.142919][ T6213] dump_stack_lvl+0x18c/0x250 [ 129.147735][ T6213] ? show_regs_print_info+0x20/0x20 [ 129.152971][ T6213] ? load_image+0x420/0x420 [ 129.157513][ T6213] ? __lock_acquire+0x7eb0/0x7eb0 [ 129.162587][ T6213] should_fail_ex+0x394/0x4c0 [ 129.168760][ T6213] should_failslab+0x9/0x20 [ 129.173290][ T6213] slab_pre_alloc_hook+0x59/0x300 [ 129.178344][ T6213] ? legacy_init_fs_context+0x51/0xc0 [ 129.183750][ T6213] __kmem_cache_alloc_node+0x53/0x260 [ 129.189152][ T6213] ? legacy_init_fs_context+0x51/0xc0 [ 129.194561][ T6213] kmalloc_trace+0x2a/0xe0 [ 129.199018][ T6213] legacy_init_fs_context+0x51/0xc0 [ 129.204248][ T6213] alloc_fs_context+0x618/0x7a0 [ 129.209207][ T6213] __se_sys_fsopen+0xa0/0x2c0 [ 129.213943][ T6213] do_syscall_64+0x55/0xb0 [ 129.218393][ T6213] ? clear_bhb_loop+0x40/0x90 [ 129.223099][ T6213] ? clear_bhb_loop+0x40/0x90 [ 129.227805][ T6213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.233735][ T6213] RIP: 0033:0x7ff14279fb19 [ 129.238174][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.257895][ T6213] RSP: 002b:00007ff143604028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 129.266343][ T6213] RAX: ffffffffffffffda RBX: 00007ff142a26090 RCX: 00007ff14279fb19 [ 129.274374][ T6213] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 129.282384][ T6213] RBP: 00007ff142837b70 R08: 0000000000000000 R09: 0000000000000000 [ 129.290442][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.298446][ T6213] R13: 00007ff142a26128 R14: 00007ff142a26090 R15: 00007ffc11e6a1b8 [ 129.306462][ T6213] [ 129.469753][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 129.546708][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 129.693322][ T6213] ceph: No mds server is up or the cluster is laggy [ 129.720607][ T5846] libceph: connect (1)[c::]:6789 error -101 [ 129.821958][ T5846] libceph: mon0 (1)[c::]:6789 connect error [ 130.152131][ T23] libceph: connect (1)[c::]:6789 error -101 [ 130.160963][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 130.747553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 132.805006][ T6247] binder: 6245:6247 ioctl 5000940a 2000000028c0 returned -22 [ 133.185234][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201428][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.849287][ T6256] can0: slcan on ttyS3. [ 135.038157][ T6257] capability: warning: `syz.1.95' uses 32-bit capabilities (legacy support in use) [ 135.082355][ T6257] xt_l2tp: invalid flags combination: 8 [ 135.409061][ T6256] can0 (unregistered): slcan off ttyS3. [ 135.507446][ T6262] FAULT_INJECTION: forcing a failure. [ 135.507446][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 135.521065][ T6262] CPU: 0 PID: 6262 Comm: syz.0.96 Not tainted syzkaller #0 [ 135.528292][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.538729][ T6262] Call Trace: [ 135.542029][ T6262] [ 135.544978][ T6262] dump_stack_lvl+0x18c/0x250 [ 135.549687][ T6262] ? show_regs_print_info+0x20/0x20 [ 135.554907][ T6262] ? load_image+0x420/0x420 [ 135.559445][ T6262] ? __lock_acquire+0x7eb0/0x7eb0 [ 135.564514][ T6262] should_fail_ex+0x394/0x4c0 [ 135.569247][ T6262] should_failslab+0x9/0x20 [ 135.573791][ T6262] slab_pre_alloc_hook+0x59/0x300 [ 135.578849][ T6262] ? legacy_init_fs_context+0x51/0xc0 [ 135.584254][ T6262] __kmem_cache_alloc_node+0x53/0x260 [ 135.589654][ T6262] ? legacy_init_fs_context+0x51/0xc0 [ 135.595056][ T6262] kmalloc_trace+0x2a/0xe0 [ 135.599504][ T6262] legacy_init_fs_context+0x51/0xc0 [ 135.604733][ T6262] alloc_fs_context+0x618/0x7a0 [ 135.609622][ T6262] __se_sys_fsopen+0xa0/0x2c0 [ 135.614332][ T6262] do_syscall_64+0x55/0xb0 [ 135.618775][ T6262] ? clear_bhb_loop+0x40/0x90 [ 135.623493][ T6262] ? clear_bhb_loop+0x40/0x90 [ 135.628203][ T6262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.634124][ T6262] RIP: 0033:0x7f24e2b9fb19 [ 135.638561][ T6262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.658891][ T6262] RSP: 002b:00007f24e0dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 135.667340][ T6262] RAX: ffffffffffffffda RBX: 00007f24e2e26090 RCX: 00007f24e2b9fb19 [ 135.675332][ T6262] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 135.683331][ T6262] RBP: 00007f24e2c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 135.691353][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.699342][ T6262] R13: 00007f24e2e26128 R14: 00007f24e2e26090 R15: 00007ffea969a668 [ 135.707353][ T6262] [ 136.200554][ T23] libceph: connect (1)[c::]:6789 error -101 [ 136.254709][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 136.272002][ T23] libceph: connect (1)[c::]:6789 error -101 [ 136.279578][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 136.285845][ T6263] ceph: No mds server is up or the cluster is laggy [ 136.983189][ T6274] gretap0: entered promiscuous mode [ 137.012554][ T6274] kAFS: No cell specified [ 138.837708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 142.238195][ T6302] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 142.450860][ T6304] overlay: Unknown parameter '/' [ 142.880513][ T6301] netlink: 'syz.3.106': attribute type 39 has an invalid length. [ 142.986581][ T6300] jffs2: notice: (6300) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 143.372335][ T6309] FAULT_INJECTION: forcing a failure. [ 143.372335][ T6309] name failslab, interval 1, probability 0, space 0, times 0 [ 143.385161][ T6309] CPU: 0 PID: 6309 Comm: syz.2.107 Not tainted syzkaller #0 [ 143.392477][ T6309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.402555][ T6309] Call Trace: [ 143.405849][ T6309] [ 143.408804][ T6309] dump_stack_lvl+0x18c/0x250 [ 143.413514][ T6309] ? show_regs_print_info+0x20/0x20 [ 143.418747][ T6309] ? load_image+0x420/0x420 [ 143.423295][ T6309] ? __lock_acquire+0x7eb0/0x7eb0 [ 143.428368][ T6309] should_fail_ex+0x394/0x4c0 [ 143.433088][ T6309] should_failslab+0x9/0x20 [ 143.437628][ T6309] slab_pre_alloc_hook+0x59/0x300 [ 143.442692][ T6309] ? legacy_init_fs_context+0x51/0xc0 [ 143.448107][ T6309] __kmem_cache_alloc_node+0x53/0x260 [ 143.453511][ T6309] ? legacy_init_fs_context+0x51/0xc0 [ 143.458913][ T6309] kmalloc_trace+0x2a/0xe0 [ 143.463368][ T6309] legacy_init_fs_context+0x51/0xc0 [ 143.468601][ T6309] alloc_fs_context+0x618/0x7a0 [ 143.473600][ T6309] __se_sys_fsopen+0xa0/0x2c0 [ 143.478327][ T6309] do_syscall_64+0x55/0xb0 [ 143.482785][ T6309] ? clear_bhb_loop+0x40/0x90 [ 143.487490][ T6309] ? clear_bhb_loop+0x40/0x90 [ 143.492195][ T6309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.498116][ T6309] RIP: 0033:0x7f1e9db9fb19 [ 143.502550][ T6309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.522218][ T6309] RSP: 002b:00007f1e9eae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 143.530675][ T6309] RAX: ffffffffffffffda RBX: 00007f1e9de26090 RCX: 00007f1e9db9fb19 [ 143.538670][ T6309] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 143.546674][ T6309] RBP: 00007f1e9dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.554674][ T6309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.562666][ T6309] R13: 00007f1e9de26128 R14: 00007f1e9de26090 R15: 00007ffe16065d98 [ 143.570680][ T6309] [ 143.851288][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 143.909152][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 144.006636][ T6309] ceph: No mds server is up or the cluster is laggy [ 146.234844][ T6324] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.104'. [ 146.244272][ T6324] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 150.952578][ T6351] autofs4:pid:6351:autofs_fill_super: called with bogus options [ 153.778191][ T6365] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.119'. [ 153.789857][ T6365] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 154.901759][ T6370] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 156.484988][ T6381] FAULT_INJECTION: forcing a failure. [ 156.484988][ T6381] name failslab, interval 1, probability 0, space 0, times 0 [ 156.497899][ T6381] CPU: 0 PID: 6381 Comm: syz.0.117 Not tainted syzkaller #0 [ 156.505303][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 156.515391][ T6381] Call Trace: [ 156.518688][ T6381] [ 156.521633][ T6381] dump_stack_lvl+0x18c/0x250 [ 156.526697][ T6381] ? show_regs_print_info+0x20/0x20 [ 156.531933][ T6381] ? load_image+0x420/0x420 [ 156.536905][ T6381] ? __might_sleep+0xe0/0xe0 [ 156.541522][ T6381] ? __lock_acquire+0x7eb0/0x7eb0 [ 156.546583][ T6381] should_fail_ex+0x394/0x4c0 [ 156.551297][ T6381] should_failslab+0x9/0x20 [ 156.555834][ T6381] slab_pre_alloc_hook+0x59/0x300 [ 156.560900][ T6381] ? __kasan_kmalloc+0x8f/0xa0 [ 156.565714][ T6381] ? __se_sys_fsopen+0x135/0x2c0 [ 156.570691][ T6381] __kmem_cache_alloc_node+0x53/0x260 [ 156.576090][ T6381] ? __se_sys_fsopen+0x135/0x2c0 [ 156.581058][ T6381] kmalloc_trace+0x2a/0xe0 [ 156.585523][ T6381] __se_sys_fsopen+0x135/0x2c0 [ 156.590344][ T6381] do_syscall_64+0x55/0xb0 [ 156.594791][ T6381] ? clear_bhb_loop+0x40/0x90 [ 156.599496][ T6381] ? clear_bhb_loop+0x40/0x90 [ 156.604201][ T6381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.610207][ T6381] RIP: 0033:0x7f24e2b9fb19 [ 156.614645][ T6381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.634290][ T6381] RSP: 002b:00007f24e0dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 156.642745][ T6381] RAX: ffffffffffffffda RBX: 00007f24e2e26090 RCX: 00007f24e2b9fb19 [ 156.650743][ T6381] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 156.658748][ T6381] RBP: 00007f24e2c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 156.666739][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.674731][ T6381] R13: 00007f24e2e26128 R14: 00007f24e2e26090 R15: 00007ffea969a668 [ 156.682829][ T6381] [ 157.276774][ T6382] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 159.737275][ T6396] binder: 6394:6396 ioctl 5000940a 2000000028c0 returned -22 [ 162.780620][ T6409] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.131'. [ 162.789998][ T6409] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 164.890981][ T6410] autofs4:pid:6410:autofs_fill_super: called with bogus options [ 165.688929][ T6424] FAULT_INJECTION: forcing a failure. [ 165.688929][ T6424] name failslab, interval 1, probability 0, space 0, times 0 [ 165.701760][ T6424] CPU: 0 PID: 6424 Comm: syz.0.135 Not tainted syzkaller #0 [ 165.709070][ T6424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.719147][ T6424] Call Trace: [ 165.722444][ T6424] [ 165.725390][ T6424] dump_stack_lvl+0x18c/0x250 [ 165.730099][ T6424] ? show_regs_print_info+0x20/0x20 [ 165.735328][ T6424] ? load_image+0x420/0x420 [ 165.739859][ T6424] ? __lock_acquire+0x7eb0/0x7eb0 [ 165.744914][ T6424] should_fail_ex+0x394/0x4c0 [ 165.749617][ T6424] should_failslab+0x9/0x20 [ 165.754136][ T6424] slab_pre_alloc_hook+0x59/0x300 [ 165.759181][ T6424] ? legacy_init_fs_context+0x51/0xc0 [ 165.764584][ T6424] __kmem_cache_alloc_node+0x53/0x260 [ 165.769979][ T6424] ? legacy_init_fs_context+0x51/0xc0 [ 165.775378][ T6424] kmalloc_trace+0x2a/0xe0 [ 165.779829][ T6424] legacy_init_fs_context+0x51/0xc0 [ 165.785159][ T6424] alloc_fs_context+0x618/0x7a0 [ 165.790058][ T6424] __se_sys_fsopen+0xa0/0x2c0 [ 165.794768][ T6424] do_syscall_64+0x55/0xb0 [ 165.799305][ T6424] ? clear_bhb_loop+0x40/0x90 [ 165.804008][ T6424] ? clear_bhb_loop+0x40/0x90 [ 165.808718][ T6424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.814643][ T6424] RIP: 0033:0x7f24e2b9fb19 [ 165.819083][ T6424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.838801][ T6424] RSP: 002b:00007f24e0dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 165.847244][ T6424] RAX: ffffffffffffffda RBX: 00007f24e2e26090 RCX: 00007f24e2b9fb19 [ 165.855243][ T6424] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 165.863235][ T6424] RBP: 00007f24e2c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 165.871332][ T6424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.879324][ T6424] R13: 00007f24e2e26128 R14: 00007f24e2e26090 R15: 00007ffea969a668 [ 165.887334][ T6424] [ 166.430703][ T6424] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 168.001111][ T6438] can0: slcan on ttyS3. [ 168.727516][ T6442] binder: 6439:6442 ioctl 5000940a 2000000028c0 returned -22 [ 168.747456][ T6438] can0 (unregistered): slcan off ttyS3. [ 171.724070][ T6459] FAULT_INJECTION: forcing a failure. [ 171.724070][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 171.736847][ T6459] CPU: 0 PID: 6459 Comm: syz.2.144 Not tainted syzkaller #0 [ 171.744158][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 171.754240][ T6459] Call Trace: [ 171.757537][ T6459] [ 171.760482][ T6459] dump_stack_lvl+0x18c/0x250 [ 171.765201][ T6459] ? show_regs_print_info+0x20/0x20 [ 171.770428][ T6459] ? load_image+0x420/0x420 [ 171.774973][ T6459] ? __might_sleep+0xe0/0xe0 [ 171.779590][ T6459] ? __lock_acquire+0x7eb0/0x7eb0 [ 171.784651][ T6459] should_fail_ex+0x394/0x4c0 [ 171.789370][ T6459] should_failslab+0x9/0x20 [ 171.793902][ T6459] slab_pre_alloc_hook+0x59/0x300 [ 171.798955][ T6459] ? __kasan_kmalloc+0x8f/0xa0 [ 171.803748][ T6459] ? __se_sys_fsopen+0x135/0x2c0 [ 171.808719][ T6459] __kmem_cache_alloc_node+0x53/0x260 [ 171.814125][ T6459] ? __se_sys_fsopen+0x135/0x2c0 [ 171.819092][ T6459] kmalloc_trace+0x2a/0xe0 [ 171.823536][ T6459] __se_sys_fsopen+0x135/0x2c0 [ 171.828328][ T6459] do_syscall_64+0x55/0xb0 [ 171.832777][ T6459] ? clear_bhb_loop+0x40/0x90 [ 171.837480][ T6459] ? clear_bhb_loop+0x40/0x90 [ 171.842198][ T6459] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.848115][ T6459] RIP: 0033:0x7f1e9db9fb19 [ 171.852553][ T6459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.872208][ T6459] RSP: 002b:00007f1e9eae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 171.880650][ T6459] RAX: ffffffffffffffda RBX: 00007f1e9de26090 RCX: 00007f1e9db9fb19 [ 171.888641][ T6459] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 171.896629][ T6459] RBP: 00007f1e9dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 171.904620][ T6459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.912610][ T6459] R13: 00007f1e9de26128 R14: 00007f1e9de26090 R15: 00007ffe16065d98 [ 171.920617][ T6459] [ 172.497467][ T6460] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 173.576928][ T6458] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.141'. [ 173.595989][ T6458] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 176.507012][ T6482] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 178.741463][ T6495] FAULT_INJECTION: forcing a failure. [ 178.741463][ T6495] name failslab, interval 1, probability 0, space 0, times 0 [ 178.754536][ T6495] CPU: 0 PID: 6495 Comm: syz.2.155 Not tainted syzkaller #0 [ 178.761856][ T6495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 178.771951][ T6495] Call Trace: [ 178.775257][ T6495] [ 178.778211][ T6495] dump_stack_lvl+0x18c/0x250 [ 178.782929][ T6495] ? show_regs_print_info+0x20/0x20 [ 178.788243][ T6495] ? load_image+0x420/0x420 [ 178.792776][ T6495] ? __lock_acquire+0x7eb0/0x7eb0 [ 178.797827][ T6495] should_fail_ex+0x394/0x4c0 [ 178.802536][ T6495] should_failslab+0x9/0x20 [ 178.807064][ T6495] slab_pre_alloc_hook+0x59/0x300 [ 178.812115][ T6495] ? legacy_init_fs_context+0x51/0xc0 [ 178.817519][ T6495] __kmem_cache_alloc_node+0x53/0x260 [ 178.822921][ T6495] ? legacy_init_fs_context+0x51/0xc0 [ 178.828335][ T6495] kmalloc_trace+0x2a/0xe0 [ 178.832795][ T6495] legacy_init_fs_context+0x51/0xc0 [ 178.838055][ T6495] alloc_fs_context+0x618/0x7a0 [ 178.842942][ T6495] __se_sys_fsopen+0xa0/0x2c0 [ 178.847664][ T6495] do_syscall_64+0x55/0xb0 [ 178.852287][ T6495] ? clear_bhb_loop+0x40/0x90 [ 178.856986][ T6495] ? clear_bhb_loop+0x40/0x90 [ 178.861726][ T6495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.867656][ T6495] RIP: 0033:0x7f1e9db9fb19 [ 178.872109][ T6495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.891747][ T6495] RSP: 002b:00007f1e9eae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 178.900201][ T6495] RAX: ffffffffffffffda RBX: 00007f1e9de26090 RCX: 00007f1e9db9fb19 [ 178.908198][ T6495] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 178.916202][ T6495] RBP: 00007f1e9dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 178.924192][ T6495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.932185][ T6495] R13: 00007f1e9de26128 R14: 00007f1e9de26090 R15: 00007ffe16065d98 [ 178.940203][ T6495] [ 179.101657][ T6495] ceph: No mds server is up or the cluster is laggy [ 179.117620][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 179.230502][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 180.976282][ T6511] autofs4:pid:6511:autofs_fill_super: called with bogus options [ 181.291764][ T6515] binder: 6513:6515 ioctl 5000940a 2000000028c0 returned -22 [ 184.917695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 186.163799][ T6536] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 187.232767][ T6539] can0: slcan on ttyS3. [ 187.349694][ T6541] can0 (unregistered): slcan off ttyS3. [ 187.717404][ T6546] can0: slcan on ttyS3. [ 187.798573][ T6548] jffs2: notice: (6548) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 187.828998][ T6546] can0 (unregistered): slcan off ttyS3. [ 189.218709][ T6558] FAULT_INJECTION: forcing a failure. [ 189.218709][ T6558] name failslab, interval 1, probability 0, space 0, times 0 [ 189.231610][ T6558] CPU: 0 PID: 6558 Comm: syz.0.164 Not tainted syzkaller #0 [ 189.238945][ T6558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 189.249045][ T6558] Call Trace: [ 189.252351][ T6558] [ 189.255297][ T6558] dump_stack_lvl+0x18c/0x250 [ 189.260023][ T6558] ? show_regs_print_info+0x20/0x20 [ 189.265257][ T6558] ? load_image+0x420/0x420 [ 189.269787][ T6558] ? __lock_acquire+0x7eb0/0x7eb0 [ 189.274846][ T6558] should_fail_ex+0x394/0x4c0 [ 189.279559][ T6558] should_failslab+0x9/0x20 [ 189.284086][ T6558] slab_pre_alloc_hook+0x59/0x300 [ 189.289144][ T6558] ? legacy_init_fs_context+0x51/0xc0 [ 189.294559][ T6558] __kmem_cache_alloc_node+0x53/0x260 [ 189.299965][ T6558] ? legacy_init_fs_context+0x51/0xc0 [ 189.305374][ T6558] kmalloc_trace+0x2a/0xe0 [ 189.309827][ T6558] legacy_init_fs_context+0x51/0xc0 [ 189.315057][ T6558] alloc_fs_context+0x618/0x7a0 [ 189.319948][ T6558] __se_sys_fsopen+0xa0/0x2c0 [ 189.324668][ T6558] do_syscall_64+0x55/0xb0 [ 189.329121][ T6558] ? clear_bhb_loop+0x40/0x90 [ 189.333830][ T6558] ? clear_bhb_loop+0x40/0x90 [ 189.338583][ T6558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.344526][ T6558] RIP: 0033:0x7f24e2b9fb19 [ 189.348963][ T6558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.368683][ T6558] RSP: 002b:00007f24e0dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 189.377127][ T6558] RAX: ffffffffffffffda RBX: 00007f24e2e26090 RCX: 00007f24e2b9fb19 [ 189.385126][ T6558] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 189.393119][ T6558] RBP: 00007f24e2c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 189.401115][ T6558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.409108][ T6558] R13: 00007f24e2e26128 R14: 00007f24e2e26090 R15: 00007ffea969a668 [ 189.417131][ T6558] [ 189.633659][ T6559] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 193.446116][ T6591] can0: slcan on ttyS3. [ 193.537825][ T6591] can0 (unregistered): slcan off ttyS3. [ 193.753666][ T6596] jffs2: notice: (6596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 195.157736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 195.561188][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.917932][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.577460][ T5789] Bluetooth: hci3: command tx timeout [ 198.721605][ T6641] can0: slcan on ttyS3. [ 198.802902][ T6641] can0 (unregistered): slcan off ttyS3. [ 200.591139][ T6653] FAULT_INJECTION: forcing a failure. [ 200.591139][ T6653] name failslab, interval 1, probability 0, space 0, times 0 [ 200.603908][ T6653] CPU: 1 PID: 6653 Comm: syz.2.180 Not tainted syzkaller #0 [ 200.611226][ T6653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 200.621310][ T6653] Call Trace: [ 200.624607][ T6653] [ 200.627560][ T6653] dump_stack_lvl+0x18c/0x250 [ 200.632291][ T6653] ? show_regs_print_info+0x20/0x20 [ 200.637539][ T6653] ? load_image+0x420/0x420 [ 200.642086][ T6653] ? __might_sleep+0xe0/0xe0 [ 200.646708][ T6653] ? __lock_acquire+0x7eb0/0x7eb0 [ 200.651774][ T6653] should_fail_ex+0x394/0x4c0 [ 200.656486][ T6653] should_failslab+0x9/0x20 [ 200.661016][ T6653] slab_pre_alloc_hook+0x59/0x300 [ 200.666162][ T6653] ? __kasan_kmalloc+0x8f/0xa0 [ 200.670951][ T6653] ? __se_sys_fsopen+0x135/0x2c0 [ 200.675918][ T6653] __kmem_cache_alloc_node+0x53/0x260 [ 200.681329][ T6653] ? __se_sys_fsopen+0x135/0x2c0 [ 200.686298][ T6653] kmalloc_trace+0x2a/0xe0 [ 200.690751][ T6653] __se_sys_fsopen+0x135/0x2c0 [ 200.695552][ T6653] do_syscall_64+0x55/0xb0 [ 200.700014][ T6653] ? clear_bhb_loop+0x40/0x90 [ 200.704726][ T6653] ? clear_bhb_loop+0x40/0x90 [ 200.709437][ T6653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 200.715362][ T6653] RIP: 0033:0x7f1e9db9fb19 [ 200.719796][ T6653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.739520][ T6653] RSP: 002b:00007f1e9eae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 200.747962][ T6653] RAX: ffffffffffffffda RBX: 00007f1e9de26090 RCX: 00007f1e9db9fb19 [ 200.755955][ T6653] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 200.763949][ T6653] RBP: 00007f1e9dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 200.771949][ T6653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.779946][ T6653] R13: 00007f1e9de26128 R14: 00007f1e9de26090 R15: 00007ffe16065d98 [ 200.787969][ T6653] [ 201.342082][ T6654] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 202.584333][ T6648] Bluetooth: hci2: command 0x0406 tx timeout [ 202.602225][ T6648] Bluetooth: hci3: command 0x0406 tx timeout [ 202.608837][ T6648] Bluetooth: hci0: command 0x0406 tx timeout [ 202.614861][ T6648] Bluetooth: hci1: command 0x0406 tx timeout [ 202.837333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 207.777861][ T6688] can0: slcan on ttyS3. [ 208.168504][ T52] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 208.798069][ T6688] can0 (unregistered): slcan off ttyS3. [ 209.514182][ T6695] can0: slcan on ttyS3. [ 209.541356][ T6697] FAULT_INJECTION: forcing a failure. [ 209.541356][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 209.554277][ T6697] CPU: 1 PID: 6697 Comm: syz.2.199 Not tainted syzkaller #0 [ 209.561596][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 209.571682][ T6697] Call Trace: [ 209.575173][ T6697] [ 209.578121][ T6697] dump_stack_lvl+0x18c/0x250 [ 209.582834][ T6697] ? show_regs_print_info+0x20/0x20 [ 209.588074][ T6697] ? load_image+0x420/0x420 [ 209.592646][ T6697] ? __might_sleep+0xe0/0xe0 [ 209.597275][ T6697] ? __lock_acquire+0x7eb0/0x7eb0 [ 209.602330][ T6697] should_fail_ex+0x394/0x4c0 [ 209.607041][ T6697] should_failslab+0x9/0x20 [ 209.611566][ T6697] slab_pre_alloc_hook+0x59/0x300 [ 209.616631][ T6697] ? __kasan_kmalloc+0x8f/0xa0 [ 209.621435][ T6697] ? __se_sys_fsopen+0x135/0x2c0 [ 209.627029][ T6697] __kmem_cache_alloc_node+0x53/0x260 [ 209.632441][ T6697] ? __se_sys_fsopen+0x135/0x2c0 [ 209.637414][ T6697] kmalloc_trace+0x2a/0xe0 [ 209.641868][ T6697] __se_sys_fsopen+0x135/0x2c0 [ 209.646677][ T6697] do_syscall_64+0x55/0xb0 [ 209.651127][ T6697] ? clear_bhb_loop+0x40/0x90 [ 209.655832][ T6697] ? clear_bhb_loop+0x40/0x90 [ 209.660547][ T6697] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.666482][ T6697] RIP: 0033:0x7f1e9db9fb19 [ 209.670923][ T6697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.690571][ T6697] RSP: 002b:00007f1e9eae6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 209.699016][ T6697] RAX: ffffffffffffffda RBX: 00007f1e9de26090 RCX: 00007f1e9db9fb19 [ 209.707019][ T6697] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 209.715018][ T6697] RBP: 00007f1e9dc37b70 R08: 0000000000000000 R09: 0000000000000000 [ 209.723021][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.731022][ T6697] R13: 00007f1e9de26128 R14: 00007f1e9de26090 R15: 00007ffe16065d98 [ 209.739312][ T6697] [ 209.876578][ T52] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 209.966521][ T6699] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 210.030159][ T6695] can0 (unregistered): slcan off ttyS3. [ 213.196224][ T6721] netlink: 80 bytes leftover after parsing attributes in process `syz.0.204'. [ 214.458202][ T6729] can0: slcan on ttyS3. [ 214.523689][ T6730] xt_l2tp: invalid flags combination: 8 [ 214.664355][ T52] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 215.268142][ T6729] can0 (unregistered): slcan off ttyS3. [ 218.514605][ T6736] FAULT_INJECTION: forcing a failure. [ 218.514605][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 218.527487][ T6736] CPU: 0 PID: 6736 Comm: syz.3.210 Not tainted syzkaller #0 [ 218.534797][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 218.544917][ T6736] Call Trace: [ 218.548229][ T6736] [ 218.551174][ T6736] dump_stack_lvl+0x18c/0x250 [ 218.555883][ T6736] ? show_regs_print_info+0x20/0x20 [ 218.561109][ T6736] ? load_image+0x420/0x420 [ 218.565635][ T6736] ? __lock_acquire+0x7eb0/0x7eb0 [ 218.570688][ T6736] should_fail_ex+0x394/0x4c0 [ 218.575405][ T6736] should_failslab+0x9/0x20 [ 218.579937][ T6736] slab_pre_alloc_hook+0x59/0x300 [ 218.584984][ T6736] ? legacy_init_fs_context+0x51/0xc0 [ 218.590384][ T6736] __kmem_cache_alloc_node+0x53/0x260 [ 218.595785][ T6736] ? legacy_init_fs_context+0x51/0xc0 [ 218.601198][ T6736] kmalloc_trace+0x2a/0xe0 [ 218.605659][ T6736] legacy_init_fs_context+0x51/0xc0 [ 218.610905][ T6736] alloc_fs_context+0x618/0x7a0 [ 218.615791][ T6736] __se_sys_fsopen+0xa0/0x2c0 [ 218.620503][ T6736] do_syscall_64+0x55/0xb0 [ 218.624948][ T6736] ? clear_bhb_loop+0x40/0x90 [ 218.629648][ T6736] ? clear_bhb_loop+0x40/0x90 [ 218.634359][ T6736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.640273][ T6736] RIP: 0033:0x7f8b9619fb19 [ 218.644711][ T6736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.664345][ T6736] RSP: 002b:00007f8b943f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 218.672785][ T6736] RAX: ffffffffffffffda RBX: 00007f8b96426090 RCX: 00007f8b9619fb19 [ 218.680823][ T6736] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 218.688830][ T6736] RBP: 00007f8b96237b70 R08: 0000000000000000 R09: 0000000000000000 [ 218.696866][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.704861][ T6736] R13: 00007f8b96426128 R14: 00007f8b96426090 R15: 00007ffe63f8e408 [ 218.712884][ T6736] [ 219.263506][ T6736] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 225.468089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 226.288552][ T6769] netlink: 80 bytes leftover after parsing attributes in process `syz.0.215'. [ 227.871491][ T6772] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 236.052419][ T6806] netlink: 80 bytes leftover after parsing attributes in process `syz.1.226'. [ 239.458603][ T6818] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 241.160850][ T6828] FAULT_INJECTION: forcing a failure. [ 241.160850][ T6828] name fail_futex, interval 1, probability 0, space 0, times 1 [ 241.173947][ T6828] CPU: 0 PID: 6828 Comm: syz.2.233 Not tainted syzkaller #0 [ 241.181269][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 241.191538][ T6828] Call Trace: [ 241.194836][ T6828] [ 241.197786][ T6828] dump_stack_lvl+0x18c/0x250 [ 241.202512][ T6828] ? show_regs_print_info+0x20/0x20 [ 241.207758][ T6828] ? load_image+0x420/0x420 [ 241.212301][ T6828] ? tun_get_user+0x294d/0x3d30 [ 241.217191][ T6828] ? tun_get_user+0x667/0x3d30 [ 241.221980][ T6828] should_fail_ex+0x394/0x4c0 [ 241.226687][ T6828] get_futex_key+0x134/0xf40 [ 241.231302][ T6828] ? ref_tracker_free+0x686/0x830 [ 241.236357][ T6828] ? futex_setup_timer+0xc0/0xc0 [ 241.241347][ T6828] ? __asan_memset+0x22/0x40 [ 241.246278][ T6828] futex_wake+0x127/0x4f0 [ 241.250649][ T6828] ? fsnotify_set_children_dentry_flags+0x220/0x220 [ 241.257317][ T6828] ? futex_wake_mark+0x150/0x150 [ 241.264122][ T6828] ? file_end_write+0xdb/0x250 [ 241.268930][ T6828] ? vfs_write+0x5de/0x9a0 [ 241.273379][ T6828] do_futex+0x35d/0x3e0 [ 241.277561][ T6828] ? file_end_write+0x250/0x250 [ 241.282443][ T6828] ? __ia32_sys_get_robust_list+0x110/0x110 [ 241.288375][ T6828] __se_sys_futex+0x3a9/0x440 [ 241.293082][ T6828] ? __x64_sys_futex+0xf0/0xf0 [ 241.297875][ T6828] ? __x64_sys_futex+0x21/0xf0 [ 241.302687][ T6828] do_syscall_64+0x55/0xb0 [ 241.307145][ T6828] ? clear_bhb_loop+0x40/0x90 [ 241.311856][ T6828] ? clear_bhb_loop+0x40/0x90 [ 241.316566][ T6828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.322497][ T6828] RIP: 0033:0x7f1e9db9fb19 [ 241.326934][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.346570][ T6828] RSP: 002b:00007f1e9eae60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.355007][ T6828] RAX: ffffffffffffffda RBX: 00007f1e9de26098 RCX: 00007f1e9db9fb19 [ 241.363006][ T6828] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e9de2609c [ 241.371003][ T6828] RBP: 00007f1e9de26090 R08: 0000000000745adf R09: 0000000000000000 [ 241.378995][ T6828] R10: 000000000000004a R11: 0000000000000246 R12: 0000000000000000 [ 241.387073][ T6828] R13: 00007f1e9de26128 R14: 00007ffe16065cb0 R15: 00007ffe16065d98 [ 241.395088][ T6828] [ 243.219183][ T6828] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 243.597133][ T6852] can0: slcan on ttyS3. [ 243.673519][ T52] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 244.978975][ T6852] can0 (unregistered): slcan off ttyS3. [ 245.562998][ T6867] can0: slcan on ttyS3. [ 245.618728][ T6867] can0 (unregistered): slcan off ttyS3. [ 245.628592][ T6867] xt_l2tp: invalid flags combination: 8 [ 245.634709][ T52] Bluetooth: hci2: unexpected event for opcode 0x1405 [ 248.890634][ T6880] FAULT_INJECTION: forcing a failure. [ 248.890634][ T6880] name failslab, interval 1, probability 0, space 0, times 0 [ 248.903636][ T6880] CPU: 0 PID: 6880 Comm: syz.0.245 Not tainted syzkaller #0 [ 248.911482][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 248.922538][ T6880] Call Trace: [ 248.925940][ T6880] [ 248.928936][ T6880] dump_stack_lvl+0x18c/0x250 [ 248.933701][ T6880] ? show_regs_print_info+0x20/0x20 [ 248.938962][ T6880] ? load_image+0x420/0x420 [ 248.943496][ T6880] ? __might_sleep+0xe0/0xe0 [ 248.948113][ T6880] ? __lock_acquire+0x7eb0/0x7eb0 [ 248.953171][ T6880] should_fail_ex+0x394/0x4c0 [ 248.957888][ T6880] should_failslab+0x9/0x20 [ 248.962419][ T6880] slab_pre_alloc_hook+0x59/0x300 [ 248.967767][ T6880] kmem_cache_alloc+0x5a/0x2d0 [ 248.972584][ T6880] ? getname_flags+0xbb/0x500 [ 248.977397][ T6880] getname_flags+0xbb/0x500 [ 248.981933][ T6880] __x64_sys_mkdirat+0x7c/0xa0 [ 248.986726][ T6880] do_syscall_64+0x55/0xb0 [ 248.991180][ T6880] ? clear_bhb_loop+0x40/0x90 [ 248.995888][ T6880] ? clear_bhb_loop+0x40/0x90 [ 249.000617][ T6880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.006558][ T6880] RIP: 0033:0x7f24e2b9fb19 [ 249.011003][ T6880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.030655][ T6880] RSP: 002b:00007f24e0dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 249.039109][ T6880] RAX: ffffffffffffffda RBX: 00007f24e2e26090 RCX: 00007f24e2b9fb19 [ 249.047111][ T6880] RDX: 00000000000001ff RSI: 0000200000000440 RDI: ffffffffffffff9c [ 249.055212][ T6880] RBP: 00007f24e2c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 249.063213][ T6880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.071208][ T6880] R13: 00007f24e2e26128 R14: 00007f24e2e26090 R15: 00007ffea969a668 [ 249.079224][ T6880] [ 249.301476][ T6881] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 250.469633][ T6889] netlink: 80 bytes leftover after parsing attributes in process `syz.3.236'. [ 251.781819][ T6894] can0: slcan on ttyS3. [ 251.847733][ T6895] xt_l2tp: invalid flags combination: 8 [ 251.868895][ T52] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 251.887598][ T6894] can0 (unregistered): slcan off ttyS3. [ 253.926200][ T6910] can0: slcan on ttyS3. [ 254.042076][ T6911] xt_l2tp: invalid flags combination: 8 [ 254.051116][ T52] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 255.338220][ T6910] can0 (unregistered): slcan off ttyS3. [ 256.293073][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.300369][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.121328][ T6932] FAULT_INJECTION: forcing a failure. [ 257.121328][ T6932] name fail_futex, interval 1, probability 0, space 0, times 0 [ 257.135034][ T6932] CPU: 1 PID: 6932 Comm: syz.3.257 Not tainted syzkaller #0 [ 257.142361][ T6932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 257.152442][ T6932] Call Trace: [ 257.155749][ T6932] [ 257.158724][ T6932] dump_stack_lvl+0x18c/0x250 [ 257.163442][ T6932] ? show_regs_print_info+0x20/0x20 [ 257.168670][ T6932] ? load_image+0x420/0x420 [ 257.173217][ T6932] ? rcu_read_lock_sched_held+0x8a/0x110 [ 257.178878][ T6932] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 257.185059][ T6932] ? __cgroup_rstat_updated+0xd5/0x360 [ 257.190570][ T6932] should_fail_ex+0x394/0x4c0 [ 257.195284][ T6932] get_futex_key+0x134/0xf40 [ 257.199916][ T6932] ? futex_setup_timer+0xc0/0xc0 [ 257.204890][ T6932] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 257.210911][ T6932] ? __lock_acquire+0x7eb0/0x7eb0 [ 257.215973][ T6932] ? lock_chain_count+0x20/0x20 [ 257.220858][ T6932] futex_wait_setup+0xbc/0x270 [ 257.225659][ T6932] ? futex_wait_multiple+0x970/0x970 [ 257.230975][ T6932] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 257.236901][ T6932] ? _raw_spin_unlock+0x40/0x40 [ 257.241804][ T6932] futex_wait+0x1cf/0x640 [ 257.246179][ T6932] ? futex_wait_setup+0x270/0x270 [ 257.251249][ T6932] ? file_end_write+0xdb/0x250 [ 257.256042][ T6932] ? vfs_write+0x5de/0x9a0 [ 257.260490][ T6932] do_futex+0x2ff/0x3e0 [ 257.264687][ T6932] ? file_end_write+0x250/0x250 [ 257.269596][ T6932] ? __ia32_sys_get_robust_list+0x110/0x110 [ 257.275533][ T6932] __se_sys_futex+0x3a9/0x440 [ 257.280244][ T6932] ? __x64_sys_futex+0xf0/0xf0 [ 257.285045][ T6932] ? __x64_sys_futex+0x21/0xf0 [ 257.289837][ T6932] do_syscall_64+0x55/0xb0 [ 257.294307][ T6932] ? clear_bhb_loop+0x40/0x90 [ 257.299021][ T6932] ? clear_bhb_loop+0x40/0x90 [ 257.303730][ T6932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.309666][ T6932] RIP: 0033:0x7f8b9619fb19 [ 257.314108][ T6932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.333743][ T6932] RSP: 002b:00007f8b943f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 257.342201][ T6932] RAX: ffffffffffffffda RBX: 00007f8b96426098 RCX: 00007f8b9619fb19 [ 257.350203][ T6932] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8b96426098 [ 257.358216][ T6932] RBP: 00007f8b96426090 R08: 0000000000000000 R09: 0000000000000000 [ 257.366295][ T6932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.374291][ T6932] R13: 00007f8b96426128 R14: 00007ffe63f8e320 R15: 00007ffe63f8e408 [ 257.382309][ T6932] [ 258.615376][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 258.648662][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 258.707752][ T6933] ceph: No mds server is up or the cluster is laggy [ 258.802270][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 258.819968][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 262.768321][ T6954] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 267.828502][ T6986] ceph: No mds server is up or the cluster is laggy [ 267.838356][ T23] libceph: connect (1)[c::]:6789 error -101 [ 267.978354][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 268.357392][ T6996] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.576113][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 269.585135][ T7004] bridge: RTM_NEWNEIGH with invalid ether address [ 272.615171][ T7011] can0: slcan on ttyS3. [ 272.681964][ T7012] xt_l2tp: invalid flags combination: 8 [ 272.740850][ T52] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 273.489532][ T7011] can0 (unregistered): slcan off ttyS3. [ 275.932484][ T7031] ceph: No mds server is up or the cluster is laggy [ 276.069260][ T5892] libceph: connect (1)[c::]:6789 error -101 [ 276.075363][ T5892] libceph: mon0 (1)[c::]:6789 connect error [ 276.244654][ T7036] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 277.200323][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.287'. [ 277.209432][ T7046] bridge: RTM_NEWNEIGH with invalid ether address [ 279.425496][ T7060] can0: slcan on ttyS3. [ 279.534811][ T7062] xt_l2tp: invalid flags combination: 8 [ 279.544776][ T5789] Bluetooth: hci0: unexpected event for opcode 0x1405 [ 279.849307][ T7060] can0 (unregistered): slcan off ttyS3. [ 281.488635][ T7072] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 281.768354][ T7075] ceph: No mds server is up or the cluster is laggy [ 281.790699][ T23] libceph: connect (1)[c::]:6789 error -101 [ 281.863346][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 284.657549][ T7089] netlink: 80 bytes leftover after parsing attributes in process `syz.1.298'. [ 287.378127][ T7106] can0: slcan on ttyS3. [ 287.445051][ T7108] xt_l2tp: invalid flags combination: 8 [ 288.069037][ T7106] can0 (unregistered): slcan off ttyS3. [ 288.177454][ T7105] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 288.725404][ T7113] ceph: No mds server is up or the cluster is laggy [ 288.754197][ T23] libceph: connect (1)[c::]:6789 error -101 [ 288.853514][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 289.877617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 290.287279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 290.710175][ T7122] can0: slcan on ttyS3. [ 290.775714][ T7128] xt_l2tp: invalid flags combination: 8 [ 290.847450][ T5789] Bluetooth: hci3: unexpected event for opcode 0x1405 [ 291.039070][ T7122] can0 (unregistered): slcan off ttyS3. [ 293.384734][ T5789] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 294.041244][ T7145] netlink: 80 bytes leftover after parsing attributes in process `syz.2.310'. [ 295.126882][ T7151] can0: slcan on ttyS3. [ 295.192796][ T7152] xt_l2tp: invalid flags combination: 8 [ 295.219095][ T7151] can0 (unregistered): slcan off ttyS3. [ 296.162277][ T7154] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 297.268609][ T7163] can0: slcan on ttyS3. [ 297.333371][ T7167] xt_l2tp: invalid flags combination: 8 [ 297.339654][ T5789] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 299.187731][ T7163] can0 (unregistered): slcan off ttyS3. [ 302.367609][ T7182] netlink: 80 bytes leftover after parsing attributes in process `syz.1.322'. [ 304.208812][ T7197] can0: slcan on ttyS3. [ 304.276204][ T7198] xt_l2tp: invalid flags combination: 8 [ 304.282721][ T5789] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 305.647273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 305.789314][ T7197] can0 (unregistered): slcan off ttyS3. [ 308.700815][ T7224] kAFS: No cell specified [ 309.850920][ T7231] netlink: 80 bytes leftover after parsing attributes in process `syz.2.333'. [ 312.576331][ T7244] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 314.725105][ T7257] kAFS: No cell specified [ 316.300980][ T7260] netlink: 80 bytes leftover after parsing attributes in process `syz.2.342'. [ 317.503241][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.510051][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.556804][ T7301] kAFS: No cell specified [ 327.496883][ T7321] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.352'. [ 327.506493][ T7321] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 330.943235][ T7334] autofs4:pid:7334:autofs_fill_super: called with bogus options [ 330.976885][ T7336] mmap: syz.1.358 (7336) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 331.045599][ T7336] gadgetfs: bound to dummy_udc driver [ 336.149332][ T7361] kAFS: No cell specified [ 338.424589][ T7370] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 343.749642][ T7393] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.376'. [ 343.758838][ T7393] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 344.991680][ T7397] gadgetfs: bound to dummy_udc driver [ 345.657386][ T5871] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 345.734319][ T7395] gadgetfs: suspended from state 2 [ 347.185227][ T7409] jffs2: notice: (7409) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 351.027898][ T7427] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.385'. [ 351.036973][ T7427] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 352.385722][ T7434] jffs2: notice: (7434) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 354.571083][ T7447] gadgetfs: bound to dummy_udc driver [ 358.906267][ T7466] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.395'. [ 358.915380][ T7466] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 362.682091][ T7481] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 363.649727][ T7486] autofs4:pid:7486:autofs_fill_super: called with bogus options [ 367.340803][ T7504] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.405'. [ 367.350484][ T7504] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 368.381781][ T7511] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 374.746644][ T7544] autofs4:pid:7544:autofs_fill_super: called with bogus options [ 374.870690][ T7550] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 374.883579][ T7550] overlay: Unknown parameter '/' [ 375.204723][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'. [ 375.213762][ T7556] bridge: RTM_NEWNEIGH with invalid ether address [ 378.948267][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.954608][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.438387][ T7581] autofs4:pid:7581:autofs_fill_super: called with bogus options [ 381.624046][ T7588] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 381.688800][ T7588] overlay: Unknown parameter '/' [ 386.307399][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 386.512006][ T7613] autofs4:pid:7613:autofs_fill_super: called with bogus options [ 386.739730][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.800044][ T5846] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 386.827372][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.835429][ T5846] usb 3-1: Product: syz [ 386.867360][ T5846] usb 3-1: Manufacturer: syz [ 386.880337][ T5846] usb 3-1: SerialNumber: syz [ 387.345355][ T5846] usb 3-1: Limiting number of CPorts to U8_MAX [ 387.451659][ T5846] usb 3-1: Not enough endpoints found in device, aborting! [ 388.735326][ T5846] usb 3-1: USB disconnect, device number 2 [ 393.842337][ T7647] printk: console [ttyS0] disabled syzkaller