last executing test programs: 17.937708101s ago: executing program 1 (id=1069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000002840)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x801004}, 0xc, &(0x7f0000002800)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000ae0000000060a05000000000000000000070000050c0003400000000000000001130007400576258bed44905d123ea2f35b3b950094000480380001800e000100636f6e6e6c696d697400000024000280080001400000000008000240000000010800024000000000080001400000b6a1240001800a000100696e6e657200000014000280080004400000000c0800044000000004100001800b0001006e756d67656e0000100001800a0001007265646972000000140001800e000100696d6d6564696174650000000900010073797a31000000000900010073797a300000000034000000020a01010000000000000000010000050900010073797a310000000008000240000000000900010073797a31000000001c000000090a020100000000000000000a00000508000340000000085c0000000b0a01020000000000000000000000030900020073797a320000000008000a400000000008000a400000000108000c4000000009080005400000003008000f400000000008000840000000010900010073797a3100000000e0000000050a0102000000000000000001000006cc000c0027ea02034644e7a2432b1e495e2e2aebb4c6423ad274315a97c92b7a81e347f6d4b77b3413d8c465aa34f6bb45eaefad79e21b9952fb451db9276afcc8eedc8ad8f8601e47981b9c942de8caa97ab3bbcb457ffcb68a3389fb336fada64e73a87d8ca043719aa203ff4d771ed9e0b1a8b289f990a89a2409c1cd4032ce6115196f3d2afd57c186269e670f8a57c4b6f0d928ef3622702760ecc65e4721e62923038eb8bc995c1b113b86e20aeb7596321604d6fe040d4de097a3b4bcf6de81cc13b18ce1c27c54df50000000160a03000000000000000000050000060c00054000000000000000020c00054000000000000000030c00054000000000000000010c00054000000000000000020c000380080002400000010120000000160a01030000000000000000010000040900010073797a300000000014000000110001000000000000000000eb00000a"], 0x304}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) mount$pvfs2(&(0x7f00000001c0), 0x0, &(0x7f0000000300), 0x20, &(0x7f0000000280)={[{'#$'}, {'\x00'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '++'}}]}) openat$vim2m(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xd5) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) r8 = io_uring_setup(0x1694, &(0x7f0000000080)) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x5, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 14.572387288s ago: executing program 3 (id=1079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_int(r2, 0x0, 0x15, 0x0, &(0x7f00000001c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6400000010000104000000000000000600000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100000014000700000000000000000000000000000000001400030067656e657665310000000000000000"], 0x64}}, 0x2000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = gettid() stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) r8 = fcntl$getown(r0, 0x9) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setresuid(r10, r10, r10) setuid(r10) r11 = openat$mice(0xffffffffffffff9c, &(0x7f0000000ac0), 0x101000) r12 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000c80)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000008c0)=[{&(0x7f00000004c0)="4a9423c743554972f907050a4037469c21bef83fb21f64ce5a7144f380ff80afc6b8c2e0cf00a07cd15db7d399d703f6dd2f60f77aef2462a6e93419d18dfb6b05c6afaa5b11baf4e1", 0x49}, {&(0x7f0000000540)="9da58a9d2cf17ee09cb2535783598c9e4a7712d8e80609b96629a9907eaf2b4c5619189cf0253c664e772648857639e254ce20c9ba8a11c669da2853e944e376651ca1a73ebb59ead8ed012846aeb187073dbbaa0cf939b81638a8a160a21cdfbca08cb28c17f6d3", 0x68}, {&(0x7f00000005c0)="c46ea8ce4e275205992330b8b8cff7492c52d33b873e95043babc11d41d0fb413209d878a02122c9bd032575e7c16f7fdf2bbb0eaa1b38448eecf016ce25702cad3fe4d07039c34c31a3097291f4e91b575b35c856bd8bc08d10a538d65bd617ded8", 0x62}, {&(0x7f0000000640)="d0e36c5e84fd5bb76159492da9ed3013ebcb79e8b08a883d9277c263dd868612f06a6486fab7c0839025ba51665a2e72299b4b2134efefdf0d120be4ed7950cfff4b5af88d5c7c7cc1de28dbbaa046104901f6dfe126daf2ae8ecb2298e12f22cd1f0d962e8abafcda6f78f9b6484fc5686870bc6264b4f3b9729c7a2014bd26db5939dc02332bc4c1ca37c97194b315a10c418fb59ea777f580b6e2a66b2c18ed53", 0xa2}, {&(0x7f0000000700)="bc4ef8bb04166f1996ec0a634167fbee6becf448f5aefb71f75e5da123996cea381b54de0c4a784b1cb99133b34230359c49accb4a5d21ec43ea7ee635eac93e0ace7d1563c655f29a9e60762e880b7e54e47aa9267939077948e95924325e9859dafbfe23b387aaf20b5dde13c36500e369764d0ec2a331b146020259bb79f347db971017adb2804b36573f0f0efbcbe732d7f68ed538dde595b558b73235578505ecf283900746e87cb7859c2f9c26ac834cfe93c610cab1bd98a307a9f34f0b9c804fb5c8fad116eac58f8234ecffd11fe2ea62205263", 0xd8}, {&(0x7f0000000800)="110f0f0474667e4b777c5bcb66f765cd8113c7761422bb22fd32fd8cb4e52996be570da19e113591d2b8823205efb6a05ecae9c15a2041c5319e58e490e250771c29aa4123425530d7bf5bcb9c19361ab68cfc866d137fc90665148834f529b3caebca7bd8d7fdebc9ab06fead9fd00175b90dcd2c0278774b638a195b8bbece192f", 0x82}], 0x6, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10}}}, @rights={{0x24, 0x1, 0x1, [r0, r3, r11, r0, r3]}}, @rights={{0x30, 0x1, 0x1, [r3, r1, r2, r1, r0, r0, r3, r3]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, r13}}}], 0xb8, 0x804}}], 0x1, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r14 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r14, 0x1, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r15 = socket$alg(0x26, 0x5, 0x0) bind$alg(r15, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r15, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r16, @ANYBLOB="0100fcffffff737333615a220000000005000000180001801400020073797a5f74756e00000b0000000000000c0003800400"], 0x38}}, 0x0) 12.919027468s ago: executing program 3 (id=1083): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001880)="580004c60e49a2c787bb35192433deee5b30da6e7c36e8385b7e3d0988cf2e4cb628610e1f475d2c309b36a9e0c34d78da306ef449632f91d1c133a1c9e99b384157a18316fcf25dc8ab50fb71573db4d079dd04d227cfe5228b1433d3fba90654b7e08622ad79ada62602e7147d133be618a663f3607c755087796bdde2b8b221344465aca08aeaa8959c6bd131be176da1737faa39", 0x96}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b80)}], 0x1, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x86}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="b3fa248d603f5aec69b9f6b08efaf980b90ee5a8187c236cbffdd539867bb10cffa83c69cf00b637885b43baa0d38a43efb134df80e7fae38785df466b7558ff7be32085650e23f241e48fd07f92d3dbd85a8bd10fc5021144b506d4f17943250082a902b963300a54c712c7c4a8530012e33a07e92ed7b8b2a62e7e2988b734c7b919be69286792bda4fb3541bafe955b4a4cb1899abc8d3b5c5bb7b4169b6217907a3043086fda0f82bb", 0xab}], 0x1, &(0x7f0000000480)}}, {{&(0x7f0000000540)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f00000059c0)="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", 0xff8}, {&(0x7f00000005c0)="f547f9072bab654a983552a56f2c61a00f24a7d8eb7bbe31b6dcdbc75f2c0c24f7ac134235fe60c17b3866d02461e78a312f5d7ed571", 0x36}], 0x2, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x5, 0x24004091) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, r1, {0x200000000b, 0xfffffffc, 0x0, {0x0, 0x0, 0x55, 0xe, 0xffffffffffff8589, 0xfffffffffffffffc, 0x57a, 0x5, 0x1ff, 0xa000}}}, 0x78) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x2, 0x4, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x1) close(r6) 10.441016067s ago: executing program 1 (id=1086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5ff", 0xc0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0xc, 0x2}], 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000080000204"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x44, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @ldst={0x2, 0x1, 0x3, 0x0, 0x9, 0x80, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x520}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300)) syz_open_procfs(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0xbcacbe}], 0x48) syz_open_procfs(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023896) 9.609989393s ago: executing program 4 (id=1087): r0 = socket$inet6(0xa, 0x2, 0x9edd) sendmmsg$inet6(r0, &(0x7f00000037c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x6}, 0xccc8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000600)='O', 0x1}], 0x1}}], 0x1, 0x40) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000500)) r1 = socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) epoll_create1(0x3012f84903b37587) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000b06010800000000000000000500000205000100070000000c00078008000940000000a50900020073797a31"], 0x34}}, 0x4800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x20000) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 8.507565764s ago: executing program 3 (id=1090): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) socket(0x3, 0x6, 0xffffffff) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000480)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9}, [@null, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x4) accept4(r1, 0x0, 0x0, 0x80000) accept4$netrom(r1, 0x0, 0x0, 0x80000) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x0, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='smb3\x00', 0x5, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 7.738685686s ago: executing program 2 (id=1091): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x4, 0x7, 0x2, 0x5}]}) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x3, &(0x7f0000000040)=0xb, 0xa2f) r0 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000600)='/sys/fs/smackfs/access\x00', 0x2, 0x0) write$smackfs_access(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000000)=0x9718, 0x4) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000180)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x3, 0xa, 0x3, 0x3, 0xfffffff7, 0x3, 0xfffff800, 0x0}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r5, 0x8, 0x1, 0x8, 0x54f0, 0xa2a, 0xfff, 0x4, {0x0, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x5, 0x9, 0x9, 0xffe0, 0x5000}}, &(0x7f0000000400)=0xb0) syz_open_dev$loop(0x0, 0x4, 0x445c01) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x8a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000300)) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000440)=0xf4240) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0xaa481, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r7, 0x800c5012, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000080)=0x10000000) ioctl$SNDCTL_DSP_GETOSPACE(r7, 0x8010500c, &(0x7f0000000100)) 7.245990475s ago: executing program 1 (id=1092): rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x16]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) r5 = syz_open_dev$rtc(&(0x7f0000000280), 0x6, 0x0) ioctl$RTC_PIE_ON(r5, 0x7005) write$binfmt_register(r4, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x20) gettid() r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2180, 0x0) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r7, 0x1a, &(0x7f0000000140), 0x1) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x8) connect$unix(r6, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) 6.804586406s ago: executing program 4 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0xc, 0x2}], 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000080000204"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x44, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @ldst={0x2, 0x1, 0x3, 0x0, 0x9, 0x80, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x520}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300)) syz_open_procfs(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0xbcacbe}], 0x48) syz_open_procfs(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023896) 6.014013661s ago: executing program 2 (id=1094): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x5, [@datasec={0x9, 0x6, 0x0, 0xf, 0x1, [{0x4, 0xa, 0x6}, {0x1, 0x4, 0x3296}, {0x1, 0x9, 0xfa}, {0x4, 0x3cb, 0x7}, {0x4, 0x5, 0x3}, {0x1, 0xffffffbf, 0x7366}], "f9"}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @volatile={0xe}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x4}}, @fwd={0xf}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/223, 0xc9, 0xdf, 0x0, 0x80, 0x10000, @value}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x0) socket(0x9, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, 0x0, 0x0) sendmsg$rds(r8, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5b}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0) 5.990698718s ago: executing program 3 (id=1095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r3, 0x0, 0xc075}, 0x8) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x7fff}, 0x80, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) fcntl$dupfd(r6, 0x406, r5) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r7}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r9 = syz_pidfd_open(r8, 0x0) pidfd_send_signal(r9, 0x2, 0x0, 0x0) r10 = getpid() r11 = syz_open_procfs(r10, &(0x7f0000000700)='net/vlan/config\x00') lseek(r11, 0xcbe, 0x0) sendmsg$nl_crypto(r11, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="e00000001500080028bd7000ffdbdf2561656769733132382d67656e6572696300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c5e500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000001400"/224], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r12 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r15, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r13, 0x0, 0x4000) 5.331618963s ago: executing program 0 (id=1096): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000002380), 0x0, 0x0) read$fb(r0, &(0x7f0000000040)=""/12, 0xc) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r5 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x40000002}) write$P9_RSTATu(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0200000200000005a800000000000000000000000080000000000000000000810300"/46], 0x21e) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000580)=""/96) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="f8c99990c3cd2fd213a2a81bec0e5de9fae420dfcbb33615e40a414c6bc85acbf63f79e1b9cb99cc67473e4d05a5913d9fa4795747d0ed13003e7d906802caf9884146da2eae04587d2dbc1542e3474987192d236467e9b4a51f09aeeb804e662e1e13ab027000b8d99948ea64472a3844b85f9e999a23b9d1b23d5fc6a3370291cfb7ac0c8320687e0eba3d24ad91f263a605c18bb4efb9d96b8fc14213472282fc89315737ed9ae60defce03944a27b71fb7c3be16f439982bde6acf8815b95d9302b44670393d", @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 5.302399723s ago: executing program 4 (id=1097): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') add_key$user(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r1 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x54, 0xa, 0x2, "3258c546dacccfae1e008faa00000000f4ff4000", 0x50424752}) socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x11, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000000007e0000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000"], 0x80}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4c20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000290000003b0000000000000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb1800000000000000290000000400"], 0x58}, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000007a000000270000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) 4.852826775s ago: executing program 2 (id=1098): r0 = socket$inet6(0xa, 0x2, 0x9edd) sendmmsg$inet6(r0, &(0x7f00000037c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x6}, 0xccc8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000600)='O', 0x1}], 0x1}}], 0x1, 0x40) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000500)) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) epoll_create1(0x3012f84903b37587) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg(r4, &(0x7f0000000800)={&(0x7f0000000700)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000008c0)="d1b1fd1da4542302050f6abd8661fc78f89ebc4b4d327593a50bc087a5b8f343ba6295a6d7487108e4efd0d6cd04cdfee603c16eeab32412746d90359caf8690038c372ce1d3222d8af334b7511a45d7f7c145d1023b8850f138cf94bf4c0d7aea70434546267a9936e178af865f25ee25e8b164d7ab25b1773a91cc35804be1a965869b4546658c4edc8f025b8b5ba5b94490eee72a4e1c586283fad756d4befaeb19f6373342244e91dc1b125b2243541be46e63e41e1546d75456f45297bfb04878692f1ea84afb8a2c8966cf", 0xce}, {&(0x7f00000009c0)="3994e016f7a1eda42afd0ecebf2f59bd67115562016305f896d9e08a9b5cc10baf9dedd9f2322eed1299a70c614cde2e555ab6c08675bd49b9c97eef04992cf2a275b494dd1766a36563cae197d88abb0617db8eff098c3747a32883824a7b32c72a3fd763d668fd1b07a4244da544139e46d1299eb8258674f69bf5cbf576da73ed4a7d0b079cd6c61c9978fbf9c688ec10f556fce362ce5b55488ce1a247ea53af5323c7322741587f18359fa814d1a10b65163e0728d61470fbabe834a580add8ba5c66335fd05486093e1100dea50a51fc41be21a5ecb882ac", 0xdb}, {&(0x7f0000000ac0)="9851c35899bcbed4851515b855fc8436f3cdeb86608063894415f233f654d446d2dba8fbdf997b83dab954de2cb8c756bc10bb459d1b23e1eb0e74ec78c00f1e6d140fa6de38283c7c8ffd366f4ebf57acc5bbea4bedb2fb3fb6000a028b11b28e261c4d69529a4b374d86d85026e99290544846c395ba48e6230c24e0e53c0081d22f9db3d5b5db702c7f0f82bf67553a4af02f4c1b443f9157bb80937ef75ad2de07d30b92a5f77dd910d2f830039ac628d891919ea00d0dac4184a2fa7473f26544385d27cc8f896e8ee3fa0180245da980fa879c94cf1617122f4c1d029e8e189310f6183a507c95664a0dab31783731b7daba8d7f94be53", 0xfa}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="28b6485639b8146c1000000000000000000301000000010000debc4c41f998f3e40994089ec037580b668ec40000000000"], 0x28}, 0x20044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000b06010800000000000000000500000205000100070000000c00078008000940000000a50900020073797a31"], 0x34}}, 0x4800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x20000) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 4.578007406s ago: executing program 0 (id=1099): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000380)="89070404", 0x4) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES32=r2], 0x14e) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x815) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) unshare(0x22020600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x9, "11a6c077fdf8cd60365b1d6e7b2d77c0d06c972fa82f745c3278897768ff48de", 0x64, 0x7, 0x5, 0x1b0, 0x80000000, 0xffffff25, 0x200, 0x8, [0x0, 0xffff, 0x4, 0xfffffffa]}) syz_init_net_socket$ax25(0x3, 0xef6e3200a06c67a6, 0x0) 3.676894711s ago: executing program 2 (id=1100): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001880)="580004c60e49a2c787bb35192433deee5b30da6e7c36e8385b7e3d0988cf2e4cb628610e1f475d2c309b36a9e0c34d78da306ef449632f91d1c133a1c9e99b384157a18316fcf25dc8ab50fb71573db4d079dd04d227cfe5228b1433d3fba90654b7e08622ad79ada62602e7147d133be618a663f3607c755087796bdde2b8b221344465aca08aeaa8959c6bd131be176da1737faa39", 0x96}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001b80)}], 0x1, &(0x7f0000000300)=[@txtime={{0x18, 0x1, 0x3d, 0x86}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="b3fa248d603f5aec69b9f6b08efaf980b90ee5a8187c236cbffdd539867bb10cffa83c69cf00b637885b43baa0d38a43efb134df80e7fae38785df466b7558ff7be32085650e23f241e48fd07f92d3dbd85a8bd10fc5021144b506d4f17943250082a902b963300a54c712c7c4a8530012e33a07e92ed7b8b2a62e7e2988b734c7b919be69286792bda4fb3541bafe955b4a4cb1899abc8d3b5c5bb7b4169b6217907a3043086fda0f82bb", 0xab}], 0x1, &(0x7f0000000480)}}, {{&(0x7f0000000540)=@x25, 0x80, &(0x7f0000000600)=[{&(0x7f00000059c0)="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", 0xff8}, {&(0x7f00000005c0)="f547f9072bab654a983552a56f2c61a00f24a7d8eb7bbe31b6dcdbc75f2c0c24f7ac134235fe60c17b3866d02461e78a312f5d7ed571", 0x36}], 0x2, &(0x7f0000000640)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}}], 0x5, 0x24004091) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, r1, {0x200000000b, 0xfffffffc, 0x0, {0x0, 0x0, 0x55, 0xe, 0xffffffffffff8589, 0xfffffffffffffffc, 0x57a, 0x5, 0x1ff, 0xa000}}}, 0x78) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=0x0}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x10003, 0x2, 0x4, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x1) close(r6) 3.629825872s ago: executing program 4 (id=1101): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x2e2c2b09, 0x4) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000003c0)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x7f8}, {&(0x7f00000011c0)="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", 0x117}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x6afe, &(0x7f0000000140)={0x0, 0xef57, 0x8000}, &(0x7f0000000100), &(0x7f0000000340)) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @remote}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, {0x2, 0x0, @private=0xa010101}, {0x2, 0x4e23, @broadcast}, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xc}) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[], 0x3ce0}, 0x1, 0x0, 0x0, 0x4024011}, 0x40084) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002c00010026bd70", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) socket$inet6(0xa, 0x3, 0xff) gettid() getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001040), &(0x7f0000001140)=0x4) timer_settime(0x0, 0x0, 0x0, 0x0) 3.548850387s ago: executing program 0 (id=1102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3a5ff", 0xc0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)=[{0x5, 0x1, 0xc, 0x2}], 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000080000204"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="240000001e005ff6991a2b200e0f7a0002000000000000000000080008000e00000000ff", 0x24) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x44, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @ldst={0x2, 0x1, 0x3, 0x0, 0x9, 0x80, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x520}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) rt_sigaction(0x8, 0x0, 0x0, 0x8, &(0x7f0000000300)) syz_open_procfs(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in6={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00', 0xbcacbe}], 0x48) syz_open_procfs(0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x20000023896) 3.446857423s ago: executing program 3 (id=1103): r0 = socket$inet6(0xa, 0x2, 0x9edd) sendmmsg$inet6(r0, &(0x7f00000037c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x6}, 0xccc8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000600)='O', 0x1}], 0x1}}], 0x1, 0x40) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000500)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) epoll_create1(0x3012f84903b37587) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=r5, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000b06010800000000000000000500000205000100070000000c00078008000940000000a50900020073797a31"], 0x34}}, 0x4800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, 0x0, 0x20000) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 2.338855629s ago: executing program 4 (id=1104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000006f4b43ca000000000400000000000000100000001169834b46cc4d09d000000000002000000000000000"], 0x24, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) socket$pptp(0x18, 0x1, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.058928738s ago: executing program 1 (id=1105): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) unshare(0x20000400) socket(0x3, 0x6, 0xffffffff) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000480)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9}, [@null, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r2, 0x4) accept4(r1, 0x0, 0x0, 0x80000) accept4$netrom(r1, 0x0, 0x0, 0x80000) syz_open_dev$radio(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) socket(0x0, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@abs={0x0, 0x0, 0x4e21}, 0x6e) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='smb3\x00', 0x5, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 1.992448716s ago: executing program 0 (id=1106): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000380)="89070404", 0x4) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES32=r2], 0x14e) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x815) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) unshare(0x22020600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x9, "11a6c077fdf8cd60365b1d6e7b2d77c0d06c972fa82f745c3278897768ff48de", 0x64, 0x7, 0x5, 0x1b0, 0x80000000, 0xffffff25, 0x200, 0x8, [0x0, 0xffff, 0x4, 0xfffffffa]}) syz_init_net_socket$ax25(0x3, 0xef6e3200a06c67a6, 0x0) 1.949482845s ago: executing program 3 (id=1107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$unlink(0x9, r6, r5) 646.894162ms ago: executing program 4 (id=1108): r0 = socket$inet6_udp(0x2d, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0xffffe24e, 0xf1, {0xffffffffffffffff}, {}, 0x1, 0x3}) capset(&(0x7f0000000180)={0x19980330, r1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0xffffff7f}, 0x0) r2 = io_uring_setup(0x67bb, &(0x7f0000000300)={0x0, 0x80000000, 0x80, 0x0, 0xfffffffc}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0x0, 0x0, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0x2d, 0x4e24, 0x40c, @mcast2, 0x6}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) setfsuid(0xee01) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x4044000) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x44, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x44}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f00000001c0)) clock_settime(0x0, &(0x7f00000002c0)={0x77359400}) 485.898024ms ago: executing program 1 (id=1109): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000380)="89070404", 0x4) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x800000000000002, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32], 0x14e) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x815) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) unshare(0x22020600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r4 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x9, "11a6c077fdf8cd60365b1d6e7b2d77c0d06c972fa82f745c3278897768ff48de", 0x64, 0x7, 0x5, 0x1b0, 0x80000000, 0xffffff25, 0x200, 0x8, [0x0, 0xffff, 0x4, 0xfffffffa]}) syz_init_net_socket$ax25(0x3, 0xef6e3200a06c67a6, 0x0) 477.108105ms ago: executing program 0 (id=1110): r0 = socket$inet6(0xa, 0x2, 0x9edd) sendmmsg$inet6(r0, &(0x7f00000037c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x7ff, @private2={0xfc, 0x2, '\x00', 0x6}, 0xccc8}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000600)='O', 0x1}], 0x1}}], 0x1, 0x40) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000500)) r1 = socket$kcm(0x10, 0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) epoll_create1(0x3012f84903b37587) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) sendmsg(r3, &(0x7f0000000800)={&(0x7f0000000700)=@can, 0x80, &(0x7f0000000780)=[{&(0x7f00000008c0)="d1b1fd1da4542302050f6abd8661fc78f89ebc4b4d327593a50bc087a5b8f343ba6295a6d7487108e4efd0d6cd04cdfee603c16eeab32412746d90359caf8690038c372ce1d3222d8af334b7511a45d7f7c145d1023b8850f138cf94bf4c0d7aea70434546267a9936e178af865f25ee25e8b164d7ab25b1773a91cc35804be1a965869b4546658c4edc8f025b8b5ba5b94490eee72a4e1c586283fad756d4befaeb19f6373342244e91dc1b125b2243541be46e63e41e1546d75456f45297bfb04878692f1ea84afb8a2c8966cf", 0xce}, {&(0x7f00000009c0)="3994e016f7a1eda42afd0ecebf2f59bd67115562016305f896d9e08a9b5cc10baf9dedd9f2322eed1299a70c614cde2e555ab6c08675bd49b9c97eef04992cf2a275b494dd1766a36563cae197d88abb0617db8eff098c3747a32883824a7b32c72a3fd763d668fd1b07a4244da544139e46d1299eb8258674f69bf5cbf576da73ed4a7d0b079cd6c61c9978fbf9c688ec10f556fce362ce5b55488ce1a247ea53af5323c7322741587f18359fa814d1a10b65163e0728d61470fbabe834a580add8ba5c66335fd05486093e1100dea50a51fc41be21a5ecb882ac", 0xdb}, {&(0x7f0000000ac0)="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", 0xfa}], 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="28b6485639b8146c1000000000000000000301000000010000debc4c41f998f3e40994089ec037580b668ec40000000000"], 0x28}, 0x20044000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="000000000100000000000000840004"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000000b06010800000000000000000500000205000100070000000c00078008000940000000a50900020073797a31"], 0x34}}, 0x4800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r7, 0x0, 0x29, 0x0, 0x20000) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) 458.381959ms ago: executing program 2 (id=1111): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x5, [@datasec={0x9, 0x6, 0x0, 0xf, 0x1, [{0x4, 0xa, 0x6}, {0x1, 0x4, 0x3296}, {0x1, 0x9, 0xfa}, {0x4, 0x3cb, 0x7}, {0x4, 0x5, 0x3}, {0x1, 0xffffffbf, 0x7366}], "f9"}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @volatile={0xe}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x4}}, @fwd={0xf}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/223, 0xc9, 0xdf, 0x0, 0x80, 0x10000, @value}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x0) socket(0x9, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, 0x0, 0x0) sendmsg$rds(r6, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5b}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0) 48.303836ms ago: executing program 2 (id=1112): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000380)="89070404", 0x4) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r2, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES32=r2], 0x14e) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x815) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) unshare(0x22020600) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000380)={0x40000000, 0x9, "11a6c077fdf8cd60365b1d6e7b2d77c0d06c972fa82f745c3278897768ff48de", 0x64, 0x7, 0x5, 0x1b0, 0x80000000, 0xffffff25, 0x200, 0x8, [0x0, 0xffff, 0x4, 0xfffffffa]}) syz_init_net_socket$ax25(0x3, 0xef6e3200a06c67a6, 0x0) 0s ago: executing program 0 (id=1113): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa9, 0xa9, 0x5, [@datasec={0x9, 0x6, 0x0, 0xf, 0x1, [{0x4, 0xa, 0x6}, {0x1, 0x4, 0x3296}, {0x1, 0x9, 0xfa}, {0x4, 0x3cb, 0x7}, {0x4, 0x5, 0x3}, {0x1, 0xffffffbf, 0x7366}], "f9"}, @func={0x6, 0x0, 0x0, 0xc, 0x1}, @volatile={0xe}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x4}}, @fwd={0xf}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000000340)=""/223, 0xc9, 0xdf, 0x0, 0x80, 0x10000, @value}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = socket(0x28, 0x5, 0x0) socket(0x9, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/mdstat\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, 0x0, 0x0) sendmsg$rds(r8, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='erofs\x00', 0x8002, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5b}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.35' (ED25519) to the list of known hosts. [ 64.877164][ T5816] cgroup: Unknown subsys name 'net' [ 64.976111][ T5816] cgroup: Unknown subsys name 'cpuset' [ 64.984711][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.406037][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.441165][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.446387][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.449574][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.456455][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.463498][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.470085][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.477622][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.492968][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.500628][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.503011][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.546444][ T5144] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.554846][ T5144] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.562070][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.570930][ T5144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.579263][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.580600][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.587105][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.594163][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.601799][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.609406][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.615385][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.622203][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.646582][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.655001][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.664126][ T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.164281][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 71.245090][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.385762][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.392115][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.404328][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 71.471490][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.503164][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.510776][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.518315][ T5827] bridge_slave_0: entered allmulticast mode [ 71.525349][ T5827] bridge_slave_0: entered promiscuous mode [ 71.584471][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.591625][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.598915][ T5827] bridge_slave_1: entered allmulticast mode [ 71.606767][ T5827] bridge_slave_1: entered promiscuous mode [ 71.721406][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.728990][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.736558][ T5835] bridge_slave_0: entered allmulticast mode [ 71.743460][ T5835] bridge_slave_0: entered promiscuous mode [ 71.789761][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.799270][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.806596][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.815257][ T5835] bridge_slave_1: entered allmulticast mode [ 71.822169][ T5835] bridge_slave_1: entered promiscuous mode [ 71.828932][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 71.860327][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.867656][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.875241][ T5826] bridge_slave_0: entered allmulticast mode [ 71.882150][ T5826] bridge_slave_0: entered promiscuous mode [ 71.892280][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.946912][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.954211][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.961305][ T5826] bridge_slave_1: entered allmulticast mode [ 71.969073][ T5826] bridge_slave_1: entered promiscuous mode [ 71.998100][ T5827] team0: Port device team_slave_0 added [ 72.007774][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.017220][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.024564][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.032775][ T5838] bridge_slave_0: entered allmulticast mode [ 72.039690][ T5838] bridge_slave_0: entered promiscuous mode [ 72.073285][ T5827] team0: Port device team_slave_1 added [ 72.081234][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.101343][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.108686][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.116355][ T5838] bridge_slave_1: entered allmulticast mode [ 72.124364][ T5838] bridge_slave_1: entered promiscuous mode [ 72.188806][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.215694][ T5835] team0: Port device team_slave_0 added [ 72.222647][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.229583][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.255933][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.283401][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.318241][ T5835] team0: Port device team_slave_1 added [ 72.325922][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.333056][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.360011][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.373641][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.445094][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.457722][ T5826] team0: Port device team_slave_0 added [ 72.464751][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.471916][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.479333][ T5836] bridge_slave_0: entered allmulticast mode [ 72.486680][ T5836] bridge_slave_0: entered promiscuous mode [ 72.494878][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.501987][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.509274][ T5836] bridge_slave_1: entered allmulticast mode [ 72.516274][ T5836] bridge_slave_1: entered promiscuous mode [ 72.524191][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.531137][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.557337][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.581677][ T5826] team0: Port device team_slave_1 added [ 72.583375][ T5829] Bluetooth: hci1: command tx timeout [ 72.587387][ T5843] Bluetooth: hci0: command tx timeout [ 72.647397][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.656031][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.682502][ T5843] Bluetooth: hci2: command tx timeout [ 72.685762][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.735653][ T5827] hsr_slave_0: entered promiscuous mode [ 72.741882][ T5827] hsr_slave_1: entered promiscuous mode [ 72.752459][ T5829] Bluetooth: hci3: command tx timeout [ 72.753436][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.758274][ T5843] Bluetooth: hci4: command tx timeout [ 72.771408][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.791974][ T5838] team0: Port device team_slave_0 added [ 72.798729][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.805726][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.832781][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.849596][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.856791][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.882863][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.923480][ T5838] team0: Port device team_slave_1 added [ 72.953602][ T5836] team0: Port device team_slave_0 added [ 73.001401][ T5836] team0: Port device team_slave_1 added [ 73.057245][ T5835] hsr_slave_0: entered promiscuous mode [ 73.064316][ T5835] hsr_slave_1: entered promiscuous mode [ 73.070347][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.078397][ T5835] Cannot create hsr debugfs directory [ 73.099685][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.107025][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.133303][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.146209][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.153303][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.179647][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.201940][ T5826] hsr_slave_0: entered promiscuous mode [ 73.208871][ T5826] hsr_slave_1: entered promiscuous mode [ 73.215153][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.223122][ T5826] Cannot create hsr debugfs directory [ 73.267842][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.274969][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.300945][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.359071][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.366215][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.393625][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.538579][ T5838] hsr_slave_0: entered promiscuous mode [ 73.545852][ T5838] hsr_slave_1: entered promiscuous mode [ 73.551849][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.560218][ T5838] Cannot create hsr debugfs directory [ 73.599862][ T5836] hsr_slave_0: entered promiscuous mode [ 73.606085][ T5836] hsr_slave_1: entered promiscuous mode [ 73.612138][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.620351][ T5836] Cannot create hsr debugfs directory [ 73.897717][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.909369][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.941635][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.951391][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.057567][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.074787][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.097262][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.114150][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.159553][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.172797][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.189893][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.205679][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.279997][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.299893][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.311737][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.324782][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.455954][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.470576][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.480763][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.510759][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.531030][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.569275][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.586068][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.593324][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.668908][ T5843] Bluetooth: hci1: command tx timeout [ 74.674441][ T5829] Bluetooth: hci0: command tx timeout [ 74.682161][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.689316][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.710708][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.743605][ T5843] Bluetooth: hci2: command tx timeout [ 74.774100][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.799040][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.830543][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.839621][ T5843] Bluetooth: hci4: command tx timeout [ 74.843240][ T5829] Bluetooth: hci3: command tx timeout [ 74.854922][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.862056][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.870805][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.878045][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.897263][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.941390][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.005373][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.015247][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.022422][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.070389][ T2908] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.077743][ T2908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.092424][ T2908] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.099611][ T2908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.148053][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.155268][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.189616][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.268388][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.298340][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.321432][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.328644][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.362973][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.370198][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.426389][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.668496][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.690984][ T5827] veth0_vlan: entered promiscuous mode [ 75.748492][ T5827] veth1_vlan: entered promiscuous mode [ 75.778697][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.890305][ T5827] veth0_macvtap: entered promiscuous mode [ 75.926266][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.940783][ T5827] veth1_macvtap: entered promiscuous mode [ 76.001446][ T5826] veth0_vlan: entered promiscuous mode [ 76.011814][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.031559][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.047426][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.079157][ T5827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.088906][ T5827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.099987][ T5827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.111883][ T5827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.140360][ T5826] veth1_vlan: entered promiscuous mode [ 76.230111][ T5838] veth0_vlan: entered promiscuous mode [ 76.257117][ T5836] veth0_vlan: entered promiscuous mode [ 76.286558][ T5838] veth1_vlan: entered promiscuous mode [ 76.305273][ T5836] veth1_vlan: entered promiscuous mode [ 76.323495][ T2908] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.332985][ T2908] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.368341][ T5826] veth0_macvtap: entered promiscuous mode [ 76.398427][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.405298][ T5826] veth1_macvtap: entered promiscuous mode [ 76.429111][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.430546][ T5835] veth0_vlan: entered promiscuous mode [ 76.452388][ T5835] veth1_vlan: entered promiscuous mode [ 76.475758][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.491844][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.513281][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.541981][ T5836] veth0_macvtap: entered promiscuous mode [ 76.561187][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.572227][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.590495][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.601559][ T5826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.605303][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.610892][ T5826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.634184][ T5826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.643379][ T5826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.657962][ T5836] veth1_macvtap: entered promiscuous mode [ 76.698559][ T5838] veth0_macvtap: entered promiscuous mode [ 76.745014][ T5829] Bluetooth: hci1: command tx timeout [ 76.750469][ T5829] Bluetooth: hci0: command tx timeout [ 76.769557][ T5838] veth1_macvtap: entered promiscuous mode [ 76.793513][ T5835] veth0_macvtap: entered promiscuous mode [ 76.934940][ T5829] Bluetooth: hci2: command tx timeout [ 76.940775][ T5843] Bluetooth: hci3: command tx timeout [ 76.946674][ T56] Bluetooth: hci4: command tx timeout [ 76.967062][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.981173][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.002821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.008088][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.032748][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.003087][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.013148][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.024429][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.036941][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.140497][ T5835] veth1_macvtap: entered promiscuous mode [ 78.542186][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.554108][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.567385][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.578002][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.591443][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.603810][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.615528][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.626572][ T9] IPVS: starting estimator thread 0... [ 78.636832][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.647743][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.661727][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.676399][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.688579][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.706798][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.720237][ T5918] IPVS: using max 31 ests per chain, 74400 per kthread [ 78.728771][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.741679][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.756090][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.810073][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.820586][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.830571][ T5829] Bluetooth: hci0: command tx timeout [ 78.836747][ T5843] Bluetooth: hci1: command tx timeout [ 78.843725][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.854378][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.864237][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.874687][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.884560][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.895276][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.916536][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.986379][ T5829] Bluetooth: hci3: command tx timeout [ 78.991900][ T5829] Bluetooth: hci4: command tx timeout [ 78.997689][ T5843] Bluetooth: hci2: command tx timeout [ 79.330372][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.372911][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.394233][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.406369][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.416672][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.428126][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.440306][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.451584][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.461367][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.471723][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.485622][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.571297][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.613241][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.623514][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.634175][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.644268][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.655188][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.665277][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.676159][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.687781][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.716693][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.760352][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.776133][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.793986][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.807663][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.816675][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.491837][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.509071][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.661721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.670826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 80.703698][ T5930] bad cache= option: no%e [ 80.703698][ T5930] [ 80.710459][ T5930] CIFS: VFS: bad cache= option: no%e [ 80.728184][ T5930] process 'syz.3.4' launched './file2' with NULL argv: empty string added [ 80.892757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.902485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 80.932832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.071419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 81.132727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.174288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.219662][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.305565][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.627346][ T3582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.648023][ T3582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.758550][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.771712][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.161838][ T2908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.182382][ T2908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.258345][ T5933] orangefs_mount: mount request failed with -4 [ 82.492089][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.590791][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.252436][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 85.673383][ T5960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.681991][ T5960] team0: Port device bond0 added [ 86.655090][ T5973] tmpfs: Unknown parameter 'grpqu"RÝ÷‘ota_block_hardl' [ 87.186503][ T1207] cfg80211: failed to load regulatory.db [ 88.174082][ T5970] syz.0.1: attempt to access beyond end of device [ 88.174082][ T5970] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 88.519772][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11'. [ 92.273011][ T6024] dlm: no local IP address has been set [ 92.279534][ T6024] dlm: cannot start dlm midcomms -107 [ 92.306766][ T6024] netlink: 68 bytes leftover after parsing attributes in process `syz.0.20'. [ 92.712242][ T6025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.283390][ T6034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.316124][ T6034] team0: Port device bond0 added [ 95.231581][ T6034] syz.4.24 (6034) used greatest stack depth: 18952 bytes left [ 96.159364][ T6043] SET target dimension over the limit! [ 96.835620][ T6049] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.848939][ T6049] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 98.532854][ T30] audit: type=1326 audit(1743699192.464:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6059 comm="syz.1.31" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ccff8d169 code=0x0 [ 99.608717][ T6061] delete_channel: no stack [ 99.821662][ T6074] xt_socket: unknown flags 0x8 [ 99.932127][ T6075] No such timeout policy "syz0" [ 104.331525][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 104.359853][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 104.660589][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 104.700064][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 105.348800][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 105.786079][ T6100] ceph: No mds server is up or the cluster is laggy [ 106.387892][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 106.394462][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 106.946079][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 107.044007][ T30] audit: type=1326 audit(1743699200.974:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 107.316817][ T6131] xt_socket: unknown flags 0x8 [ 107.634521][ T6138] No such timeout policy "syz0" [ 108.269344][ T30] audit: type=1326 audit(1743699200.974:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 108.292345][ T30] audit: type=1326 audit(1743699200.974:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 108.432603][ T30] audit: type=1326 audit(1743699200.974:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 108.455450][ T30] audit: type=1326 audit(1743699200.974:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 108.492395][ T30] audit: type=1326 audit(1743699200.974:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 108.597786][ T30] audit: type=1326 audit(1743699200.974:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 108.961347][ T6150] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 109.068366][ T30] audit: type=1326 audit(1743699200.974:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 109.882650][ T30] audit: type=1326 audit(1743699200.974:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 110.440621][ T30] audit: type=1326 audit(1743699200.974:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6122 comm="syz.4.44" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01d438d169 code=0x7fc00000 [ 110.733029][ T6151] ceph: No mds server is up or the cluster is laggy [ 110.752742][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 110.786429][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 111.108618][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 111.133234][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 112.565865][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 112.572484][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 113.381908][ T6168] input: syz0 as /devices/virtual/input/input5 [ 114.080771][ T6180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.56'. [ 114.223318][ T5908] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 115.052783][ T5908] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 115.085111][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.251332][ T5908] usb 3-1: Product: syz [ 115.272386][ T5908] usb 3-1: Manufacturer: syz [ 115.552429][ T30] kauditd_printk_skb: 56 callbacks suppressed [ 115.552466][ T30] audit: type=1326 audit(1743699209.484:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6196 comm="syz.4.59" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01d438d169 code=0x0 [ 115.579158][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.882345][ T5908] usb 3-1: SerialNumber: syz [ 115.969684][ T5908] usb 3-1: config 0 descriptor?? [ 116.415588][ T5908] usb 3-1: ignoring: probably an ADSL modem [ 116.649343][ T6208] xt_socket: unknown flags 0x8 [ 116.822035][ T5908] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 118.447859][ T6222] hfs: unable to load iocharset "io#harset" [ 118.604976][ T6220] input: syz0 as /devices/virtual/input/input6 [ 119.139718][ T5994] usb 3-1: USB disconnect, device number 2 [ 120.139296][ T6239] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 120.148300][ T6239] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 120.156711][ T6239] overlayfs: missing 'lowerdir' [ 121.140134][ T6249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.231942][ T6249] syz.1.71 (6249) used greatest stack depth: 18824 bytes left [ 127.638655][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 127.713265][ T1207] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.143326][ T6297] ceph: No mds server is up or the cluster is laggy [ 128.920231][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 129.195193][ T5908] libceph: connect (1)[c::]:6789 error -101 [ 129.207253][ T5908] libceph: mon0 (1)[c::]:6789 connect error [ 130.285684][ T6314] bridge0: port 3(bond0) entered blocking state [ 130.292082][ T6314] bridge0: port 3(bond0) entered disabled state [ 130.298601][ T6314] bond0: entered allmulticast mode [ 130.303763][ T6314] bond_slave_0: entered allmulticast mode [ 130.309506][ T6314] bond_slave_1: entered allmulticast mode [ 130.317907][ T6314] bond0: entered promiscuous mode [ 130.322993][ T6314] bond_slave_0: entered promiscuous mode [ 130.331045][ T6314] bond_slave_1: entered promiscuous mode [ 130.337914][ T6314] bridge0: port 3(bond0) entered blocking state [ 130.344445][ T6314] bridge0: port 3(bond0) entered forwarding state [ 130.680171][ T1207] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 130.709498][ T1207] usb 1-1: can't read configurations, error -71 [ 130.794062][ T6325] netlink: 80 bytes leftover after parsing attributes in process `syz.4.87'. [ 132.096866][ T6340] netlink: 72 bytes leftover after parsing attributes in process `syz.2.89'. [ 132.117019][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.327325][ T6327] xt_l2tp: invalid flags combination: 4 [ 132.532547][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 132.543664][ T10] usb 5-1: config 0 has no interfaces? [ 133.203694][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.210068][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.236270][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 133.412709][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.878736][ T10] usb 5-1: Product: syz [ 133.895575][ T10] usb 5-1: Manufacturer: syz [ 133.900820][ T10] usb 5-1: SerialNumber: syz [ 134.245597][ T6356] Zero length message leads to an empty skb [ 135.258318][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 135.274018][ T6359] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 135.282147][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 135.292849][ T10] r8152-cfgselector 5-1: can't set config #0, error -71 [ 135.349259][ T6359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.95'. [ 135.452486][ T10] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 135.797655][ T6359] team0: Port device geneve0 added [ 135.807210][ T6368] warning: `syz.0.98' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.355227][ T1207] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.472821][ T1207] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 138.482210][ T1207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.500482][ T1207] usb 2-1: Product: syz [ 138.532396][ T1207] usb 2-1: Manufacturer: syz [ 138.542391][ T1207] usb 2-1: SerialNumber: syz [ 138.564030][ T6396] xt_socket: unknown flags 0x8 [ 138.598223][ T1207] usb 2-1: config 0 descriptor?? [ 139.731530][ T1207] usb 2-1: can't set config #0, error -71 [ 140.013179][ T1207] usb 2-1: USB disconnect, device number 2 [ 141.678644][ T6413] netlink: 'syz.3.107': attribute type 39 has an invalid length. [ 142.821707][ T6421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.542568][ T6435] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 144.552433][ T6435] netlink: 'syz.0.112': attribute type 2 has an invalid length. [ 144.784789][ T6436] ubi31: attaching mtd0 [ 144.792027][ T6436] ubi31: scanning is finished [ 144.797412][ T6436] ubi31: empty MTD device detected [ 144.857859][ T6437] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 145.346933][ T5837] IPVS: starting estimator thread 0... [ 145.414527][ T6436] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 145.422193][ T6436] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 145.430108][ T6436] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 145.437739][ T6436] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 145.445837][ T6436] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 145.453349][ T6436] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 145.461630][ T6436] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 413773147 [ 145.473012][ T6436] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 145.509675][ T6444] ubi31: background thread "ubi_bgt31d" started, PID 6444 [ 145.516665][ T6440] IPVS: using max 27 ests per chain, 64800 per kthread [ 146.019058][ T6449] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 146.027238][ T6449] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 148.437410][ T6449] team0: Port device geneve0 added [ 148.503021][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 148.705401][ T6478] Bluetooth: MGMT ver 1.23 [ 148.748446][ T24] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 148.780415][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.796697][ T24] usb 3-1: Product: syz [ 148.800957][ T24] usb 3-1: Manufacturer: syz [ 148.811043][ T24] usb 3-1: SerialNumber: syz [ 148.896168][ T24] usb 3-1: config 0 descriptor?? [ 148.903557][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 148.910245][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 149.754553][ T6487] evm: overlay not supported [ 150.269131][ T24] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 150.291282][ T24] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 151.538879][ T5994] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.686845][ T24] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 151.757903][ T5994] usb 2-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 151.878204][ T5994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.991072][ T24] usb 3-1: USB disconnect, device number 3 [ 151.997732][ T5994] usb 2-1: Product: syz [ 152.012925][ T5994] usb 2-1: Manufacturer: syz [ 152.027696][ T5994] usb 2-1: SerialNumber: syz [ 152.045717][ T5994] usb 2-1: config 0 descriptor?? [ 153.765018][ T5994] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 154.344292][ T5994] peak_usb 2-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 154.936327][ T5994] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 154.993340][ T6524] vxcan1: entered allmulticast mode [ 155.002520][ T6524] vxcan1: left allmulticast mode [ 155.245742][ T5994] usb 2-1: USB disconnect, device number 3 [ 156.504567][ T6536] netlink: 'syz.0.135': attribute type 10 has an invalid length. [ 156.609753][ T6536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.135'. [ 156.975991][ T6536] team0: Port device geneve0 added [ 157.638390][ T6546] kAFS: Can only specify source 'none' with -o dyn [ 157.648958][ T6547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 159.078106][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 159.085351][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 160.667501][ T6556] xt_socket: unknown flags 0x8 [ 165.321681][ T6594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.533098][ T6617] netlink: 'syz.0.152': attribute type 10 has an invalid length. [ 169.549810][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.152'. [ 171.002411][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 171.702739][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 172.956645][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 173.953186][ T6643] ======================================================= [ 173.953186][ T6643] WARNING: The mand mount option has been deprecated and [ 173.953186][ T6643] and is ignored by this kernel. Remove the mand [ 173.953186][ T6643] option from the mount to silence this warning. [ 173.953186][ T6643] ======================================================= [ 173.988786][ T6643] new mount options do not match the existing superblock, will be ignored [ 174.027215][ T56] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 174.049013][ T5843] Bluetooth: hci6: command 0xfc11 tx timeout [ 174.488656][ T6641] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 174.490240][ T6644] xt_CT: No such helper "pptp" [ 174.734528][ T6650] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.212771][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.159'. [ 175.611029][ T6663] netlink: 20 bytes leftover after parsing attributes in process `syz.4.160'. [ 175.739618][ T6664] NILFS (nullb0): couldn't find nilfs on the device [ 175.768951][ T30] audit: type=1326 audit(1743699269.634:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccff8d169 code=0x7ffc0000 [ 176.273699][ T30] audit: type=1326 audit(1743699269.634:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccff8d169 code=0x7ffc0000 [ 176.295005][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.322709][ T30] audit: type=1326 audit(1743699269.634:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f2ccff8d169 code=0x7ffc0000 [ 176.325146][ T6650] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 176.344359][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.345054][ T30] audit: type=1326 audit(1743699269.634:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccff8d169 code=0x7ffc0000 [ 176.559327][ T6650] batman_adv: batadv0: Adding interface: ip6gretap1 [ 176.578082][ T30] audit: type=1326 audit(1743699269.634:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccff8d169 code=0x7ffc0000 [ 176.692883][ T6672] syz.4.164 uses obsolete (PF_INET,SOCK_PACKET) [ 176.774617][ T6650] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.850439][ T30] audit: type=1326 audit(1743699269.634:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ccff8d169 code=0x7ffc0000 [ 177.169366][ T6650] batman_adv: batadv0: Interface activated: ip6gretap1 [ 177.241116][ T30] audit: type=1326 audit(1743699269.634:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccff8d169 code=0x7ffc0000 [ 177.297211][ T6678] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 177.305237][ T6678] netlink: 40 bytes leftover after parsing attributes in process `syz.0.165'. [ 177.361004][ T30] audit: type=1326 audit(1743699269.634:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6656 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ccff8d169 code=0x7ffc0000 [ 178.352558][ T1207] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 178.616776][ T1207] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 178.656836][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.657945][ T6690] xt_TPROXY: Can be used only with -p tcp or -p udp [ 178.671845][ T1207] usb 4-1: Product: syz [ 179.150198][ T1207] usb 4-1: Manufacturer: syz [ 179.155477][ T1207] usb 4-1: SerialNumber: syz [ 179.177750][ T1207] usb 4-1: config 0 descriptor?? [ 179.389769][ T6696] fuse: Bad value for 'fd' [ 179.420892][ T1207] usb 4-1: ignoring: probably an ADSL modem [ 179.439948][ T5834] Bluetooth: hci5: command 0x1003 tx timeout [ 179.453952][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 179.832712][ T1207] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 180.651708][ T6708] overlayfs: failed to resolve './file0': -2 [ 181.155513][ T6707] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 181.227426][ T6699] netlink: 'syz.2.171': attribute type 10 has an invalid length. [ 181.359777][ T5994] usb 4-1: USB disconnect, device number 2 [ 181.382857][ T6699] netlink: 40 bytes leftover after parsing attributes in process `syz.2.171'. [ 181.584348][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 181.792826][ T6722] mmap: syz.3.177 (6722) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 182.948107][ T6699] team0: Port device geneve0 added [ 183.373889][ T6727] netlink: 'syz.4.176': attribute type 3 has an invalid length. [ 184.679194][ T6749] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 184.688339][ T6749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.183'. [ 186.832786][ T5909] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 187.623266][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 187.630385][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 187.749903][ T6771] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 187.758015][ T6771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.190'. [ 187.980616][ T5909] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 187.993308][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.001719][ T5909] usb 3-1: Product: syz [ 188.006273][ T5909] usb 3-1: Manufacturer: syz [ 188.010882][ T5909] usb 3-1: SerialNumber: syz [ 188.594869][ T5909] usb 3-1: config 0 descriptor?? [ 188.811986][ T5909] usb 3-1: ignoring: probably an ADSL modem [ 189.458246][ T5909] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 189.484235][ T5909] usb 3-1: USB disconnect, device number 4 [ 190.340977][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 190.352675][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 190.807363][ T6794] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 190.818515][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 192.931445][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 192.932993][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.557583][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 193.656595][ T6818] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 193.664367][ T6818] netlink: 'syz.0.199': attribute type 2 has an invalid length. [ 194.315784][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.322120][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.705801][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 196.711996][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 196.718724][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 197.214775][ T6836] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 197.222912][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.1.204'. [ 197.287182][ T6838] xt_socket: unknown flags 0x8 [ 197.491488][ T5994] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 197.623028][ T6847] SET target dimension over the limit! [ 198.556509][ T5994] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 198.572758][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.580780][ T5994] usb 1-1: Product: syz [ 198.749615][ T5994] usb 1-1: Manufacturer: syz [ 199.146530][ T5994] usb 1-1: SerialNumber: syz [ 199.371971][ T5994] usb 1-1: config 0 descriptor?? [ 200.116341][ T5994] usb 1-1: ignoring: probably an ADSL modem [ 201.633154][ T5994] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 201.648845][ T5994] usb 1-1: USB disconnect, device number 4 [ 204.084832][ T6891] netlink: 'syz.2.218': attribute type 10 has an invalid length. [ 204.092946][ T6891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.218'. [ 204.339736][ T6898] xt_socket: unknown flags 0x8 [ 206.182399][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 206.189480][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 208.951280][ T1207] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 209.731645][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 210.026682][ T5879] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 210.086900][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.254717][ T5879] usb 2-1: Product: syz [ 210.258932][ T5879] usb 2-1: Manufacturer: syz [ 210.377746][ T1207] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 210.417115][ T1207] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 210.515474][ T1207] usb 3-1: config 220 has 0 interfaces, different from the descriptor's value: 184 [ 210.557575][ T5879] usb 2-1: SerialNumber: syz [ 210.558383][ T1207] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 210.937298][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.230'. [ 211.020443][ T1207] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.032968][ T5879] usb 2-1: config 0 descriptor?? [ 211.053431][ T5879] usb 2-1: can't set config #0, error -71 [ 211.161813][ T5879] usb 2-1: USB disconnect, device number 4 [ 211.451072][ T1207] usb 3-1: can't set config #220, error -71 [ 212.052846][ T1207] usb 3-1: USB disconnect, device number 5 [ 212.153014][ T6952] xt_socket: unknown flags 0x8 [ 213.763294][ T6968] capability: warning: `syz.3.238' uses deprecated v2 capabilities in a way that may be insecure [ 215.242536][ T6983] Malformed UNC in devname [ 215.242536][ T6983] [ 215.249710][ T6983] CIFS: VFS: Malformed UNC in devname [ 216.500379][ T6994] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 216.508477][ T6994] netlink: 40 bytes leftover after parsing attributes in process `syz.4.242'. [ 216.696640][ T6994] team0: Port device geneve0 added [ 218.848711][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 219.042883][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 219.239960][ T7020] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 219.247846][ T7020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.249'. [ 221.383134][ T5829] Bluetooth: hci5: command 0x1003 tx timeout [ 221.390267][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 221.778986][ T30] audit: type=1804 audit(1743699315.714:78): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.253" name="/newroot/52/file0" dev="tmpfs" ino=336 res=1 errno=0 [ 221.779830][ T7037] ref_ctr increment failed for inode: 0x150 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888034046400 [ 222.195826][ T7033] uprobe: syz.4.253:7033 failed to unregister, leaking uprobe [ 227.116052][ T56] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 227.750196][ T7077] netlink: 20 bytes leftover after parsing attributes in process `syz.2.264'. [ 230.662495][ T7110] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 231.156978][ T56] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 231.193998][ T56] Bluetooth: hci2: Injecting HCI hardware error event [ 231.261924][ T5829] Bluetooth: hci2: hardware error 0x00 [ 233.422486][ T5829] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 236.381047][ T7150] Bluetooth: MGMT ver 1.23 [ 236.458084][ T7149] No such timeout policy "syz1" [ 237.235902][ T7159] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.999965][ T7165] netlink: 'syz.4.287': attribute type 10 has an invalid length. [ 238.008094][ T7165] netlink: 40 bytes leftover after parsing attributes in process `syz.4.287'. [ 240.312809][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 240.313211][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 240.487136][ T7188] tty tty3: ldisc open failed (-12), clearing slot 2 [ 242.602974][ T7198] team0: Port device bond0 removed [ 242.613048][ T7198] bridge_slave_0: left allmulticast mode [ 242.618724][ T7198] bridge_slave_0: left promiscuous mode [ 242.626297][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.732923][ T7205] netlink: 68 bytes leftover after parsing attributes in process `syz.4.297'. [ 242.752741][ T7198] bridge_slave_1: left allmulticast mode [ 242.767399][ T7198] bridge_slave_1: left promiscuous mode [ 242.778752][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.728738][ T7198] bond0: (slave bond_slave_0): Releasing backup interface [ 243.749320][ T7198] bond0: (slave bond_slave_1): Releasing backup interface [ 243.768600][ T7198] team0: Port device team_slave_0 removed [ 243.780343][ T7198] team0: Port device team_slave_1 removed [ 243.790187][ T7198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.803065][ T7198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.899872][ T7198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.965993][ T7198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.002798][ T7198] team0: Port device geneve0 removed [ 244.234601][ T7224] netlink: 'syz.2.304': attribute type 10 has an invalid length. [ 244.463064][ T7227] batman_adv: batadv0: Adding interface: gretap0 [ 244.474338][ T7224] netlink: 40 bytes leftover after parsing attributes in process `syz.2.304'. [ 244.484337][ T7227] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.544735][ T7229] IPVS: set_ctl: invalid protocol: 231 10.1.1.0:0 [ 244.563461][ T7229] netlink: 'syz.2.304': attribute type 32 has an invalid length. [ 244.578670][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 244.722962][ T7227] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 244.991007][ T7237] netlink: 'syz.4.307': attribute type 10 has an invalid length. [ 244.998819][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.4.307'. [ 245.012372][ T7224] batadv0: entered promiscuous mode [ 245.031451][ T7224] batadv0: entered allmulticast mode [ 245.048286][ T7224] bridge0: port 3(batadv0) entered blocking state [ 245.064252][ T7224] bridge0: port 3(batadv0) entered disabled state [ 245.076973][ T7224] bridge0: port 3(batadv0) entered blocking state [ 245.083511][ T7224] bridge0: port 3(batadv0) entered forwarding state [ 245.100118][ T7237] team0: Port device geneve0 added [ 245.110195][ T7229] (unnamed net_device) (uninitialized): option coupled_control: invalid value (47) [ 246.109539][ T2958] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 246.119497][ T2958] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 247.155932][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 247.171072][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 247.718983][ T7267] loop6: detected capacity change from 0 to 524287999 [ 247.775376][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.793555][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.979188][ T54] loop: Write error at byte offset 1, length 4096. [ 248.003486][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 248.013151][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 249.803532][ T7288] netlink: 80 bytes leftover after parsing attributes in process `syz.3.320'. [ 249.943395][ T30] audit: type=1326 audit(1743699343.744:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7284 comm="syz.3.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d8ab8d169 code=0x0 [ 250.902547][ T7296] xt_socket: unknown flags 0x8 [ 255.738718][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.745314][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.875212][ T7333] netlink: 'syz.3.327': attribute type 10 has an invalid length. [ 256.883276][ T7333] netlink: 40 bytes leftover after parsing attributes in process `syz.3.327'. [ 257.081472][ T56] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 257.158948][ T7351] lo speed is unknown, defaulting to 1000 [ 257.165407][ T7351] lo speed is unknown, defaulting to 1000 [ 257.179916][ T7351] lo speed is unknown, defaulting to 1000 [ 257.210788][ T7351] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 257.279499][ T7351] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 257.690881][ T7351] lo speed is unknown, defaulting to 1000 [ 257.698772][ T7351] lo speed is unknown, defaulting to 1000 [ 257.706892][ T7351] lo speed is unknown, defaulting to 1000 [ 257.715680][ T7351] lo speed is unknown, defaulting to 1000 [ 257.723759][ T7351] lo speed is unknown, defaulting to 1000 [ 258.146269][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 258.227177][ T7359] NILFS (nullb0): couldn't find nilfs on the device [ 258.564139][ T7357] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 258.565800][ T7357] block (null): Could not allocate knbd recv work queue. [ 258.582853][ T7357] nbd: failed to add new device [ 259.105351][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 259.105979][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 259.190488][ T7361] xt_socket: unknown flags 0x8 [ 261.378277][ T7380] netlink: 52 bytes leftover after parsing attributes in process `syz.1.341'. [ 261.388000][ T7380] netlink: 'syz.1.341': attribute type 2 has an invalid length. [ 261.396598][ T7380] netlink: 'syz.1.341': attribute type 1 has an invalid length. [ 261.405394][ T7380] netlink: 88 bytes leftover after parsing attributes in process `syz.1.341'. [ 263.943195][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 264.246423][ T7404] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 264.246423][ T7404] program syz.0.349 not setting count and/or reply_len properly [ 264.282203][ T7406] netlink: 'syz.3.350': attribute type 10 has an invalid length. [ 264.290635][ T7406] netlink: 40 bytes leftover after parsing attributes in process `syz.3.350'. [ 264.676048][ T30] audit: type=1800 audit(1743699358.614:80): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.351" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 265.829668][ T7419] netlink: 'syz.4.348': attribute type 21 has an invalid length. [ 265.838655][ T7419] netlink: 'syz.4.348': attribute type 6 has an invalid length. [ 265.846939][ T7419] netlink: 132 bytes leftover after parsing attributes in process `syz.4.348'. [ 265.900203][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.348'. [ 266.601244][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 266.602456][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 268.025674][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 268.308269][ T7436] ubi: mtd0 is already attached to ubi31 [ 272.486349][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 273.772530][ T7469] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 274.338919][ T7468] netlink: 'syz.3.366': attribute type 10 has an invalid length. [ 274.356225][ T7468] netlink: 40 bytes leftover after parsing attributes in process `syz.3.366'. [ 276.333005][ T56] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 276.502055][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 276.517255][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 276.592510][ T7502] tunl0: entered allmulticast mode [ 276.602854][ T7502] tunl0: left allmulticast mode [ 278.327333][ T7517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.378'. [ 280.363337][ T7538] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 281.183184][ T7551] netlink: 'syz.2.385': attribute type 10 has an invalid length. [ 281.214794][ T7551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.385'. [ 281.251381][ T7536] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 281.881828][ T7554] tty tty1: ldisc open failed (-12), clearing slot 0 [ 281.970584][ T7536] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.055663][ T7536] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 282.652472][ T7536] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 282.658531][ T7536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 282.833220][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 283.242101][ T7536] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 283.317283][ T56] Bluetooth: hci1: command 0x0406 tx timeout [ 283.543417][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 284.023150][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 284.663134][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 286.103111][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 286.558019][ T7592] netlink: 'syz.2.397': attribute type 10 has an invalid length. [ 286.566110][ T7592] netlink: 40 bytes leftover after parsing attributes in process `syz.2.397'. [ 286.608386][ T7593] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 286.620399][ T7593] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 286.647271][ T7593] 9pnet_fd: Insufficient options for proto=fd [ 286.941483][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 287.998113][ T56] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 288.289305][ T7607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.154286][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 289.212293][ T5829] Bluetooth: hci4: command 0x0405 tx timeout [ 289.257554][ T5829] Bluetooth: hci3: unexpected event 0x2f length: 763 > 260 [ 289.837465][ T5829] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 291.297055][ T1207] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 291.661521][ T1207] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 291.938321][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.969244][ T1207] usb 4-1: Product: syz [ 291.976918][ T1207] usb 4-1: Manufacturer: syz [ 292.046075][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.411'. [ 292.072892][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 292.182805][ T1207] usb 4-1: SerialNumber: syz [ 292.343855][ T1207] usb 4-1: config 0 descriptor?? [ 292.497379][ T7644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.411'. [ 293.005406][ T1207] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 293.038034][ T1207] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 294.270200][ T1207] usb 4-1: USB disconnect, device number 3 [ 294.617149][ T7668] erofs (device nullb0): cannot find valid erofs superblock [ 298.398960][ T5829] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 298.770372][ T7705] netlink: 80 bytes leftover after parsing attributes in process `syz.2.427'. [ 298.774695][ T30] audit: type=1326 audit(1743699392.714:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7700 comm="syz.2.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ca598d169 code=0x0 [ 299.380245][ T5829] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 300.921681][ T7721] siw: device registration error -23 [ 302.593836][ T7735] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 302.774632][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 307.065382][ T7775] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 307.495101][ T7775] bridge0: port 3(batadv0) entered disabled state [ 307.502884][ T7775] batadv0: left allmulticast mode [ 307.507950][ T7775] batadv0: left promiscuous mode [ 307.513645][ T7775] bridge0: port 3(batadv0) entered disabled state [ 308.043389][ T7775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.053646][ T7775] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 308.133506][ T7780] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 308.141923][ T7780] UDF-fs: Scanning with blocksize 512 failed [ 308.172314][ T7780] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 308.181044][ T7780] UDF-fs: Scanning with blocksize 1024 failed [ 308.212536][ T7780] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 308.220319][ T7780] UDF-fs: Scanning with blocksize 2048 failed [ 308.292500][ T7780] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 308.302424][ T7780] UDF-fs: Scanning with blocksize 4096 failed [ 309.193233][ T5829] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 309.623634][ T7774] syz.4.447: attempt to access beyond end of device [ 309.623634][ T7774] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 309.644875][ T7774] MINIX-fs: unable to read superblock [ 311.728703][ T7811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 311.734998][ T7811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 311.741078][ T7811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 313.925516][ T5843] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 314.274720][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 314.288721][ T5829] Bluetooth: hci1: command 0x0406 tx timeout [ 314.304401][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 315.498802][ T7848] capability: warning: `syz.1.463' uses 32-bit capabilities (legacy support in use) [ 317.263548][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.269884][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.422572][ T7865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 317.830656][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 318.864575][ T5879] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 318.913036][ T7884] netlink: 'syz.1.466': attribute type 4 has an invalid length. [ 319.154634][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.172788][ T5879] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.181871][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.538755][ T7870] netlink: 'syz.1.466': attribute type 4 has an invalid length. [ 319.560996][ T5879] usb 5-1: config 0 descriptor?? [ 319.755441][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.466'. [ 319.868107][ T5829] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 322.294335][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 322.308724][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 322.333207][ T5879] usb 5-1: USB disconnect, device number 3 [ 322.802460][ T7922] erofs (device nullb0): cannot find valid erofs superblock [ 323.800534][ T5829] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 324.354447][ T7933] No such timeout policy "syz1" [ 326.790808][ T5829] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 329.662446][ T7978] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 329.783034][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 333.607025][ T8002] 9pnet_fd: Insufficient options for proto=fd [ 333.625705][ T8000] nftables ruleset with unbound set [ 334.620487][ T8008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'. [ 335.850388][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 336.122515][ T5829] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 336.227932][ T8024] Malformed UNC in devname [ 336.227932][ T8024] [ 336.245399][ T8024] CIFS: VFS: Malformed UNC in devname [ 338.064048][ T8041] xfrm0: entered allmulticast mode [ 339.741928][ T5829] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 340.530682][ T8058] lo speed is unknown, defaulting to 1000 [ 340.804194][ T8061] siw: device registration error -23 [ 341.458846][ T8067] Malformed UNC in devname [ 341.458846][ T8067] [ 341.657910][ T8067] CIFS: VFS: Malformed UNC in devname [ 342.470848][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 344.632630][ T30] audit: type=1326 audit(1743699438.494:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 344.940584][ T30] audit: type=1326 audit(1743699438.494:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 345.056638][ T30] audit: type=1326 audit(1743699438.494:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 345.185610][ T30] audit: type=1326 audit(1743699438.494:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb7eab8bad0 code=0x7ffc0000 [ 345.388963][ T30] audit: type=1326 audit(1743699438.494:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 345.412554][ T30] audit: type=1326 audit(1743699438.494:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 345.434650][ T30] audit: type=1326 audit(1743699438.494:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 346.050658][ T30] audit: type=1326 audit(1743699438.494:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 346.084956][ T30] audit: type=1326 audit(1743699438.494:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 346.181542][ T30] audit: type=1326 audit(1743699438.494:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.0.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7eab8d169 code=0x7ffc0000 [ 346.815028][ T5829] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 347.393641][ T8122] Malformed UNC in devname [ 347.393641][ T8122] [ 347.408421][ T8122] CIFS: VFS: Malformed UNC in devname [ 349.937109][ T5829] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 350.806554][ T5829] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 353.166889][ T8170] siw: device registration error -23 [ 353.483210][ T8169] tty tty21: ldisc open failed (-12), clearing slot 20 [ 354.522303][ T8183] Malformed UNC in devname [ 354.522303][ T8183] [ 354.522326][ T8183] CIFS: VFS: Malformed UNC in devname [ 354.846619][ T8176] netlink: 'syz.0.542': attribute type 8 has an invalid length. [ 355.492537][ T8197] Malformed UNC in devname [ 355.492537][ T8197] [ 355.499251][ T8197] CIFS: VFS: Malformed UNC in devname [ 355.797588][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 358.072729][ T5829] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 358.504386][ T8221] loop6: detected capacity change from 0 to 524287999 [ 358.807031][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 358.838581][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 358.848202][ T2991] loop: Write error at byte offset 1, length 4096. [ 358.901811][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 358.911338][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 359.350570][ T8228] lo speed is unknown, defaulting to 1000 [ 364.032675][ T8250] Malformed UNC in devname [ 364.032675][ T8250] [ 364.042266][ T8250] CIFS: VFS: Malformed UNC in devname [ 364.522580][ T8241] sctp: [Deprecated]: syz.3.555 (pid 8241) Use of int in maxseg socket option. [ 364.522580][ T8241] Use struct sctp_assoc_value instead [ 364.655853][ T8254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.556'. [ 364.693531][ T8254] netlink: 16 bytes leftover after parsing attributes in process `syz.4.556'. [ 364.722974][ T8254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.556'. [ 364.731947][ T8254] netlink: 36 bytes leftover after parsing attributes in process `syz.4.556'. [ 366.146574][ T8262] Malformed UNC in devname [ 366.146574][ T8262] [ 366.157880][ T8262] CIFS: VFS: Malformed UNC in devname [ 366.399968][ T8278] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 366.408225][ T8278] netlink: 40 bytes leftover after parsing attributes in process `syz.0.561'. [ 367.443094][ T56] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 367.711774][ T8281] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.726989][ T8281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.812391][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 369.545470][ T8309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.567'. [ 369.742419][ T8310] Malformed UNC in devname [ 369.742419][ T8310] [ 369.749141][ T8310] CIFS: VFS: Malformed UNC in devname [ 370.259671][ T8315] erofs (device nullb0): cannot find valid erofs superblock [ 370.563860][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.567'. [ 370.956384][ T8325] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 371.232286][ T8325] netlink: 'syz.3.572': attribute type 2 has an invalid length. [ 371.758419][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 372.148647][ T8336] random: crng reseeded on system resumption [ 372.182632][ T8338] Malformed UNC in devname [ 372.182632][ T8338] [ 372.190136][ T8338] CIFS: VFS: Malformed UNC in devname [ 374.406454][ T8358] netlink: 'syz.3.579': attribute type 10 has an invalid length. [ 374.414770][ T8358] netlink: 40 bytes leftover after parsing attributes in process `syz.3.579'. [ 375.394552][ T8357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.777653][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.804057][ T8360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.075405][ T8373] erofs (device nullb0): cannot find valid erofs superblock [ 376.983170][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 378.135900][ T5879] IPVS: starting estimator thread 0... [ 378.303380][ T8387] IPVS: using max 27 ests per chain, 64800 per kthread [ 378.611688][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.642720][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.724254][ T8394] netlink: 52 bytes leftover after parsing attributes in process `syz.4.586'. [ 379.012550][ T8392] Malformed UNC in devname [ 379.012550][ T8392] [ 379.024288][ T8392] CIFS: VFS: Malformed UNC in devname [ 379.601756][ T56] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 380.283433][ T56] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 380.832745][ T56] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 380.875449][ T8409] xt_socket: unknown flags 0x8 [ 382.518558][ T8434] Malformed UNC in devname [ 382.518558][ T8434] [ 382.525421][ T8434] CIFS: VFS: Malformed UNC in devname [ 383.934888][ T8446] Illegal XDP return value 4294967294 on prog (id 102) dev N/A, expect packet loss! [ 384.492913][ T5878] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 386.250064][ T8461] netlink: 'syz.0.602': attribute type 11 has an invalid length. [ 386.366731][ T56] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 387.822884][ T56] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 390.488922][ T8496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.612'. [ 392.158154][ T8514] erofs (device nullb0): cannot find valid erofs superblock [ 392.461741][ T8518] Malformed UNC in devname [ 392.461741][ T8518] [ 392.468693][ T8518] CIFS: VFS: Malformed UNC in devname [ 392.567578][ T56] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 393.395447][ T56] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 394.440282][ T8536] futex_wake_op: syz.2.621 tries to shift op by -1; fix this program [ 395.012748][ T8539] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 395.092270][ T8539] 9pnet_fd: Insufficient options for proto=fd [ 395.343442][ T8530] netlink: 32 bytes leftover after parsing attributes in process `syz.2.621'. [ 400.514600][ T56] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 401.061937][ T8590] erofs (device nullb0): cannot find valid erofs superblock [ 401.577097][ T56] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 403.096887][ T56] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 403.373528][ T8605] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.059357][ T8641] netlink: 40 bytes leftover after parsing attributes in process `syz.3.651'. [ 408.175932][ T8641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 409.794939][ T56] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 413.784460][ T8679] netlink: 'syz.0.658': attribute type 10 has an invalid length. [ 413.784479][ T8679] netlink: 40 bytes leftover after parsing attributes in process `syz.0.658'. [ 414.305811][ T2908] Bluetooth: Error in BCSP hdr checksum [ 414.728418][ T2908] Bluetooth: Error in BCSP hdr checksum [ 415.943258][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 416.002503][ T8724] netlink: 40 bytes leftover after parsing attributes in process `syz.1.667'. [ 416.080610][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.667'. [ 416.673343][ T5843] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 417.274086][ T8734] erofs (device nullb0): cannot find valid erofs superblock [ 417.802003][ T8735] netlink: 'syz.1.671': attribute type 10 has an invalid length. [ 419.161129][ T8746] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 419.659512][ T8735] team0: Port device wlan1 added [ 421.252838][ T8765] Malformed UNC in devname [ 421.252838][ T8765] [ 421.259541][ T8765] CIFS: VFS: Malformed UNC in devname [ 421.804105][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.678'. [ 423.392621][ T8790] Malformed UNC in devname [ 423.392621][ T8790] [ 423.403136][ T8790] CIFS: VFS: Malformed UNC in devname [ 423.920403][ T8801] ubi: mtd0 is already attached to ubi31 [ 429.361940][ T8847] Malformed UNC in devname [ 429.361940][ T8847] [ 429.368856][ T8847] CIFS: VFS: Malformed UNC in devname [ 430.507133][ T5843] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 431.658838][ T8865] No such timeout policy "syz1" [ 431.884263][ T8866] xt_socket: unknown flags 0x8 [ 432.570209][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 434.812228][ T8901] Malformed UNC in devname [ 434.812228][ T8901] [ 434.819020][ T8901] CIFS: VFS: Malformed UNC in devname [ 438.061637][ T8930] xt_socket: unknown flags 0x8 [ 440.030233][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.047712][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.612410][ T8964] Malformed UNC in devname [ 441.612410][ T8964] [ 441.619222][ T8964] CIFS: VFS: Malformed UNC in devname [ 443.213340][ T8979] xt_socket: unknown flags 0x8 [ 444.932384][ T9005] netlink: 'syz.3.731': attribute type 9 has an invalid length. [ 444.940102][ T9005] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 445.450998][ T9009] random: crng reseeded on system resumption [ 448.390727][ T9025] Malformed UNC in devname [ 448.390727][ T9025] [ 448.397603][ T9025] CIFS: VFS: Malformed UNC in devname [ 448.581688][ T9022] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 449.176590][ T9033] new mount options do not match the existing superblock, will be ignored [ 449.201514][ T9033] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 449.861719][ T9042] xt_socket: unknown flags 0x8 [ 450.523672][ T9047] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 450.555143][ T9047] netlink: 244 bytes leftover after parsing attributes in process `syz.3.742'. [ 455.529419][ T9086] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 455.535796][ T9086] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 455.592475][ T9086] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.598515][ T9086] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 455.616567][ T9086] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 455.622659][ T9086] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 456.372767][ T5953] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 456.742271][ T5953] usb 5-1: device descriptor read/64, error -71 [ 456.794738][ T9098] Malformed UNC in devname [ 456.794738][ T9098] [ 456.801516][ T9098] CIFS: VFS: Malformed UNC in devname [ 456.982648][ T5953] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 457.359800][ T5953] usb 5-1: device descriptor read/64, error -71 [ 457.521284][ T5953] usb usb5-port1: attempt power cycle [ 458.194794][ T5953] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 458.524122][ T5953] usb 5-1: device descriptor read/8, error -71 [ 459.278804][ T9112] xt_socket: unknown flags 0x8 [ 460.465338][ T9130] erofs (device nullb0): cannot find valid erofs superblock [ 461.088943][ T9131] infiniband syz1: set active [ 461.094348][ T9131] infiniband syz1: added team_slave_0 [ 461.141641][ T9131] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 461.145778][ T9131] infiniband syz1: Couldn't open port 1 [ 461.173454][ T9131] RDS/IB: syz1: added [ 461.177735][ T9131] smc: adding ib device syz1 with port count 1 [ 461.184343][ T9131] smc: ib device syz1 port 1 has pnetid [ 464.422063][ T9160] netlink: 'syz.1.765': attribute type 4 has an invalid length. [ 464.430428][ T9160] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.765'. [ 465.117713][ T9168] xt_socket: unknown flags 0x8 [ 465.512839][ T9176] netlink: 'syz.4.770': attribute type 4 has an invalid length. [ 465.569777][ T9176] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.770'. [ 466.022404][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 467.302021][ T9193] erofs (device nullb0): cannot find valid erofs superblock [ 470.641135][ T9213] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 471.211054][ T9219] ucma_write: process 644 (syz.1.781) changed security contexts after opening file descriptor, this is not allowed. [ 473.959203][ T9249] Malformed UNC in devname [ 473.959203][ T9249] [ 473.966319][ T9249] CIFS: VFS: Malformed UNC in devname [ 474.351245][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 474.351338][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 478.629526][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 478.629565][ T30] audit: type=1326 audit(1743699572.394:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 479.051272][ T30] audit: type=1326 audit(1743699572.404:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 479.872197][ T30] audit: type=1326 audit(1743699572.404:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 480.128245][ T30] audit: type=1326 audit(1743699572.404:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 480.395304][ T30] audit: type=1326 audit(1743699572.404:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 480.523554][ T30] audit: type=1326 audit(1743699572.414:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 480.681462][ T30] audit: type=1326 audit(1743699572.414:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 480.711014][ T30] audit: type=1326 audit(1743699572.414:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 480.762960][ T30] audit: type=1326 audit(1743699572.414:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 480.788805][ T30] audit: type=1326 audit(1743699572.424:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9283 comm="syz.2.799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ca598d169 code=0x7ffc0000 [ 481.903189][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 481.910590][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 482.541690][ T9322] Malformed UNC in devname [ 482.541690][ T9322] [ 482.548472][ T9322] CIFS: VFS: Malformed UNC in devname [ 482.778150][ T9323] IPv6: Can't replace route, no match found [ 483.512469][ T9340] Malformed UNC in devname [ 483.512469][ T9340] [ 483.519124][ T9340] CIFS: VFS: Malformed UNC in devname [ 484.156724][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 484.482745][ T30] audit: type=1400 audit(1743699578.074:148): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=9338 comm="syz.1.814" path="socket:[18703]" dev="sockfs" ino=18703 [ 487.392662][ T9376] Malformed UNC in devname [ 487.392662][ T9376] [ 487.399693][ T9376] CIFS: VFS: Malformed UNC in devname [ 487.802680][ T9377] Smack: duplicate mount options [ 489.558378][ T9400] overlayfs: failed to resolve './file0': -2 [ 492.765206][ T9425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.836'. [ 492.867232][ T9429] netlink: 132 bytes leftover after parsing attributes in process `syz.1.836'. [ 493.792562][ T9447] Malformed UNC in devname [ 493.792562][ T9447] [ 493.799439][ T9447] CIFS: VFS: Malformed UNC in devname [ 494.912297][ T9459] Malformed UNC in devname [ 494.912297][ T9459] [ 494.919133][ T9459] CIFS: VFS: Malformed UNC in devname [ 499.397104][ T9506] Malformed UNC in devname [ 499.397104][ T9506] [ 499.405188][ T9506] CIFS: VFS: Malformed UNC in devname [ 499.714382][ T9493] netlink: 52 bytes leftover after parsing attributes in process `syz.1.850'. [ 499.724910][ T9493] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.733064][ T9493] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.001483][ T9521] tipc: Started in network mode [ 501.006729][ T9521] tipc: Node identity ffffffff, cluster identity 4711 [ 501.013742][ T9521] tipc: Node number set to 4294967295 [ 501.623500][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.630600][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.301550][ T9551] lo speed is unknown, defaulting to 1000 [ 510.812733][ T9578] xt_socket: unknown flags 0x8 [ 511.704711][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 511.711400][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 512.744163][ T9593] ceph: No mds server is up or the cluster is laggy [ 515.876506][ T9623] syz.0.880: attempt to access beyond end of device [ 515.876506][ T9623] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 515.891469][ T9623] FAT-fs (loop1): unable to read boot sector [ 518.703914][ T9649] overlayfs: failed to resolve './file1': -2 [ 519.535406][ T9651] netlink: 'syz.1.888': attribute type 9 has an invalid length. [ 521.873469][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 521.879925][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 523.538891][ T9686] Malformed UNC in devname [ 523.538891][ T9686] [ 523.548913][ T9686] CIFS: VFS: Malformed UNC in devname [ 523.757531][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.897'. [ 524.580490][ T9698] erofs (device nullb0): cannot find valid erofs superblock [ 530.520411][ T24] IPVS: starting estimator thread 0... [ 530.642360][ T9752] IPVS: using max 28 ests per chain, 67200 per kthread [ 530.659565][ T9753] Malformed UNC in devname [ 530.659565][ T9753] [ 530.667912][ T9753] CIFS: VFS: Malformed UNC in devname [ 531.260678][ T9763] NILFS (nullb0): couldn't find nilfs on the device [ 533.509361][ T9779] random: crng reseeded on system resumption [ 534.833435][ T9789] 9pnet_fd: Insufficient options for proto=fd [ 536.405009][ T9793] overlayfs: failed to resolve './file1': -2 [ 537.563759][ T9815] random: crng reseeded on system resumption [ 537.991523][ T9821] Malformed UNC in devname [ 537.991523][ T9821] [ 537.999828][ T9821] CIFS: VFS: Malformed UNC in devname [ 539.262026][ T9830] Malformed UNC in devname [ 539.262026][ T9830] [ 539.270267][ T9830] CIFS: VFS: Malformed UNC in devname [ 541.285090][ T30] audit: type=1400 audit(1743699635.184:149): lsm=SMACK fn=smack_file_receive action=denied subject="w" object="_" requested=w pid=9835 comm="syz.4.930" path="socket:[19766]" dev="sockfs" ino=19766 [ 542.178963][ T9844] netlink: 560 bytes leftover after parsing attributes in process `syz.3.931'. [ 542.450856][ T9852] loop6: detected capacity change from 0 to 64 [ 542.526222][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 542.535420][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.776869][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 543.786221][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.812629][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 0 [ 543.822280][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 543.831418][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.844033][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 0 [ 543.853232][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.861078][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 543.870655][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 543.879805][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.892280][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 543.901405][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.912233][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 543.921359][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 543.936547][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 543.945825][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 545.019039][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 545.028260][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 545.063643][ T9852] ldm_validate_partition_table(): Disk read failed. [ 545.209800][ T9852] Dev loop6: unable to read RDB block 0 [ 545.277226][ T9852] loop6: unable to read partition table [ 545.295809][ T9852] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 545.904513][ T9879] Malformed UNC in devname [ 545.904513][ T9879] [ 545.911532][ T9879] CIFS: VFS: Malformed UNC in devname [ 546.393061][ T5204] ldm_validate_partition_table(): Disk read failed. [ 546.446006][ T9883] Malformed UNC in devname [ 546.446006][ T9883] [ 546.454130][ T9883] CIFS: VFS: Malformed UNC in devname [ 546.597347][ T5204] Dev loop6: unable to read RDB block 0 [ 546.667043][ T5204] loop6: unable to read partition table [ 547.224629][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 547.940439][ C1] blk_print_req_error: 58 callbacks suppressed [ 547.940458][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 547.998492][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.007728][ C1] buffer_io_error: 58 callbacks suppressed [ 548.007742][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.040605][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.049862][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.151713][ T9893] netlink: 156 bytes leftover after parsing attributes in process `syz.2.944'. [ 548.312599][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.321983][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.479197][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.488425][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 548.610477][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 548.619691][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 550.835348][ T9918] netlink: 'syz.3.949': attribute type 10 has an invalid length. [ 551.040676][ T9917] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 551.050840][ T9918] bridge0: port 3(bond0) entered disabled state [ 551.057524][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.064893][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.095354][ T9918] bridge0: port 3(bond0) entered blocking state [ 551.101755][ T9918] bridge0: port 3(bond0) entered forwarding state [ 551.108366][ T9918] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.115467][ T9918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.122809][ T9918] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.129881][ T9918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.302662][ T9918] bridge0: port 3(bond0) entered disabled state [ 551.309035][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.316216][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.677345][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 551.935723][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 551.944925][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 551.952851][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 551.960678][ C0] Buffer I/O error on dev loop6, logical block 2, async page read [ 551.968579][ C0] Buffer I/O error on dev loop6, logical block 3, async page read [ 553.138332][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 0 [ 553.147542][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 553.155892][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 553.163825][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 553.171630][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 553.188253][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.197445][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 553.205375][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.214553][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 553.222482][ C1] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.231736][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 553.239645][ C1] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.248870][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 553.866476][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.875648][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 553.883490][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.892596][ C0] Buffer I/O error on dev loop6, logical block 1, async page read [ 553.900409][ C0] I/O error, dev loop6, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.909703][ C0] I/O error, dev loop6, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 553.921903][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 554.435657][ T9939] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 554.553267][ T5204] ldm_validate_partition_table(): Disk read failed. [ 554.783471][ T5204] Dev loop6: unable to read RDB block 0 [ 554.789639][ T5204] loop6: unable to read partition table [ 557.281404][ T9967] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.482979][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 557.493173][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 559.420061][ T9979] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 559.922089][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 560.330713][ T9990] ceph: No mds server is up or the cluster is laggy [ 560.338089][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 562.983163][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.989557][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.120338][T10032] xt_socket: unknown flags 0x8 [ 566.177044][T10045] veth0_to_team: entered promiscuous mode [ 566.187540][T10045] veth0_to_team: entered allmulticast mode [ 566.202206][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 566.208594][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 566.524177][T10052] siw: device registration error -23 [ 566.827476][T10054] dvmrp0: entered allmulticast mode [ 569.813794][T10068] delete_channel: no stack [ 570.453035][T10066] delete_channel: no stack [ 571.517006][T10090] xt_socket: unknown flags 0x8 [ 572.673670][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 572.683362][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 573.921368][T10095] netlink: 'syz.0.993': attribute type 27 has an invalid length. [ 573.934469][T10095] program syz.0.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.354869][T10128] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 576.362587][T10128] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 576.411305][T10134] hsr_slave_0: left promiscuous mode [ 576.488850][T10134] hsr_slave_1: left promiscuous mode [ 576.555676][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'. [ 576.608725][T10139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1001'. [ 576.627823][T10131] Process accounting resumed [ 576.636614][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1001'. [ 576.699161][T10139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1001'. [ 576.746287][T10139] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1001'. [ 576.980287][T10150] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 577.015622][T10150] can0: slcan on ttyS3. [ 577.740953][T10138] can0 (unregistered): slcan off ttyS3. [ 581.579474][T10173] sp0: Synchronizing with TNC [ 581.598208][T10184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.622566][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 581.863477][T10190] /dev/nullb0: Can't open blockdev [ 582.277435][T10196] use of bytesused == 0 is deprecated and will be removed in the future, [ 582.286345][T10196] use the actual size instead. [ 583.354856][T10203] xt_socket: unknown flags 0x8 [ 585.051567][ T1207] libceph: connect (1)[c::]:6789 error -101 [ 585.090863][ T1207] libceph: mon0 (1)[c::]:6789 connect error [ 585.894034][ T5909] libceph: connect (1)[c::]:6789 error -101 [ 585.900119][ T5909] libceph: mon0 (1)[c::]:6789 connect error [ 586.023205][T10216] ceph: No mds server is up or the cluster is laggy [ 586.636601][T10242] UHID_CREATE from different security context by process 798 (syz.2.1028), this is not allowed. [ 586.763889][T10242] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 587.120667][T10241] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 587.398223][T10249] /dev/nullb0: Can't open blockdev [ 587.553916][ T30] audit: type=1800 audit(1743699681.484:150): pid=10248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1031" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 588.182224][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 588.182330][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 588.423387][T10256] ceph: No mds server is up or the cluster is laggy [ 588.691775][ T24] libceph: connect (1)[c::]:6789 error -101 [ 588.691942][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 589.328735][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 589.344293][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 589.637540][T10270] xt_socket: unknown flags 0x8 [ 589.730122][ C0] blk_print_req_error: 142 callbacks suppressed [ 589.730141][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 589.750397][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 589.773739][ T6305] loop: Write error at byte offset 1, length 4096. [ 589.828114][T10281] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 589.846152][T10281] bridge_slave_1: entered promiscuous mode [ 589.854173][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'. [ 589.931241][T10282] 9pnet_fd: Insufficient options for proto=fd [ 590.368192][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 590.377711][ C1] buffer_io_error: 144 callbacks suppressed [ 590.377727][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 590.419922][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 590.429187][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.442969][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 590.452126][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.474880][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 590.484080][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.492885][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 590.502038][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.510221][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 590.519364][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.527697][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 590.536832][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.544886][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 590.554060][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.562079][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.570004][ T5204] ldm_validate_partition_table(): Disk read failed. [ 590.598371][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 590.729934][ T5204] Dev loop6: unable to read RDB block 0 [ 590.760618][ T5204] loop6: unable to read partition table [ 592.411674][T10287] delete_channel: no stack [ 594.496311][T10313] 9pnet_fd: Insufficient options for proto=fd [ 596.618164][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 596.635516][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 596.646188][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 596.653450][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 596.815053][T10337] xt_socket: unknown flags 0x8 [ 596.983604][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 596.997297][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 597.632557][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 597.761872][T10336] ceph: No mds server is up or the cluster is laggy [ 597.789468][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 598.556579][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 598.564126][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 598.674894][T10334] ceph: No mds server is up or the cluster is laggy [ 603.041347][ T30] audit: type=1326 audit(1743699696.454:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10387 comm="syz.3.1061" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d8ab8d169 code=0x0 [ 603.659961][T10404] xt_socket: unknown flags 0x8 [ 603.684671][T10394] ceph: No mds server is up or the cluster is laggy [ 604.276189][T10401] loop7: detected capacity change from 0 to 16384 [ 605.968737][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 605.977069][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 606.079982][T10416] ceph: No mds server is up or the cluster is laggy [ 606.266082][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 606.301460][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 607.594355][ T56] Bluetooth: hci5: command 0x1003 tx timeout [ 607.597265][ T5843] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 607.998881][T10441] ceph: No mds server is up or the cluster is laggy [ 608.215155][T10425] ceph: No mds server is up or the cluster is laggy [ 608.898311][T10455] overlayfs: failed to resolve './file1': -2 [ 608.975389][T10457] random: crng reseeded on system resumption [ 609.764316][T10464] Malformed UNC in devname [ 609.764316][T10464] [ 609.785532][T10467] xt_socket: unknown flags 0x8 [ 609.798742][T10464] CIFS: VFS: Malformed UNC in devname [ 610.823992][T10477] vxcan0: tx drop: invalid da for name 0x0000000000000001 [ 610.858401][T10477] can0: slcan on ttyS3. [ 611.343385][T10469] can0 (unregistered): slcan off ttyS3. [ 612.345856][T10494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1081'. [ 612.389582][T10489] ceph: No mds server is up or the cluster is laggy [ 612.396916][T10495] 9p: Unknown uid 00000000004294967295 [ 612.533122][T10497] xt_TCPMSS: Only works on TCP SYN packets [ 614.987352][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 615.189443][ T5953] libceph: connect (1)[c::]:6789 error -101 [ 615.272253][T10507] ceph: No mds server is up or the cluster is laggy [ 615.293257][ T5953] libceph: mon0 (1)[c::]:6789 connect error [ 615.421667][T10506] ceph: No mds server is up or the cluster is laggy [ 615.886129][T10523] xt_socket: unknown flags 0x8 [ 616.452763][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 616.463147][T10527] xt_TPROXY: Can be used only with -p tcp or -p udp [ 617.254513][T10536] Malformed UNC in devname [ 617.254513][T10536] [ 617.261498][T10536] CIFS: VFS: Malformed UNC in devname [ 617.438490][ T5909] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 618.454937][ T5909] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.683070][ T5909] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.728274][ T5909] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75 [ 618.738753][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.747471][ T5909] usb 1-1: Product: syz [ 618.755365][ T5909] usb 1-1: Manufacturer: syz [ 618.755697][T10552] /dev/nullb0: Can't open blockdev [ 618.759982][ T5909] usb 1-1: SerialNumber: syz [ 619.034540][ T5909] usb 1-1: config 0 descriptor?? [ 619.073091][ T5909] usb 1-1: can't set config #0, error -71 [ 619.109171][ T5909] usb 1-1: USB disconnect, device number 5 [ 619.974298][T10554] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 620.139328][T10570] xt_socket: unknown flags 0x8 [ 621.173111][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1101'. [ 622.070009][T10594] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 622.127292][T10594] xt_socket: unknown flags 0x8 [ 623.862423][T10600] Malformed UNC in devname [ 623.862423][T10600] [ 623.869074][T10600] CIFS: VFS: Malformed UNC in devname [ 623.874715][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 623.875010][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 624.117675][T10620] xt_socket: unknown flags 0x8 [ 624.228495][T10622] /dev/nullb0: Can't open blockdev [ 624.416896][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.426527][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.510508][T10626] netlink: 'syz.4.1108': attribute type 2 has an invalid length. [ 729.852059][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 729.859053][ C0] rcu: 1-...!: (1 GPs behind) idle=005c/1/0x4000000000000000 softirq=34198/34203 fqs=5 [ 729.869822][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10607/3:b..l P5827/1:b..l [ 729.879075][ C0] rcu: (detected by 0, t=10502 jiffies, g=29205, q=99 ncpus=2) [ 729.886720][ C0] Sending NMI from CPU 0 to CPUs 1: [ 729.886748][ C1] NMI backtrace for cpu 1 [ 729.886778][ C1] CPU: 1 UID: 0 PID: 10624 Comm: syz.4.1108 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 729.886796][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 729.886807][ C1] RIP: 0010:check_preemption_disabled+0x43/0x120 [ 729.886834][ C1] Code: 48 89 44 24 08 65 8b 1d 9f f0 3c 07 65 8b 05 94 f0 3c 07 a9 ff ff ff 7f 74 24 65 49 8b 04 24 48 3b 44 24 08 0f 85 cc 00 00 00 <89> d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc 48 c7 [ 729.886846][ C1] RSP: 0018:ffffc90000a08be8 EFLAGS: 00000046 [ 729.886859][ C1] RAX: fda6d508c7838a00 RBX: 0000000000000001 RCX: ffff88802af25a00 [ 729.886870][ C1] RDX: ffff88802af25a00 RSI: ffffffff8e4e9221 RDI: ffffffff8ca0dd80 [ 729.886881][ C1] RBP: ffffffff93654020 R08: ffffffff8a1e7ba1 R09: fffff5200014117c [ 729.886893][ C1] R10: dffffc0000000000 R11: fffff5200014117c R12: ffffffff93654020 [ 729.886904][ C1] R13: 0000000000000046 R14: 00000000ffffffff R15: ffff888060e0a300 [ 729.886915][ C1] FS: 00007f01d21d56c0(0000) GS:ffff8881250cc000(0000) knlGS:0000000000000000 [ 729.886928][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 729.886938][ C1] CR2: 000020000001b000 CR3: 0000000032ee6000 CR4: 00000000003526f0 [ 729.886952][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 729.886960][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 729.886970][ C1] Call Trace: [ 729.886977][ C1] [ 729.886989][ C1] lock_is_held_type+0x112/0x1a0 [ 729.887008][ C1] ? __pfx_advance_sched+0x10/0x10 [ 729.887028][ C1] advance_sched+0x148/0xca0 [ 729.887049][ C1] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 729.887071][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 729.887095][ C1] ? __pfx_advance_sched+0x10/0x10 [ 729.887114][ C1] ? __pfx_advance_sched+0x10/0x10 [ 729.887134][ C1] __hrtimer_run_queues+0x5a6/0xd40 [ 729.887151][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 729.887180][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 729.887196][ C1] ? sched_clock_cpu+0x77/0x4d0 [ 729.887212][ C1] ? read_tsc+0x9/0x20 [ 729.887233][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 729.887257][ C1] hrtimer_interrupt+0x403/0xa40 [ 729.887284][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 729.887304][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 729.887319][ C1] [ 729.887324][ C1] [ 729.887330][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 729.887346][ C1] RIP: 0010:__mutex_trylock_common+0x1a8/0x2e0 [ 729.887365][ C1] Code: 00 e8 1c a2 8c 00 48 b8 00 00 00 00 00 fc ff df 41 80 3c 06 00 74 08 48 89 df e8 63 9f 8c 00 48 8b 44 24 60 f0 4d 0f b1 3c 24 <0f> 84 b0 00 00 00 48 89 c3 49 bf 00 00 00 00 00 fc ff df 4c 8d 6c [ 729.887376][ C1] RSP: 0018:ffffc90019cb74a0 EFLAGS: 00000246 [ 729.887389][ C1] RAX: 0000000000000000 RBX: ffffc90019cb7500 RCX: ffffffff819e3b54 [ 729.887399][ C1] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffffc90019cb7500 [ 729.887409][ C1] RBP: ffffc90019cb7570 R08: ffffc90019cb7507 R09: 1ffff92003396ea0 [ 729.887420][ C1] R10: dffffc0000000000 R11: fffff52003396ea1 R12: ffff88802b146868 [ 729.887431][ C1] R13: ffff88802af25a00 R14: 1ffff92003396ea0 R15: ffff88802af25a00 [ 729.887446][ C1] ? __mutex_trylock_common+0x184/0x2e0 [ 729.887470][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 729.887490][ C1] ? rcu_is_watching+0x15/0xb0 [ 729.887509][ C1] __mutex_lock+0x1c0/0x10c0 [ 729.887528][ C1] ? __mutex_unlock_slowpath+0x229/0x800 [ 729.887553][ C1] ? __unix_dgram_recvmsg+0x252/0x12e0 [ 729.887570][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 729.887586][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 729.887610][ C1] __unix_dgram_recvmsg+0x252/0x12e0 [ 729.887632][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 729.887649][ C1] ? __lock_acquire+0xad5/0xd80 [ 729.887665][ C1] ? iovec_from_user+0x61/0x240 [ 729.887687][ C1] ? __import_iovec+0x3c2/0x830 [ 729.887705][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 729.887723][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 729.887743][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 729.887764][ C1] ____sys_recvmsg+0x3d4/0x480 [ 729.887783][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 729.887808][ C1] do_recvmmsg+0x428/0xab0 [ 729.887828][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 729.887841][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 729.887864][ C1] ? futex_wait+0x287/0x370 [ 729.887879][ C1] ? __pfx_futex_wait+0x10/0x10 [ 729.887905][ C1] ? __pfx_do_futex+0x10/0x10 [ 729.887931][ C1] __x64_sys_recvmmsg+0x1ab/0x260 [ 729.887948][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 729.887966][ C1] ? do_syscall_64+0xb6/0x230 [ 729.887983][ C1] do_syscall_64+0xf3/0x230 [ 729.887999][ C1] ? clear_bhb_loop+0x45/0xa0 [ 729.888015][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.888030][ C1] RIP: 0033:0x7f01d438d169 [ 729.888048][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.888060][ C1] RSP: 002b:00007f01d21d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 729.888074][ C1] RAX: ffffffffffffffda RBX: 00007f01d45a6160 RCX: 00007f01d438d169 [ 729.888086][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 729.888095][ C1] RBP: 00007f01d440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 729.888105][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 729.888113][ C1] R13: 0000000000000000 R14: 00007f01d45a6160 R15: 00007ffc3fe183e8 [ 729.888131][ C1] [ 729.888742][ C0] task:syz-executor state:R running task stack:20312 pid:5827 tgid:5827 ppid:5823 task_flags:0x400140 flags:0x00000000 [ 730.447006][ C0] Call Trace: [ 730.450283][ C0] [ 730.453224][ C0] __schedule+0x1b33/0x51f0 [ 730.457745][ C0] ? __pfx_unwind_next_frame+0x1/0x10 [ 730.463129][ C0] ? preempt_schedule_irq+0xfe/0x1c0 [ 730.468423][ C0] ? __pfx___schedule+0x10/0x10 [ 730.473391][ C0] ? __lock_acquire+0xad5/0xd80 [ 730.478246][ C0] ? __lock_acquire+0xad5/0xd80 [ 730.483103][ C0] ? preempt_schedule_irq+0xf3/0x1c0 [ 730.488444][ C0] preempt_schedule_irq+0xfe/0x1c0 [ 730.493560][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 730.499295][ C0] irqentry_exit+0x5e/0x90 [ 730.503722][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 730.509702][ C0] RIP: 0010:lock_acquire+0x167/0x2f0 [ 730.514988][ C0] Code: c7 44 24 10 00 00 00 00 9c 8f 44 24 10 f7 44 24 10 00 02 00 00 0f 85 fd 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 65 48 8b 45 00 <48> 3b 44 24 38 0f 85 72 01 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e [ 730.534594][ C0] RSP: 0018:ffffc9000416ed68 EFLAGS: 00000206 [ 730.540664][ C0] RAX: 515ef42026145d00 RBX: ffffffff8ed3dfe0 RCX: 515ef42026145d00 [ 730.548636][ C0] RDX: 0000000000000001 RSI: ffffffff8e4e9221 RDI: ffffffff8ca0dd80 [ 730.556605][ C0] RBP: ffffffff93654020 R08: 0000000000000000 R09: 0000000000000000 [ 730.564573][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 730.572540][ C0] R13: 0000000000000002 R14: 0000000000000246 R15: 0000000000000000 [ 730.580537][ C0] ? unwind_next_frame+0x1aa4/0x23b0 [ 730.585841][ C0] ? stack_trace_save+0x11a/0x1d0 [ 730.590867][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 730.595979][ C0] unwind_next_frame+0xd5/0x23b0 [ 730.600919][ C0] ? unwind_next_frame+0xb8/0x23b0 [ 730.606033][ C0] ? arch_stack_walk+0xe7/0x150 [ 730.610894][ C0] ? __unwind_start+0x59a/0x740 [ 730.615743][ C0] ? stack_trace_save+0x11a/0x1d0 [ 730.620771][ C0] ? stack_trace_save+0x11a/0x1d0 [ 730.625808][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 730.631969][ C0] arch_stack_walk+0x11e/0x150 [ 730.636743][ C0] ? stack_trace_save+0x11a/0x1d0 [ 730.641778][ C0] stack_trace_save+0x11a/0x1d0 [ 730.646642][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 730.652033][ C0] save_stack+0xfc/0x1f0 [ 730.656287][ C0] ? __pfx_save_stack+0x10/0x10 [ 730.661166][ C0] __set_page_owner+0x93/0x530 [ 730.665936][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 730.672525][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 730.677911][ C0] post_alloc_hook+0x1f4/0x240 [ 730.682679][ C0] get_page_from_freelist+0x351d/0x36b0 [ 730.688237][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 730.694178][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 730.700082][ C0] ? prepare_alloc_pages+0x220/0x610 [ 730.705379][ C0] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 730.711192][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 730.717544][ C0] alloc_pages_mpol+0x339/0x690 [ 730.722401][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 730.727774][ C0] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 730.734637][ C0] alloc_pages_noprof+0x121/0x190 [ 730.739667][ C0] __vmalloc_node_range_noprof+0x9cb/0x1390 [ 730.745594][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 730.751928][ C0] ? rcu_is_watching+0x15/0xb0 [ 730.756700][ C0] ? copy_process+0x5dc/0x3d10 [ 730.761467][ C0] __vmalloc_node_noprof+0x80/0xa0 [ 730.766586][ C0] ? copy_process+0x5dc/0x3d10 [ 730.771351][ C0] dup_task_struct+0x3f7/0x870 [ 730.776110][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 730.781320][ C0] copy_process+0x5dc/0x3d10 [ 730.785925][ C0] ? rcu_is_watching+0x15/0xb0 [ 730.790694][ C0] ? __count_memcg_events+0x1e1/0x3d0 [ 730.796080][ C0] ? __pfx_copy_process+0x10/0x10 [ 730.801109][ C0] ? count_memcg_event_mm+0x388/0x440 [ 730.806481][ C0] ? count_memcg_event_mm+0x96/0x440 [ 730.811860][ C0] kernel_clone+0x227/0x880 [ 730.816365][ C0] ? __lock_acquire+0xad5/0xd80 [ 730.821226][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 730.826250][ C0] ? handle_mm_fault+0x173e/0x1aa0 [ 730.831385][ C0] __x64_sys_clone+0x268/0x2e0 [ 730.836157][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 730.841441][ C0] ? lock_vma_under_rcu+0x1f0/0x9a0 [ 730.846670][ C0] ? do_syscall_64+0xb6/0x230 [ 730.851353][ C0] do_syscall_64+0xf3/0x230 [ 730.855857][ C0] ? clear_bhb_loop+0x45/0xa0 [ 730.860538][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.866431][ C0] RIP: 0033:0x7f1ca59839d3 [ 730.870857][ C0] RSP: 002b:00007ffe65519878 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 730.879273][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1ca59839d3 [ 730.887257][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 730.895227][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 730.903202][ C0] R10: 0000555559a397d0 R11: 0000000000000246 R12: 0000000000000000 [ 730.911171][ C0] R13: 00000000000927c0 R14: 00000000000985be R15: 00007ffe65519a10 [ 730.919159][ C0] [ 730.922176][ C0] task:syz.3.1107 state:R running task stack:23792 pid:10607 tgid:10604 ppid:5826 task_flags:0x400140 flags:0x00004002 [ 730.935668][ C0] Call Trace: [ 730.938947][ C0] [ 730.941969][ C0] __schedule+0x1b33/0x51f0 [ 730.946486][ C0] ? __lock_acquire+0xac1/0xd80 [ 730.951360][ C0] ? preempt_schedule_common+0x84/0xd0 [ 730.956827][ C0] ? __pfx___schedule+0x10/0x10 [ 730.961686][ C0] ? __lock_acquire+0xad5/0xd80 [ 730.966545][ C0] ? preempt_schedule+0xe4/0xf0 [ 730.971398][ C0] preempt_schedule_common+0x84/0xd0 [ 730.976683][ C0] preempt_schedule+0xe4/0xf0 [ 730.981359][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 730.986741][ C0] preempt_schedule_thunk+0x16/0x30 [ 730.991953][ C0] _raw_spin_unlock+0x3e/0x50 [ 730.996636][ C0] filemap_map_pages+0x13d4/0x1900 [ 731.001756][ C0] ? filemap_map_pages+0x230/0x1900 [ 731.006985][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 731.012470][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 731.017946][ C0] handle_pte_fault+0x3d6d/0x61c0 [ 731.022979][ C0] ? handle_pte_fault+0x2b0a/0x61c0 [ 731.028198][ C0] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 731.033927][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 731.039382][ C0] ? __lock_acquire+0xad5/0xd80 [ 731.044262][ C0] ? __lock_acquire+0xad5/0xd80 [ 731.049116][ C0] ? do_raw_spin_lock+0x151/0x370 [ 731.054178][ C0] handle_mm_fault+0x1030/0x1aa0 [ 731.059145][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 731.064430][ C0] ? follow_page_pte+0x9ff/0x15e0 [ 731.069478][ C0] ? __get_user_pages+0x1a86/0x4180 [ 731.074677][ C0] ? __get_user_pages+0x37f9/0x4180 [ 731.079882][ C0] __get_user_pages+0x1adc/0x4180 [ 731.084952][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 731.090358][ C0] ? __pfx_mt_find+0x10/0x10 [ 731.094976][ C0] populate_vma_page_range+0x266/0x340 [ 731.100457][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 731.106437][ C0] ? userfaultfd_unmap_complete+0x30e/0x360 [ 731.112343][ C0] ? vm_mmap_pgoff+0x340/0x530 [ 731.117110][ C0] __mm_populate+0x27d/0x460 [ 731.121706][ C0] ? __pfx___mm_populate+0x10/0x10 [ 731.126832][ C0] vm_mmap_pgoff+0x390/0x530 [ 731.131436][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 731.136557][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 731.141408][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 731.146178][ C0] do_syscall_64+0xf3/0x230 [ 731.150688][ C0] ? clear_bhb_loop+0x45/0xa0 [ 731.155369][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.161267][ C0] RIP: 0033:0x7f1d8ab8d169 [ 731.165679][ C0] RSP: 002b:00007f1d8ba8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 731.174099][ C0] RAX: ffffffffffffffda RBX: 00007f1d8ada5fa0 RCX: 00007f1d8ab8d169 [ 731.182082][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 731.190051][ C0] RBP: 00007f1d8ac0e2a0 R08: ffffffffffffffff R09: 0000000000000000 [ 731.198020][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 731.205989][ C0] R13: 0000000000000000 R14: 00007f1d8ada5fa0 R15: 00007fffafa45828 [ 731.213975][ C0] [ 731.216991][ C0] rcu: rcu_preempt kthread starved for 10492 jiffies! g29205 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 731.228180][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 731.238142][ C0] rcu: RCU grace-period kthread stack dump: [ 731.244022][ C0] task:rcu_preempt state:R running task stack:26688 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 731.257515][ C0] Call Trace: [ 731.260790][ C0] [ 731.263725][ C0] __schedule+0x1b33/0x51f0 [ 731.268258][ C0] ? schedule+0x163/0x360 [ 731.272613][ C0] ? __pfx___schedule+0x10/0x10 [ 731.277503][ C0] ? schedule+0x90/0x360 [ 731.281845][ C0] ? schedule+0x90/0x360 [ 731.286092][ C0] schedule+0x163/0x360 [ 731.290257][ C0] schedule_timeout+0x15b/0x2b0 [ 731.295121][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 731.300511][ C0] ? __pfx_process_timeout+0x10/0x10 [ 731.305811][ C0] ? prepare_to_swait_event+0x1e5/0x340 [ 731.311457][ C0] ? prepare_to_swait_event+0x308/0x340 [ 731.317021][ C0] rcu_gp_fqs_loop+0x2e1/0x1340 [ 731.321982][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 731.328139][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 731.333422][ C0] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 731.339346][ C0] ? finish_swait+0xdb/0x200 [ 731.343944][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 731.349172][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 731.353768][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 731.358972][ C0] ? __kthread_parkme+0x1a8/0x200 [ 731.364004][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 731.369206][ C0] kthread+0x7b7/0x940 [ 731.373283][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 731.378482][ C0] ? __pfx_kthread+0x10/0x10 [ 731.383079][ C0] ? __pfx_kthread+0x10/0x10 [ 731.387681][ C0] ? __pfx_kthread+0x10/0x10 [ 731.392277][ C0] ? __pfx_kthread+0x10/0x10 [ 731.396872][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 731.402092][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 731.407311][ C0] ? __pfx_kthread+0x10/0x10 [ 731.411917][ C0] ret_from_fork+0x4b/0x80 [ 731.416348][ C0] ? __pfx_kthread+0x10/0x10 [ 731.420947][ C0] ret_from_fork_asm+0x1a/0x30 [ 731.425739][ C0] [ 731.428761][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 731.435082][ C0] CPU: 0 UID: 0 PID: 3039 Comm: kworker/u8:10 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 731.446971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 731.457026][ C0] Workqueue: events_unbound toggle_allocation_gate [ 731.463546][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 731.469622][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 94 ed b4 0c 48 89 de 5b e9 53 21 5c 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 40 65 93 65 8b 15 58 f9 [ 731.489246][ C0] RSP: 0018:ffffc9000bf27638 EFLAGS: 00000202 [ 731.495327][ C0] RAX: 0000000000000000 RBX: 1ffff110170e7e61 RCX: ffff888030ae5a00 [ 731.503331][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 731.511318][ C0] RBP: ffffc9000bf27840 R08: ffffffff81b76848 R09: 1ffffffff20bd4ae [ 731.519294][ C0] R10: dffffc0000000000 R11: fffffbfff20bd4af R12: ffff8880b863ab88 [ 731.527283][ C0] R13: ffff8880b873f308 R14: ffff8880b863ab80 R15: 0000000000000001 [ 731.535442][ C0] FS: 0000000000000000(0000) GS:ffff888124fcc000(0000) knlGS:0000000000000000 [ 731.544376][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 731.550963][ C0] CR2: 00007fb7ead79ef8 CR3: 000000000eb38000 CR4: 00000000003526f0 [ 731.558937][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 731.566911][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 731.574881][ C0] Call Trace: [ 731.578160][ C0] [ 731.581089][ C0] smp_call_function_many_cond+0x1bcd/0x2d40 [ 731.587083][ C0] ? __text_poke+0xb83/0xe20 [ 731.591684][ C0] ? kmem_cache_alloc_bulk_noprof+0x15a/0x7c0 [ 731.597761][ C0] ? kmem_cache_alloc_bulk_noprof+0x15a/0x7c0 [ 731.603836][ C0] ? __pfx___text_poke+0x10/0x10 [ 731.608785][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 731.615116][ C0] ? __pfx___might_resched+0x10/0x10 [ 731.620406][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 731.626308][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 731.631340][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 731.636457][ C0] text_poke_bp_batch+0x354/0xb30 [ 731.641490][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 731.647476][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 731.653644][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 731.659201][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 731.665988][ C0] text_poke_finish+0x30/0x50 [ 731.670671][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 731.676662][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 731.682559][ C0] static_key_enable+0x1a/0x20 [ 731.687326][ C0] toggle_allocation_gate+0xc0/0x250 [ 731.692619][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 731.698542][ C0] ? process_scheduled_works+0x9cb/0x18e0 [ 731.704262][ C0] process_scheduled_works+0xac3/0x18e0 [ 731.709866][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 731.715869][ C0] ? assign_work+0x367/0x3d0 [ 731.720469][ C0] worker_thread+0x870/0xd50 [ 731.725078][ C0] ? __kthread_parkme+0x1a8/0x200 [ 731.730111][ C0] ? __pfx_worker_thread+0x10/0x10 [ 731.735229][ C0] kthread+0x7b7/0x940 [ 731.739323][ C0] ? __pfx_worker_thread+0x10/0x10 [ 731.744441][ C0] ? __pfx_kthread+0x10/0x10 [ 731.749040][ C0] ? __pfx_kthread+0x10/0x10 [ 731.753642][ C0] ? __pfx_kthread+0x10/0x10 [ 731.758240][ C0] ? __pfx_kthread+0x10/0x10 [ 731.762834][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 731.768039][ C0] ? lockdep_hardirqs_on+0x9d/0x150 [ 731.773239][ C0] ? __pfx_kthread+0x10/0x10 [ 731.777835][ C0] ret_from_fork+0x4b/0x80 [ 731.782264][ C0] ? __pfx_kthread+0x10/0x10 [ 731.786862][ C0] ret_from_fork_asm+0x1a/0x30 [ 731.791653][ C0]